last executing test programs:

8m3.360279346s ago: executing program 3 (id=38):
open(0x0, 0x400141042, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
ioctl$TCSETA(r4, 0x5406, 0x0)
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
ioctl$TIOCSTI(r6, 0x5412, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7})

8m0.547883393s ago: executing program 3 (id=42):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0)
r0 = memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9\xff\xdb2\"\x06T)\x1eVoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\xf3\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b', 0x0)
write(r0, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0xa5)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x1000}, &(0x7f0000000080)=0x8)

7m59.444158318s ago: executing program 3 (id=44):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000c40)={{0x9, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x40000000000000, 0x100000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6bc847c6, 0xfffffcda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff7ffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xe9c76ae, 0x2, 0x0, 0x0, 0xfffffffffffffffc]})
eventfd2(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "3b296e12d52d08eb82cc520f61e3cbb5a4c1669e42bdfb3cec88f302de9e1d73", "9e3fe5ca5f463d0322b78f5a3995fa1e7569d25aed97fbf6eb197b880bef7d55", "31cb053e0c8f3e81062f62e0f874b078cef598cf374e31fb58665661e850abd6", "fd1508ebd0c5b39be0c0a8f4394f9dfb56ceccf9f6f1fdfdc100", "78a85ce08babb5f3ce181dd7850000030e7f00", "510f13cf0000000000010001", 0xfffffffd, 0x5da5, 0x4}})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0)

7m58.64159959s ago: executing program 3 (id=47):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x40}, 0x1, 0x4c00000000000000}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001640)=[{{&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0}}], 0x1, 0x240080e4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000080))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m57.504937223s ago: executing program 3 (id=51):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r2, 0xc6f33000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)

7m56.248499012s ago: executing program 3 (id=54):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10)
clock_adjtime(0x0, &(0x7f00000000c0)={0x4, 0x2, 0x274, 0x200, 0x0, 0x7, 0x4, 0x6, 0x1, 0x8, 0x5, 0x1, 0x3, 0x2, 0x3, 0x7, 0x3, 0x6, 0x21, 0x41, 0x80, 0x6, 0x7, 0x3, 0x10})

7m40.73800101s ago: executing program 32 (id=54):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10)
clock_adjtime(0x0, &(0x7f00000000c0)={0x4, 0x2, 0x274, 0x200, 0x0, 0x7, 0x4, 0x6, 0x1, 0x8, 0x5, 0x1, 0x3, 0x2, 0x3, 0x7, 0x3, 0x6, 0x21, 0x41, 0x80, 0x6, 0x7, 0x3, 0x10})

7m37.137096495s ago: executing program 0 (id=96):
r0 = socket(0x10, 0x80002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8)
r3 = fcntl$dupfd(r1, 0x0, r2)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10)
symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000)
lseek(r7, 0x1, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x121b01)
socket(0xf, 0x3, 0x20000)
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000040)={0x1})
socket$tipc(0x1e, 0x2, 0x0)
r9 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r9, &(0x7f0000000340)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
syz_pidfd_open(0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0xc, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)

7m35.125650594s ago: executing program 0 (id=101):
r0 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002b80)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x3c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc})
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="73787374656d2ec51ca48629790218eb3a5d222c5b2922252924ab275eba80"], 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
syz_io_uring_setup(0x5d3b, 0x0, 0x0, &(0x7f0000000000))
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}})
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}})
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)

7m18.812346917s ago: executing program 33 (id=101):
r0 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002b80)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x3c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc})
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="73787374656d2ec51ca48629790218eb3a5d222c5b2922252924ab275eba80"], 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
syz_io_uring_setup(0x5d3b, 0x0, 0x0, &(0x7f0000000000))
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}})
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}})
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)

5m12.633154591s ago: executing program 5 (id=371):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
setns(r0, 0x0)
syz_io_uring_setup(0x3676, &(0x7f000000a9c0), &(0x7f000000aa40), &(0x7f000000aa80))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000003)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket(0x10, 0x3, 0x6)
r6 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d793000000000000000e99400"], 0x3c}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x142, 0xfffffe01, 0x2, 0x1003, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x781)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0)

5m10.020081221s ago: executing program 5 (id=378):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

5m9.560551706s ago: executing program 5 (id=380):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x3, 0x2)
write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0xe803, 0x20}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x4}}}}, 0xfdef)

5m8.619325027s ago: executing program 5 (id=385):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="0a000100000070"], 0x64}}, 0x0)

5m6.996511466s ago: executing program 5 (id=389):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e)

5m6.281517003s ago: executing program 5 (id=391):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8)
socket(0x28, 0x2, 0x1)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x2}}}, 0x7)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x2, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]})
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000001bd658f000009500000000000000553fbb8548ea74514bb6e1d6b2789405e81394648ec885bff191d3560fb232eff6675c58757e794a36d05a6ba13a27acf9726c6ee5090e9464ca22b1b51caa5b52762f367c0842531ec274c7729d9c09b6399b7822bf40bb7bd5df86a2cc0399114159a1beaf859d5f18de88f7b54a80d78fbd9228419d4884927c0e00a7998f9cc4909e558cdf7307101287058c843b558e0646eb1b1f030fc77bcb656580"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e00000010000655800189078040000000000000086ddfbff00000000"], 0xfdef)
socket(0x22, 0x800, 0x0)
io_setup(0x3, 0x0)
syz_usb_connect(0x5, 0x6a, 0x0, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

4m50.88546692s ago: executing program 34 (id=391):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8)
socket(0x28, 0x2, 0x1)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x2}}}, 0x7)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x2, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]})
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000001bd658f000009500000000000000553fbb8548ea74514bb6e1d6b2789405e81394648ec885bff191d3560fb232eff6675c58757e794a36d05a6ba13a27acf9726c6ee5090e9464ca22b1b51caa5b52762f367c0842531ec274c7729d9c09b6399b7822bf40bb7bd5df86a2cc0399114159a1beaf859d5f18de88f7b54a80d78fbd9228419d4884927c0e00a7998f9cc4909e558cdf7307101287058c843b558e0646eb1b1f030fc77bcb656580"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e00000010000655800189078040000000000000086ddfbff00000000"], 0xfdef)
socket(0x22, 0x800, 0x0)
io_setup(0x3, 0x0)
syz_usb_connect(0x5, 0x6a, 0x0, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

4m31.508963416s ago: executing program 1 (id=450):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='contention_end\x00', r0, 0x0, 0x2}, 0x18)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r3, r2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r8 = dup(r7)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c)
setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
socket$kcm(0x10, 0x2, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x2000000058831, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)

4m28.937108224s ago: executing program 1 (id=456):
socket$packet(0x11, 0x2, 0x300)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r0, 0x0, 0x0, 0x3f, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)

4m27.149948998s ago: executing program 1 (id=460):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x2000c044}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x4, 0x1}, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
keyctl$revoke(0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010200"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0)
recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000193, 0x48, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x40001b6, 0x0)

4m18.322147819s ago: executing program 1 (id=473):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0)

4m16.425045944s ago: executing program 1 (id=477):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

4m15.525161849s ago: executing program 1 (id=478):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)

4m0.070787047s ago: executing program 35 (id=478):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)

2m54.189788123s ago: executing program 2 (id=611):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd27, 0x2, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x53, 0x1, 0x720, 0x1ff, 0x1, 0x8, 0x3, 0x10001, 0xf9, 0x6, 0x7, 0x4, 0xaa, 0x1, 0x645a, 0x4, 0x5, 0x3, 0x5, 0xb4e, 0x2, 0x4, 0xe, 0x5c8d, 0x6, 0xb, 0x7, 0x0, 0x80000001, 0x0, 0x2, 0x1, 0xffffffe2, 0x2, 0x2, 0x53bd73d6, 0x60, 0xbff, 0xfff, 0x200, 0x7ff, 0x7f, 0x90, 0x8000, 0x1, 0xb50, 0xffffffff, 0x5, 0x9, 0x4, 0xc4, 0x1, 0xda1b, 0x3, 0x5fa, 0x1, 0x80000001, 0x8000, 0x2, 0x8, 0x617b, 0xfffffe01, 0x3, 0x9, 0x2, 0x32b, 0xe2aa, 0x8, 0x2, 0x0, 0x7, 0x0, 0x0, 0x8, 0x7000000, 0x7, 0x6, 0x4, 0x8000, 0xa21, 0x8, 0x24, 0x9, 0xffffff80, 0x9ff6, 0x10000, 0x50, 0x1, 0x10000, 0x7cc, 0x200, 0xffffffff, 0x0, 0x1, 0x5, 0x7, 0x8, 0x7, 0x3, 0x0, 0x6, 0x80000001, 0xa6, 0x7, 0x2, 0x92f0, 0x8, 0x2501, 0x3, 0x80000001, 0x80000001, 0xbd95, 0x713, 0xfff, 0x3, 0x7, 0x2, 0x0, 0x1, 0xffffffff, 0x4, 0x100, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc9, 0x1, 0x6, 0x80000000, 0x4, 0x9, 0x0, 0x6, 0xaca, 0x9, 0x81, 0x7, 0xf, 0x2, 0x0, 0x673f, 0x1, 0x9, 0x4, 0xffffffff, 0x5, 0x8000, 0x6, 0x81, 0x1, 0x2, 0x7, 0x4, 0x1, 0xb, 0x8, 0x4, 0xb, 0x0, 0x2, 0x1, 0xfffffffc, 0x0, 0x5, 0x3, 0x5, 0x8, 0x1, 0x3, 0x5, 0x58, 0x400, 0x3, 0xe8, 0xe, 0x3, 0x6, 0x4, 0x9, 0x8, 0x7, 0x9, 0x9, 0x44261b5b, 0x7fff, 0x1d, 0x4, 0x6, 0xfff, 0x0, 0x6ae, 0x3, 0x1, 0x2, 0x8000, 0x1, 0xffffff00, 0x694a, 0x8000, 0x36e, 0x1000, 0x0, 0x7e9, 0x7fff, 0x7, 0x3, 0x2, 0x200, 0x4, 0x3, 0x6, 0x5, 0x3, 0xfffffff7, 0x7, 0xfffffffa, 0x7, 0x6, 0x7f, 0x8001, 0x3, 0x4f078b3, 0x1, 0x10001, 0x0, 0x3, 0xad2b, 0x7ff, 0xe026, 0x2, 0x1, 0x100, 0x100, 0x9, 0x8, 0x1, 0x5, 0x1, 0x8, 0x80000001, 0xfffffffb, 0xa, 0x0, 0x1, 0x6, 0x4, 0x4, 0x8, 0x73, 0x80, 0x1, 0x8, 0x8, 0x7ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x68c4, 0x3, 0x3, 0x200, 0xfff, 0x1, 0x2b29, 0xfffffffb, 0x8, 0x5, 0x9, 0x9, 0x2, 0x8, 0x8, 0x4b6, 0x5, 0x0, 0x5, 0x4, 0xd9, 0x7, 0x7, 0x9, 0xbe, 0x10, 0x6, 0x8, 0x3, 0x9, 0x6, 0x6, 0x7, 0x0, 0x8, 0x8, 0x68, 0x1d0e, 0x0, 0x62, 0x0, 0x5, 0x8, 0x200, 0x8, 0x10001, 0x8001, 0x280000, 0x7, 0x988, 0x81, 0x28000, 0x1, 0x2476, 0xffff, 0x8d, 0x4, 0xfffffff9, 0x8, 0x2, 0x6, 0xfff, 0x6, 0x2, 0x7fe0, 0xffff, 0x9, 0xe, 0xffffff80, 0x200, 0x8, 0xf, 0xca4d90a, 0x6, 0xf3, 0x7, 0xfffffffe, 0x5, 0x4, 0x1, 0x2, 0x27cd, 0x40, 0x6459, 0x1, 0xfffffff9, 0x1000, 0x80000001, 0x9, 0x400, 0x2, 0x5, 0x3, 0x7f, 0x8, 0x6, 0x8, 0x0, 0x80000001, 0xfffffffc, 0xc85d, 0x3, 0x2, 0x7fff, 0x0, 0xfffffffb, 0x9, 0x3ff, 0x40, 0xff, 0x5, 0x4, 0x4, 0x80, 0x4, 0x7, 0x3, 0x6, 0x9, 0x7, 0x7fff, 0xfff, 0x5, 0xffff7fff, 0xcb, 0x6, 0x3, 0x0, 0x8001, 0x11, 0x800, 0x4e, 0xfff, 0x7fff, 0x8, 0x10001, 0x5, 0x7, 0x8c, 0x6, 0x9, 0x2, 0x5, 0xf, 0x7fffffff, 0x10001, 0x400, 0xd1a, 0x7, 0x200, 0x7, 0x9, 0x8, 0x4000000, 0x5, 0x6, 0x9, 0xfae2, 0xade9, 0x401, 0x7, 0x4, 0x6, 0x0, 0x7, 0x0, 0x3, 0x4, 0x8, 0x800, 0x40, 0x0, 0xffffffff, 0x101, 0x9000, 0x9, 0xffff00c5, 0x9, 0x9, 0x0, 0x0, 0x100, 0xbba, 0x34, 0xffff0000, 0x9, 0x4d5, 0x0, 0x7, 0xa6, 0x5, 0x8, 0x3, 0xffff, 0xfffffff7, 0x5, 0x5, 0x45, 0x3, 0x5, 0xfffffffb, 0x4, 0x9, 0x4, 0x2, 0x5, 0x60a4, 0x4921, 0x7, 0x3, 0x74, 0x53, 0x7fffffff, 0xffffffff, 0x1ff, 0x3, 0x0, 0x4, 0xfffffffd, 0xca8f, 0x3ff, 0xda, 0x7, 0x200, 0x1, 0x9, 0xec1, 0x3, 0x3, 0x4, 0x98b6, 0x4, 0x8, 0x2, 0x3ff, 0x2, 0x9, 0x8, 0x2, 0x8, 0x1, 0x80000000, 0x8000, 0x6, 0x2, 0x1, 0x2, 0xe, 0x2, 0x1ff, 0x0, 0x4, 0x3a, 0x10000, 0xc, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x7f, 0x7, 0x4, {0xc, 0x2, 0x7, 0x5, 0x5, 0x7}, {0x2, 0x0, 0x6, 0x2, 0x0, 0x1}, 0xd39, 0x8, 0x9}}]}]}}]}, 0x87c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4d)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="150001007262336a022b41eb066ca68bd1c80000f4ff000000000000000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="3c003300c0904000ffffffffffff080211000000505050505050f60f1200048128008c18300099365cf4b439afadf7f4856b82d6451b5330f96f3295"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f3000000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf253700000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00W\x00\v\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4048000)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
setpgid(r5, 0x0)
setpgid(0x0, r5)
socket(0x10, 0x803, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x24000044)
shutdown(r7, 0x1)
lstat(&(0x7f00000000c0)='./file0/file0\x00', 0x0)

2m51.48734837s ago: executing program 2 (id=616):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0)
r1 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0xa78, 0x10000000000000)

2m51.186250133s ago: executing program 2 (id=618):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x30, r1, 0x1, 0x1, 0xfffffffd, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x30}}, 0x0)

2m50.589236695s ago: executing program 2 (id=620):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x5, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4)
fallocate(r4, 0x0, 0x0, 0x2400001)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x400007, 0x1, 0x2, 0x0, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1)

2m47.205375428s ago: executing program 2 (id=626):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd27, 0x2, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x53, 0x1, 0x720, 0x1ff, 0x1, 0x8, 0x3, 0x10001, 0xf9, 0x6, 0x7, 0x4, 0xaa, 0x1, 0x645a, 0x4, 0x5, 0x3, 0x5, 0xb4e, 0x2, 0x4, 0xe, 0x5c8d, 0x6, 0xb, 0x7, 0x0, 0x80000001, 0x0, 0x2, 0x1, 0xffffffe2, 0x2, 0x2, 0x53bd73d6, 0x60, 0xbff, 0xfff, 0x200, 0x7ff, 0x7f, 0x90, 0x8000, 0x1, 0xb50, 0xffffffff, 0x5, 0x9, 0x4, 0xc4, 0x1, 0xda1b, 0x3, 0x5fa, 0x1, 0x80000001, 0x8000, 0x2, 0x8, 0x617b, 0xfffffe01, 0x3, 0x9, 0x2, 0x32b, 0xe2aa, 0x8, 0x2, 0x0, 0x7, 0x0, 0x0, 0x8, 0x7000000, 0x7, 0x6, 0x4, 0x8000, 0xa21, 0x8, 0x24, 0x9, 0xffffff80, 0x9ff6, 0x10000, 0x50, 0x1, 0x10000, 0x7cc, 0x200, 0xffffffff, 0x0, 0x1, 0x5, 0x7, 0x8, 0x7, 0x3, 0x0, 0x6, 0x80000001, 0xa6, 0x7, 0x2, 0x92f0, 0x8, 0x2501, 0x3, 0x80000001, 0x80000001, 0xbd95, 0x713, 0xfff, 0x3, 0x7, 0x2, 0x0, 0x1, 0xffffffff, 0x4, 0x100, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc9, 0x1, 0x6, 0x80000000, 0x4, 0x9, 0x0, 0x6, 0xaca, 0x9, 0x81, 0x7, 0xf, 0x2, 0x0, 0x673f, 0x1, 0x9, 0x4, 0xffffffff, 0x5, 0x8000, 0x6, 0x81, 0x1, 0x2, 0x7, 0x4, 0x1, 0xb, 0x8, 0x4, 0xb, 0x0, 0x2, 0x1, 0xfffffffc, 0x0, 0x5, 0x3, 0x5, 0x8, 0x1, 0x3, 0x5, 0x58, 0x400, 0x3, 0xe8, 0xe, 0x3, 0x6, 0x4, 0x9, 0x8, 0x7, 0x9, 0x9, 0x44261b5b, 0x7fff, 0x1d, 0x4, 0x6, 0xfff, 0x0, 0x6ae, 0x3, 0x1, 0x2, 0x8000, 0x1, 0xffffff00, 0x694a, 0x8000, 0x36e, 0x1000, 0x0, 0x7e9, 0x7fff, 0x7, 0x3, 0x2, 0x200, 0x4, 0x3, 0x6, 0x5, 0x3, 0xfffffff7, 0x7, 0xfffffffa, 0x7, 0x6, 0x7f, 0x8001, 0x3, 0x4f078b3, 0x1, 0x10001, 0x0, 0x3, 0xad2b, 0x7ff, 0xe026, 0x2, 0x1, 0x100, 0x100, 0x9, 0x8, 0x1, 0x5, 0x1, 0x8, 0x80000001, 0xfffffffb, 0xa, 0x0, 0x1, 0x6, 0x4, 0x4, 0x8, 0x73, 0x80, 0x1, 0x8, 0x8, 0x7ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x68c4, 0x3, 0x3, 0x200, 0xfff, 0x1, 0x2b29, 0xfffffffb, 0x8, 0x5, 0x9, 0x9, 0x2, 0x8, 0x8, 0x4b6, 0x5, 0x0, 0x5, 0x4, 0xd9, 0x7, 0x7, 0x9, 0xbe, 0x10, 0x6, 0x8, 0x3, 0x9, 0x6, 0x6, 0x7, 0x0, 0x8, 0x8, 0x68, 0x1d0e, 0x0, 0x62, 0x0, 0x5, 0x8, 0x200, 0x8, 0x10001, 0x8001, 0x280000, 0x7, 0x988, 0x81, 0x28000, 0x1, 0x2476, 0xffff, 0x8d, 0x4, 0xfffffff9, 0x8, 0x2, 0x6, 0xfff, 0x6, 0x2, 0x7fe0, 0xffff, 0x9, 0xe, 0xffffff80, 0x200, 0x8, 0xf, 0xca4d90a, 0x6, 0xf3, 0x7, 0xfffffffe, 0x5, 0x4, 0x1, 0x2, 0x27cd, 0x40, 0x6459, 0x1, 0xfffffff9, 0x1000, 0x80000001, 0x9, 0x400, 0x2, 0x5, 0x3, 0x7f, 0x8, 0x6, 0x8, 0x0, 0x80000001, 0xfffffffc, 0xc85d, 0x3, 0x2, 0x7fff, 0x0, 0xfffffffb, 0x9, 0x3ff, 0x40, 0xff, 0x5, 0x4, 0x4, 0x80, 0x4, 0x7, 0x3, 0x6, 0x9, 0x7, 0x7fff, 0xfff, 0x5, 0xffff7fff, 0xcb, 0x6, 0x3, 0x0, 0x8001, 0x11, 0x800, 0x4e, 0xfff, 0x7fff, 0x8, 0x10001, 0x5, 0x7, 0x8c, 0x6, 0x9, 0x2, 0x5, 0xf, 0x7fffffff, 0x10001, 0x400, 0xd1a, 0x7, 0x200, 0x7, 0x9, 0x8, 0x4000000, 0x5, 0x6, 0x9, 0xfae2, 0xade9, 0x401, 0x7, 0x4, 0x6, 0x0, 0x7, 0x0, 0x3, 0x4, 0x8, 0x800, 0x40, 0x0, 0xffffffff, 0x101, 0x9000, 0x9, 0xffff00c5, 0x9, 0x9, 0x0, 0x0, 0x100, 0xbba, 0x34, 0xffff0000, 0x9, 0x4d5, 0x0, 0x7, 0xa6, 0x5, 0x8, 0x3, 0xffff, 0xfffffff7, 0x5, 0x5, 0x45, 0x3, 0x5, 0xfffffffb, 0x4, 0x9, 0x4, 0x2, 0x5, 0x60a4, 0x4921, 0x7, 0x3, 0x74, 0x53, 0x7fffffff, 0xffffffff, 0x1ff, 0x3, 0x0, 0x4, 0xfffffffd, 0xca8f, 0x3ff, 0xda, 0x7, 0x200, 0x1, 0x9, 0xec1, 0x3, 0x3, 0x4, 0x98b6, 0x4, 0x8, 0x2, 0x3ff, 0x2, 0x9, 0x8, 0x2, 0x8, 0x1, 0x80000000, 0x8000, 0x6, 0x2, 0x1, 0x2, 0xe, 0x2, 0x1ff, 0x0, 0x4, 0x3a, 0x10000, 0xc, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x7f, 0x7, 0x4, {0xc, 0x2, 0x7, 0x5, 0x5, 0x7}, {0x2, 0x0, 0x6, 0x2, 0x0, 0x1}, 0xd39, 0x8, 0x9}}]}]}}]}, 0x87c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4d)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="150001007262336a022b41eb066ca68bd1c80000f4ff000000000000000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="3c003300c0904000ffffffffffff080211000000505050505050f60f1200048128008c18300099365cf4b439afadf7f4856b82d6451b5330f96f3295"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f3000000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf253700000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00W\x00\v\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4048000)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
setpgid(r5, 0x0)
setpgid(0x0, r5)
socket(0x10, 0x803, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x24000044)
shutdown(r7, 0x1)
lstat(&(0x7f00000000c0)='./file0/file0\x00', 0x0)

2m44.56218993s ago: executing program 2 (id=630):
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f02a, 0x1})
clock_gettime(0x0, &(0x7f0000000040))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
unshare(0x24020400)
syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00'})
prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
close_range(r4, r5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r7 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)

2m28.692734125s ago: executing program 36 (id=630):
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f02a, 0x1})
clock_gettime(0x0, &(0x7f0000000040))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
unshare(0x24020400)
syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00'})
prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
close_range(r4, r5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r7 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)

2m6.904669412s ago: executing program 7 (id=679):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11Hx\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x83\xc9\x86$\x1bj\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xd6\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd4dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf}\x1f7\x16\xb6f\xa0K \xb2\a\x89*>\xc7V\x0f\xc5\x98p\xf6-U\x19\xaf\x1a\xa2\xf0\xca\xd4\x04\xd9P\x97\xa2-\xcc\x1b\xe6\xa6L\r_\x17\x1b\x19\xa3\xe0\xc2@2\xa0\x9c\xaa\x1e\xff\xaf\xecbS\x00', 0x3)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x1000})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8455}, 0x1})
io_uring_enter(0xffffffffffffffff, 0x3f72, 0x74f1, 0x0, 0x0, 0x0)

2m5.221523636s ago: executing program 7 (id=681):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x4)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)={0x6, 0x0, [{0x26a}, {0xac, 0x0, 0xffffffff}, {0x958, 0x0, 0x8}, {0x972, 0x0, 0x5bc}, {0xaed, 0x0, 0x5}, {0x40000102, 0x0, 0x2}]})
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
getsockopt$packet_int(r2, 0x107, 0x15, 0x0, &(0x7f0000000200))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)

2m2.421118827s ago: executing program 7 (id=683):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000340)=0x8)

1m57.868861247s ago: executing program 7 (id=687):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000001180)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @empty, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
readv(r4, &(0x7f0000000000)=[{&(0x7f0000001380)=""/140, 0x8c}], 0x1)
ioctl$TCSETS(r4, 0x5402, &(0x7f00000014c0)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "076a1400"})
ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"})
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c)
sendto$inet6(r6, &(0x7f0000003240)="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", 0x586, 0x6d91fb6106d8d10c, 0x0, 0x0)
sendto$inet6(r6, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0)
r7 = syz_open_pts(r4, 0x42)
dup3(r7, r4, 0x0)
syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad8}, 0x0, &(0x7f0000000280))

1m52.977129202s ago: executing program 7 (id=689):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18003d9efcffffff00000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
io_setup(0x401, &(0x7f0000000340)=<r1=>0x0)
r2 = timerfd_create(0x0, 0x800)
io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x9, r2, &(0x7f00000005c0)="3e7e07be9d62b5", 0x7, 0x3}])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
writev(r3, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1)
syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
chdir(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f00000002c0))
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f00000000c0), 0x10)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r8, &(0x7f0000000080)="92faabb98cbf767e7db8fb217ac44c0c0f4a74bef3e03760498c09c4c108210c8e151c7cf4c1556c362a7e21b2e9db58b9466f1103a3beec5f31dd", 0x3b, 0xc800, 0x0, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r7}, 0x10, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000100000000000000000cbfc0b9af540340c"], 0x48}}, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)

1m47.51112074s ago: executing program 7 (id=696):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc000, 0x1)
faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x0)

1m43.101183359s ago: executing program 6 (id=699):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd27, 0x2, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x53, 0x1, 0x720, 0x1ff, 0x1, 0x8, 0x3, 0x10001, 0xf9, 0x6, 0x7, 0x4, 0xaa, 0x1, 0x645a, 0x4, 0x5, 0x3, 0x5, 0xb4e, 0x2, 0x4, 0xe, 0x5c8d, 0x6, 0xb, 0x7, 0x0, 0x80000001, 0x0, 0x2, 0x1, 0xffffffe2, 0x2, 0x2, 0x53bd73d6, 0x60, 0xbff, 0xfff, 0x200, 0x7ff, 0x7f, 0x90, 0x8000, 0x1, 0xb50, 0xffffffff, 0x5, 0x9, 0x4, 0xc4, 0x1, 0xda1b, 0x3, 0x5fa, 0x1, 0x80000001, 0x8000, 0x2, 0x8, 0x617b, 0xfffffe01, 0x3, 0x9, 0x2, 0x32b, 0xe2aa, 0x8, 0x2, 0x0, 0x7, 0x0, 0x0, 0x8, 0x7000000, 0x7, 0x6, 0x4, 0x8000, 0xa21, 0x8, 0x24, 0x9, 0xffffff80, 0x9ff6, 0x10000, 0x50, 0x1, 0x10000, 0x7cc, 0x200, 0xffffffff, 0x0, 0x1, 0x5, 0x7, 0x8, 0x7, 0x3, 0x0, 0x6, 0x80000001, 0xa6, 0x7, 0x2, 0x92f0, 0x8, 0x2501, 0x3, 0x80000001, 0x80000001, 0xbd95, 0x713, 0xfff, 0x3, 0x7, 0x2, 0x0, 0x1, 0xffffffff, 0x4, 0x100, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc9, 0x1, 0x6, 0x80000000, 0x4, 0x9, 0x0, 0x6, 0xaca, 0x9, 0x81, 0x7, 0xf, 0x2, 0x0, 0x673f, 0x1, 0x9, 0x4, 0xffffffff, 0x5, 0x8000, 0x6, 0x81, 0x1, 0x2, 0x7, 0x4, 0x1, 0xb, 0x8, 0x4, 0xb, 0x0, 0x2, 0x1, 0xfffffffc, 0x0, 0x5, 0x3, 0x5, 0x8, 0x1, 0x3, 0x5, 0x58, 0x400, 0x3, 0xe8, 0xe, 0x3, 0x6, 0x4, 0x9, 0x8, 0x7, 0x9, 0x9, 0x44261b5b, 0x7fff, 0x1d, 0x4, 0x6, 0xfff, 0x0, 0x6ae, 0x3, 0x1, 0x2, 0x8000, 0x1, 0xffffff00, 0x694a, 0x8000, 0x36e, 0x1000, 0x0, 0x7e9, 0x7fff, 0x7, 0x3, 0x2, 0x200, 0x4, 0x3, 0x6, 0x5, 0x3, 0xfffffff7, 0x7, 0xfffffffa, 0x7, 0x6, 0x7f, 0x8001, 0x3, 0x4f078b3, 0x1, 0x10001, 0x0, 0x3, 0xad2b, 0x7ff, 0xe026, 0x2, 0x1, 0x100, 0x100, 0x9, 0x8, 0x1, 0x5, 0x1, 0x8, 0x80000001, 0xfffffffb, 0xa, 0x0, 0x1, 0x6, 0x4, 0x4, 0x8, 0x73, 0x80, 0x1, 0x8, 0x8, 0x7ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x68c4, 0x3, 0x3, 0x200, 0xfff, 0x1, 0x2b29, 0xfffffffb, 0x8, 0x5, 0x9, 0x9, 0x2, 0x8, 0x8, 0x4b6, 0x5, 0x0, 0x5, 0x4, 0xd9, 0x7, 0x7, 0x9, 0xbe, 0x10, 0x6, 0x8, 0x3, 0x9, 0x6, 0x6, 0x7, 0x0, 0x8, 0x8, 0x68, 0x1d0e, 0x0, 0x62, 0x0, 0x5, 0x8, 0x200, 0x8, 0x10001, 0x8001, 0x280000, 0x7, 0x988, 0x81, 0x28000, 0x1, 0x2476, 0xffff, 0x8d, 0x4, 0xfffffff9, 0x8, 0x2, 0x6, 0xfff, 0x6, 0x2, 0x7fe0, 0xffff, 0x9, 0xe, 0xffffff80, 0x200, 0x8, 0xf, 0xca4d90a, 0x6, 0xf3, 0x7, 0xfffffffe, 0x5, 0x4, 0x1, 0x2, 0x27cd, 0x40, 0x6459, 0x1, 0xfffffff9, 0x1000, 0x80000001, 0x9, 0x400, 0x2, 0x5, 0x3, 0x7f, 0x8, 0x6, 0x8, 0x0, 0x80000001, 0xfffffffc, 0xc85d, 0x3, 0x2, 0x7fff, 0x0, 0xfffffffb, 0x9, 0x3ff, 0x40, 0xff, 0x5, 0x4, 0x4, 0x80, 0x4, 0x7, 0x3, 0x6, 0x9, 0x7, 0x7fff, 0xfff, 0x5, 0xffff7fff, 0xcb, 0x6, 0x3, 0x0, 0x8001, 0x11, 0x800, 0x4e, 0xfff, 0x7fff, 0x8, 0x10001, 0x5, 0x7, 0x8c, 0x6, 0x9, 0x2, 0x5, 0xf, 0x7fffffff, 0x10001, 0x400, 0xd1a, 0x7, 0x200, 0x7, 0x9, 0x8, 0x4000000, 0x5, 0x6, 0x9, 0xfae2, 0xade9, 0x401, 0x7, 0x4, 0x6, 0x0, 0x7, 0x0, 0x3, 0x4, 0x8, 0x800, 0x40, 0x0, 0xffffffff, 0x101, 0x9000, 0x9, 0xffff00c5, 0x9, 0x9, 0x0, 0x0, 0x100, 0xbba, 0x34, 0xffff0000, 0x9, 0x4d5, 0x0, 0x7, 0xa6, 0x5, 0x8, 0x3, 0xffff, 0xfffffff7, 0x5, 0x5, 0x45, 0x3, 0x5, 0xfffffffb, 0x4, 0x9, 0x4, 0x2, 0x5, 0x60a4, 0x4921, 0x7, 0x3, 0x74, 0x53, 0x7fffffff, 0xffffffff, 0x1ff, 0x3, 0x0, 0x4, 0xfffffffd, 0xca8f, 0x3ff, 0xda, 0x7, 0x200, 0x1, 0x9, 0xec1, 0x3, 0x3, 0x4, 0x98b6, 0x4, 0x8, 0x2, 0x3ff, 0x2, 0x9, 0x8, 0x2, 0x8, 0x1, 0x80000000, 0x8000, 0x6, 0x2, 0x1, 0x2, 0xe, 0x2, 0x1ff, 0x0, 0x4, 0x3a, 0x10000, 0xc, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x7f, 0x7, 0x4, {0xc, 0x2, 0x7, 0x5, 0x5, 0x7}, {0x2, 0x0, 0x6, 0x2, 0x0, 0x1}, 0xd39, 0x8, 0x9}}]}]}}]}, 0x87c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4d)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="150001007262336a022b41eb066ca68bd1c80000f4ff000000000000000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="3c003300c0904000ffffffffffff080211000000505050505050f60f1200048128008c18300099365cf4b439afadf7f4856b82d6451b5330f96f3295"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f3000000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf253700000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00W\x00\v\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4048000)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
setpgid(r5, 0x0)
socket(0x10, 0x803, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x24000044)
shutdown(r8, 0x1)
lstat(&(0x7f00000000c0)='./file0/file0\x00', 0x0)

1m41.093780062s ago: executing program 4 (id=702):
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
syz_open_dev$usbfs(0x0, 0x1ff, 0xa401)
capset(&(0x7f0000000000), &(0x7f0000000040)={0x200000, 0x200000})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r2, 0x5608)

1m35.608914652s ago: executing program 6 (id=703):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x8)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x40)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)

1m35.482883198s ago: executing program 4 (id=704):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1111, &(0x7f0000000300), &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x0, 0x0})
io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1)

1m34.853310683s ago: executing program 8 (id=705):
socket$nl_route(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
ioperm(0x0, 0x44, 0x7)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4)
ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x8c8, 0x0, 0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x30000, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000800000000000008100000008000300", @ANYRES32=r7, @ANYBLOB="060066008e8800000a0006000802110000010000260033"], 0x58}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
rt_sigprocmask(0x2, 0x0, 0x0, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setstatus(r8, 0x4, 0x42000)

1m33.069560498s ago: executing program 6 (id=706):
keyctl$read(0xb, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_security(0x11, r1, 0x0, 0x0)
clock_gettime(0x0, 0x0)
clock_nanosleep(0x3, 0x1, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_req={{0x6, 0x7f, 0x4}, {0x9, 0x200}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x2, 0x6}}]}}, 0x19)
sync()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)

1m31.544251901s ago: executing program 37 (id=696):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc000, 0x1)
faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x0)

1m31.446202097s ago: executing program 8 (id=708):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r4, &(0x7f0000001940)=""/4077, 0xfed)
r5 = add_key$keyring(&(0x7f0000000500), 0x0, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$negate(0xd, r4, 0x7, r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='sched_switch\x00'}, 0x18)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r6, 0x29, 0x4, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x7, 0x0, 0x800, 0x6, 0x0, 0x3, 0x1, 0x3}, &(0x7f0000000100)={0xd, 0x4, 0x0, 0x800, 0xfff, 0x40974819, 0x8, 0x6}, &(0x7f0000000240)={0x8, 0xffffffff00000000, 0xffff, 0x1, 0xd53b, 0xfffffffffffffff7, 0x0, 0xfffffffffffff800}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x3]}, 0x8})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="6c000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="15440100018404003c0012800b00010067656e65766500002c00028005000a000300"], 0x6c}}, 0x20000000)

1m26.674397555s ago: executing program 8 (id=709):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x801, 0x0, 0x20, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0)

1m26.520646015s ago: executing program 6 (id=710):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0)

1m25.620053889s ago: executing program 8 (id=711):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0)
r0 = memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9\xff\xdb2\"\x06T)\x1eVoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\xf3\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b', 0x0)
write(r0, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54", 0x3f)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x85, &(0x7f0000000040)=@assoc_value={0x0, 0x1000}, &(0x7f0000000080)=0x8)

1m24.896512758s ago: executing program 4 (id=712):
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
epoll_create1(0x99344c68e635bb3)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000240)='htcp\x00', 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)

1m21.947816393s ago: executing program 8 (id=713):
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_get$pid(0x3, 0x0)

1m21.889211674s ago: executing program 6 (id=714):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c)
sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b8", 0xb7, 0xc001, 0x0, 0x0)
setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000080), 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0)

1m14.295499805s ago: executing program 4 (id=715):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000140)={{0x6, @bcast, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = creat(0x0, 0x0)
close(r2)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f00000000c0)=0x5, &(0x7f0000000180)=0x4)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4)
bind$inet6(r3, &(0x7f0000002500)={0xa, 0x4e21, 0xebc, @mcast1, 0x2}, 0x18)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
listen(r0, 0x1ad72f7)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb236100"], 0x0)
recvmsg(r4, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000042)

1m12.32491272s ago: executing program 8 (id=716):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGPKT(r0, 0x80045438, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

1m10.439075144s ago: executing program 4 (id=717):
r0 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @local}, 0xc)
ioctl$I2C_SMBUS(r1, 0x720, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x4000000000000, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x1, 0x40000000000, 0x0, 0x0, 0x0, 0x4], 0x0, 0x2000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x3], 0x0, 0x41901})

1m8.324960309s ago: executing program 6 (id=718):
keyctl$read(0xb, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_security(0x11, r1, 0x0, 0x0)
clock_gettime(0x0, 0x0)
clock_nanosleep(0x3, 0x1, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_req={{0x6, 0x7f, 0x4}, {0x9, 0x200}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x2, 0x6}}]}}, 0x19)
sync()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)

1m7.222338244s ago: executing program 4 (id=719):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001480)={0x68, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x7, 0x20}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)={0x3c, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1000}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)

56.785420874s ago: executing program 38 (id=716):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGPKT(r0, 0x80045438, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

52.306498048s ago: executing program 39 (id=718):
keyctl$read(0xb, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_security(0x11, r1, 0x0, 0x0)
clock_gettime(0x0, 0x0)
clock_nanosleep(0x3, 0x1, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_req={{0x6, 0x7f, 0x4}, {0x9, 0x200}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x2, 0x6}}]}}, 0x19)
sync()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)

50.869973661s ago: executing program 40 (id=719):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001480)={0x68, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x7, 0x20}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)={0x3c, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1000}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)

22.009090323s ago: executing program 9 (id=731):
socket(0x2, 0x80805, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_clone(0xb00200, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7b, 0x3, "f6a6946c9832508c"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433", 0x4}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
timerfd_create(0x2, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x48400, 0x0)
r4 = socket(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x33, 0x8, "d4e8fd117026f900"}})
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0))
read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5)

16.972159739s ago: executing program 9 (id=732):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002684698b0cfe1ad5adcc4cc46c0ca8a81ad2cf48534e640fcafbd757da3af7c95ee5440dd9a97f3c7f59cc44ea89ba42fe84b1b6923bca904d122820f7027a9f3aba2b73e01632ddb885cd583edcca6e4abd00c92be727dcec3c749820139b24e573a7707144f1c7ff23bfc6ad2a6d73a4e2b219382c4b28b6ff7c5a631551690b33085b5b8fa1c343946b513dde3b6e47b8851b2cb5e53ca9d6cfab647c0fd05ec08e50079cd10bcae03db0f23bb0c77677066e96a611c71c52ca7ce9aa9763efcc07aeea"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18)
syz_emit_ethernet(0x2a, &(0x7f0000002000)=ANY=[], 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000001000000250000002b0000000000000718"], 0x30}, 0x0)

15.603523552s ago: executing program 0 (id=720):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
setreuid(0x0, r2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x3)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030426bd70020000dfa5f7d7bc00", @ANYRES32=0x0, @ANYBLOB="0023000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000040))
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000)=0xb, 0x4)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e01, 0x84, @remote, 0xac7}, 0x58)
prlimit64(0x0, 0xe, 0x0, 0x0)

15.148899289s ago: executing program 9 (id=733):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0)
ppoll(&(0x7f0000000000)=[{r4}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
chown(0x0, 0xffffffffffffffff, r5)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20)

12.350172623s ago: executing program 9 (id=734):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x3, 0xfffffff9, 0x4]}, @timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@remote}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0xf, 0x0, [@dev, @remote, @multicast1]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00')
ioctl$KVM_RUN(r4, 0xae80, 0x0)

9.931990842s ago: executing program 0 (id=735):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0)
close(0x3)

8.021632509s ago: executing program 9 (id=736):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3], 0x44}}, 0x0)

7.425517137s ago: executing program 0 (id=737):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x200000005c832, 0xffffffffffffffff, 0x0)

859.368118ms ago: executing program 9 (id=738):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0xfffffffffffffff8}, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x52400, 0x0)
r0 = fanotify_init(0x0, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r1, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
fanotify_mark(r0, 0x180, 0x0, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
clock_getres(0x8, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x410501, 0x0)
syz_io_uring_setup(0x59a3, &(0x7f0000000300)={0x0, 0x86f7, 0x10100, 0x2, 0x28f}, &(0x7f0000002000)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})

0s ago: executing program 0 (id=739):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0x1, 0x64850)

kernel console output (not intermixed with test programs):

 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.328006][ T3604] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.496899][ T6231] chnl_net:caif_netlink_parms(): no params data found
[  281.774645][ T3604] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.798801][ T6248] input: syz1 as /devices/virtual/input/input5
[  282.364426][ T3604] bridge_slave_1: left allmulticast mode
[  282.370334][ T3604] bridge_slave_1: left promiscuous mode
[  282.376826][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.403696][ T3604] bridge_slave_0: left allmulticast mode
[  282.409496][ T3604] bridge_slave_0: left promiscuous mode
[  282.416323][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.648348][   T51] Bluetooth: hci5: command tx timeout
[  283.936134][ T3604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  284.116610][ T3604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  284.178061][ T6257] syz.0.96 (6257): drop_caches: 2
[  284.209736][ T3604] bond0 (unregistering): Released all slaves
[  284.713899][   T51] Bluetooth: hci5: command tx timeout
[  285.010136][ T6269] fuse: Bad value for 'fd'
[  285.352807][ T3604] hsr_slave_0: left promiscuous mode
[  285.398149][ T3604] hsr_slave_1: left promiscuous mode
[  285.485958][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.495392][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  285.756008][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.764097][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  285.956150][ T3604] veth1_macvtap: left promiscuous mode
[  285.961925][ T3604] veth0_macvtap: left promiscuous mode
[  285.967865][ T3604] veth1_vlan: left promiscuous mode
[  285.973449][ T3604] veth0_vlan: left promiscuous mode
[  286.807976][   T51] Bluetooth: hci5: command tx timeout
[  288.366295][ T3604] team0 (unregistering): Port device team_slave_1 removed
[  288.474448][ T3604] team0 (unregistering): Port device team_slave_0 removed
[  288.908330][   T51] Bluetooth: hci5: command tx timeout
[  289.701091][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.708938][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.716659][ T6231] bridge_slave_0: entered allmulticast mode
[  289.724768][ T6231] bridge_slave_0: entered promiscuous mode
[  290.875325][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.883187][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.890961][ T6231] bridge_slave_1: entered allmulticast mode
[  290.900177][ T6231] bridge_slave_1: entered promiscuous mode
[  291.909636][ T6231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.996559][ T6231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.367696][ T6231] team0: Port device team_slave_0 added
[  292.456043][ T6231] team0: Port device team_slave_1 added
[  292.680691][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.687910][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.714368][ T6231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.803914][   T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  292.857296][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.864942][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.892967][ T6231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.018885][   T44] usb 2-1: Using ep0 maxpacket: 16
[  293.093771][   T44] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.105216][   T44] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.115510][   T44] usb 2-1: config 0 interface 0 has no altsetting 0
[  293.122622][   T44] usb 2-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  293.131969][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.181340][ T6321] fuse: Unknown parameter '0x0000000000000003'
[  293.599826][ T6231] hsr_slave_0: entered promiscuous mode
[  293.712312][ T6231] hsr_slave_1: entered promiscuous mode
[  293.765158][ T6231] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  293.773291][ T6231] Cannot create hsr debugfs directory
[  293.849915][   T44] usb 2-1: config 0 descriptor??
[  296.971564][ T5789] Bluetooth: hci5: command 0x0405 tx timeout
[  297.088121][   T44] usbhid 2-1:0.0: can't add hid device: -71
[  297.094959][   T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  297.123978][   T44] usb 2-1: USB disconnect, device number 2
[  298.231946][ T6231] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  298.253127][   T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  298.314356][ T6231] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  298.414845][ T6231] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  298.496149][   T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  298.509997][   T44] usb 5-1: config 0 has no interfaces?
[  298.589553][ T6231] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  299.054285][ T6348] =======================================================
[  299.054285][ T6348] WARNING: The mand mount option has been deprecated and
[  299.054285][ T6348]          and is ignored by this kernel. Remove the mand
[  299.054285][ T6348]          option from the mount to silence this warning.
[  299.054285][ T6348] =======================================================
[  299.407030][   T44] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  299.416704][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.428467][   T44] usb 5-1: Product: syz
[  299.434459][   T44] usb 5-1: Manufacturer: syz
[  299.439327][   T44] usb 5-1: SerialNumber: syz
[  299.586401][   T44] usb 5-1: config 0 descriptor??
[  299.809112][   T44] usb 5-1: USB disconnect, device number 2
[  299.927447][ T6231] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.067478][ T6231] 8021q: adding VLAN 0 to HW filter on device team0
[  300.166930][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.174513][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.261562][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.269069][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.542133][ T6368] fuse: Unknown parameter '0x0000000000000003'
[  302.210056][ T6231] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.306286][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  302.321247][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  302.416151][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  302.431168][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  302.445068][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  302.454303][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  304.553854][ T5789] Bluetooth: hci3: command tx timeout
[  304.771368][ T6371] chnl_net:caif_netlink_parms(): no params data found
[  305.803748][ T6403] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.826854][ T6403] bond0: (slave rose0): Enslaving as an active interface with an up link
[  306.224922][ T6231] veth0_vlan: entered promiscuous mode
[  306.262336][ T6231] veth1_vlan: entered promiscuous mode
[  306.459826][ T6231] veth0_macvtap: entered promiscuous mode
[  306.595870][ T6231] veth1_macvtap: entered promiscuous mode
[  306.638545][ T5789] Bluetooth: hci3: command tx timeout
[  306.713751][    C0] llc_conn_state_process: llc_conn_service failed
[  306.975893][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.986814][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.997059][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.010624][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.021459][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.032756][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.042950][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.053697][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.069414][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.087386][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.098257][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.109983][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.121321][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.131393][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.142292][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.152695][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.163449][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.177704][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.199361][ T6231] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.210152][ T6231] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.219567][ T6231] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.228612][ T6231] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.753484][    C0] llc_conn_state_process: llc_conn_service failed
[  307.778136][ T6404] syz.4.128 (6404): drop_caches: 2
[  308.344354][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.351868][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.359674][ T6371] bridge_slave_0: entered allmulticast mode
[  308.367748][ T6371] bridge_slave_0: entered promiscuous mode
[  308.600886][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.608944][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.616734][ T6371] bridge_slave_1: entered allmulticast mode
[  308.624716][ T6371] bridge_slave_1: entered promiscuous mode
[  308.729362][ T5789] Bluetooth: hci3: command tx timeout
[  309.052254][ T6423] fuse: Unknown parameter '0x0000000000000003'
[  309.110065][ T6371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.239913][ T6371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.656716][ T6371] team0: Port device team_slave_0 added
[  309.784521][ T6371] team0: Port device team_slave_1 added
[  310.138873][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_0
[  310.146218][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.173116][ T6371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.592187][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.599519][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.627438][ T6371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.792751][ T5789] Bluetooth: hci3: command tx timeout
[  311.065092][ T5838] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  311.252709][ T6371] hsr_slave_0: entered promiscuous mode
[  311.292894][ T5838] usb 2-1: Using ep0 maxpacket: 16
[  311.337889][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  311.372790][ T6371] hsr_slave_1: entered promiscuous mode
[  311.451846][ T5838] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  311.461467][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.470189][ T5838] usb 2-1: Product: syz
[  311.474584][ T5838] usb 2-1: Manufacturer: syz
[  311.479315][ T5838] usb 2-1: SerialNumber: syz
[  311.490553][ T6371] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  311.498540][ T6371] Cannot create hsr debugfs directory
[  311.635649][ T5838] usb 2-1: config 0 descriptor??
[  311.676306][ T5838] hub 2-1:0.0: bad descriptor, ignoring hub
[  311.682707][ T5838] hub 2-1:0.0: probe with driver hub failed with error -5
[  311.696478][ T5838] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6
[  312.383791][   T44] usb 2-1: USB disconnect, device number 3
[  313.637085][ T6371] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  313.838233][ T6371] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  313.903878][ T6371] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  313.935145][ T6468] fuse: Unknown parameter '0x0000000000000003'
[  313.970402][ T6371] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  315.005252][ T6371] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.844365][ T6371] 8021q: adding VLAN 0 to HW filter on device team0
[  315.948124][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.955646][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.089251][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.096765][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  317.156650][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.164959][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.318514][ T4636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.326663][ T4636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.453754][ T6499] sctp: [Deprecated]: syz.5.85 (pid 6499) Use of struct sctp_assoc_value in delayed_ack socket option.
[  318.453754][ T6499] Use struct sctp_sack_info instead
[  318.988790][ T6274] sched: DL replenish lagged too much
[  319.216604][ T6509] netlink: 'syz.1.148': attribute type 10 has an invalid length.
[  319.286658][ T6510] netlink: 'syz.1.148': attribute type 10 has an invalid length.
[  319.514047][ T6508] could not allocate digest TFM handle sha384-avx
[  319.680160][ T6510] bond0: (slave netdevsim3): Enslaving as an active interface with an up link
[  321.393776][ T6522] netlink: 14 bytes leftover after parsing attributes in process `syz.4.149'.
[  321.408533][ T6522] netlink: 'syz.4.149': attribute type 10 has an invalid length.
[  321.448352][ T6522] bond0: (slave netdevsim3): Enslaving as an active interface with an up link
[  321.563050][ T6520] could not allocate digest TFM handle sha384-avx
[  321.576648][ T6525] fuse: Unknown parameter '0x0000000000000003'
[  323.178499][ T6371] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.455943][ T6371] veth0_vlan: entered promiscuous mode
[  327.510447][ T6371] veth1_vlan: entered promiscuous mode
[  327.680594][ T6371] veth0_macvtap: entered promiscuous mode
[  327.706390][ T6371] veth1_macvtap: entered promiscuous mode
[  328.208487][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.220231][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.230523][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.241413][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.252125][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.262986][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.273704][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.284472][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.294664][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.310664][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.328133][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_0
[  328.348076][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.358960][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.369331][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.380623][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.391217][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.413316][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.424001][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.435323][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.446021][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.457172][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.479359][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_1
[  328.554270][ T6371] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  328.563325][ T6371] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.572215][ T6371] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.581215][ T6371] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  329.645644][ T6587] fuse: Unknown parameter '0x0000000000000003'
[  335.411374][ T6631] fuse: Unknown parameter 'fd0x0000000000000003'
[  336.851300][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.091334][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.326607][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.501698][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.502329][   T11] bridge_slave_1: left allmulticast mode
[  338.508381][   T11] bridge_slave_1: left promiscuous mode
[  338.515316][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.619984][   T11] bridge_slave_0: left allmulticast mode
[  338.626043][   T11] bridge_slave_0: left promiscuous mode
[  338.632880][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.370410][ T6678] netlink: 16 bytes leftover after parsing attributes in process `syz.5.186'.
[  339.524110][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  339.602268][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  339.625571][ T6680] fuse: Unknown parameter 'fd0x0000000000000003'
[  339.658106][   T11] bond0 (unregistering): Released all slaves
[  340.901224][   T11] hsr_slave_0: left promiscuous mode
[  340.954021][ T3057] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  340.959964][   T11] hsr_slave_1: left promiscuous mode
[  340.993575][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  341.003738][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  341.055350][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  341.063694][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  341.119472][   T11] veth1_macvtap: left promiscuous mode
[  341.125478][   T11] veth0_macvtap: left promiscuous mode
[  341.131383][   T11] veth1_vlan: left promiscuous mode
[  341.137106][   T11] veth0_vlan: left promiscuous mode
[  341.155978][ T3057] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  341.296132][ T3057] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  341.309223][ T3057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.318926][ T3057] usb 3-1: Product: syz
[  341.323453][ T3057] usb 3-1: Manufacturer: syz
[  341.328303][ T3057] usb 3-1: SerialNumber: syz
[  341.354465][ T3057] usb 3-1: config 0 descriptor??
[  341.637117][ T3057] usb 3-1: USB disconnect, device number 3
[  342.269799][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  342.278276][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  342.384048][   T11] team0 (unregistering): Port device team_slave_1 removed
[  342.506574][   T11] team0 (unregistering): Port device team_slave_0 removed
[  344.784598][ T3674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.796339][ T3674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.078519][ T6723] fuse: Unknown parameter 'fd0x0000000000000003'
[  345.088482][ T3750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.098149][ T3750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.201061][ T5415] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  345.785920][ T5415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.797334][ T5415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.807535][ T5415] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  345.823211][ T5415] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  345.834331][ T5415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.195719][ T5415] usb 5-1: config 0 descriptor??
[  347.083031][ T5415] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  347.235514][ T5415] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  347.310604][ T5415] usb 5-1: USB disconnect, device number 3
[  348.342832][ T3057] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  348.633176][ T3057] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  348.878075][ T3057] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  348.891910][ T3057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.901746][ T3057] usb 3-1: Product: syz
[  348.906390][ T3057] usb 3-1: Manufacturer: syz
[  348.911233][ T3057] usb 3-1: SerialNumber: syz
[  349.026117][ T3057] usb 3-1: config 0 descriptor??
[  349.277264][ T3057] usb 3-1: USB disconnect, device number 4
[  349.453658][ T5789] Bluetooth: hci1: command 0x0406 tx timeout
[  349.459941][ T5789] Bluetooth: hci4: command 0x0406 tx timeout
[  349.466888][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout
[  354.378090][ T6811] loop4: detected capacity change from 0 to 32768
[  355.958535][ T4636] Bluetooth: hci2: Frame reassembly failed (-84)
[  357.002798][ T3057] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  358.122316][   T51] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  359.096011][ T6811] read_mapping_page failed!
[  359.100999][ T6811] jfs_mount: diMount(ipaimap2) failed, rc = -5
[  359.203289][ T6811] Mount JFS Failure: -5
[  362.807191][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  364.714564][ T5415] IPVS: starting estimator thread 0...
[  364.802923][ T6889] IPVS: using max 240 ests per chain, 12000 per kthread
[  365.315632][ T5838] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  365.515364][ T5838] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  365.525582][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.525604][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.243'.
[  365.525724][ T5838] usb 2-1: Product: syz
[  365.549250][ T5838] usb 2-1: Manufacturer: syz
[  365.550239][ T6895] vlan2: entered promiscuous mode
[  365.554080][ T5838] usb 2-1: SerialNumber: syz
[  365.563596][ T6892] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  365.564263][ T6895] veth0_virt_wifi: entered promiscuous mode
[  365.700475][ T6895] veth0_virt_wifi: left promiscuous mode
[  365.748818][ T5838] usb 2-1: config 0 descriptor??
[  366.096464][ T5838] usb 2-1: USB disconnect, device number 4
[  366.431081][ T6258] udevd[6258]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  366.577592][ T6905] batman_adv: batadv0: Adding interface: dummy0
[  366.584394][ T6905] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.614704][ T6905] batman_adv: batadv0: Interface activated: dummy0
[  367.525150][ T5838] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  367.752806][ T5838] usb 5-1: Using ep0 maxpacket: 16
[  367.794736][ T5838] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.806229][ T5838] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.816619][ T5838] usb 5-1: config 0 interface 0 has no altsetting 0
[  367.823631][ T5838] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  367.837347][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.013158][ T5838] usb 5-1: config 0 descriptor??
[  368.599569][ T5838] usbhid 5-1:0.0: can't add hid device: -71
[  368.606468][ T5838] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  368.691921][ T5838] usb 5-1: USB disconnect, device number 4
[  370.356439][ T6944] vivid-007: disconnect
[  370.509942][ T5785] Bluetooth: hci1: Unknown advertising packet type: 0x76
[  370.510085][ T5785] Bluetooth: hci1: Unknown advertising packet type: 0x11
[  370.517773][ T5785] Bluetooth: hci1: Unknown advertising packet type: 0x17
[  370.525320][ T5785] Bluetooth: hci1: Unknown advertising packet type: 0x1d
[  370.532806][ T5785] Bluetooth: hci1: Malformed LE Event: 0x0d
[  371.025592][ T6948] 9pnet_virtio: no channels available for device syz
[  371.041445][ T6948] overlay: Unknown parameter '/'
[  371.316825][ T6940] vivid-007: reconnect
[  374.188566][ T6955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.258'.
[  376.073201][ T5838] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  376.088732][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.263'.
[  376.262180][ T5838] usb 3-1: Using ep0 maxpacket: 16
[  376.724324][ T6976] hsr_slave_1 (unregistering): left promiscuous mode
[  376.776128][ T5838] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.788002][ T5838] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.798340][ T5838] usb 3-1: config 0 interface 0 has no altsetting 0
[  376.805415][ T5838] usb 3-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  376.815007][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.846765][ T5838] usb 3-1: config 0 descriptor??
[  377.422537][ T5838] usbhid 3-1:0.0: can't add hid device: -71
[  377.429819][ T5838] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  377.515344][ T5838] usb 3-1: USB disconnect, device number 6
[  379.167272][ T6995] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  383.954101][ T7029] loop6: detected capacity change from 0 to 32768
[  384.492996][ T5838] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  384.608923][ T7029] read_mapping_page failed!
[  384.613918][ T7029] diRead: diIAGRead returned -5
[  384.713391][ T5838] usb 5-1: Using ep0 maxpacket: 32
[  384.785357][ T5838] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  384.794117][ T5838] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  384.805930][ T5838] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  384.817445][ T5838] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  384.834374][ T5838] usb 5-1: config 0 interface 0 has no altsetting 0
[  384.941969][ T5838] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  384.951926][ T5838] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  384.963395][ T5838] usb 5-1: Product: syz
[  384.967836][ T5838] usb 5-1: Manufacturer: syz
[  384.973275][ T5838] usb 5-1: SerialNumber: syz
[  385.281931][ T5838] usb 5-1: config 0 descriptor??
[  385.348198][ T5838] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  385.445769][ T5838] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  386.621011][ T5838] usb 5-1: USB disconnect, device number 5
[  386.632629][ T5838] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  390.042732][ T7073] netlink: 'syz.1.284': attribute type 1 has an invalid length.
[  390.359023][ T7076] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  393.195339][ T7097] netlink: 'syz.5.292': attribute type 4 has an invalid length.
[  393.313598][ T7097] netlink: 'syz.5.292': attribute type 4 has an invalid length.
[  393.682872][   T29] audit: type=1800 audit(1735269685.590:10): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.294" name="bus" dev="overlay" ino=319 res=0 errno=0
[  395.255632][ T7108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.296'.
[  395.317099][ T7106] input: syz0 as /devices/virtual/input/input7
[  398.535803][ T7129] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  398.886954][ T7132] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  401.194230][ T7145] netlink: 'syz.1.305': attribute type 4 has an invalid length.
[  401.470539][ T7146] netlink: 'syz.1.305': attribute type 4 has an invalid length.
[  402.623107][   T29] audit: type=1800 audit(1735269694.480:11): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.306" name="bus" dev="overlay" ino=382 res=0 errno=0
[  403.076048][ T7156] input: syz0 as /devices/virtual/input/input8
[  403.535200][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  403.541883][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  405.402267][ T7180] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2
[  405.412935][ T7180] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0
[  405.744910][   T51] Bluetooth: hci5: command 0x0405 tx timeout
[  407.259075][ T7191] input: syz1 as /devices/virtual/input/input9
[  407.622651][   T29] audit: type=1800 audit(1735269699.530:12): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.318" name="bus" dev="overlay" ino=440 res=0 errno=0
[  408.452847][ T7202] netlink: 'syz.6.320': attribute type 4 has an invalid length.
[  409.030768][ T7205] netlink: 'syz.6.320': attribute type 4 has an invalid length.
[  409.389070][ T7208] syzkaller1: entered promiscuous mode
[  409.395000][ T7208] syzkaller1: entered allmulticast mode
[  411.046353][ T7217] netlink: 'syz.4.324': attribute type 1 has an invalid length.
[  411.569300][ T7230] batman_adv: batadv0: Adding interface: dummy0
[  411.575992][ T7230] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.601968][ T7230] batman_adv: batadv0: Interface activated: dummy0
[  413.692582][   T29] audit: type=1800 audit(1735269705.600:13): pid=7252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.333" name="bus" dev="overlay" ino=275 res=0 errno=0
[  414.704896][ T7257] netlink: 'syz.2.336': attribute type 4 has an invalid length.
[  414.925495][ T7257] netlink: 'syz.2.336': attribute type 4 has an invalid length.
[  415.209563][ T7263] [U] 
[  415.212608][ T7263] [U] 
[  415.215618][ T7263] [U] 
[  415.218622][ T7263] [U] 
[  415.363601][ T7265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.334'.
[  415.363836][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.5.335'.
[  415.635747][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.5.335'.
[  415.654233][ T7263] [U] 
[  415.657282][ T7263] [U] 
[  415.660348][ T7263] [U] 
[  415.663355][ T7263] [U] 
[  415.666684][ T7263] [U] 
[  415.669710][ T7263] [U] 
[  415.672714][ T7263] [U] 
[  415.675722][ T7263] [U] 
[  415.784063][ T7263] [U] 
[  415.787133][ T7263] [U] 
[  415.790153][ T7263] [U] 
[  415.793169][ T7263] [U] 
[  415.892216][ T7263] [U] 
[  415.895284][ T7263] [U] 
[  415.898295][ T7263] [U] 
[  415.901299][ T7263] [U] 
[  415.919420][ T5785] Bluetooth: hci4: Unknown advertising packet type: 0x76
[  415.919550][ T5785] Bluetooth: hci4: adv larger than maximum supported
[  415.927280][ T5785] Bluetooth: hci4: Malformed LE Event: 0x0d
[  416.050922][ T7263] [U] 
[  416.054000][ T7263] [U] 
[  416.057033][ T7263] [U] 
[  416.060035][ T7263] [U] 
[  416.076681][ T7263] [U] 
[  416.079802][ T7263] [U] 
[  416.082844][ T7263] [U] 
[  416.085874][ T7263] [U] 
[  416.096275][ T7263] [U] 
[  416.099328][ T7263] [U] 
[  416.102345][ T7263] [U] 
[  416.105354][ T7263] [U] 
[  416.114075][ T7263] [U] 
[  416.117132][ T7263] [U] 
[  416.120146][ T7263] [U] 
[  416.123164][ T7263] [U] 
[  416.196886][ T7263] [U] 
[  416.199945][ T7263] [U] 
[  416.202970][ T7263] [U] 
[  416.205986][ T7263] [U] 
[  416.216384][ T7263] [U] 
[  416.219453][ T7263] [U] 
[  416.222481][ T7263] [U] 
[  416.225518][ T7263] [U] 
[  416.236629][ T7263] [U] 
[  416.239689][ T7263] [U] 
[  416.242714][ T7263] [U] 
[  416.245744][ T7263] [U] 
[  416.341989][ T7263] [U] 
[  416.345069][ T7263] [U] 
[  416.348085][ T7263] [U] 
[  416.351107][ T7263] [U] 
[  416.373633][ T7263] [U] 
[  417.498433][ T5785] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  419.356219][ T7323] netlink: 'syz.6.349': attribute type 1 has an invalid length.
[  419.372010][ T7323] netlink: 'syz.6.349': attribute type 2 has an invalid length.
[  419.860759][ T7328] netlink: 'syz.5.351': attribute type 4 has an invalid length.
[  420.054263][ T7331] netlink: 'syz.5.351': attribute type 4 has an invalid length.
[  422.283921][ T5785] Bluetooth: hci3: Unknown advertising packet type: 0x76
[  422.284050][ T5785] Bluetooth: hci3: adv larger than maximum supported
[  422.291497][ T5785] Bluetooth: hci3: Malformed LE Event: 0x0d
[  422.337272][ T5785] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  423.855795][ T7359] batman_adv: batadv0: Adding interface: dummy0
[  423.870608][ T7359] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.896573][ T7359] batman_adv: batadv0: Interface activated: dummy0
[  426.229237][ T7383] netlink: 'syz.2.364': attribute type 4 has an invalid length.
[  426.249099][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  426.457731][ T7386] netlink: 'syz.2.364': attribute type 4 has an invalid length.
[  427.635020][ T5785] Bluetooth: hci0: Unknown advertising packet type: 0x76
[  427.635146][ T5785] Bluetooth: hci0: adv larger than maximum supported
[  427.642957][ T5785] Bluetooth: hci0: Malformed LE Event: 0x0d
[  429.512942][ T5785] Bluetooth: hci4: command 0x0406 tx timeout
[  430.414560][ T7436] netlink: 'syz.4.379': attribute type 4 has an invalid length.
[  430.544124][ T7441] netlink: 'syz.4.379': attribute type 4 has an invalid length.
[  431.486735][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.5.385'.
[  431.511117][ T7452] vlan2: entered promiscuous mode
[  431.516632][ T7452] veth0_virt_wifi: entered promiscuous mode
[  431.906187][ T7452] veth0_virt_wifi: left promiscuous mode
[  432.100574][ T5785] Bluetooth: hci4: Unknown advertising packet type: 0x76
[  432.100700][ T5785] Bluetooth: hci4: adv larger than maximum supported
[  432.108630][ T5785] Bluetooth: hci4: Malformed LE Event: 0x0d
[  433.200908][ T7469] batman_adv: batadv0: Adding interface: dummy0
[  433.207532][ T7469] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  433.233726][ T7469] batman_adv: batadv0: Interface activated: dummy0
[  440.293656][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'.
[  440.311854][ T7527] vlan2: entered promiscuous mode
[  440.317273][ T7527] veth0_virt_wifi: entered promiscuous mode
[  440.575954][ T5785] Bluetooth: hci1: Unknown advertising packet type: 0x76
[  440.576081][ T5785] Bluetooth: hci1: adv larger than maximum supported
[  440.583642][ T5785] Bluetooth: hci1: Malformed LE Event: 0x0d
[  440.807154][ T7527] veth0_virt_wifi: left promiscuous mode
[  444.644407][ T7556] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  445.915537][ T5785] Bluetooth: hci4: SCO packet for unknown connection handle 0
[  445.978320][ T7567] ieee802154 phy0 wpan0: encryption failed: -22
[  448.177960][ T5785] Bluetooth: hci1: Unknown advertising packet type: 0x76
[  448.178084][ T5785] Bluetooth: hci1: adv larger than maximum supported
[  448.185777][ T5785] Bluetooth: hci1: Malformed LE Event: 0x0d
[  449.511409][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.415'.
[  449.535265][ T7595] vlan2: entered promiscuous mode
[  449.541899][ T7595] veth0_virt_wifi: entered promiscuous mode
[  449.603706][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  449.615895][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  449.628711][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  449.698235][ T7595] veth0_virt_wifi: left promiscuous mode
[  449.715665][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  449.738025][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  449.752077][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  451.245606][ T7622] netlink: 'syz.2.421': attribute type 29 has an invalid length.
[  451.253749][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'.
[  451.730302][ T7601] chnl_net:caif_netlink_parms(): no params data found
[  452.024400][   T51] Bluetooth: hci2: command tx timeout
[  454.081115][   T51] Bluetooth: hci2: command tx timeout
[  454.347286][   T51] Bluetooth: hci1: Unknown advertising packet type: 0x76
[  454.347381][   T51] Bluetooth: hci1: adv larger than maximum supported
[  454.358145][   T51] Bluetooth: hci1: Malformed LE Event: 0x0d
[  455.096208][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.104072][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.111686][ T7601] bridge_slave_0: entered allmulticast mode
[  455.120330][ T7601] bridge_slave_0: entered promiscuous mode
[  455.270919][ T7663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.429'.
[  455.294463][ T7663] vlan2: entered promiscuous mode
[  455.299681][ T7663] veth0_virt_wifi: entered promiscuous mode
[  455.444250][ T7601] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.451745][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.460168][ T7601] bridge_slave_1: entered allmulticast mode
[  455.468379][ T7601] bridge_slave_1: entered promiscuous mode
[  456.152814][   T51] Bluetooth: hci2: command tx timeout
[  456.211708][ T7601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.499333][ T7601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  457.552161][ T7601] team0: Port device team_slave_0 added
[  458.152241][ T7601] team0: Port device team_slave_1 added
[  458.263801][   T51] Bluetooth: hci2: command tx timeout
[  458.649470][ T7601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  458.659055][ T7601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  458.686616][ T7601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  458.831985][ T7601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  458.839603][ T7601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  458.869671][ T7601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.148610][ T7601] hsr_slave_0: entered promiscuous mode
[  459.158384][ T7601] hsr_slave_1: entered promiscuous mode
[  459.234208][ T7601] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  459.242615][ T7601] Cannot create hsr debugfs directory
[  463.999409][ T7601] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  464.109378][ T7601] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  464.138486][   T51] Bluetooth: hci0: Unknown advertising packet type: 0x76
[  464.138610][   T51] Bluetooth: hci0: adv larger than maximum supported
[  464.146385][   T51] Bluetooth: hci0: Malformed LE Event: 0x0d
[  464.202197][ T7601] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  464.235280][ T7601] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  464.936274][ T7715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.442'.
[  464.976687][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  464.984307][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  465.701086][ T5415] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  466.533228][ T5415] usb 7-1: Using ep0 maxpacket: 32
[  466.578756][ T7601] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.615364][ T5415] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  466.624144][ T5415] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  466.636164][ T5415] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  466.648442][ T5415] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  466.662243][ T5415] usb 7-1: config 0 interface 0 has no altsetting 0
[  466.849624][ T7601] 8021q: adding VLAN 0 to HW filter on device team0
[  466.892094][ T5415] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  466.901730][ T5415] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  466.910645][ T5415] usb 7-1: Product: syz
[  466.915242][ T5415] usb 7-1: Manufacturer: syz
[  466.920086][ T5415] usb 7-1: SerialNumber: syz
[  466.979421][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.987484][ T4745] bridge0: port 1(bridge_slave_0) entered forwarding state
[  467.079624][ T5415] usb 7-1: config 0 descriptor??
[  467.120691][ T5415] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  467.128271][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.137891][ T4745] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.265873][ T5415] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  467.561375][ T7601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  467.712939][ T5838] usb 7-1: USB disconnect, device number 2
[  467.766963][ T5838] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  467.864521][ T7737] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  468.702588][ T7737] mmap: syz.4.447 (7737) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  468.919532][ T7601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.045760][ T7766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.453'.
[  470.189140][ T7766] vlan2: entered promiscuous mode
[  470.194523][ T7766] veth0_virt_wifi: entered promiscuous mode
[  470.220262][   T51] Bluetooth: hci3: Unknown advertising packet type: 0x76
[  470.220568][   T51] Bluetooth: hci3: adv larger than maximum supported
[  470.231594][   T51] Bluetooth: hci3: Malformed LE Event: 0x0d
[  472.273263][ T5838] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  472.484021][ T5838] usb 5-1: Using ep0 maxpacket: 16
[  472.495405][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  472.506462][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  472.518629][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[  472.530103][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[  472.541550][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  472.946866][ T5838] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  472.956509][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.964846][ T5838] usb 5-1: Product: syz
[  472.969205][ T5838] usb 5-1: Manufacturer: syz
[  472.974644][ T5838] usb 5-1: SerialNumber: syz
[  473.429974][ T5838] usb 5-1: config 0 descriptor??
[  473.714758][ T5838] appledisplay 5-1:0.0: Error while getting initial brightness: -110
[  473.727219][ T5838] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110
[  473.899994][   T44] usb 5-1: USB disconnect, device number 6
[  474.059895][ T7601] veth0_vlan: entered promiscuous mode
[  474.117931][ T7601] veth1_vlan: entered promiscuous mode
[  474.286428][ T7601] veth0_macvtap: entered promiscuous mode
[  474.379585][ T7601] veth1_macvtap: entered promiscuous mode
[  474.739966][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.750710][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.760846][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.771520][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.781531][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.792171][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.802225][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.813453][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.823495][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.838040][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.852067][ T7601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  475.360497][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.371195][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.381246][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.392775][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.402842][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.413488][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.423617][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.434293][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.444337][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.458800][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.472747][ T7601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  476.186313][ T7813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.464'.
[  476.554619][ T7601] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  476.563785][ T7601] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.573220][ T7601] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.583361][ T7601] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.146920][ T7836] input: syz0 as /devices/virtual/input/input10
[  484.475080][ T7892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.475'.
[  487.161161][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.169627][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.344032][ T3604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.352203][ T3604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  489.837656][ T7943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.488'.
[  489.901790][ T7946] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  491.273661][ T5837] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  491.468316][ T5837] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  491.514191][ T5837] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  491.523790][ T5837] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  491.540015][ T5837] usb 7-1: config 0 interface 0 has no altsetting 0
[  491.679705][ T5837] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  491.689339][ T5837] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  491.700564][ T5837] usb 7-1: config 0 interface 0 has no altsetting 0
[  491.887907][ T5837] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  491.898459][ T5837] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  491.909730][ T5837] usb 7-1: config 0 interface 0 has no altsetting 0
[  492.019413][ T5837] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  492.029373][ T5837] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  492.044228][ T5837] usb 7-1: config 0 interface 0 has no altsetting 0
[  492.135389][ T5837] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  492.153322][ T5837] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  492.167065][ T5837] usb 7-1: config 0 interface 0 has no altsetting 0
[  492.264506][ T5837] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  492.275010][ T5837] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  492.286592][ T5837] usb 7-1: config 0 interface 0 has no altsetting 0
[  492.439993][ T5837] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  492.453209][ T5837] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  492.465365][ T5837] usb 7-1: config 0 interface 0 has no altsetting 0
[  492.531991][ T5837] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  492.541560][ T5837] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  492.559556][ T5837] usb 7-1: config 0 interface 0 has no altsetting 0
[  492.673630][ T5837] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  492.683241][ T5837] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  492.691820][ T5837] usb 7-1: Product: syz
[  492.696416][ T5837] usb 7-1: Manufacturer: syz
[  492.701146][ T5837] usb 7-1: SerialNumber: syz
[  492.877507][ T5837] usb 7-1: config 0 descriptor??
[  492.922036][ T5837] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  493.228996][ T5837] usb 7-1: USB disconnect, device number 3
[  493.263981][ T5837] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  494.390575][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.7.500'.
[  495.714153][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.501'.
[  496.513266][ T5837] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  496.705049][ T5837] usb 3-1: Using ep0 maxpacket: 16
[  497.174877][ T5837] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  497.186220][ T5837] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  497.196432][ T5837] usb 3-1: config 0 interface 0 has no altsetting 0
[  497.203375][ T5837] usb 3-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  497.212712][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.318468][ T5837] usb 3-1: config 0 descriptor??
[  497.676223][ T8004] syzkaller1: entered promiscuous mode
[  497.681926][ T8004] syzkaller1: entered allmulticast mode
[  497.815934][ T5837] usbhid 3-1:0.0: can't add hid device: -71
[  497.822913][ T5837] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  497.932446][ T5837] usb 3-1: USB disconnect, device number 7
[  499.994983][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  500.418456][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'.
[  500.475778][ T5837] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  500.694305][ T5837] usb 5-1: Using ep0 maxpacket: 32
[  500.782120][ T5837] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  500.791622][ T5837] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  500.806168][ T5837] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  500.816531][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  500.826453][ T5837] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  500.836354][ T5837] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  500.852793][ T5837] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  500.861998][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.208419][ T5837] usb 5-1: config 0 descriptor??
[  501.374074][ T5838] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  501.465435][ T5837] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  501.553684][ T5838] usb 8-1: device descriptor read/64, error -71
[  501.571422][ T5837] usb 5-1: USB disconnect, device number 7
[  501.649046][ T5837] usblp0: removed
[  501.842720][ T5838] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  501.948693][ T5785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  501.978529][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  501.987412][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  502.024603][ T5838] usb 8-1: device descriptor read/64, error -71
[  502.041435][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  502.063395][ T5785] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  502.083210][ T5837] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  502.092565][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  502.136067][ T5838] usb usb8-port1: attempt power cycle
[  502.283835][ T5837] usb 5-1: Using ep0 maxpacket: 32
[  502.319025][ T5837] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  502.327918][ T5837] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  502.336980][ T5837] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  502.347143][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  502.357351][ T5837] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  502.367567][ T5837] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  502.386244][ T5837] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  502.397490][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.582921][ T5838] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  502.675499][ T5838] usb 8-1: device descriptor read/8, error -71
[  502.719626][ T5837] usb 5-1: config 0 descriptor??
[  502.950594][ T5838] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  503.029482][ T5837] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  503.119256][ T5838] usb 8-1: device descriptor read/8, error -71
[  503.234404][ T5838] usb usb8-port1: unable to enumerate USB device
[  503.378988][ T5837] usb 5-1: USB disconnect, device number 8
[  503.450934][ T5837] usblp0: removed
[  503.569465][ T5958] udevd[5958]: setting mode of /dev/usb/lp0 to 020660 failed: No such file or directory
[  503.617352][ T5838] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  503.681832][ T5958] udevd[5958]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory
[  504.782598][ T5838] usb 7-1: Using ep0 maxpacket: 16
[  505.418561][ T5838] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  505.430140][ T5838] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  505.433457][ T5785] Bluetooth: hci5: command tx timeout
[  505.441065][ T5838] usb 7-1: config 0 interface 0 has no altsetting 0
[  505.458327][ T5838] usb 7-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  505.469309][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.519482][ T5838] usb 7-1: config 0 descriptor??
[  506.243102][ T8052] chnl_net:caif_netlink_parms(): no params data found
[  506.619236][ T5838] usbhid 7-1:0.0: can't add hid device: -71
[  506.627920][ T5838] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  507.103529][ T5838] usb 7-1: USB disconnect, device number 4
[  507.353954][ T8084] process 'syz.4.525' launched '/dev/fd/9' with NULL argv: empty string added
[  508.154443][ T8075] lo speed is unknown, defaulting to 1000
[  508.160538][ T8075] lo speed is unknown, defaulting to 1000
[  508.167601][ T8075] lo speed is unknown, defaulting to 1000
[  508.186054][ T8075] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  508.230751][ T8075] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  508.833486][   T51] Bluetooth: hci5: command tx timeout
[  508.949756][ T8075] lo speed is unknown, defaulting to 1000
[  508.959005][ T8075] lo speed is unknown, defaulting to 1000
[  508.968238][ T8075] lo speed is unknown, defaulting to 1000
[  508.976567][ T8075] lo speed is unknown, defaulting to 1000
[  508.984882][ T8075] lo speed is unknown, defaulting to 1000
[  508.992199][ T8075] lo speed is unknown, defaulting to 1000
[  509.000786][ T8075] lo speed is unknown, defaulting to 1000
[  509.408486][ T8090] overlayfs: failed to resolve './file1': -2
[  509.744938][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.7.528'.
[  510.313499][ T8052] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.321272][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.329645][ T8052] bridge_slave_0: entered allmulticast mode
[  510.339212][ T8052] bridge_slave_0: entered promiscuous mode
[  510.356269][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.364420][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.379499][ T8052] bridge_slave_1: entered allmulticast mode
[  510.388833][ T8052] bridge_slave_1: entered promiscuous mode
[  510.746777][ T8052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  510.893351][ T8052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  510.934396][ T5790] Bluetooth: hci5: command 0x040f tx timeout
[  511.180509][ T8052] team0: Port device team_slave_0 added
[  511.228770][ T5838] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  511.309263][ T8052] team0: Port device team_slave_1 added
[  511.513143][ T5838] usb 8-1: device descriptor read/64, error -71
[  511.680538][ T8052] batman_adv: batadv0: Adding interface: batadv_slave_0
[  511.688009][ T8052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  511.720755][ T8052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  511.783499][ T8052] batman_adv: batadv0: Adding interface: batadv_slave_1
[  511.790809][ T8052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  511.823399][ T8052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  511.839762][ T5838] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  511.942819][ T8095] random: crng reseeded on system resumption
[  511.972797][ T5838] usb 8-1: device descriptor read/64, error -71
[  512.086773][ T5838] usb usb8-port1: attempt power cycle
[  512.484763][ T8052] hsr_slave_0: entered promiscuous mode
[  512.493387][ T5838] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  512.565336][ T5838] usb 8-1: device descriptor read/8, error -71
[  512.613729][ T8052] hsr_slave_1: entered promiscuous mode
[  512.782820][ T8052] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  512.790614][ T8052] Cannot create hsr debugfs directory
[  512.943002][ T5838] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  512.994091][ T5785] Bluetooth: hci5: command 0x040f tx timeout
[  513.056865][ T5838] usb 8-1: device descriptor read/8, error -71
[  513.213972][ T5838] usb usb8-port1: unable to enumerate USB device
[  514.349843][ T8141] siw: device registration error -23
[  514.939649][ T8052] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  515.036339][ T5785] Bluetooth: hci5: command 0x040f tx timeout
[  515.113747][ T8052] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  515.296048][ T8052] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  515.434760][ T8052] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  515.553245][ T5837] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  515.782778][ T5837] usb 7-1: Using ep0 maxpacket: 16
[  515.837924][ T5837] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  515.849409][ T5837] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  515.859626][ T5837] usb 7-1: config 0 interface 0 has no altsetting 0
[  515.866541][ T5837] usb 7-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  515.875898][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.325735][ T5837] usb 7-1: config 0 descriptor??
[  516.907316][ T8052] 8021q: adding VLAN 0 to HW filter on device bond0
[  516.964550][ T8052] 8021q: adding VLAN 0 to HW filter on device team0
[  517.207513][ T8159] overlayfs: failed to resolve './file1': -2
[  517.258993][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.266757][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  517.366575][ T5837] usbhid 7-1:0.0: can't add hid device: -71
[  517.373586][ T5837] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  517.459082][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.466838][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  517.569384][ T5837] usb 7-1: USB disconnect, device number 5
[  517.747609][ T8052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  517.758492][ T8052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  518.623545][ T3057] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  518.833739][ T3057] usb 8-1: Using ep0 maxpacket: 16
[  518.865065][ T3057] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.883922][ T3057] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  518.894008][ T3057] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  518.907203][ T3057] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  518.916559][ T3057] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.202138][ T3057] usb 8-1: config 0 descriptor??
[  519.724614][ T8170] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  519.820333][ T8052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  520.083045][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.093126][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.766273][ T8186] netlink: 48 bytes leftover after parsing attributes in process `syz.6.546'.
[  520.873245][ T5785] Bluetooth: hci0: command 0x0c1a tx timeout
[  521.141462][ T3057] usbhid 8-1:0.0: can't add hid device: -71
[  521.148801][ T3057] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  521.229399][ T3057] usb 8-1: USB disconnect, device number 10
[  522.084962][ T8193] lo speed is unknown, defaulting to 1000
[  522.091047][ T8193] lo speed is unknown, defaulting to 1000
[  522.098200][ T8193] lo speed is unknown, defaulting to 1000
[  522.156484][ T8193] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  522.414146][ T8193] lo speed is unknown, defaulting to 1000
[  522.423083][ T8193] lo speed is unknown, defaulting to 1000
[  522.431575][ T8193] lo speed is unknown, defaulting to 1000
[  522.440753][ T8193] lo speed is unknown, defaulting to 1000
[  522.456246][ T8193] lo speed is unknown, defaulting to 1000
[  522.466724][ T8193] lo speed is unknown, defaulting to 1000
[  522.476401][ T8193] lo speed is unknown, defaulting to 1000
[  523.086059][ T8204] hub 6-0:1.0: USB hub found
[  523.092190][ T8204] hub 6-0:1.0: 1 port detected
[  523.145871][ T8204] kernel profiling enabled (shift: 9)
[  526.428309][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  526.435176][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  527.318844][ T8052] veth0_vlan: entered promiscuous mode
[  527.756934][ T8052] veth1_vlan: entered promiscuous mode
[  527.914735][ T8052] veth0_macvtap: entered promiscuous mode
[  527.937794][ T8052] veth1_macvtap: entered promiscuous mode
[  527.995763][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.007495][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.017969][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.028742][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.038861][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.049628][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.060395][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.071201][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.084578][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.096325][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.106566][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.117317][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.131717][ T8052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  528.153492][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.164281][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.174420][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.188236][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.199193][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.209995][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.220268][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.231031][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.241211][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.251921][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.262117][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.273077][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.291625][ T8052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  528.489520][ T8052] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  528.501833][ T8052] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  528.511484][ T8052] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  528.520528][ T8052] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.142887][ T3057] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  529.343515][ T3057] usb 5-1: Using ep0 maxpacket: 16
[  529.403732][ T3057] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  529.418601][ T3057] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  529.430019][ T3057] usb 5-1: config 0 interface 0 has no altsetting 0
[  529.437360][ T3057] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  529.446728][ T3057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.562764][ T5837] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  529.639578][ T3057] usb 5-1: config 0 descriptor??
[  529.733192][ T5837] usb 7-1: Using ep0 maxpacket: 8
[  529.811633][ T5837] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  529.821748][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.833578][ T5837] usb 7-1: Product: syz
[  529.837883][ T5837] usb 7-1: Manufacturer: syz
[  529.843602][ T5837] usb 7-1: SerialNumber: syz
[  530.043996][ T5837] usb 7-1: config 0 descriptor??
[  530.223463][ T3057] usbhid 5-1:0.0: can't add hid device: -71
[  530.230022][ T3057] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  530.387203][ T3057] usb 5-1: USB disconnect, device number 9
[  530.568078][ T5837] usb write operation failed. (-71)
[  530.613411][ T5837] usb write operation failed. (-71)
[  530.620119][ T5837] usb write operation failed. (-71)
[  530.625701][ T5837] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[  530.638392][ T5837] usb 7-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[  530.655288][ T5837] usb 7-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw
[  545.858253][ T4745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.866476][ T4745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.145909][ T8207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.154019][ T8207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.962806][ T3057] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  547.246379][ T3057] usb 5-1: Using ep0 maxpacket: 16
[  547.908625][ T3057] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  547.921077][ T3057] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  547.931493][ T3057] usb 5-1: config 0 interface 0 has no altsetting 0
[  547.939269][ T3057] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  547.954777][ T3057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.025542][ T3057] usb 5-1: config 0 descriptor??
[  550.017180][ T3057] usbhid 5-1:0.0: can't add hid device: -71
[  550.025174][ T3057] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  550.388479][ T3057] usb 5-1: USB disconnect, device number 10
[  556.274951][ T8414] netlink: 28 bytes leftover after parsing attributes in process `syz.6.594'.
[  560.059803][   T44] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  560.393206][   T44] usb 3-1: Using ep0 maxpacket: 16
[  560.406181][   T44] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  560.418366][   T44] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  560.428856][   T44] usb 3-1: config 0 interface 0 has no altsetting 0
[  560.435942][   T44] usb 3-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  560.447721][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.461675][   T44] usb 3-1: config 0 descriptor??
[  560.943221][   T44] usbhid 3-1:0.0: can't add hid device: -71
[  560.950020][   T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  561.133137][   T44] usb 3-1: USB disconnect, device number 8
[  563.451948][ T8468] can0: slcan on ptm1.
[  565.309104][ T8454] can0 (unregistered): slcan off ptm1.
[  569.242737][ T8356] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  569.444631][ T8356] usb 5-1: Using ep0 maxpacket: 16
[  569.488463][ T8356] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  569.501176][ T8356] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  569.512192][ T8356] usb 5-1: config 0 interface 0 has no altsetting 0
[  569.519335][ T8356] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  569.528993][ T8356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.774096][ T8356] usb 5-1: config 0 descriptor??
[  570.522050][ T8534] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  571.362537][ T8356] usbhid 5-1:0.0: can't add hid device: -71
[  571.369164][ T8356] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  571.382119][ T8356] usb 5-1: USB disconnect, device number 11
[  572.589854][ T8548] netlink: 48 bytes leftover after parsing attributes in process `syz.7.624'.
[  572.797330][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'.
[  572.821188][ T8550] vlan3: entered promiscuous mode
[  573.503705][ T5790] Bluetooth: hci5: unexpected event for opcode 0x2060
[  574.558055][ T5790] Bluetooth: hci2: command 0x0406 tx timeout
[  577.630408][ T8590] netlink: 12 bytes leftover after parsing attributes in process `syz.7.635'.
[  578.146039][ T8603] netlink: 'syz.4.638': attribute type 10 has an invalid length.
[  579.371349][ T8603] 8021q: adding VLAN 0 to HW filter on device bond0
[  579.389879][ T8603] team0: Port device bond0 added
[  580.712598][ T8433] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  583.831250][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.642'.
[  584.067138][ T8433] usb 8-1: device descriptor read/all, error -71
[  585.481277][ T5790] Bluetooth: hci3: unexpected event for opcode 0x2060
[  587.945951][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  587.946210][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  591.564799][ T8679] overlayfs: failed to resolve './file1': -2
[  591.626562][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  591.636422][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  591.663115][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  591.695710][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  591.705808][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  591.714656][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  592.016603][ T8688] lo speed is unknown, defaulting to 1000
[  592.024797][ T8688] lo speed is unknown, defaulting to 1000
[  592.975523][ T5837] usb 7-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  592.993509][ T5837] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -110
[  593.187496][ T5837] usb 7-1: USB disconnect, device number 6
[  593.753627][ T5790] Bluetooth: hci1: command tx timeout
[  596.008606][ T5790] Bluetooth: hci1: command tx timeout
[  596.161714][ T8688] chnl_net:caif_netlink_parms(): no params data found
[  598.130173][ T5790] Bluetooth: hci1: command tx timeout
[  600.179674][ T5790] Bluetooth: hci1: command tx timeout
[  601.399017][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.416294][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state
[  601.424635][ T8688] bridge_slave_0: entered allmulticast mode
[  601.434637][ T8688] bridge_slave_0: entered promiscuous mode
[  601.789079][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.796799][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state
[  601.804597][ T8688] bridge_slave_1: entered allmulticast mode
[  601.819293][ T8688] bridge_slave_1: entered promiscuous mode
[  602.414981][ T8750] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  608.845098][ T8688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  609.038988][ T8688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  609.662090][ T8688] team0: Port device team_slave_0 added
[  609.891643][ T8688] team0: Port device team_slave_1 added
[  613.933334][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_0
[  613.940644][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  613.967152][ T8688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  613.984683][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_1
[  613.991854][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  614.025858][ T8688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  617.290734][ T5790] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  618.042125][ T8688] hsr_slave_0: entered promiscuous mode
[  618.147616][ T8688] hsr_slave_1: entered promiscuous mode
[  618.170637][ T8688] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  618.179413][ T8688] Cannot create hsr debugfs directory
[  618.186777][ T8799] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  626.235030][ T5790] Bluetooth: hci5: command 0x040f tx timeout
[  627.152079][ T8688] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  627.279498][ T8688] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  627.476519][ T8688] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  627.619871][ T8688] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  629.755120][ T8688] 8021q: adding VLAN 0 to HW filter on device bond0
[  629.816720][ T8688] 8021q: adding VLAN 0 to HW filter on device team0
[  629.866982][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state
[  629.874936][ T8253] bridge0: port 1(bridge_slave_0) entered forwarding state
[  630.097628][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.106277][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state
[  633.299350][ T5837] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  636.032382][ T5837] usb 5-1: Using ep0 maxpacket: 16
[  637.007276][ T8688] 8021q: adding VLAN 0 to HW filter on device batadv0
[  637.053908][ T5837] usb 5-1: unable to read config index 0 descriptor/all
[  637.061092][ T5837] usb 5-1: can't read configurations, error -71
[  639.327220][ T8898] mkiss: ax0: crc mode is auto.
[  645.216796][ T8688] veth0_vlan: entered promiscuous mode
[  645.377258][ T8688] veth1_vlan: entered promiscuous mode
[  646.718492][ T8688] veth0_macvtap: entered promiscuous mode
[  646.850784][ T8688] veth1_macvtap: entered promiscuous mode
[  647.306331][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  647.318745][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  647.329854][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  647.340659][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  647.350884][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  647.363140][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  647.373815][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  647.391809][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  647.403939][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  647.415030][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  647.425173][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  647.436017][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  647.446159][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  647.456946][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  647.471782][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_0
[  648.034522][ T5785] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  648.878589][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.889418][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.899750][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.912923][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.926583][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.938212][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.948977][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.959888][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.970029][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.980853][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.990988][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.001829][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.012659][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.026831][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.042811][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_1
[  649.064362][ T8688] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  649.073563][ T8688] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  649.082782][ T8688] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  649.091828][ T8688] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  649.345558][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  649.352663][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  649.917820][ T8937] netlink: 16 bytes leftover after parsing attributes in process `syz.8.708'.
[  649.927193][ T8937] netlink: 32 bytes leftover after parsing attributes in process `syz.8.708'.
[  654.004834][ T5790] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  654.186143][ T5790] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  654.439526][ T5790] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  654.462062][ T5790] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  654.475810][ T5790] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  654.485276][ T5790] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  654.581165][ T8944] lo speed is unknown, defaulting to 1000
[  654.589394][ T8944] lo speed is unknown, defaulting to 1000
[  655.613006][ T5785] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  655.622097][ T5785] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  655.631882][ T5785] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  655.691192][ T5785] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  655.702846][ T5785] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  655.712518][ T5785] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  656.068283][ T8959] lo speed is unknown, defaulting to 1000
[  656.077084][ T8959] lo speed is unknown, defaulting to 1000
[  656.868795][ T5785] Bluetooth: hci6: command tx timeout
[  657.304002][ T8944] chnl_net:caif_netlink_parms(): no params data found
[  657.836864][ T5785] Bluetooth: hci7: command tx timeout
[  658.393958][   T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.072651][ T5785] Bluetooth: hci6: command tx timeout
[  664.415405][ T5785] Bluetooth: hci7: command tx timeout
[  664.421198][ T5785] Bluetooth: hci6: command tx timeout
[  664.628905][   T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.081205][   T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.231059][ T8959] chnl_net:caif_netlink_parms(): no params data found
[  665.335953][   T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.297481][   T13] bridge_slave_1: left allmulticast mode
[  666.303917][   T13] bridge_slave_1: left promiscuous mode
[  666.310094][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.479461][ T5790] Bluetooth: hci6: command tx timeout
[  666.490187][ T5785] Bluetooth: hci7: command tx timeout
[  666.723793][   T13] bridge_slave_0: left allmulticast mode
[  666.729663][   T13] bridge_slave_0: left promiscuous mode
[  666.741343][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.962954][ T3057] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  667.342829][ T3057] usb 5-1: Using ep0 maxpacket: 8
[  667.419774][ T3057] usb 5-1: no configurations
[  667.424807][ T3057] usb 5-1: can't read configurations, error -22
[  667.633371][ T3057] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  667.913204][ T3057] usb 5-1: Using ep0 maxpacket: 8
[  667.933057][ T3057] usb 5-1: no configurations
[  667.937798][ T3057] usb 5-1: can't read configurations, error -22
[  668.006629][ T3057] usb usb5-port1: attempt power cycle
[  668.156915][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  668.285180][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  668.346722][   T13] bond0 (unregistering): Released all slaves
[  668.397758][ T3057] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  668.454491][ T3057] usb 5-1: Using ep0 maxpacket: 8
[  668.493376][ T3057] usb 5-1: no configurations
[  668.498123][ T3057] usb 5-1: can't read configurations, error -22
[  668.565906][ T5790] Bluetooth: hci7: command tx timeout
[  668.751336][ T3057] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  668.804757][   T13] hsr_slave_0: left promiscuous mode
[  668.846368][ T3057] usb 5-1: Using ep0 maxpacket: 8
[  668.899093][ T3057] usb 5-1: no configurations
[  668.903983][ T3057] usb 5-1: can't read configurations, error -22
[  668.911029][   T13] hsr_slave_1: left promiscuous mode
[  668.968427][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  668.976421][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  669.018488][ T3057] usb usb5-port1: unable to enumerate USB device
[  669.134465][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  669.142077][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  669.324563][   T13] veth1_macvtap: left promiscuous mode
[  669.330232][   T13] veth0_macvtap: left promiscuous mode
[  669.336391][   T13] veth1_vlan: left promiscuous mode
[  669.341794][   T13] veth0_vlan: left promiscuous mode
[  671.619264][   T13] team0 (unregistering): Port device team_slave_1 removed
[  671.692589][   T13] team0 (unregistering): Port device team_slave_0 removed
[  672.004292][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  672.281405][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state
[  672.289163][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state
[  672.296957][ T8944] bridge_slave_0: entered allmulticast mode
[  672.305127][ T8944] bridge_slave_0: entered promiscuous mode
[  672.561770][ T8944] bridge0: port 2(bridge_slave_1) entered blocking state
[  672.578140][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state
[  672.586091][ T8944] bridge_slave_1: entered allmulticast mode
[  672.594314][ T8944] bridge_slave_1: entered promiscuous mode
[  673.130713][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state
[  673.138431][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.146584][ T8959] bridge_slave_0: entered allmulticast mode
[  673.154691][ T8959] bridge_slave_0: entered promiscuous mode
[  673.374600][ T8959] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.382904][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.396505][ T8959] bridge_slave_1: entered allmulticast mode
[  673.404706][ T8959] bridge_slave_1: entered promiscuous mode
[  673.896860][ T8959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  673.969333][ T8959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  674.253053][ T8959] team0: Port device team_slave_0 added
[  674.340868][ T8959] team0: Port device team_slave_1 added
[  674.637518][ T8959] batman_adv: batadv0: Adding interface: batadv_slave_0
[  674.644953][ T8959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  674.671235][ T8959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  674.846616][ T8959] batman_adv: batadv0: Adding interface: batadv_slave_1
[  674.853938][ T8959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  674.881265][ T8959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  675.324678][ T8959] hsr_slave_0: entered promiscuous mode
[  675.410084][ T8959] hsr_slave_1: entered promiscuous mode
[  675.454411][ T8959] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  675.462189][ T8959] Cannot create hsr debugfs directory
[  677.149148][ T8959] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  677.189085][ T8959] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  677.245590][ T8959] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  677.272128][ T8959] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  677.885482][ T8959] 8021q: adding VLAN 0 to HW filter on device bond0
[  677.993428][ T8959] 8021q: adding VLAN 0 to HW filter on device team0
[  679.031756][ T8959] 8021q: adding VLAN 0 to HW filter on device batadv0
[  680.289168][ T8959] veth0_vlan: entered promiscuous mode
[  680.366965][ T8959] veth1_vlan: entered promiscuous mode
[  680.517080][ T8959] veth0_macvtap: entered promiscuous mode
[  680.589144][ T8959] veth1_macvtap: entered promiscuous mode
[  680.690615][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  680.702020][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  680.712102][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  680.722965][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  680.732949][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  680.743607][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  680.753623][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  680.769254][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  680.780596][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  680.791286][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  680.801760][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  680.812594][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  680.822776][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  680.833429][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  680.848636][ T8959] batman_adv: batadv0: Interface activated: batadv_slave_0
[  680.933590][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  680.944395][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  680.954545][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  680.971094][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  680.982475][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  680.993162][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  681.003199][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  681.013976][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  681.024082][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  681.034779][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  681.044856][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  681.055488][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  681.065518][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  681.081167][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  681.097548][ T8959] batman_adv: batadv0: Interface activated: batadv_slave_1
[  681.202157][ T8959] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  681.212908][ T8959] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  681.221788][ T8959] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  681.230887][ T8959] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  684.023990][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  684.048763][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  684.059308][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  684.080434][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  684.097516][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  684.106699][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  684.297040][ T9078] lo speed is unknown, defaulting to 1000
[  684.304463][ T9078] lo speed is unknown, defaulting to 1000
[  685.281147][ T8425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.289374][ T8425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  685.421533][ T9078] chnl_net:caif_netlink_parms(): no params data found
[  685.450725][ T8207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.458907][ T8207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.152686][ T5785] Bluetooth: hci1: command tx timeout
[  686.610720][ T9078] bridge0: port 1(bridge_slave_0) entered blocking state
[  686.618348][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.626763][ T9078] bridge_slave_0: entered allmulticast mode
[  686.635590][ T9078] bridge_slave_0: entered promiscuous mode
[  686.764215][ T9078] bridge0: port 2(bridge_slave_1) entered blocking state
[  686.771681][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.779613][ T9078] bridge_slave_1: entered allmulticast mode
[  686.787853][ T9078] bridge_slave_1: entered promiscuous mode
[  687.096068][ T9078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  687.179138][ T9078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  687.411549][ T9078] team0: Port device team_slave_0 added
[  687.508703][ T9078] team0: Port device team_slave_1 added
[  687.888459][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  687.895707][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  687.922010][ T9078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  688.221965][ T9097] veth1_macvtap: left promiscuous mode
[  688.227772][ T9097] macsec0: entered promiscuous mode
[  688.253231][ T5785] Bluetooth: hci1: command tx timeout
[  688.259276][   T29] audit: type=1326 audit(1735269980.110:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.9.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881cb85d29 code=0x7ffc0000
[  688.282084][   T29] audit: type=1326 audit(1735269980.110:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.9.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881cb85d29 code=0x7ffc0000
[  688.304543][   T29] audit: type=1326 audit(1735269980.110:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.9.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f881cb85d29 code=0x7ffc0000
[  688.327448][   T29] audit: type=1326 audit(1735269980.110:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.9.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881cb85d29 code=0x7ffc0000
[  688.354805][   T29] audit: type=1326 audit(1735269980.110:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.9.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881cb85d29 code=0x7ffc0000
[  688.378663][   T29] audit: type=1326 audit(1735269980.110:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.9.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f881cb85d29 code=0x7ffc0000
[  688.401031][   T29] audit: type=1326 audit(1735269980.120:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.9.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881cb85d29 code=0x7ffc0000
[  688.423456][   T29] audit: type=1326 audit(1735269980.120:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.9.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881cb85d29 code=0x7ffc0000
[  688.450699][   T29] audit: type=1326 audit(1735269980.120:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.9.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f881cb85d29 code=0x7ffc0000
[  688.474383][   T29] audit: type=1326 audit(1735269980.120:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.9.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881cb85d29 code=0x7ffc0000
[  688.553602][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  688.560688][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  688.587195][ T9078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  689.413167][ T9078] hsr_slave_0: entered promiscuous mode
[  689.524098][ T9078] hsr_slave_1: entered promiscuous mode
[  689.549442][ T5790] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  689.610828][ T9078] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  689.618667][ T9078] Cannot create hsr debugfs directory
[  689.645509][ T5790] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  689.704116][ T5790] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  689.795052][   T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  689.805669][   T51] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  689.814272][   T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  690.320675][ T5785] Bluetooth: hci1: command tx timeout
[  690.559657][   T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  690.574200][   T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  690.597754][   T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  690.609131][   T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  690.623149][   T51] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  690.652862][   T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  691.942595][ T5785] Bluetooth: hci8: command tx timeout
[  692.041430][ T9078] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  692.109737][ T9078] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  692.183472][ T9078] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  692.246132][ T9078] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  692.393450][ T5785] Bluetooth: hci1: command tx timeout
[  692.625253][ T9078] bridge0: port 2(bridge_slave_1) entered blocking state
[  692.632837][ T9078] bridge0: port 2(bridge_slave_1) entered forwarding state
[  692.641366][ T9078] bridge0: port 1(bridge_slave_0) entered blocking state
[  692.648927][ T9078] bridge0: port 1(bridge_slave_0) entered forwarding state
[  692.797880][ T5785] Bluetooth: hci9: command tx timeout
[  693.236075][ T9078] 8021q: adding VLAN 0 to HW filter on device bond0
[  693.349358][ T9078] 8021q: adding VLAN 0 to HW filter on device team0
[  693.992618][ T5785] Bluetooth: hci8: command tx timeout
[  694.683072][ T9078] 8021q: adding VLAN 0 to HW filter on device batadv0
[  694.873016][ T5785] Bluetooth: hci9: command tx timeout
[  695.051336][ T9078] veth0_vlan: entered promiscuous mode
[  695.143234][ T9078] veth1_vlan: entered promiscuous mode
[  695.344696][ T9078] veth0_macvtap: entered promiscuous mode
[  695.385211][ T9078] veth1_macvtap: entered promiscuous mode
[  695.499899][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.517047][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.528811][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.539475][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.549623][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.560272][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.570337][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.581064][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.591132][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.601869][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.618386][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.630712][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.640738][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.651361][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.661396][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.672083][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.686529][ T9078] batman_adv: batadv0: Interface activated: batadv_slave_0
[  695.800083][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.810846][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.827496][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.839941][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.850027][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.860714][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.870770][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.881452][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.891714][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.902599][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.913055][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.929958][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.941544][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.952309][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.962348][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.973096][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.987564][ T9078] batman_adv: batadv0: Interface activated: batadv_slave_1
[  696.103287][ T5785] Bluetooth: hci8: command tx timeout
[  696.215237][ T9078] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  696.235131][ T9078] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  696.247933][ T9078] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  696.257196][ T9078] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  696.978233][ T5785] Bluetooth: hci9: command tx timeout
[  697.679254][ T3805] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.686794][ T3805] bridge0: port 1(bridge_slave_0) entered forwarding state
[  697.700997][ T3805] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.708502][ T3805] bridge0: port 2(bridge_slave_1) entered forwarding state
[  698.181797][ T5785] Bluetooth: hci8: command tx timeout
[  698.396286][ T9102] lo speed is unknown, defaulting to 1000
[  698.403712][ T9102] lo speed is unknown, defaulting to 1000
[  698.508780][ T9119] netlink: 'syz.9.724': attribute type 2 has an invalid length.
[  698.720673][ T8944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  698.900484][ T9099] lo speed is unknown, defaulting to 1000
[  698.908479][ T9099] lo speed is unknown, defaulting to 1000
[  699.085218][ T8944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  699.204690][ T5785] Bluetooth: hci9: command tx timeout
[  699.739905][ T8944] team0: Port device team_slave_0 added
[  699.828755][ T8944] team0: Port device team_slave_1 added
[  699.927039][ T8939] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.205602][ T8939] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.478318][ T8939] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.574096][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  700.581179][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  700.607570][ T8944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  700.951591][ T8939] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  701.215301][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  701.222546][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  701.254683][ T8944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  701.503194][ T9102] chnl_net:caif_netlink_parms(): no params data found
[  701.831475][ T8939] bridge_slave_1: left allmulticast mode
[  701.837608][ T8939] bridge_slave_1: left promiscuous mode
[  701.844088][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state
[  702.032978][ T8939] bridge_slave_0: left allmulticast mode
[  702.038989][ T8939] bridge_slave_0: left promiscuous mode
[  702.045354][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.306698][ T8939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  703.363822][ T8939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  703.425079][ T8939] bond0 (unregistering): Released all slaves
[  703.441187][ T8939] bond1 (unregistering): Released all slaves
[  704.533667][ T9099] chnl_net:caif_netlink_parms(): no params data found
[  704.563931][ T8944] hsr_slave_0: entered promiscuous mode
[  704.645804][ T8944] hsr_slave_1: entered promiscuous mode
[  704.703767][ T8944] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  704.711465][ T8944] Cannot create hsr debugfs directory
[  704.913755][ T8939] hsr_slave_0: left promiscuous mode
[  704.932601][ T8939] hsr_slave_1: left promiscuous mode
[  704.940161][ T8939] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  704.948299][ T8939] batman_adv: batadv0: Removing interface: batadv_slave_0
[  705.084838][ T8939] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  705.092660][ T8939] batman_adv: batadv0: Removing interface: batadv_slave_1
[  705.273973][ T8939] veth1_macvtap: left promiscuous mode
[  705.279630][ T8939] veth0_macvtap: left promiscuous mode
[  705.285544][ T8939] veth1_vlan: left promiscuous mode
[  705.290941][ T8939] veth0_vlan: left promiscuous mode
[  706.614066][ T8939] team0 (unregistering): Port device team_slave_1 removed
[  706.734170][ T8939] team0 (unregistering): Port device team_slave_0 removed
[  709.765192][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.773981][ T9102] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.781650][ T9102] bridge_slave_0: entered allmulticast mode
[  709.790083][ T9102] bridge_slave_0: entered promiscuous mode
[  710.167381][ T9102] bridge0: port 2(bridge_slave_1) entered blocking state
[  710.175012][ T9102] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.182906][ T9102] bridge_slave_1: entered allmulticast mode
[  710.191041][ T9102] bridge_slave_1: entered promiscuous mode
[  710.792325][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  710.799427][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  711.325787][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  711.339464][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  711.356404][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  711.446955][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  711.468036][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  711.476793][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  711.636129][ T9099] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.643713][ T9099] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.651446][ T9099] bridge_slave_0: entered allmulticast mode
[  711.659849][ T9099] bridge_slave_0: entered promiscuous mode
[  711.760397][ T9102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  711.929574][ T9181] lo speed is unknown, defaulting to 1000
[  711.937155][ T9181] lo speed is unknown, defaulting to 1000
[  712.087095][ T9102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  712.247107][ T9099] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.256445][ T9099] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.264424][ T9099] bridge_slave_1: entered allmulticast mode
[  712.272779][ T9099] bridge_slave_1: entered promiscuous mode
[  713.072801][ T9102] team0: Port device team_slave_0 added
[  713.109520][ T9102] team0: Port device team_slave_1 added
[  713.139798][ T9099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  713.562777][ T5785] Bluetooth: hci3: command tx timeout
[  713.690385][ T9099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  713.716717][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_0
[  713.724046][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  713.755869][ T9102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  714.263738][ T9099] team0: Port device team_slave_0 added
[  714.294235][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_1
[  714.301391][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  714.330282][ T9102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  714.593329][ T9099] team0: Port device team_slave_1 added
[  715.233486][ T9099] batman_adv: batadv0: Adding interface: batadv_slave_0
[  715.240576][ T9099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  715.267128][ T9099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  715.338172][ T3674] bridge_slave_1: left allmulticast mode
[  715.344211][ T3674] bridge_slave_1: left promiscuous mode
[  715.350431][ T3674] bridge0: port 2(bridge_slave_1) entered disabled state
[  715.522008][ T3674] bridge_slave_0: left allmulticast mode
[  715.528068][ T3674] bridge_slave_0: left promiscuous mode
[  715.534450][ T3674] bridge0: port 1(bridge_slave_0) entered disabled state
[  716.810650][ T5785] Bluetooth: hci3: command tx timeout
[  717.533830][ T3674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  717.631426][ T3674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  717.717334][ T3674] bond0 (unregistering): Released all slaves
[  718.006914][ T9099] batman_adv: batadv0: Adding interface: batadv_slave_1
[  718.014203][ T9099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  718.046018][ T9099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  718.264549][ T9181] chnl_net:caif_netlink_parms(): no params data found
[  718.394339][ T3674] hsr_slave_0: left promiscuous mode
[  718.526061][ T3674] hsr_slave_1: left promiscuous mode
[  718.583390][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_0
[  718.614782][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_1
[  719.749877][ T9217] [U] vÔ3
[  720.720265][ T5785] Bluetooth: hci3: command tx timeout
[  721.551646][ T3674] team0 (unregistering): Port device team_slave_1 removed
[  721.662040][ T3674] team0 (unregistering): Port device team_slave_0 removed
[  721.913728][ T9102] hsr_slave_0: entered promiscuous mode
[  721.953927][ T9102] hsr_slave_1: entered promiscuous mode
[  722.015294][ T9102] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  722.023266][ T9102] Cannot create hsr debugfs directory
[  722.257958][ T8207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  722.271491][ T8207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  722.812101][ T5785] Bluetooth: hci3: command tx timeout
[  723.060922][ T9099] hsr_slave_0: entered promiscuous mode
[  723.110824][ T9099] hsr_slave_1: entered promiscuous mode
[  723.174498][ T9099] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  723.182550][ T9099] Cannot create hsr debugfs directory
[  723.217545][ T8207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  723.225779][ T8207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.776224][ T9102] bond0: (slave netdevsim3): Releasing backup interface
[  724.834585][ T9102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.726312][ T9241] bridge1: entered promiscuous mode
[  727.732095][ T9241] bridge1: entered allmulticast mode
[  727.806954][ T9241] team0: Port device bridge1 added
[  729.948843][ T9102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.340632][ T9181] bridge0: port 1(bridge_slave_0) entered blocking state
[  730.348760][ T9181] bridge0: port 1(bridge_slave_0) entered disabled state
[  730.356714][ T9181] bridge_slave_0: entered allmulticast mode
[  730.365131][ T9181] bridge_slave_0: entered promiscuous mode
[  730.438852][ T9102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.711288][ T9102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.758201][ T5837] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  730.856677][ T9181] bridge0: port 2(bridge_slave_1) entered blocking state
[  730.864669][ T9181] bridge0: port 2(bridge_slave_1) entered disabled state
[  730.872662][ T9181] bridge_slave_1: entered allmulticast mode
[  730.880917][ T9181] bridge_slave_1: entered promiscuous mode
[  730.973271][ T5837] usb 1-1: Using ep0 maxpacket: 8
[  731.076827][ T5837] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  731.086330][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.094682][ T5837] usb 1-1: Product: syz
[  731.098979][ T5837] usb 1-1: Manufacturer: syz
[  731.103851][ T5837] usb 1-1: SerialNumber: syz
[  731.265512][ T9099] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  731.374633][ T5837] usb 1-1: config 0 descriptor??
[  731.430540][ T5837] gspca_main: se401-2.14.0 probing 047d:5003
[  731.594797][ T9099] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.261255][ T9181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  732.309443][ T9099] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.431880][ T9181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  732.495529][ T5837] gspca_se401: read req failed req 0x06 error -19
[  732.557554][ T9099] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.599404][ T5837] usb 1-1: USB disconnect, device number 3
[  738.886040][ T9181] team0: Port device team_slave_0 added
[  739.110608][ T9181] team0: Port device team_slave_1 added
[  739.587149][ T9181] batman_adv: batadv0: Adding interface: batadv_slave_0
[  739.594987][ T9181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  739.621271][ T9181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  739.806838][ T9099] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  739.973730][ T9099] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  740.124818][ T9181] batman_adv: batadv0: Adding interface: batadv_slave_1
[  740.132097][ T9181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  740.169986][ T9181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  740.184728][ T9102] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  740.213442][ T9102] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  740.290261][ T9102] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  740.603193][ T9283] =====================================================
[  740.610341][ T9283] BUG: KMSAN: uninit-value in ax25cmp+0x3a5/0x470
[  740.617083][ T9283]  ax25cmp+0x3a5/0x470
[  740.621273][ T9283]  nr_dev_get+0x20e/0x450
[  740.625792][ T9283]  nr_route_frame+0x1a2/0xfe0
[  740.630597][ T9283]  nr_xmit+0x5a/0x1c0
[  740.634722][ T9283]  dev_hard_start_xmit+0x247/0xa20
[  740.639928][ T9283]  __dev_queue_xmit+0x366a/0x57d0
[  740.645151][ T9283]  raw_sendmsg+0x6b5/0xdf0
[  740.649659][ T9283]  ieee802154_sock_sendmsg+0x96/0xd0
[  740.655175][ T9283]  __sock_sendmsg+0x30f/0x380
[  740.659980][ T9283]  ____sys_sendmsg+0x903/0xb60
[  740.665004][ T9283]  ___sys_sendmsg+0x28d/0x3c0
[  740.669786][ T9283]  __sys_sendmmsg+0x2ff/0x880
[  740.674670][ T9283]  __x64_sys_sendmmsg+0xbc/0x120
[  740.679728][ T9283]  x64_sys_call+0x33c2/0x3c30
[  740.684629][ T9283]  do_syscall_64+0xcd/0x1e0
[  740.689216][ T9283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.695326][ T9283] 
[  740.697694][ T9283] Uninit was created at:
[  740.702090][ T9283]  kmem_cache_alloc_node_noprof+0x907/0xe00
[  740.708238][ T9283]  kmalloc_reserve+0x13d/0x4a0
[  740.713187][ T9283]  __alloc_skb+0x363/0x7b0
[  740.717684][ T9283]  alloc_skb_with_frags+0xc8/0xd00
[  740.722974][ T9283]  sock_alloc_send_pskb+0xa81/0xbf0
[  740.728279][ T9283]  raw_sendmsg+0x367/0xdf0
[  740.732885][ T9283]  ieee802154_sock_sendmsg+0x96/0xd0
[  740.738282][ T9283]  __sock_sendmsg+0x30f/0x380
[  740.743163][ T9283]  ____sys_sendmsg+0x903/0xb60
[  740.748021][ T9283]  ___sys_sendmsg+0x28d/0x3c0
[  740.752891][ T9283]  __sys_sendmmsg+0x2ff/0x880
[  740.757670][ T9283]  __x64_sys_sendmmsg+0xbc/0x120
[  740.762799][ T9283]  x64_sys_call+0x33c2/0x3c30
[  740.767627][ T9283]  do_syscall_64+0xcd/0x1e0
[  740.772378][ T9283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.778395][ T9283] 
[  740.780787][ T9283] CPU: 0 UID: 0 PID: 9283 Comm: syz.0.739 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0
[  740.791588][ T9283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  740.801795][ T9283] =====================================================
[  740.808855][ T9283] Disabling lock debugging due to kernel taint
[  740.815157][ T9283] Kernel panic - not syncing: kmsan.panic set ...
[  740.821648][ T9283] CPU: 0 UID: 0 PID: 9283 Comm: syz.0.739 Tainted: G    B              6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0
[  740.833834][ T9283] Tainted: [B]=BAD_PAGE
[  740.838041][ T9283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  740.848193][ T9283] Call Trace:
[  740.851536][ T9283]  <TASK>
[  740.854532][ T9283]  dump_stack_lvl+0x216/0x2d0
[  740.859336][ T9283]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  740.865254][ T9283]  dump_stack+0x1e/0x24
[  740.869548][ T9283]  panic+0x4e2/0xcf0
[  740.873620][ T9283]  ? kmsan_get_metadata+0x71/0x1c0
[  740.878885][ T9283]  kmsan_report+0x2c7/0x2d0
[  740.883491][ T9283]  ? __msan_warning+0x95/0x120
[  740.888374][ T9283]  ? ax25cmp+0x3a5/0x470
[  740.892726][ T9283]  ? nr_dev_get+0x20e/0x450
[  740.897322][ T9283]  ? nr_route_frame+0x1a2/0xfe0
[  740.902359][ T9283]  ? nr_xmit+0x5a/0x1c0
[  740.906595][ T9283]  ? dev_hard_start_xmit+0x247/0xa20
[  740.911983][ T9283]  ? __dev_queue_xmit+0x366a/0x57d0
[  740.917280][ T9283]  ? raw_sendmsg+0x6b5/0xdf0
[  740.921967][ T9283]  ? ieee802154_sock_sendmsg+0x96/0xd0
[  740.927532][ T9283]  ? __sock_sendmsg+0x30f/0x380
[  740.932519][ T9283]  ? ____sys_sendmsg+0x903/0xb60
[  740.937558][ T9283]  ? ___sys_sendmsg+0x28d/0x3c0
[  740.942509][ T9283]  ? __sys_sendmmsg+0x2ff/0x880
[  740.947457][ T9283]  ? __x64_sys_sendmmsg+0xbc/0x120
[  740.952669][ T9283]  ? x64_sys_call+0x33c2/0x3c30
[  740.957642][ T9283]  ? do_syscall_64+0xcd/0x1e0
[  740.962405][ T9283]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.968699][ T9283]  ? kmsan_internal_poison_memory+0x7d/0x90
[  740.974733][ T9283]  ? kmsan_get_metadata+0x13e/0x1c0
[  740.980037][ T9283]  ? kmsan_internal_poison_memory+0x49/0x90
[  740.986054][ T9283]  ? kmsan_slab_alloc+0xdf/0x160
[  740.991114][ T9283]  ? kmem_cache_alloc_node_noprof+0x907/0xe00
[  740.997307][ T9283]  ? kmalloc_reserve+0x13d/0x4a0
[  741.002337][ T9283]  ? __alloc_skb+0x363/0x7b0
[  741.007010][ T9283]  ? alloc_skb_with_frags+0xc8/0xd00
[  741.012393][ T9283]  ? sock_alloc_send_pskb+0xa81/0xbf0
[  741.017878][ T9283]  ? raw_sendmsg+0x367/0xdf0
[  741.022566][ T9283]  ? ieee802154_sock_sendmsg+0x96/0xd0
[  741.028141][ T9283]  ? __sock_sendmsg+0x30f/0x380
[  741.033109][ T9283]  ? ____sys_sendmsg+0x903/0xb60
[  741.038163][ T9283]  ? ___sys_sendmsg+0x28d/0x3c0
[  741.043144][ T9283]  ? __sys_sendmmsg+0x2ff/0x880
[  741.048116][ T9283]  ? __x64_sys_sendmmsg+0xbc/0x120
[  741.053335][ T9283]  ? x64_sys_call+0x33c2/0x3c30
[  741.058327][ T9283]  ? do_syscall_64+0xcd/0x1e0
[  741.063115][ T9283]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.069321][ T9283]  ? __alloc_skb+0x1e9/0x7b0
[  741.074040][ T9283]  ? kmsan_get_metadata+0x13e/0x1c0
[  741.079424][ T9283]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  741.085340][ T9283]  ? kmsan_get_metadata+0x13e/0x1c0
[  741.090633][ T9283]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  741.096544][ T9283]  ? kmsan_get_metadata+0x13e/0x1c0
[  741.101854][ T9283]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  741.107768][ T9283]  __msan_warning+0x95/0x120
[  741.112576][ T9283]  ax25cmp+0x3a5/0x470
[  741.116763][ T9283]  nr_dev_get+0x20e/0x450
[  741.121201][ T9283]  nr_route_frame+0x1a2/0xfe0
[  741.125997][ T9283]  ? validate_xmit_xfrm+0x8b/0x1bc0
[  741.131317][ T9283]  ? kmsan_get_metadata+0x13e/0x1c0
[  741.136617][ T9283]  nr_xmit+0x5a/0x1c0
[  741.140684][ T9283]  ? __pfx_nr_xmit+0x10/0x10
[  741.145365][ T9283]  dev_hard_start_xmit+0x247/0xa20
[  741.150585][ T9283]  __dev_queue_xmit+0x366a/0x57d0
[  741.155703][ T9283]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  741.161614][ T9283]  ? _copy_from_iter+0x9ae/0x2b00
[  741.166763][ T9283]  ? __dev_queue_xmit+0x3d6/0x57d0
[  741.172445][ T9283]  raw_sendmsg+0x6b5/0xdf0
[  741.177005][ T9283]  ? __pfx_raw_sendmsg+0x10/0x10
[  741.182119][ T9283]  ieee802154_sock_sendmsg+0x96/0xd0
[  741.187563][ T9283]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  741.193665][ T9283]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  741.199807][ T9283]  __sock_sendmsg+0x30f/0x380
[  741.204635][ T9283]  ____sys_sendmsg+0x903/0xb60
[  741.209514][ T9283]  ___sys_sendmsg+0x28d/0x3c0
[  741.214300][ T9283]  ? __rcu_read_unlock+0x7b/0xe0
[  741.219356][ T9283]  ? __fget_files+0x42b/0x500
[  741.224136][ T9283]  ? kmsan_get_metadata+0x13e/0x1c0
[  741.229430][ T9283]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  741.235342][ T9283]  __sys_sendmmsg+0x2ff/0x880
[  741.240130][ T9283]  ? do_futex+0x341/0x4a0
[  741.244553][ T9283]  ? kmsan_get_metadata+0x13e/0x1c0
[  741.249872][ T9283]  __x64_sys_sendmmsg+0xbc/0x120
[  741.254921][ T9283]  x64_sys_call+0x33c2/0x3c30
[  741.259734][ T9283]  do_syscall_64+0xcd/0x1e0
[  741.264333][ T9283]  ? clear_bhb_loop+0x25/0x80
[  741.269415][ T9283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.275435][ T9283] RIP: 0033:0x7f1c19585d29
[  741.279950][ T9283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  741.299750][ T9283] RSP: 002b:00007f1c1a405038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  741.308287][ T9283] RAX: ffffffffffffffda RBX: 00007f1c19775fa0 RCX: 00007f1c19585d29
[  741.316340][ T9283] RDX: 0000000000000001 RSI: 0000000020001100 RDI: 0000000000000004
[  741.324400][ T9283] RBP: 00007f1c19601b08 R08: 0000000000000000 R09: 0000000000000000
[  741.332447][ T9283] R10: 0000000000064850 R11: 0000000000000246 R12: 0000000000000000
[  741.340490][ T9283] R13: 0000000000000000 R14: 00007f1c19775fa0 R15: 00007fff00337418
[  741.348556][ T9283]  </TASK>
[  741.351861][ T9283] Kernel Offset: disabled
[  741.356246][ T9283] Rebooting in 86400 seconds..