last executing test programs:

11m49.271446826s ago: executing program 32 (id=87):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x10000, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11m12.793824794s ago: executing program 33 (id=240):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x7}}, 0x24, 0x2)

7m48.419304464s ago: executing program 7 (id=1096):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000)
bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, 0xffffffffffffffff, 0x0)

7m38.991172954s ago: executing program 7 (id=1114):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x14000)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)

7m36.855904048s ago: executing program 7 (id=1119):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff)
symlink(0x0, &(0x7f0000001100)='control/class/fs/h\x00')
symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', 0x0)
symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00')
symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00')
symlink(&(0x7f0000001a00)='streaming/header/h\x00', 0x0)
fchdir(r0)
symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000001f00), 0x0)

7m34.530714838s ago: executing program 7 (id=1126):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x20000000000000}}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
getitimer(0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/protocols\x00')
lseek(r3, 0x2004, 0x0)

7m31.915718362s ago: executing program 7 (id=1130):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7m30.230696258s ago: executing program 7 (id=1133):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = gettid()
migrate_pages(r1, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50)
socket$can_bcm(0x1d, 0x2, 0x2)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6(0xa, 0x802, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
shutdown(r4, 0x0)
recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888)

7m20.864334453s ago: executing program 3 (id=1160):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c)
sendto$inet6(r3, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r3, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140), 0x8)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

7m17.234699473s ago: executing program 3 (id=1166):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0xa, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000080)={'virt_wifi0\x00', @random='\a\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044090)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_open_dev$tty20(0xc, 0x4, 0x1)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000200)={0x1, @vbi={0x0, 0x0, 0x32315842}})

7m15.475722489s ago: executing program 3 (id=1171):
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000003c0)='./bus\x00')
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)

7m13.039679016s ago: executing program 34 (id=1133):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = gettid()
migrate_pages(r1, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50)
socket$can_bcm(0x1d, 0x2, 0x2)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6(0xa, 0x802, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
shutdown(r4, 0x0)
recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888)

7m12.99181826s ago: executing program 3 (id=1185):
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0)
syz_open_procfs(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

7m9.23967566s ago: executing program 3 (id=1182):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x34, 0x0, 0x0})

7m7.117371444s ago: executing program 3 (id=1187):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x66, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x33}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0)

6m51.776521583s ago: executing program 35 (id=1187):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x66, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x33}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0)

4m40.938805028s ago: executing program 8 (id=1173):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0xa)
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0)
ftruncate(r3, 0x2007ffb)
close(r3)
r4 = open(&(0x7f0000000280)='.\x00', 0x80000, 0x140)
fcntl$notify(r4, 0x402, 0x8000003d)
fcntl$setsig(r4, 0xa, 0x1d)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)

4m36.860595183s ago: executing program 8 (id=1393):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

4m35.517234559s ago: executing program 8 (id=1395):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ptrace(0x4208, r0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101)
sendfile(0xffffffffffffffff, r2, &(0x7f00000000c0), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendto$unix(r6, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0)
recvfrom$unix(r7, 0x0, 0x0, 0x10102, 0x0, 0x0)

4m31.509729212s ago: executing program 8 (id=1399):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={<r2=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffbff, 0x4, 0x30c7, 0x5, 0xfffffffe, 0x8], 0x3, &(0x7f0000000000)=[{}, {}, {}], 0x0, [{}, {}, {}]}, 0x80)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, 0x0, 0x8814)

4m14.435226907s ago: executing program 36 (id=1399):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={<r2=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffbff, 0x4, 0x30c7, 0x5, 0xfffffffe, 0x8], 0x3, &(0x7f0000000000)=[{}, {}, {}], 0x0, [{}, {}, {}]}, 0x80)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, 0x0, 0x8814)

3m19.817212733s ago: executing program 0 (id=1516):
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)

3m17.807343158s ago: executing program 0 (id=1522):
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0)
socket(0x1e, 0x4, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
listen(0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x40000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="bdc4b6f4fc493c76cbd2c088a983c07e709c4e8b46ab81cff190add0ab34a738aa3ec8", @ANYRES64=0x0], 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0xb, 0x40, 0x0, 0x0)

3m16.484314991s ago: executing program 0 (id=1524):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
pipe2(&(0x7f0000000100), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94)

3m15.173272153s ago: executing program 0 (id=1525):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(0x0, &(0x7f0000000300)='./file0/file0\x00')
symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
mount$nfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8040)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m13.349695032s ago: executing program 0 (id=1530):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
setrlimit(0x0, &(0x7f0000000080)={0x9a4, 0x4})
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)

3m11.562864598s ago: executing program 0 (id=1533):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local})
connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)

2m54.54209362s ago: executing program 37 (id=1533):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local})
connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)

1m50.367724503s ago: executing program 6 (id=1653):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(0x0, &(0x7f0000000300)='./file0/file0\x00')
symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {'GPL\x00'}, {'\\@'}]})
r3 = accept4(r2, 0x0, 0x0, 0x80000)
sendmmsg$alg(r3, 0x0, 0x0, 0x8040)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1m47.237495227s ago: executing program 6 (id=1656):
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)

1m43.613819323s ago: executing program 6 (id=1661):
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f00000000c0)='1\x00', 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='1', 0x1)

1m40.436799723s ago: executing program 6 (id=1666):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0xee01, 0x0)

1m40.369188154s ago: executing program 1 (id=1667):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
set_mempolicy(0x8000, 0x0, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000d58400000200"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, r1, 0x4}, 0x38)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000280)=@sco={0x1f, @none}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000680)=""/54, 0x36}], 0x1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r4)
r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
close(r5)
socket$nl_route(0x10, 0x3, 0x0)
semctl$SEM_STAT(0x0, 0x4, 0x12, 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r2, @ANYRES16=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES64, @ANYBLOB="5aed7374a67ddd3594e9e15fd9927ff8e7bf548ed798ce346f626298625c3d3ec40272a6449dffb171c942146f3881b67b6dfe18cf5ceceb374787a8266b13111d1fb7f5e97d62c9671be9dccfafc1fa175053a18724cdba3727a2ddad0f447eb8db45038d1e16f4efc4289ffa7e3ba3a0481d944c87b5e29c8be8e884acb2aaf21d3466459c2e70a6133ebfe64829bee11f10d6b8eb11f8e26a4772aeb4558e978fea461e482e801627aeb435944f0f2d6938fbe7f33cd8253ab3601ecbd75e2c0f3f52e6a1e4f69f04d21656", @ANYRES32, @ANYRES8, @ANYRES8], 0x1, 0x1ef, &(0x7f0000000300)="$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")

1m39.867904576s ago: executing program 6 (id=1670):
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x111, 0x4b4, 0x168, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xde}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x4, 0x9f, 0x6, 0x6, 0x1e0c, 0x800}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00'})
openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0)
r3 = syz_open_dev$admmidi(0x0, 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407})
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
read$midi(r3, 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={0x0}, 0x18)
ioctl$SNDCTL_SEQ_RESET(r5, 0x5100)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x4180, 0x0)
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0xff}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x4000080)

1m38.283290334s ago: executing program 6 (id=1673):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x4, 0x80000000, 0x4, 0x34325258, [0x88000], [0xaf09, 0x7], 0x1}})
ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1)
listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x30403, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r3, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"})
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001)
r4 = msgget$private(0x0, 0x200)
msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000bc0)=""/4096)
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xdaf}}, './file0\x00'})
openat$sequencer2(0xffffff9c, 0x0, 0x30b001, 0x0)
syz_emit_ethernet(0x1de, &(0x7f0000001180)=ANY=[@ANYBLOB], 0x0)

1m37.766926046s ago: executing program 1 (id=1677):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r1, 0x1}, 0x20)

1m36.330246542s ago: executing program 1 (id=1681):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x19)
r0 = io_uring_setup(0x63c8, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x2, 0x35d})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
ioprio_get$uid(0x3, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x3, "6ada854c675580d6ca9fb4962d5e00ed4353cbeb41cff9ab0e1370606f04b4c5"})
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008880)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x200008, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

1m33.921042033s ago: executing program 1 (id=1685):
socket$tipc(0x1e, 0x5, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r0, &(0x7f0000006180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)

1m32.450834241s ago: executing program 1 (id=1686):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
fsopen(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100)
fcntl$setlease(r6, 0x400, 0x0)
close(0x3)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x4000080)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
rt_tgsigqueueinfo(r0, r2, 0x28, 0x0)

1m30.30138899s ago: executing program 1 (id=1688):
shmat(0x0, &(0x7f000051b000/0x3000)=nil, 0x2000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
epoll_create1(0x80000)
socket$netlink(0x10, 0x3, 0x8000000004)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50)
socket$inet6(0xa, 0x80002, 0x0)
syz_open_dev$video(&(0x7f0000000440), 0xffe, 0x2400c3)
socket(0x400000000010, 0x3, 0x0)
io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94})
pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102397, 0x18ffd, 0x1000000000)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)

1m21.648693024s ago: executing program 38 (id=1673):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x4, 0x80000000, 0x4, 0x34325258, [0x88000], [0xaf09, 0x7], 0x1}})
ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1)
listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x30403, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r3, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"})
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001)
r4 = msgget$private(0x0, 0x200)
msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000bc0)=""/4096)
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xdaf}}, './file0\x00'})
openat$sequencer2(0xffffff9c, 0x0, 0x30b001, 0x0)
syz_emit_ethernet(0x1de, &(0x7f0000001180)=ANY=[@ANYBLOB], 0x0)

1m13.795147211s ago: executing program 39 (id=1688):
shmat(0x0, &(0x7f000051b000/0x3000)=nil, 0x2000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
epoll_create1(0x80000)
socket$netlink(0x10, 0x3, 0x8000000004)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50)
socket$inet6(0xa, 0x80002, 0x0)
syz_open_dev$video(&(0x7f0000000440), 0xffe, 0x2400c3)
socket(0x400000000010, 0x3, 0x0)
io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94})
pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102397, 0x18ffd, 0x1000000000)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)

20.226420219s ago: executing program 2 (id=1786):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20004080)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0)
openat$audio(0xffffff9c, 0x0, 0x48100, 0x0)
r2 = socket$kcm(0x21, 0x2, 0xa)
modify_ldt$write(0x1, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x78, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000001001000001000000d48aa2df42ada537ce4c5fdc00000000000000"], 0x10}, 0xc010)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x8fb8}]}, 0x10)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6880}, 0x850)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x1, 0x246, 0x7, 0x5, 0xfffffffffffffff8, 0x1, 0x9, 0xf6b})
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
r4 = openat(0xffffffffffffff9c, 0x0, 0x129080, 0x10)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
fchown(r4, r6, r7)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

17.326698918s ago: executing program 2 (id=1792):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000240)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='\x85\xb1\xccBpy\xc1s\xf9\\\x98\xce\xa4g\xd2\xd4\xdei\xa1\x8e\x9c\xe4\x82\x05\xf3u\fe\x87\xa5+8u@6\xefq\xa1\x9a\xfb\x1f$\x19\xd3\xa5r\xcc\x84\xdc\xcfJ\t\x04z\xc9\x89D\xadc\x11@\xdc\xb51\x8a\xc9_\xc3|\xb2^g\xe5Gt\x1e\xc6\x81\xb4\xdd\xd7V\"\x92\xbci\x978\xfce\b\xcc\xf7\'&\xe0\xa2\xb6\xb3\xfc\xd5[\xd9\xf6\xb7\xa8\xa7\xaf\\\xc1\x89]K\x9c\xc9IM\x02tM\x19\xdb\xf2U%L\x11\fx\xd2/*\xa9\xbd2\xd6\x9c+')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020)
r4 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000400), 0x0, 0x240, &(0x7f0000000940)="$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")
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r5, 0x5457, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101041, 0x66)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5, 0x800}, 0x48)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101042, 0x6c)
pwrite64(r7, &(0x7f0000000000)='2', 0x1, 0x4fed0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
io_setup(0xb, &(0x7f0000000280))
eventfd2(0x0, 0x0)

14.543088921s ago: executing program 5 (id=1794):
r0 = socket$kcm(0xa, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
prctl$PR_SET_VMA(0xd, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000480))
close(0xffffffffffffffff)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
socket$key(0xf, 0x3, 0x2)
sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x5, 0x1531, &(0x7f0000002f80)="$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")

14.536070073s ago: executing program 4 (id=1796):
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f00000000c0)='1\x00', 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='1', 0x1)

11.635021019s ago: executing program 2 (id=1797):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x11)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'})
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r1 = gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x55)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94)
r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140), 0x0, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})
r8 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0)
write(r8, &(0x7f0000000040)="3c5c613ecd45036a2762bb626c65640a", 0x10)

11.634587808s ago: executing program 9 (id=1798):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
socket(0x10, 0x80002, 0x4)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c001}, 0x0)
r5 = fcntl$dupfd(r3, 0x406, r3)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r7 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10)
r8 = socket(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r7, &(0x7f0000003240), 0x4000000000000e4, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)

11.628763366s ago: executing program 4 (id=1799):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_advertising_info={{}, {0x1, [{0x1, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, "", 0x4}]}}}}, 0xf)

11.286257183s ago: executing program 5 (id=1800):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x2})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="f6", 0x1}], 0x1}}, {{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x2bed4a8cad9601b9, @my=0x1}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}], 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x30fa, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0xa, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f6, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x8, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x9, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0xffffff7f, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008400"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x21800, r5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r6, 0x4b72, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000"/52], 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00')
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, 0xfe09, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x4f, 0x2, 0x0)
preadv(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)

10.378468312s ago: executing program 4 (id=1801):
mremap(&(0x7f00007e1000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

9.882148255s ago: executing program 4 (id=1802):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a060e04"], 0xd)

8.522650998s ago: executing program 4 (id=1803):
syz_usb_connect(0x2, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="120101027b008810101411907ca2010203010902290001a100209b0904c506000206"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})

8.516407871s ago: executing program 2 (id=1804):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42}, 0x28)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000033300), 0x300, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000033b00)={0x1})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x40}}, 0x4000000)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
socket$nl_route(0x10, 0x3, 0x0)

8.271168948s ago: executing program 9 (id=1805):
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @loopback}, 0x1c)
connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)

8.149610721s ago: executing program 5 (id=1806):
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0x9, {0xffffffffffffffff}, {<r0=>0xee00}, 0x7f, 0x518})
setresuid(r0, r0, r0)
fanotify_init(0x40, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000400000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000300)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0101, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0xe1e, 0x0, 0x82}], 0x1})
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)

7.082428034s ago: executing program 4 (id=1807):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x10001}, 0x8)
r2 = socket$key(0xf, 0x3, 0x2)
ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000640)={{'\x00', 0x3}, {0xc2af}, 0x100, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000003c0)="e7a54c37d015b26ae2d22e0a0741ac89491acf585fecd6a519d6bf32b524a881036cc811e29e2dce24318bff07745a612ee683bc52d07f29833eb8aec7a4ff6c43f2bcdc960c074dbd9a6261977ac5a9e8c8e8e15043106432fee5bac733c99a8944684c0a34ec767a9a330420e3cb874f80fd15c6ecd03479de65ff29061cca05f9b3a0095156d5c3c5ef3166c544101cb3979aa3f829e65c06517d30b506440c6de5c1631e712f0d8129907f13128b7db136fd7c312e29e5699966d2d624ae1c4778ce6cbe42", 0xc7, 0x0, &(0x7f00000004c0)={0x2, 0x57, {0x1, 0xc, 0x32, "fd072a2074d4188a939762ad877a53724beabca94ea078376d7336bbe19d5e1601b3d0661e22e8de7a2bdb18c507c231cb1a", 0x18, "122f4f9c57d083fdd3be119f97388e714a3eec38b11b1830"}, 0xe9, "bee459a3c2d6f7d8d07dd3dfab48ac202fc23ac068067609687eb3df02e9e6b1591f876c0270a3dc58390da814349c06d4ef1cbb19ff0ed178c89967e3438bb1ba6f6d337acf9f4380f01cdf212dd4241fd27cf9da510017ab6c97397be631be3445947af5d8cb339b47bb3d036664aa20096cbff5fda8040413606942e0855eeaed7433ca7dc3b366422f5194e189bc7d93550edd2c486612e246fcac863c8a80e30f47652e4f5e0b025791790cd0c088de13b01bb7f5dba962aeb739bb4140ca132c8b46c1feec6583712b107d803310f852657072d3513469b0e2884d7d6ac364f078127baf8272"}, 0x14c})
sendmsg$key(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x810)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c90000"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
unshare(0x2a020400)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x8044)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000140))
close(0x3)
socket(0x26, 0x80000, 0xfffffff7)

5.868099761s ago: executing program 9 (id=1808):
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)

4.371760824s ago: executing program 9 (id=1809):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timer_create(0x0, 0x0, 0x0)
syz_io_uring_setup(0x31c5, 0x0, &(0x7f00000001c0), &(0x7f0000000040), &(0x7f0000000000))
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80)
r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
timer_create(0x0, 0x0, &(0x7f00000004c0))
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r4, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={r5, 0x100, 0x4, 0x0, 0x3, [<r6=>0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x9, 0xfffffffc], [0x1, 0x0, 0x7]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={r6, 0x0, <r7=>0xffffffffffffffff})
mmap(&(0x7f00009a9000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r7, 0x2000)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="97fa9587e01e", @broadcast, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x20, 0x28, 0x66, 0x0, 0x0, 0x21, 0x0, @private=0xa010101, @local, {[@timestamp_prespec={0x44, 0x4, 0xdc, 0x3, 0x2}]}}, {{0x4e24, 0x4e24, 0x4, 0x1, 0xb, 0x0, 0x0, 0x5, 0x4, "5105a2", 0x8, 'iH9'}}}}}}, 0x0)

4.129834176s ago: executing program 5 (id=1810):
r0 = socket$kcm(0xa, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
prctl$PR_SET_VMA(0xd, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000480))
close(0xffffffffffffffff)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
socket$key(0xf, 0x3, 0x2)
sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x5, 0x1531, &(0x7f0000002f80)="$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")

3.948778213s ago: executing program 2 (id=1811):
socket$tipc(0x1e, 0x5, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r0, &(0x7f0000006180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

2.830761997s ago: executing program 9 (id=1812):
fsopen(0x0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x25ca03)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x88282, 0x0)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0x1d, r1, 0x0, 0x0)

1.792538764s ago: executing program 5 (id=1813):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_emit_vhci(0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x4044880, 0x0, 0x0)

1.097712106s ago: executing program 9 (id=1814):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet(0x2, 0x1, 0x6)
prctl$PR_SET_SECUREBITS(0x1c, 0x4)
setresuid(0x0, 0xee00, 0xee01)
acct(0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1}, 0xc, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000025300)=""/102392, 0x18ff8)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}})
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0)
shutdown(r0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0xd9)

1.096108852s ago: executing program 2 (id=1824):
socket$tipc(0x1e, 0x5, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r0, &(0x7f0000006180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
socket$inet_udp(0x2, 0x2, 0x0)
setfsgid(0xee00)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

0s ago: executing program 5 (id=1815):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff)
rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00')
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0x3}}, 0xe4)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

kernel console output (not intermixed with test programs):

 0 to HW filter on device bond1
[  229.096471][ T7919] bridge1: entered allmulticast mode
[  229.132496][ T7922] fuse: fd is not a fuse device
[  229.167709][ T7919] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  229.240565][ T7920] bond1: entered promiscuous mode
[  229.251970][ T7920] bridge1: entered promiscuous mode
[  229.266149][ T7920] bond1: entered allmulticast mode
[  231.027288][ T7945] netlink: 52 bytes leftover after parsing attributes in process `syz.6.569'.
[  231.069358][ T7945] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.076766][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.125465][ T7946] netlink: 76 bytes leftover after parsing attributes in process `syz.6.569'.
[  231.173686][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.180954][ T7946] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.188538][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.195735][ T7946] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.271832][ T7946] netlink: 52 bytes leftover after parsing attributes in process `syz.6.569'.
[  231.303507][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.310819][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.546241][ T7954] tipc: Started in network mode
[  231.575655][ T7954] tipc: Node identity 4, cluster identity 4711
[  231.601838][ T7954] tipc: Node number set to 4
[  231.872796][ T7964] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=
[  233.088129][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'.
[  234.714757][ T7993] netlink: 48 bytes leftover after parsing attributes in process `syz.6.586'.
[  235.071460][ T5743] libceph: connect (1)[c::]:6789 error -101
[  235.118247][ T5743] libceph: mon0 (1)[c::]:6789 connect error
[  235.138184][ T8004] ceph: No mds server is up or the cluster is laggy
[  235.146232][ T8014] tipc: Started in network mode
[  235.164609][ T8014] tipc: Node identity 4, cluster identity 4711
[  235.176207][ T5743] libceph: connect (1)[c::]:6789 error -101
[  235.197110][ T5743] libceph: mon0 (1)[c::]:6789 connect error
[  235.211710][ T8014] tipc: Node number set to 4
[  235.490540][ T5743] libceph: connect (1)[c::]:6789 error -101
[  235.518072][ T5743] libceph: mon0 (1)[c::]:6789 connect error
[  239.074793][   T30] audit: type=1804 audit(1785518639.261:54): pid=8060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.608" name="bus" dev="ramfs" ino=17866 res=1 errno=0
[  239.185256][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.6.609'.
[  239.194762][   T30] audit: type=1804 audit(1785518639.321:55): pid=8060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.608" name="bus" dev="ramfs" ino=17866 res=1 errno=0
[  239.330937][ T8078] netlink: 'syz.6.609': attribute type 10 has an invalid length.
[  239.386177][ T8078] netlink: 40 bytes leftover after parsing attributes in process `syz.6.609'.
[  239.480210][ T8076] bridge1: port 1(dummy0) entered blocking state
[  239.500215][ T8076] bridge1: port 1(dummy0) entered disabled state
[  239.539222][ T8076] dummy0: entered allmulticast mode
[  239.551202][ T8076] dummy0: entered promiscuous mode
[  239.586985][ T8078] bridge1: port 1(dummy0) entered blocking state
[  239.593531][ T8078] bridge1: port 1(dummy0) entered forwarding state
[  239.656001][ T8078] dummy0: left allmulticast mode
[  239.673771][ T8078] bridge1: port 1(dummy0) entered disabled state
[  241.847758][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'.
[  245.455219][ T8156] fuse: fd is not a fuse device
[  246.852693][ T8184] netlink: 'syz.1.647': attribute type 1 has an invalid length.
[  247.116386][ T8184] 8021q: adding VLAN 0 to HW filter on device bond1
[  248.684959][ T8191] bond1: (slave geneve4): making interface the new active one
[  248.951958][ T8191] bond1: (slave geneve4): Enslaving as an active interface with an up link
[  251.999885][ T5630] Bluetooth: hci1: command 0x0406 tx timeout
[  252.510004][ T8255] fuse: fd is not a fuse device
[  255.353488][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  255.360869][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  255.644583][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.674'.
[  255.653924][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.674'.
[  255.663012][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.6.674'.
[  255.687098][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.7.676'.
[  255.716422][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.674'.
[  255.814627][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.674'.
[  256.057188][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.6.674'.
[  259.250142][ T8338] fuse: fd is not a fuse device
[  259.920777][ T8343] geneve2: left promiscuous mode
[  259.942798][ T8343] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[  260.011910][ T8346] bridge0: port 3(netdevsim0) entered blocking state
[  260.048330][ T8346] bridge0: port 3(netdevsim0) entered disabled state
[  260.222256][ T8346] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  260.374159][ T8346] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  261.181015][ T8359] overlayfs: failed to clone upperpath
[  264.211977][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.722'.
[  264.252188][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.6.722'.
[  264.291580][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.722'.
[  266.164877][ T8453] netlink: 'syz.7.730': attribute type 2 has an invalid length.
[  268.676715][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.733'.
[  268.970829][ T8477] netlink: 'syz.3.733': attribute type 10 has an invalid length.
[  269.859459][ T8475] bridge1: port 1(dummy0) entered blocking state
[  269.866867][ T8477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.733'.
[  269.915795][ T8475] bridge1: port 1(dummy0) entered disabled state
[  269.948160][ T8485] fuse: fd is not a fuse device
[  269.955792][ T8475] dummy0: entered allmulticast mode
[  269.971794][ T8489] netlink: 64 bytes leftover after parsing attributes in process `syz.4.737'.
[  269.992240][ T8475] dummy0: entered promiscuous mode
[  270.044602][ T8477] bridge1: port 1(dummy0) entered blocking state
[  270.051187][ T8477] bridge1: port 1(dummy0) entered forwarding state
[  270.089952][ T8477] dummy0: left allmulticast mode
[  270.133792][ T8477] bridge1: port 1(dummy0) entered disabled state
[  270.825761][ T8513] netlink: 'syz.3.744': attribute type 1 has an invalid length.
[  271.114662][ T8513] 8021q: adding VLAN 0 to HW filter on device bond1
[  271.443519][ T8520] bond1: (slave geneve2): making interface the new active one
[  271.533380][ T8520] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  277.539494][ T8597] netlink: 64 bytes leftover after parsing attributes in process `syz.3.769'.
[  277.955137][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'.
[  277.970469][   T30] audit: type=1804 audit(1785518678.173:56): pid=8608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.774" name="bus" dev="ramfs" ino=19550 res=1 errno=0
[  278.025522][   T30] audit: type=1804 audit(1785518678.193:57): pid=8608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.774" name="bus" dev="ramfs" ino=19550 res=1 errno=0
[  278.093755][ T8611] netlink: 'syz.1.771': attribute type 10 has an invalid length.
[  278.143052][ T8609] bridge1: port 1(dummy0) entered blocking state
[  278.175969][ T8611] netlink: 40 bytes leftover after parsing attributes in process `syz.1.771'.
[  278.192636][ T8609] bridge1: port 1(dummy0) entered disabled state
[  278.270394][ T8609] dummy0: entered allmulticast mode
[  278.366370][ T8609] dummy0: entered promiscuous mode
[  278.437444][ T8611] bridge1: port 1(dummy0) entered blocking state
[  278.444008][ T8611] bridge1: port 1(dummy0) entered forwarding state
[  278.520093][ T8611] dummy0: left allmulticast mode
[  278.542263][ T8611] bridge1: port 1(dummy0) entered disabled state
[  278.727430][ T8623] fuse: fd is not a fuse device
[  278.925864][ T8628] bridge0: port 3(netdevsim0) entered blocking state
[  278.943184][ T8628] bridge0: port 3(netdevsim0) entered disabled state
[  279.004080][ T8628] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  279.130960][ T8628] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  280.353029][ T8644] netlink: 'syz.6.782': attribute type 1 has an invalid length.
[  280.429371][ T8644] 8021q: adding VLAN 0 to HW filter on device bond1
[  280.525086][ T5641] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  280.535412][ T5641] CPU: 1 UID: 0 PID: 5641 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) 
[  280.535462][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  280.535488][ T5641] Workqueue: hci2 hci_rx_work
[  280.535536][ T5641] Call Trace:
[  280.535548][ T5641]  <TASK>
[  280.535561][ T5641]  dump_stack_lvl+0x100/0x190
[  280.535608][ T5641]  sysfs_warn_dup.cold+0x1c/0x28
[  280.535671][ T5641]  sysfs_create_dir_ns+0x24b/0x2b0
[  280.535725][ T5641]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  280.535776][ T5641]  ? find_held_lock+0x2b/0x80
[  280.535833][ T5641]  ? kobject_add_internal+0x25f/0x930
[  280.535896][ T5641]  ? kobject_add_internal+0x25f/0x930
[  280.535963][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.536009][ T5641]  ? do_raw_spin_unlock+0x145/0x1e0
[  280.536068][ T5641]  kobject_add_internal+0x2c8/0x930
[  280.536140][ T5641]  kobject_add+0x16a/0x1e0
[  280.536174][ T5641]  ? __pfx_kobject_add+0x10/0x10
[  280.536206][ T5641]  ? class_to_subsys+0x10f/0x150
[  280.536273][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.536321][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.536372][ T5641]  ? kobject_put+0xb9/0x640
[  280.536434][ T5641]  ? _raw_spin_unlock+0x28/0x50
[  280.536489][ T5641]  device_add+0x294/0x1970
[  280.536550][ T5641]  ? __pfx_dev_set_name+0x10/0x10
[  280.536590][ T5641]  ? __pfx_device_add+0x10/0x10
[  280.536651][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.536697][ T5641]  ? mgmt_send_event_skb+0x2fb/0x460
[  280.536758][ T5641]  hci_conn_add_sysfs+0x1a3/0x260
[  280.536815][ T5641]  le_conn_complete_evt+0x11eb/0x1f60
[  280.536876][ T5641]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  280.536921][ T5641]  ? hci_event_packet+0x186/0xcd0
[  280.536963][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.537022][ T5641]  hci_le_conn_complete_evt+0x23c/0x3a0
[  280.537072][ T5641]  ? skb_pull_data+0x15f/0x1e0
[  280.537114][ T5641]  hci_le_meta_evt+0x34a/0x5f0
[  280.537165][ T5641]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  280.537220][ T5641]  hci_event_packet+0x51c/0xcd0
[  280.537267][ T5641]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  280.537319][ T5641]  ? __pfx_hci_event_packet+0x10/0x10
[  280.537367][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.537450][ T5641]  ? kcov_remote_start+0x384/0x670
[  280.537522][ T5641]  ? lockdep_hardirqs_on+0x78/0x100
[  280.537570][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.537627][ T5641]  hci_rx_work+0x451/0xfc0
[  280.537681][ T5641]  process_one_work+0xa23/0x1940
[  280.537740][ T5641]  ? __pfx_process_one_work+0x10/0x10
[  280.537775][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.537837][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.537891][ T5641]  worker_thread+0x5ef/0xe50
[  280.537947][ T5641]  ? kthread+0x13a/0x450
[  280.538005][ T5641]  ? __pfx_worker_thread+0x10/0x10
[  280.538041][ T5641]  kthread+0x370/0x450
[  280.538099][ T5641]  ? __pfx_kthread+0x10/0x10
[  280.538163][ T5641]  ret_from_fork+0x72b/0xd50
[  280.538216][ T5641]  ? __pfx_ret_from_fork+0x10/0x10
[  280.538269][ T5641]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.538315][ T5641]  ? __switch_to+0x800/0x10f0
[  280.538376][ T5641]  ? __switch_to_asm+0x39/0x70
[  280.538434][ T5641]  ? __pfx_kthread+0x10/0x10
[  280.538498][ T5641]  ret_from_fork_asm+0x1a/0x30
[  280.538576][ T5641]  </TASK>
[  280.860966][ T5641] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  280.875303][ T5641] Bluetooth: hci2: failed to register connection device
[  281.025500][ T8644] bond1: (slave geneve2): making interface the new active one
[  281.041441][ T8644] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  281.444432][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'.
[  281.462808][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'.
[  281.550817][ T5638] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  282.959100][ T5638] Bluetooth: hci4: command 0x0406 tx timeout
[  282.997895][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'.
[  283.227606][ T8691] bridge0: port 3(netdevsim0) entered blocking state
[  283.268935][ T8691] bridge0: port 3(netdevsim0) entered disabled state
[  283.303399][ T8691] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  283.379894][ T8691] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  285.045152][ T8711] fuse: fd is not a fuse device
[  285.594036][ T8718] fuse: fd is not a fuse device
[  286.940227][ T8728] xt_hashlimit: size too large, truncated to 1048576
[  287.996202][ T5638] Bluetooth: hci3: command 0x0406 tx timeout
[  288.358840][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.7.817'.
[  288.763194][ T8752] dummy0: left promiscuous mode
[  289.039458][ T8752] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.250466][ T8752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  292.166894][ T5807] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.194906][ T5807] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.228160][ T5807] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.258559][ T5807] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.400866][ T8808] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.833'.
[  292.439409][ T8802] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.833'.
[  292.483628][ T8805] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.833'.
[  292.921088][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.839'.
[  293.348655][ T5783] libceph: connect (1)[c::]:6789 error -101
[  293.392314][ T5783] libceph: mon0 (1)[c::]:6789 connect error
[  293.430080][ T8833] ceph: No mds server is up or the cluster is laggy
[  295.529819][ T8866] bridge0: port 3(netdevsim0) entered blocking state
[  295.559654][ T8866] bridge0: port 3(netdevsim0) entered disabled state
[  295.592262][ T8866] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  295.657348][ T8866] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  295.668323][ T8866] bridge0: port 3(netdevsim0) entered blocking state
[  295.676646][ T8866] bridge0: port 3(netdevsim0) entered forwarding state
[  297.582642][ T5891] libceph: connect (1)[c::]:6789 error -22
[  297.616527][ T5891] libceph: mon0 (1)[c::]:6789 connect error
[  297.687910][ T8889] ceph: No mds server is up or the cluster is laggy
[  297.861376][ T8897] tipc: Started in network mode
[  297.882791][ T8897] tipc: Node identity 4, cluster identity 4711
[  297.899310][ T8897] tipc: Node number set to 4
[  299.859143][ T8918] dummy0: left promiscuous mode
[  301.184262][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.871'.
[  301.500643][ T8935] bond1: entered promiscuous mode
[  301.519487][ T8935] bond1: entered allmulticast mode
[  301.539240][ T8935] 8021q: adding VLAN 0 to HW filter on device bond1
[  301.614371][ T8937] bridge1: entered promiscuous mode
[  301.630616][ T8937] bridge1: entered allmulticast mode
[  301.654771][ T8937] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  301.905779][ T8947] bridge0: port 3(netdevsim0) entered blocking state
[  301.936450][ T8947] bridge0: port 3(netdevsim0) entered disabled state
[  301.956147][ T8947] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  301.999991][ T8947] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  302.016681][ T8947] bridge0: port 3(netdevsim0) entered blocking state
[  302.023547][ T8947] bridge0: port 3(netdevsim0) entered forwarding state
[  302.522530][ T5783] libceph: connect (1)[c::]:6789 error -101
[  302.532900][ T5783] libceph: mon0 (1)[c::]:6789 connect error
[  302.546750][ T8957] ceph: No mds server is up or the cluster is laggy
[  303.222640][ T5783] libceph: connect (1)[c::]:6789 error -101
[  303.299840][ T5783] libceph: mon0 (1)[c::]:6789 connect error
[  305.988988][ T8994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  307.048272][ T8999] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.055546][ T8999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.064400][ T8999] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.071619][ T8999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.501564][ T9016] fuse: fd is not a fuse device
[  307.672304][ T8999] bond1: left promiscuous mode
[  307.677713][ T8999] bridge1: left promiscuous mode
[  307.868000][ T9004] bridge0: port 3(netdevsim0) entered disabled state
[  307.874988][ T9004] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.882675][ T9004] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.370181][ T9004] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.404263][ T9004] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.207848][ T9004] bond1: left promiscuous mode
[  309.212720][ T9004] bridge1: left promiscuous mode
[  309.220592][ T9004] bond1: left allmulticast mode
[  309.238798][ T9004] bridge1: left allmulticast mode
[  309.516162][   T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  309.544693][   T48] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.116728][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.7.906'.
[  310.139949][ T9041] capability: warning: `syz.3.907' uses 32-bit capabilities (legacy support in use)
[  310.200401][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.7.906'.
[  310.262283][ T9046] netlink: 'syz.7.906': attribute type 4 has an invalid length.
[  310.313687][ T9046] netlink: 152 bytes leftover after parsing attributes in process `syz.7.906'.
[  310.345549][   T48] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.375799][ T1123] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.654766][ T9044] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.664308][ T9044] bond2: (slave bond0): making interface the new active one
[  311.526652][ T9044] bond2: (slave bond0): Enslaving as an active interface with an up link
[  312.199511][ T9046] .`: renamed from bond0 (while UP)
[  316.584825][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  316.598588][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  320.122166][ T9163] fuse: fd is not a fuse device
[  320.510863][ T9170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.950'.
[  320.533059][ T9166] CIFS: Attempting to mount //127.0.0.1/share
[  322.722216][ T9166] CIFS: VFS: Error connecting to socket. Aborting operation.
[  322.753503][ T9166] CIFS: VFS: cifs_mount failed w/return code = -4
[  323.021454][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.6.949'.
[  330.124533][ T9283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.971'.
[  330.195309][ T9283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.971'.
[  330.230836][ T9283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.971'.
[  330.922489][ T9295] capability: warning: `syz.3.974' uses deprecated v2 capabilities in a way that may be insecure
[  333.701908][ T9313] netlink: 550 bytes leftover after parsing attributes in process `syz.6.968'.
[  335.636909][ T9331] netlink: 'syz.1.984': attribute type 4 has an invalid length.
[  336.211092][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.218881][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.287072][ T9345] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.299301][ T9345] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  337.009876][ T5786] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  337.089010][ T5786] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  337.153402][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  337.223112][ T8482] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  342.128440][ T9406] netlink: 'syz.1.1009': attribute type 4 has an invalid length.
[  344.322929][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'.
[  344.575029][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1028'.
[  344.586375][ T9465] netlink: 'syz.0.1027': attribute type 4 has an invalid length.
[  344.596795][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1027'.
[  345.411934][ T9459] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.428242][ T9459] bond1: (slave bond0): making interface the new active one
[  345.435942][ T9465] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1027'.
[  345.490453][ T9459] bond1: (slave bond0): Enslaving as an active interface with an up link
[  345.538238][ T9465] .`: renamed from bond0 (while UP)
[  345.777106][ T9477] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  346.022459][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  349.007377][ T9511] fuse: fd is not a fuse device
[  353.885913][ T9555] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1051'.
[  354.633084][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1051'.
[  354.652911][ T9555] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1051'.
[  355.029402][ T9570] fuse: fd is not a fuse device
[  357.204057][ T9596] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  357.219691][ T9596] geneve2: left promiscuous mode
[  357.246508][ T8482] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.282165][ T8482] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.497741][ T8482] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.507023][ T8482] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  359.833518][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'.
[  361.586215][    C1] wlan1: beacon TX faster than countdown (channel/color switch) completion
[  361.649180][ T9636] fuse: fd is not a fuse device
[  362.166172][ T9641] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  363.035226][ T9664] fuse: fd is not a fuse device
[  366.781847][ T9698] 8021q: adding VLAN 0 to HW filter on device .`
[  368.385477][ T9698] 8021q: adding VLAN 0 to HW filter on device team0
[  368.474114][ T9698] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.710046][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_0
[  368.749410][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_1
[  368.815011][ T9698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  368.841020][ T9698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  368.939412][ T9698] veth1_vlan: left promiscuous mode
[  368.983914][ T9698] veth0_vlan: left promiscuous mode
[  369.008412][ T9698] veth0_vlan: entered promiscuous mode
[  369.081632][ T9698] veth1_vlan: entered promiscuous mode
[  369.156158][ T9698] veth1_macvtap: left promiscuous mode
[  369.171045][ T9698] veth0_macvtap: left promiscuous mode
[  369.202821][ T9698] veth0_macvtap: entered promiscuous mode
[  369.274933][ T9698] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  370.233160][ T9698] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  370.295621][ T9698] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  370.338035][ T9698] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  370.598464][ T9698] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[  371.626683][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.633853][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.696789][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.703993][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.769262][ T9709] veth0_macvtap: entered allmulticast mode
[  372.812801][ T9709] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  372.881155][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.925482][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.964216][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.006846][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  377.654576][ T9773] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  377.912816][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  377.921200][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  379.776063][ T9794] tmpfs: Bad value for 'mpol'
[  382.539426][ T9831] futex_wake_op: syz.3.1123 tries to shift op by 144; fix this program
[  387.545015][ T9872] overlayfs: failed to clone upperpath
[  391.600671][ T5641] Bluetooth: hci5: unexpected event for opcode 0x1003
[  392.127659][ T9926] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  393.072038][ T9945] overlayfs: failed to clone upperpath
[  394.771176][ T9962] overlayfs: failed to clone lowerpath
[  394.860476][ T9964] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1155'.
[  395.737736][ T5641] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  395.750458][ T5641] Bluetooth: hci5: Injecting HCI hardware error event
[  395.762698][ T5638] Bluetooth: hci5: hardware error 0x00
[  395.814832][ T9968] fuse: fd is not a fuse device
[  397.219599][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  398.629937][ T9995] fuse: fd is not a fuse device
[  398.720733][ T5638] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  402.339306][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  406.369947][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  406.509245][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  406.521126][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  406.533180][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  407.240044][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  409.669017][ T5638] Bluetooth: hci3: command tx timeout
[  411.888805][ T5638] Bluetooth: hci3: command tx timeout
[  414.109032][T10125] sock: sock_timestamping_bind_phc: sock not bind to device
[  414.759662][ T5638] Bluetooth: hci3: command tx timeout
[  416.338272][T10138] Cannot find add_set index 0 as target
[  417.208918][ T5641] Bluetooth: hci3: command tx timeout
[  417.698451][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  420.258301][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  425.618737][ T5638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  425.636119][ T5638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  425.647165][ T5638] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  425.657287][ T5638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  425.667886][ T5638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  425.882665][T10052] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.890995][T10052] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.899112][T10052] bridge_slave_0: entered allmulticast mode
[  425.907344][T10052] bridge_slave_0: entered promiscuous mode
[  425.920474][T10052] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.934844][T10052] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.951360][T10052] bridge_slave_1: entered allmulticast mode
[  425.969884][T10052] bridge_slave_1: entered promiscuous mode
[  426.112942][T10052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.159594][T10052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.345585][T10052] team0: Port device team_slave_0 added
[  426.388085][T10052] team0: Port device team_slave_1 added
[  426.507003][T10191] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  426.673522][T10052] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.700273][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.789472][T10052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.818809][T10052] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.836552][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.901322][T10052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.759730][ T5641] Bluetooth: hci6: command tx timeout
[  427.783546][T10052] hsr_slave_0: entered promiscuous mode
[  427.799127][T10052] hsr_slave_1: entered promiscuous mode
[  429.828056][ T5641] Bluetooth: hci6: command tx timeout
[  430.674506][T10229] overlayfs: failed to clone lowerpath
[  432.166472][ T5641] Bluetooth: hci6: command tx timeout
[  432.226654][ T5764] IPVS: starting estimator thread 0...
[  432.658189][T10237] IPVS: using max 22 ests per chain, 52800 per kthread
[  434.247569][ T5641] Bluetooth: hci6: command tx timeout
[  434.381279][T10267] sock: sock_timestamping_bind_phc: sock not bind to device
[  435.184806][T10052] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  435.230301][T10052] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  435.284836][T10052] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  436.071096][T10052] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  436.105925][T10052] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  436.175610][T10052] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  436.228559][T10052] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  436.279878][T10052] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  438.177311][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  438.334246][T10321] Invalid ELF header magic: != ELF
[  439.226591][T10175] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.277502][T10175] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.311234][T10175] bridge_slave_0: entered allmulticast mode
[  439.332526][T10175] bridge_slave_0: entered promiscuous mode
[  439.350645][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  439.358084][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  439.367755][T10052] 8021q: adding VLAN 0 to HW filter on device bond0
[  439.377931][T10175] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.385278][T10175] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.392892][T10175] bridge_slave_1: entered allmulticast mode
[  439.408956][T10175] bridge_slave_1: entered promiscuous mode
[  439.541014][T10332] overlayfs: failed to clone lowerpath
[  440.175482][T10052] 8021q: adding VLAN 0 to HW filter on device team0
[  440.238052][T10175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.258344][T10175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.283806][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.291026][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.997850][T10175] team0: Port device team_slave_0 added
[  441.096281][T10175] team0: Port device team_slave_1 added
[  441.121833][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.129040][ T5786] bridge0: port 2(bridge_slave_1) entered forwarding state
[  441.275601][T10175] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.283939][T10175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.315163][T10175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.339223][T10175] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.346789][T10175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.386142][T10175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  443.185829][T10175] hsr_slave_0: entered promiscuous mode
[  443.218657][T10175] hsr_slave_1: entered promiscuous mode
[  443.238107][T10175] debugfs: 'hsr0' already exists in 'hsr'
[  443.244065][T10175] Cannot create hsr debugfs directory
[  447.390102][T10377] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  449.961790][T10175] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  450.033259][T10175] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  450.078659][T10175] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  450.118569][T10175] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  450.147352][T10175] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  452.338918][T10175] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  452.382089][T10175] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  452.579449][T10175] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  452.932018][T10175] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.023607][T10175] 8021q: adding VLAN 0 to HW filter on device team0
[  453.053856][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.061081][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.098996][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.106177][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.145019][T10052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  454.575598][T10438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1251'.
[  454.616018][T10438] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1251'.
[  454.640086][T10438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1251'.
[  454.863003][T10441] overlayfs: failed to clone upperpath
[  459.838453][T10052] veth0_vlan: entered promiscuous mode
[  460.893651][T10052] veth1_vlan: entered promiscuous mode
[  462.657528][T10052] veth0_macvtap: entered promiscuous mode
[  462.720599][T10052] veth1_macvtap: entered promiscuous mode
[  462.937337][T10052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.036986][T10052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.981899][   T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.052274][   T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.387146][ T9615] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.176629][   T33] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.389034][T10175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  465.930898][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  465.948978][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  465.958261][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  465.967663][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  465.975479][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  467.135874][ T8482] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.313992][T10175] veth0_vlan: entered promiscuous mode
[  467.372617][T10175] veth1_vlan: entered promiscuous mode
[  468.895879][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  469.414548][ T5638] Bluetooth: hci4: command tx timeout
[  469.549734][ T5783] IPVS: starting estimator thread 0...
[  469.651282][T10175] veth0_macvtap: entered promiscuous mode
[  469.746139][T10516] IPVS: using max 23 ests per chain, 55200 per kthread
[  469.779772][T10175] veth1_macvtap: entered promiscuous mode
[  471.101515][ T8482] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.586124][ T5638] Bluetooth: hci4: command tx timeout
[  472.592727][ T8482] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.618901][ T5638] Bluetooth: hci4: command tx timeout
[  473.618937][T10175] batman_adv: batadv0: Interface activated: batadv_slave_0
[  473.830982][T10175] batman_adv: batadv0: Interface activated: batadv_slave_1
[  474.232445][T10547] overlayfs: failed to clone upperpath
[  475.114450][ T8482] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.728282][ T5638] Bluetooth: hci4: command tx timeout
[  476.247277][ T1123] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.579586][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.694224][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.777416][ T5786] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.150775][T10588] overlayfs: failed to clone upperpath
[  481.262061][  T749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.321451][  T749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.637680][ T8482] bridge_slave_1: left allmulticast mode
[  482.312818][ T8482] bridge_slave_1: left promiscuous mode
[  482.495766][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.999173][ T8482] bridge_slave_0: left allmulticast mode
[  483.052150][ T8482] bridge_slave_0: left promiscuous mode
[  483.095477][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.161594][T10625] netlink: 'syz.1.1285': attribute type 2 has an invalid length.
[  483.224372][T10625] netlink: 'syz.1.1285': attribute type 1 has an invalid length.
[  484.783412][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  485.345893][T10624] Process accounting resumed
[  485.447321][T10640] xt_hashlimit: size too large, truncated to 1048576
[  486.909466][ T8482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.970064][ T8482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.996420][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  487.017974][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  487.232694][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  487.238724][ T8482] bond0 (unregistering): Released all slaves
[  487.258013][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  487.271190][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  488.181597][T10491] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.231230][T10491] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.298224][T10491] bridge_slave_0: entered allmulticast mode
[  488.347059][T10491] bridge_slave_0: entered promiscuous mode
[  488.389277][T10491] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.417079][T10491] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.445085][T10491] bridge_slave_1: entered allmulticast mode
[  488.475800][T10491] bridge_slave_1: entered promiscuous mode
[  490.240567][T10491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.330668][T10491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.375008][ T5638] Bluetooth: hci3: command tx timeout
[  490.650566][ T8482] hsr_slave_0: left promiscuous mode
[  490.709535][ T8482] hsr_slave_1: left promiscuous mode
[  490.745448][ T8482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  490.788875][ T8482] batman_adv: batadv0: Removing interface: batadv_slave_0
[  490.853147][ T8482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  490.895483][ T8482] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.019863][ T8482] veth1_macvtap: left promiscuous mode
[  491.060885][ T8482] veth0_macvtap: left promiscuous mode
[  491.090733][ T8482] veth1_vlan: left promiscuous mode
[  491.129828][ T8482] veth0_vlan: left promiscuous mode
[  492.626526][ T5638] Bluetooth: hci3: command tx timeout
[  494.899433][ T5638] Bluetooth: hci3: command tx timeout
[  495.780900][ T8482] team0 (unregistering): Port device team_slave_1 removed
[  497.136934][ T5638] Bluetooth: hci3: command tx timeout
[  498.111291][ T8482] team0 (unregistering): Port device team_slave_0 removed
[  500.984227][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9
[  501.019380][T10491] team0: Port device team_slave_0 added
[  501.074177][T10491] team0: Port device team_slave_1 added
[  501.413997][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  501.858521][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  502.851573][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  502.858077][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  503.040802][T10491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  503.088688][T10491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.186062][T10491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.279556][T10491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.286552][T10491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.400707][T10491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.019360][T10491] hsr_slave_0: entered promiscuous mode
[  505.026596][T10491] hsr_slave_1: entered promiscuous mode
[  508.659372][   T33] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.717878][ T5638] Bluetooth: hci1: unexpected event for opcode 0x4ad0
[  511.809349][   T33] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.592829][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10
[  514.673103][   T33] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.132651][T10854] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  515.904090][ T5638] Bluetooth: hci1: unexpected event for opcode 0x0c1c
[  517.173826][T10652] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.181479][T10652] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.189166][T10652] bridge_slave_0: entered allmulticast mode
[  517.197954][T10652] bridge_slave_0: entered promiscuous mode
[  517.316776][   T33] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.364456][T10652] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.373490][ T5638] Bluetooth: hci2: unexpected event for opcode 0x4ad0
[  517.392000][T10652] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.401677][T10652] bridge_slave_1: entered allmulticast mode
[  517.642304][T10652] bridge_slave_1: entered promiscuous mode
[  519.807743][T10652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.898691][T10652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.648327][T10652] team0: Port device team_slave_0 added
[  520.698026][T10652] team0: Port device team_slave_1 added
[  522.951778][T10652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.973541][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.045544][T10652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.865920][T10652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.889513][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.964622][T10652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  524.015380][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1354'.
[  526.897584][T10972] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1363'.
[  528.021671][T10652] hsr_slave_0: entered promiscuous mode
[  528.172021][T10652] hsr_slave_1: entered promiscuous mode
[  528.218418][T10652] debugfs: 'hsr0' already exists in 'hsr'
[  528.258439][T10652] Cannot create hsr debugfs directory
[  528.496818][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11
[  532.210240][ T5641] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  532.221062][ T5641] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  532.230502][ T5641] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  532.242814][ T5641] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  532.253539][ T5641] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  532.630844][   T33] netdevsim netdevsim7 netdevsim0 (unregistering): left allmulticast mode
[  532.678109][   T33] netdevsim netdevsim7 netdevsim0 (unregistering): left promiscuous mode
[  532.743472][   T33] bridge0: port 3(netdevsim0) entered disabled state
[  534.502157][ T5641] Bluetooth: hci6: command tx timeout
[  534.901310][T11055] overlayfs: failed to clone upperpath
[  537.103415][ T5641] Bluetooth: hci6: command tx timeout
[  538.751678][   T33] bridge_slave_1: left allmulticast mode
[  538.880283][ T5641] Bluetooth: hci2: unexpected event for opcode 0x0c1c
[  539.032088][   T33] bridge_slave_1: left promiscuous mode
[  539.056439][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.082331][   T33] bridge_slave_0: left allmulticast mode
[  539.167167][T11086] xt_hashlimit: size too large, truncated to 1048576
[  539.882565][ T5641] Bluetooth: hci6: command tx timeout
[  539.893016][   T33] bridge_slave_0: left promiscuous mode
[  539.899011][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.970083][   T33] bridge_slave_1: left allmulticast mode
[  539.996790][   T33] bridge_slave_1: left promiscuous mode
[  540.002574][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.036464][   T33] bridge_slave_0: left allmulticast mode
[  540.050472][   T33] bridge_slave_0: left promiscuous mode
[  540.072602][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.803145][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  541.850642][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.877622][   T33] bond0 (unregistering): Released all slaves
[  542.181288][ T5641] Bluetooth: hci6: command tx timeout
[  544.630572][   T33] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  544.713359][   T33] bond2 (unregistering): (slave .`): Releasing backup interface
[  544.749856][   T33] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  544.775960][   T33] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  544.802432][   T33] .` (unregistering): Released all slaves
[  544.840029][   T33] bond1 (unregistering): Released all slaves
[  544.907919][   T33] bond2 (unregistering): Released all slaves
[  545.103665][   T33] tipc: Left network mode
[  546.884659][T10652] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  546.908603][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  546.925698][   T33] hsr_slave_0: left promiscuous mode
[  546.931944][   T33] hsr_slave_1: left promiscuous mode
[  546.938807][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  546.947906][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  546.956252][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  546.963670][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  546.981233][   T33] hsr_slave_0: left promiscuous mode
[  546.987804][   T33] hsr_slave_1: left promiscuous mode
[  546.993913][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  547.013106][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  547.031667][   T33] veth1_macvtap: left promiscuous mode
[  547.037199][   T33] veth0_macvtap: left promiscuous mode
[  547.042923][   T33] veth1_vlan: left promiscuous mode
[  547.048251][   T33] veth0_vlan: left promiscuous mode
[  547.389900][   T33] team0 (unregistering): Port device team_slave_1 removed
[  547.412324][   T33] team0 (unregistering): Port device team_slave_0 removed
[  547.813781][   T33] team0 (unregistering): Port device team_slave_1 removed
[  547.973113][T10652] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  547.983150][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  547.992891][T10652] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  548.007416][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  548.017299][T10652] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  548.035016][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  548.086118][T11021] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.093697][T11021] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.100882][T11021] bridge_slave_0: entered allmulticast mode
[  548.109280][T11021] bridge_slave_0: entered promiscuous mode
[  548.117969][T11021] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.125138][T11021] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.132262][T11021] bridge_slave_1: entered allmulticast mode
[  548.140095][T11021] bridge_slave_1: entered promiscuous mode
[  548.200146][T11021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  548.223574][T11021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  548.271197][T11021] team0: Port device team_slave_0 added
[  548.282711][T11021] team0: Port device team_slave_1 added
[  548.321910][T11021] batman_adv: batadv0: Adding interface: batadv_slave_0
[  548.328885][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  548.355365][T11021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  548.373688][T11021] batman_adv: batadv0: Adding interface: batadv_slave_1
[  548.381027][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  548.407488][T11021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  548.525046][T11021] hsr_slave_0: entered promiscuous mode
[  548.532298][T11021] hsr_slave_1: entered promiscuous mode
[  548.540252][T11021] debugfs: 'hsr0' already exists in 'hsr'
[  548.546011][T11021] Cannot create hsr debugfs directory
[  548.636035][T10652] 8021q: adding VLAN 0 to HW filter on device bond0
[  548.713660][   T33] IPVS: stop unused estimator thread 0...
[  548.768129][T10652] 8021q: adding VLAN 0 to HW filter on device team0
[  548.826046][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.833239][ T5786] bridge0: port 1(bridge_slave_0) entered forwarding state
[  548.909987][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.917192][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  549.304075][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12
[  549.489454][   T33] bridge_slave_1: left allmulticast mode
[  549.501725][   T33] bridge_slave_1: left promiscuous mode
[  549.507565][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.517951][   T33] bridge_slave_0: left allmulticast mode
[  549.523816][   T33] bridge_slave_0: left promiscuous mode
[  549.529615][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.666960][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  549.680913][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  549.694863][   T33] bond0 (unregistering): Released all slaves
[  549.868248][   T33] hsr_slave_0: left promiscuous mode
[  549.879772][   T33] hsr_slave_1: left promiscuous mode
[  549.897087][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  549.912066][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  550.156996][   T33] team0 (unregistering): Port device team_slave_1 removed
[  550.181721][   T33] team0 (unregistering): Port device team_slave_0 removed
[  550.811334][T10652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  550.954310][T11021] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  550.972889][T11021] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  550.985003][T11021] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  551.009319][T11021] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  551.017711][T11021] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  551.034289][T11021] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  551.043349][T11021] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  551.058069][T11021] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  551.219693][T11021] 8021q: adding VLAN 0 to HW filter on device bond0
[  551.254008][T11021] 8021q: adding VLAN 0 to HW filter on device team0
[  551.272275][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state
[  551.279466][ T8482] bridge0: port 1(bridge_slave_0) entered forwarding state
[  551.305875][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.313066][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  551.400986][T10652] veth0_vlan: entered promiscuous mode
[  551.464939][T10652] veth1_vlan: entered promiscuous mode
[  551.541666][T10652] veth0_macvtap: entered promiscuous mode
[  551.561471][T10652] veth1_macvtap: entered promiscuous mode
[  551.610110][T10652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  551.651898][T10652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  551.735335][ T8482] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  551.831768][ T8482] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.869648][ T8482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.878568][   T48] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.894022][   T48] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.903958][ T8482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.236482][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9
[  552.313347][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  552.334312][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  552.343903][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  552.359610][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  552.372158][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  552.826018][T11021] 8021q: adding VLAN 0 to HW filter on device batadv0
[  553.038272][ T8482] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.182274][ T8482] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.447664][ T8482] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.556284][ T5279] 8021q: adding VLAN 0 to HW filter on device eth13
[  553.709396][ T8482] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.730954][T11021] veth0_vlan: entered promiscuous mode
[  553.768141][T11021] veth1_vlan: entered promiscuous mode
[  553.852097][T11021] veth0_macvtap: entered promiscuous mode
[  553.866232][T11021] veth1_macvtap: entered promiscuous mode
[  553.908729][T11021] batman_adv: batadv0: Interface activated: batadv_slave_0
[  553.985541][T11021] batman_adv: batadv0: Interface activated: batadv_slave_1
[  554.182642][ T8482] bridge_slave_1: left allmulticast mode
[  554.190501][ T8482] bridge_slave_1: left promiscuous mode
[  554.197039][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.212859][ T8482] bridge_slave_0: left allmulticast mode
[  554.221233][ T8482] bridge_slave_0: left promiscuous mode
[  554.228628][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.422998][ T8482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  554.434334][ T8482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  554.448400][ T8482] bond0 (unregistering): Released all slaves
[  554.487318][ T5807] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  554.496241][ T5807] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  554.519954][T11264] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.527286][T11264] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.535868][T11264] bridge_slave_0: entered allmulticast mode
[  554.545215][T11264] bridge_slave_0: entered promiscuous mode
[  554.559585][T11264] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.568313][T11264] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.576654][T11264] bridge_slave_1: entered allmulticast mode
[  554.584628][T11264] bridge_slave_1: entered promiscuous mode
[  554.617240][ T5641] Bluetooth: hci4: command tx timeout
[  554.665895][T11264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.679215][T11264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  554.705047][ T5807] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  554.782197][T11264] team0: Port device team_slave_0 added
[  554.839458][T11264] team0: Port device team_slave_1 added
[  554.921848][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  554.936989][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  554.947534][ T8482] hsr_slave_0: left promiscuous mode
[  554.956552][ T8482] hsr_slave_1: left promiscuous mode
[  554.962427][ T8482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  554.970582][ T8482] batman_adv: batadv0: Removing interface: batadv_slave_0
[  554.979676][ T8482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  554.987264][ T8482] batman_adv: batadv0: Removing interface: batadv_slave_1
[  555.000030][ T8482] veth1_macvtap: left promiscuous mode
[  555.005500][ T8482] veth0_macvtap: left promiscuous mode
[  555.011298][ T8482] veth1_vlan: left promiscuous mode
[  555.017159][ T8482] veth0_vlan: left promiscuous mode
[  555.261344][ T8482] team0 (unregistering): Port device team_slave_1 removed
[  555.304821][ T8482] team0 (unregistering): Port device team_slave_0 removed
[  555.434948][T11264] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.444161][T11264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  555.470696][T11264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  555.513703][T11264] batman_adv: batadv0: Adding interface: batadv_slave_1
[  555.520820][T11264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  555.547540][T11264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  555.559301][   T33] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  555.606685][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  555.614783][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  555.650252][T11264] hsr_slave_0: entered promiscuous mode
[  555.657460][T11264] hsr_slave_1: entered promiscuous mode
[  557.120070][ T5641] Bluetooth: hci4: command tx timeout
[  559.305138][ T5641] Bluetooth: hci4: command tx timeout
[  559.536349][   T30] audit: type=1800 audit(1785518953.454:58): pid=11336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1173" name="bus" dev="ramfs" ino=29465 res=0 errno=0
[  561.552614][ T5641] Bluetooth: hci4: command tx timeout
[  565.850620][ T5279] 8021q: adding VLAN 0 to HW filter on device eth14
[  565.920821][T11264] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  565.971046][T11264] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  566.001011][T11264] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  566.036948][T11264] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  566.053060][T11264] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  566.094053][T11264] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  566.111853][T11264] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  566.140499][T11264] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  567.491091][T11264] 8021q: adding VLAN 0 to HW filter on device bond0
[  569.029475][T11264] 8021q: adding VLAN 0 to HW filter on device team0
[  569.498684][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  569.550945][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  569.627886][T10880] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.635042][T10880] bridge0: port 1(bridge_slave_0) entered forwarding state
[  569.759257][T10880] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.766472][T10880] bridge0: port 2(bridge_slave_1) entered forwarding state
[  570.150971][T11431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1411'.
[  575.206291][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  575.230956][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  575.259146][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  576.299420][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  577.260808][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'.
[  577.283633][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  577.734741][T11479] No source specified
[  579.501115][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  579.567515][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  579.766332][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  580.001623][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  580.053368][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  580.954780][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  581.018609][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  581.066259][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  581.335084][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  582.181624][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  582.245304][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  582.324432][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  582.377235][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  582.458842][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  582.529484][T11464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  583.375218][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  583.392752][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  583.401158][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  583.419991][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  583.433479][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  583.906172][T11264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  586.271836][ T5641] Bluetooth: hci3: command tx timeout
[  588.528123][ T5641] Bluetooth: hci3: command tx timeout
[  590.803720][ T5641] Bluetooth: hci3: command tx timeout
[  591.651059][ T5786] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.995139][T11264] veth0_vlan: entered promiscuous mode
[  592.092581][T11264] veth1_vlan: entered promiscuous mode
[  594.592543][ T5641] Bluetooth: hci3: command tx timeout
[  594.748320][ T5786] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.057596][ T5786] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.979760][T11264] veth0_macvtap: entered promiscuous mode
[  598.001588][T11264] veth1_macvtap: entered promiscuous mode
[  598.042488][T11264] batman_adv: batadv0: Interface activated: batadv_slave_0
[  598.190092][T11264] batman_adv: batadv0: Interface activated: batadv_slave_1
[  598.390167][ T5786] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.596305][T10880] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  598.994842][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  599.435368][ T5786] bridge_slave_1: left allmulticast mode
[  599.484490][ T5786] bridge_slave_1: left promiscuous mode
[  599.502159][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[  600.446912][T11651] 9pnet_fd: Insufficient options for proto=fd
[  600.562407][ T5786] bridge_slave_0: left allmulticast mode
[  600.568220][ T5786] bridge_slave_0: left promiscuous mode
[  600.574826][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.864388][T11677] 9pnet_virtio: no channels available for device syz
[  604.878146][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'.
[  604.985305][ T5786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  605.063233][ T5786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  605.082231][ T5786] bond0 (unregistering): Released all slaves
[  605.335282][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.182524][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  606.201411][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.341556][T11691] overlayfs: failed to clone upperpath
[  610.203285][ T8482] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  610.786645][  T749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  610.940724][  T749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.014089][ T5786] hsr_slave_0: left promiscuous mode
[  613.069760][ T5786] hsr_slave_1: left promiscuous mode
[  613.108732][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  613.165614][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_0
[  613.410461][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  613.423472][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_1
[  614.606964][ T5786] veth1_macvtap: left promiscuous mode
[  614.630180][ T5786] veth0_macvtap: left promiscuous mode
[  614.641506][ T5786] veth1_vlan: left promiscuous mode
[  614.661635][ T5786] veth0_vlan: left promiscuous mode
[  616.254506][T11751] fuse: Bad value for 'fd'
[  618.720250][T11783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  618.737678][T11783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  618.873784][T11783] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  619.749437][T11783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  619.769999][T11783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  621.649263][ T5786] team0 (unregistering): Port device team_slave_1 removed
[  621.807785][ T5786] team0 (unregistering): Port device team_slave_0 removed
[  622.652374][T11783] Bluetooth: hci6: command tx timeout
[  623.154672][T11812] overlayfs: failed to clone upperpath
[  624.845631][T11783] Bluetooth: hci6: command tx timeout
[  625.103735][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10
[  625.141196][T11517] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.218600][T11517] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.280741][T11517] bridge_slave_0: entered allmulticast mode
[  625.362919][T11517] bridge_slave_0: entered promiscuous mode
[  625.479971][T11517] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.547697][T11517] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.612018][T11517] bridge_slave_1: entered allmulticast mode
[  625.689529][T11517] bridge_slave_1: entered promiscuous mode
[  627.101069][T11783] Bluetooth: hci6: command tx timeout
[  627.259392][T11517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  627.355092][T11517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  627.767232][T11854] overlayfs: failed to clone upperpath
[  628.613858][T11517] team0: Port device team_slave_0 added
[  628.802383][T11517] team0: Port device team_slave_1 added
[  628.892191][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1501'.
[  629.333471][T11865] xt_hashlimit: size too large, truncated to 1048576
[  629.579611][T11783] Bluetooth: hci6: command tx timeout
[  630.158454][T11517] batman_adv: batadv0: Adding interface: batadv_slave_0
[  630.219110][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  630.359759][T11517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  630.446256][T11517] batman_adv: batadv0: Adding interface: batadv_slave_1
[  630.496358][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  630.763267][T11517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  631.121099][T11783] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  631.223284][T11783] Bluetooth: hci0: ISO packet for unknown connection handle 0
[  631.415125][T11880] bridge0: port 3(netdevsim0) entered blocking state
[  631.429411][T11880] bridge0: port 3(netdevsim0) entered forwarding state
[  631.436635][T11880] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.443782][T11880] bridge0: port 2(bridge_slave_1) entered forwarding state
[  631.451290][T11880] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.458476][T11880] bridge0: port 1(bridge_slave_0) entered forwarding state
[  631.501144][T11880] dummy0: left promiscuous mode
[  631.762905][T11880] veth0_macvtap: left allmulticast mode
[  631.776544][T11880] macsec1: left promiscuous mode
[  631.782819][T11880] geneve2: left promiscuous mode
[  631.788801][T11880] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[  635.096780][T11517] hsr_slave_0: entered promiscuous mode
[  635.138140][T11517] hsr_slave_1: entered promiscuous mode
[  635.191065][T11517] debugfs: 'hsr0' already exists in 'hsr'
[  635.227822][T11517] Cannot create hsr debugfs directory
[  635.277064][T11902] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1510'.
[  636.211300][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  636.239731][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  636.534766][ T8482] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.462986][ T8482] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.536446][T11928] xt_hashlimit: size too large, truncated to 1048576
[  640.739728][ T8482] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.728115][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11
[  642.083702][T11957] 9pnet_virtio: no channels available for device syz
[  642.097166][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1527'.
[  642.971595][T11958] overlayfs: failed to clone upperpath
[  643.056213][ T8482] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.644241][T11978] xt_hashlimit: size too large, truncated to 1048576
[  650.099852][ T5641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  650.116207][ T5641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  650.126862][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  650.134995][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  650.143089][ T5641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  652.617459][ T5641] Bluetooth: hci4: command tx timeout
[  653.583918][ T8482] bridge_slave_1: left allmulticast mode
[  653.607948][ T8482] bridge_slave_1: left promiscuous mode
[  653.643170][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.886154][ T5641] Bluetooth: hci4: command tx timeout
[  655.488953][ T8482] bridge_slave_0: left allmulticast mode
[  655.744949][ T8482] bridge_slave_0: left promiscuous mode
[  655.858489][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.176335][ T5641] Bluetooth: hci4: command tx timeout
[  659.371986][ T5641] Bluetooth: hci4: command tx timeout
[  660.045565][ T8482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  660.917809][ T8482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  660.966827][ T8482] bond0 (unregistering): Released all slaves
[  662.395643][ T5279] 8021q: adding VLAN 0 to HW filter on device eth15
[  665.429914][T11783] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  665.457989][T11783] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  665.471133][T11783] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  665.496578][T11783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  665.509411][T11783] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  668.113848][T11783] Bluetooth: hci7: command tx timeout
[  669.605462][T12165] xt_hashlimit: size too large, truncated to 1048576
[  669.679751][ T8482] hsr_slave_0: left promiscuous mode
[  669.714849][ T8482] hsr_slave_1: left promiscuous mode
[  669.729782][ T8482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  669.750097][ T8482] batman_adv: batadv0: Removing interface: batadv_slave_0
[  669.973636][ T8482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  670.002248][ T8482] batman_adv: batadv0: Removing interface: batadv_slave_1
[  670.101464][T11783] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11
[  670.367237][T11783] Bluetooth: hci7: command tx timeout
[  670.686113][ T8482] veth1_macvtap: left promiscuous mode
[  670.703403][ T8482] veth0_macvtap: left promiscuous mode
[  670.718132][ T8482] veth1_vlan: left promiscuous mode
[  670.724478][ T8482] veth0_vlan: left promiscuous mode
[  671.184052][ T8482] team0 (unregistering): Port device team_slave_1 removed
[  671.206171][ T8482] team0 (unregistering): Port device team_slave_0 removed
[  671.636805][T11781] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.653637][T11781] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.674330][T11781] bridge_slave_0: entered allmulticast mode
[  671.701582][T11781] bridge_slave_0: entered promiscuous mode
[  671.724433][T11781] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.733060][T11781] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.740870][T11781] bridge_slave_1: entered allmulticast mode
[  671.749349][T11781] bridge_slave_1: entered promiscuous mode
[  671.982946][T11781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  673.029746][T11783] Bluetooth: hci7: command tx timeout
[  673.320451][T11781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  673.488117][   T30] audit: type=1800 audit(1785519058.605:59): pid=12195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1580" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  673.606174][T12195] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  673.631380][T11781] team0: Port device team_slave_0 added
[  673.663714][T12195] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  673.733492][T12195] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  673.783754][T11781] team0: Port device team_slave_1 added
[  674.107146][T11781] batman_adv: batadv0: Adding interface: batadv_slave_0
[  674.132029][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  674.225101][T11781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  674.524995][T11781] batman_adv: batadv0: Adding interface: batadv_slave_1
[  674.533051][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  674.975374][T12225] xt_hashlimit: size too large, truncated to 1048576
[  675.243239][T11783] Bluetooth: hci7: command tx timeout
[  675.271589][T11781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  675.502701][T12230] overlayfs: failed to clone upperpath
[  675.510200][ T8482] bridge_slave_1: left allmulticast mode
[  675.526069][ T8482] bridge_slave_1: left promiscuous mode
[  675.559525][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.816365][ T8482] bridge_slave_0: left allmulticast mode
[  675.853681][ T8482] bridge_slave_0: left promiscuous mode
[  675.873723][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.776107][T11783] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  676.776422][T11783] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  677.326205][ T8482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  677.364295][ T8482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  677.375055][ T8482] bond0 (unregistering): Released all slaves
[  677.493805][T12243] 8021q: adding VLAN 0 to HW filter on device bond0
[  677.503482][T12243] 8021q: adding VLAN 0 to HW filter on device team0
[  677.515504][T12243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  677.593361][T12243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  677.603634][T12243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  677.622597][T12243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  677.633042][T12243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  677.651575][T12243] veth1_vlan: left promiscuous mode
[  677.658394][T12243] veth0_vlan: left promiscuous mode
[  677.666188][T12243] veth0_vlan: entered promiscuous mode
[  677.674723][T12243] veth1_vlan: entered promiscuous mode
[  677.688148][T12243] veth0_macvtap: left promiscuous mode
[  677.695152][T12243] veth0_macvtap: entered promiscuous mode
[  677.708716][T12243] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  677.718079][T12243] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  677.727183][T12243] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  677.736306][T12243] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  677.752109][T12243] 8021q: adding VLAN 0 to HW filter on device bond1
[  677.898109][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  677.905328][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  677.963009][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[  677.970160][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[  678.779263][T12250] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  678.980835][   T80] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  678.991246][   T80] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  679.000028][   T80] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  679.009862][   T80] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  679.019094][   T80] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  679.028770][   T80] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  679.039999][   T80] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  679.049171][   T80] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  679.233597][ T8482] hsr_slave_0: left promiscuous mode
[  679.240699][ T8482] hsr_slave_1: left promiscuous mode
[  680.050558][ T8482] batman_adv: batadv0: Removing interface: batadv_slave_0
[  680.075591][ T8482] batman_adv: batadv0: Removing interface: batadv_slave_1
[  681.414754][ T8482] team0 (unregistering): Port device team_slave_1 removed
[  681.448464][ T8482] team0 (unregistering): Port device team_slave_0 removed
[  684.187276][T12297] xt_hashlimit: size too large, truncated to 1048576
[  685.127122][T12300] fuse: fd is not a fuse device
[  685.297473][   T30] audit: type=1326 audit(1785519069.492:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.4.1601" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5579e019 code=0x7ffc0000
[  685.365360][   T30] audit: type=1326 audit(1785519069.492:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.4.1601" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5579e019 code=0x7ffc0000
[  686.875050][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  686.972244][T12002] bridge0: port 1(bridge_slave_0) entered blocking state
[  686.989027][T12002] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.005169][T12002] bridge_slave_0: entered allmulticast mode
[  687.023338][T12002] bridge_slave_0: entered promiscuous mode
[  687.218677][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  687.248114][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  687.292683][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  687.322227][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  688.058790][T12002] bridge0: port 2(bridge_slave_1) entered blocking state
[  688.070507][T12002] bridge0: port 2(bridge_slave_1) entered disabled state
[  688.078215][T12002] bridge_slave_1: entered allmulticast mode
[  688.089248][T12002] bridge_slave_1: entered promiscuous mode
[  688.268891][ T8482] bridge_slave_1: left allmulticast mode
[  688.283219][ T8482] bridge_slave_1: left promiscuous mode
[  688.626676][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state
[  688.662031][ T8482] bridge_slave_0: left allmulticast mode
[  688.682112][ T8482] bridge_slave_0: left promiscuous mode
[  688.916777][T12341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1606'.
[  688.930209][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.871817][ T5641] Bluetooth: hci2: command tx timeout
[  690.095070][ T8482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  690.146621][ T8482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  690.167997][ T8482] bond0 (unregistering): Released all slaves
[  690.219853][T12002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  690.315430][ T5279] 8021q: adding VLAN 0 to HW filter on device eth16
[  690.357500][T12002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  690.684955][ T8482] batman_adv: batadv0: Removing interface: batadv_slave_0
[  692.126084][ T5641] Bluetooth: hci2: command tx timeout
[  692.255642][ T8482] batman_adv: batadv0: Removing interface: batadv_slave_1
[  692.740523][T12376] xt_hashlimit: size too large, truncated to 1048576
[  693.724488][ T8482] team0 (unregistering): Port device team_slave_1 removed
[  694.526844][ T5641] Bluetooth: hci2: command tx timeout
[  694.710389][ T8482] team0 (unregistering): Port device team_slave_0 removed
[  695.196037][T12002] team0: Port device team_slave_0 added
[  695.266081][T12002] team0: Port device team_slave_1 added
[  695.548727][T12002] batman_adv: batadv0: Adding interface: batadv_slave_0
[  695.560373][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  695.602561][T12002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  695.769854][T12002] batman_adv: batadv0: Adding interface: batadv_slave_1
[  695.776851][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  696.113774][T12002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  696.948703][ T5641] Bluetooth: hci2: command tx timeout
[  696.981379][T12125] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.998510][T12125] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.113915][T12125] bridge_slave_0: entered allmulticast mode
[  697.255269][T12125] bridge_slave_0: entered promiscuous mode
[  697.279348][T12125] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.295662][T12125] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.314150][T12125] bridge_slave_1: entered allmulticast mode
[  697.328784][T12125] bridge_slave_1: entered promiscuous mode
[  697.463492][T12407] 8021q: adding VLAN 0 to HW filter on device bond0
[  697.473437][T12407] 8021q: adding VLAN 0 to HW filter on device team0
[  697.487073][T12407] 8021q: adding VLAN 0 to HW filter on device batadv0
[  697.566102][T12407] batman_adv: batadv0: Interface activated: batadv_slave_0
[  697.576604][T12407] batman_adv: batadv0: Interface activated: batadv_slave_1
[  697.591632][T12407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  697.602068][T12407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  697.618510][T12407] veth1_vlan: left promiscuous mode
[  697.627688][T12407] veth0_vlan: left promiscuous mode
[  697.636117][T12407] veth0_vlan: entered promiscuous mode
[  697.645562][T12407] veth1_vlan: entered promiscuous mode
[  697.658424][T12407] veth0_macvtap: left promiscuous mode
[  697.665703][T12407] veth0_macvtap: entered promiscuous mode
[  697.681165][T12407] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  697.690257][T12407] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  697.699299][T12407] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  697.708646][T12407] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  697.721582][T12407] bond1: left allmulticast mode
[  697.726468][T12407] bridge1: left allmulticast mode
[  697.733155][T12407] 8021q: adding VLAN 0 to HW filter on device bond1
[  697.750549][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  697.913807][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.921031][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  697.931688][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.938885][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  698.016801][T12125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  698.073373][T12125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  698.128921][T12002] hsr_slave_0: entered promiscuous mode
[  698.136839][T12002] hsr_slave_1: entered promiscuous mode
[  698.209750][T12125] team0: Port device team_slave_0 added
[  698.243950][T12125] team0: Port device team_slave_1 added
[  698.438444][ T8482] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.522394][T12125] batman_adv: batadv0: Adding interface: batadv_slave_0
[  698.535788][T12125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  698.568450][T12125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  698.630239][T12125] batman_adv: batadv0: Adding interface: batadv_slave_1
[  698.637240][T12125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  698.667460][T12125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  698.756824][ T8482] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.930551][ T8482] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.996571][T12125] hsr_slave_0: entered promiscuous mode
[  699.006146][T12125] hsr_slave_1: entered promiscuous mode
[  699.013110][T12125] debugfs: 'hsr0' already exists in 'hsr'
[  699.019148][T12125] Cannot create hsr debugfs directory
[  699.072770][ T8482] bridge0: port 3(netdevsim0) entered disabled state
[  699.103482][ T8482] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode
[  699.114062][ T8482] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode
[  699.126013][ T8482] bridge0: port 3(netdevsim0) entered disabled state
[  699.141138][ T8482] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.246939][T10614] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  699.460243][T12317] bridge0: port 1(bridge_slave_0) entered blocking state
[  699.468454][T12317] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.476164][T12317] bridge_slave_0: entered allmulticast mode
[  699.484370][T12317] bridge_slave_0: entered promiscuous mode
[  699.499146][T12317] bridge0: port 2(bridge_slave_1) entered blocking state
[  699.506726][T12317] bridge0: port 2(bridge_slave_1) entered disabled state
[  699.514892][T12317] bridge_slave_1: entered allmulticast mode
[  699.525085][T12317] bridge_slave_1: entered promiscuous mode
[  699.730086][T12317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  699.792585][T12317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  699.859704][T12002] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  699.869976][T12002] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  699.881519][T12317] team0: Port device team_slave_0 added
[  699.889594][ T8482] bridge_slave_1: left allmulticast mode
[  699.895231][ T8482] bridge_slave_1: left promiscuous mode
[  699.901215][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state
[  699.910595][ T8482] bridge_slave_0: left allmulticast mode
[  699.916237][ T8482] bridge_slave_0: left promiscuous mode
[  699.922483][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.095535][ T8482] bond1 (unregistering): (slave geneve2): Releasing active interface
[  700.151557][ T8482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  700.163823][ T8482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  700.175503][ T8482] bond0 (unregistering): Released all slaves
[  700.201318][ T8482] bond1 (unregistering): Released all slaves
[  700.234309][T12002] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  700.245026][T12002] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  700.255358][T12317] team0: Port device team_slave_1 added
[  700.272986][T12002] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  700.337883][T12002] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  700.380426][T12002] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  700.397025][T12002] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  700.450429][T12317] batman_adv: batadv0: Adding interface: batadv_slave_0
[  700.457587][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  700.484004][T12317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  700.568977][T12317] batman_adv: batadv0: Adding interface: batadv_slave_1
[  700.576032][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  700.602622][T12317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  700.765002][  T749] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  700.780723][ T8482] hsr_slave_0: left promiscuous mode
[  700.791334][ T8482] hsr_slave_1: left promiscuous mode
[  700.805537][ T8482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  700.813082][ T8482] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.821096][ T8482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  700.828500][ T8482] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.842319][ T8482] veth1_macvtap: left promiscuous mode
[  700.847834][ T8482] veth0_macvtap: left promiscuous mode
[  700.853610][ T8482] veth1_vlan: left promiscuous mode
[  700.858890][ T8482] veth0_vlan: left promiscuous mode
[  701.132377][ T8482] team0 (unregistering): Port device team_slave_1 removed
[  701.332155][T12317] hsr_slave_0: entered promiscuous mode
[  701.339653][T12317] hsr_slave_1: entered promiscuous mode
[  701.346000][T12317] debugfs: 'hsr0' already exists in 'hsr'
[  701.352714][T12317] Cannot create hsr debugfs directory
[  701.777932][ T8482] IPVS: stop unused estimator thread 0...
[  701.911992][T12125] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  701.925328][T12125] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  701.944526][T12002] 8021q: adding VLAN 0 to HW filter on device bond0
[  701.958341][T12125] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  701.969002][T12125] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  701.977052][T12125] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  701.993166][T12125] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  702.040251][T12125] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  702.050832][T12125] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  702.080655][T12002] 8021q: adding VLAN 0 to HW filter on device team0
[  702.115409][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  702.122718][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  702.169186][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  702.176433][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  702.228205][   T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  702.448372][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  702.454909][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  702.534596][T12125] 8021q: adding VLAN 0 to HW filter on device bond0
[  702.597236][T12125] 8021q: adding VLAN 0 to HW filter on device team0
[  702.656034][T10614] bridge0: port 1(bridge_slave_0) entered blocking state
[  702.663294][T10614] bridge0: port 1(bridge_slave_0) entered forwarding state
[  702.699834][T10614] bridge0: port 2(bridge_slave_1) entered blocking state
[  702.707078][T10614] bridge0: port 2(bridge_slave_1) entered forwarding state
[  702.788329][T12317] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  702.800345][T12317] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  702.815863][T12317] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  702.826905][T12317] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  702.836321][T12317] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  702.850429][T12317] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  702.865624][T12317] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  702.890213][T12317] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  703.220348][T12317] 8021q: adding VLAN 0 to HW filter on device bond0
[  703.279977][T12317] 8021q: adding VLAN 0 to HW filter on device team0
[  703.318395][  T749] bridge0: port 1(bridge_slave_0) entered blocking state
[  703.325644][  T749] bridge0: port 1(bridge_slave_0) entered forwarding state
[  703.358079][  T749] bridge0: port 2(bridge_slave_1) entered blocking state
[  703.365316][  T749] bridge0: port 2(bridge_slave_1) entered forwarding state
[  703.403732][T12002] 8021q: adding VLAN 0 to HW filter on device batadv0
[  704.171832][T12002] veth0_vlan: entered promiscuous mode
[  704.224410][T12002] veth1_vlan: entered promiscuous mode
[  704.331930][T12002] veth0_macvtap: entered promiscuous mode
[  704.369229][T12002] veth1_macvtap: entered promiscuous mode
[  704.389098][T12125] 8021q: adding VLAN 0 to HW filter on device batadv0
[  704.448135][T12002] batman_adv: batadv0: Interface activated: batadv_slave_0
[  704.465079][T12002] batman_adv: batadv0: Interface activated: batadv_slave_1
[  704.569994][  T749] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  704.814639][  T749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  704.850091][  T749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  704.892498][T12125] veth0_vlan: entered promiscuous mode
[  704.943640][T12317] 8021q: adding VLAN 0 to HW filter on device batadv0
[  704.981017][T12125] veth1_vlan: entered promiscuous mode
[  704.996700][ T5922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  705.006533][T10614] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  705.019735][ T5922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  705.034923][T10614] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  705.080206][T10880] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  705.183755][T12125] veth0_macvtap: entered promiscuous mode
[  705.237126][T12125] veth1_macvtap: entered promiscuous mode
[  705.358189][T12125] batman_adv: batadv0: Interface activated: batadv_slave_0
[  707.725529][T12125] batman_adv: batadv0: Interface activated: batadv_slave_1
[  707.819879][ T8482] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  707.864641][   T80] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  707.914322][   T80] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  708.054926][   T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  708.615191][T12578] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size.
[  708.982878][T12573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1618'.
[  709.309234][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.342198][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.616573][T12590] xt_hashlimit: size too large, truncated to 1048576
[  710.494170][T12595] netlink: 'syz.5.1621': attribute type 2 has an invalid length.
[  710.502459][T12595] netlink: 'syz.5.1621': attribute type 1 has an invalid length.
[  711.587712][ T9615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  711.812850][ T9615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  711.911428][T12317] veth0_vlan: entered promiscuous mode
[  711.952458][T12601] xt_hashlimit: size too large, truncated to 1048576
[  712.694687][T12594] Process accounting resumed
[  712.995972][T12317] veth1_vlan: entered promiscuous mode
[  714.499920][T12317] veth0_macvtap: entered promiscuous mode
[  715.533831][T12317] veth1_macvtap: entered promiscuous mode
[  716.170613][T12631] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  716.226081][T12317] batman_adv: batadv0: Interface activated: batadv_slave_0
[  717.252686][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1560'.
[  717.766557][T12317] batman_adv: batadv0: Interface activated: batadv_slave_1
[  718.239748][   T33] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  718.273084][ T9615] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  719.130021][   T33] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  720.686228][   T48] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  721.584025][ T5743] IPVS: starting estimator thread 0...
[  723.159123][T12670] random: crng reseeded on system resumption
[  724.142257][ T9615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  724.185201][T12674] IPVS: using max 23 ests per chain, 55200 per kthread
[  724.329539][ T9615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.529659][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  724.560654][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.956490][T12693] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[12002] was attempted by ""[12693]
[  724.983897][T12693] netlink: 'syz.5.1645': attribute type 29 has an invalid length.
[  725.020267][T12693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  725.514072][T12695] fuse: Bad value for 'fd'
[  725.563087][   T30] audit: type=1326 audit(1785519106.557:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.6.1646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ad9e019 code=0x7ffc0000
[  726.437271][T12688] netlink: 'syz.1.1649': attribute type 10 has an invalid length.
[  726.489405][   T30] audit: type=1326 audit(1785519106.557:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.6.1646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ad9e019 code=0x7ffc0000
[  726.515216][T12688] bridge0: port 3(netdevsim0) entered disabled state
[  726.522159][T12688] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.530025][T12688] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.626053][   T30] audit: type=1326 audit(1785519106.557:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.6.1646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f734ad5e84e code=0x7ffc0000
[  726.924418][   T30] audit: type=1326 audit(1785519106.566:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.6.1646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ad9e019 code=0x7ffc0000
[  726.949991][   T30] audit: type=1326 audit(1785519106.566:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.6.1646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ad9e019 code=0x7ffc0000
[  727.089534][T12706] loop2: detected capacity change from 0 to 8
[  727.986209][   T30] audit: type=1326 audit(1785519106.566:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.6.1646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f734ad9e019 code=0x7ffc0000
[  728.011621][   T30] audit: type=1326 audit(1785519106.566:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.6.1646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ad9e019 code=0x7ffc0000
[  728.464135][T12688] bridge0: port 3(netdevsim0) entered blocking state
[  728.471027][T12688] bridge0: port 3(netdevsim0) entered forwarding state
[  728.478284][T12688] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.485457][T12688] bridge0: port 2(bridge_slave_1) entered forwarding state
[  728.492981][T12688] bridge0: port 1(bridge_slave_0) entered blocking state
[  728.500180][T12688] bridge0: port 1(bridge_slave_0) entered forwarding state
[  728.507590][   T30] audit: type=1326 audit(1785519106.585:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.6.1646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ad9e019 code=0x7ffc0000
[  728.532865][   T30] audit: type=1326 audit(1785519106.585:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.6.1646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f734ad9e019 code=0x7ffc0000
[  728.626951][   T30] audit: type=1326 audit(1785519106.585:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.6.1646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ad9e019 code=0x7ffc0000
[  728.881720][T12688] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  729.212650][T12715] loop2: detected capacity change from 0 to 32768
[  729.484290][T12715] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  729.817815][T12717] veth0_macvtap: entered allmulticast mode
[  729.835122][T12717] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  731.145981][T12125] ocfs2: Unmounting device (7,2) on (node local)
[  731.657808][T12741] xt_hashlimit: size too large, truncated to 1048576
[  732.681017][T12744] xt_hashlimit: size too large, truncated to 1048576
[  735.024916][T12760] loop9: detected capacity change from 0 to 512
[  735.254641][T12760] EXT4-fs: Ignoring removed nomblk_io_submit option
[  736.062166][T12760] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  736.505662][T12760] EXT4-fs (loop9): 1 truncate cleaned up
[  736.579879][T12760] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  736.984465][T12760] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000.
[  738.508147][T12317] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  739.104736][T12815] xt_hashlimit: size too large, truncated to 1048576
[  740.870918][T12837] trusted_key: encrypted_key: key trusted:syz not found
[  742.810367][T12854] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  744.466873][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1684'.
[  746.893850][T12874] No control pipe specified
[  748.935348][T12884] 9p: Bad value for 'rfdno'
[  750.533340][T12896] loop2: detected capacity change from 0 to 32768
[  750.546636][T12897] xt_hashlimit: size too large, truncated to 1048576
[  751.344275][T12896] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  752.230190][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  752.230217][   T30] audit: type=1800 audit(1785519131.147:95): pid=12907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1694" name="file1" dev="loop2" ino=17059 res=0 errno=0
[  753.856634][T12125] ocfs2: Unmounting device (7,2) on (node local)
[  754.029738][T12919] hub 8-0:1.0: USB hub found
[  754.038164][T12919] hub 8-0:1.0: 1 port detected
[  754.848482][T12921] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  758.619676][T11783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  758.634292][T11783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  758.644669][T11783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  759.475650][T11783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  759.484346][T11783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  761.748595][ T5641] Bluetooth: hci3: command tx timeout
[  764.013380][ T5641] Bluetooth: hci3: command tx timeout
[  764.956520][T12973] syzkaller0: entered promiscuous mode
[  764.980162][T12973] syzkaller0: entered allmulticast mode
[  765.503386][T12973] netlink: 'syz.2.1712': attribute type 10 has an invalid length.
[  765.541506][T12971] se_device not configured yet, cannot port link
[  765.544976][T12973] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.555792][T12973] bridge0: port 1(bridge_slave_0) entered disabled state
[  765.662482][T12973] bridge0: port 2(bridge_slave_1) entered blocking state
[  765.669744][T12973] bridge0: port 2(bridge_slave_1) entered forwarding state
[  765.677341][T12973] bridge0: port 1(bridge_slave_0) entered blocking state
[  765.684540][T12973] bridge0: port 1(bridge_slave_0) entered forwarding state
[  765.837384][T12973] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  765.864568][T11783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  765.876160][T11783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  765.888841][T11783] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  765.902101][T11783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  765.910182][T11783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  766.310380][ T5641] Bluetooth: hci3: command tx timeout
[  768.166998][ T5641] Bluetooth: hci6: command tx timeout
[  768.487006][T13016] syz_tun: entered allmulticast mode
[  768.511519][ T5641] Bluetooth: hci3: command tx timeout
[  769.377241][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  769.384546][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  769.402899][T13025] loop9: detected capacity change from 0 to 8
[  770.428698][ T5641] Bluetooth: hci6: command tx timeout
[  771.411664][T13015] syz_tun: left allmulticast mode
[  773.225044][ T5641] Bluetooth: hci6: command tx timeout
[  774.143361][ T9615] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.337760][T13071] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  775.845578][ T5641] Bluetooth: hci6: command tx timeout
[  777.823566][T13089] netlink: 'syz.4.1733': attribute type 10 has an invalid length.
[  777.895950][T13089] bridge0: port 2(bridge_slave_1) entered disabled state
[  777.904354][T13089] bridge0: port 1(bridge_slave_0) entered disabled state
[  778.028146][T13099] overlayfs: missing 'lowerdir'
[  778.049617][T13089] bridge0: port 2(bridge_slave_1) entered blocking state
[  778.056889][T13089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  778.064469][T13089] bridge0: port 1(bridge_slave_0) entered blocking state
[  778.071662][T13089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  778.269367][T13104] loop5: detected capacity change from 0 to 17
[  778.630910][T13104] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop5
[  778.661883][T13089] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  779.312261][ T9615] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  781.421244][T13124] 9p: Bad value for 'rfdno'
[  784.536419][ T9615] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.861979][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1748'.
[  787.096354][T13160] loop2: detected capacity change from 0 to 32768
[  787.139686][T13160] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1747 (13160)
[  787.319992][T13160] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  787.331050][T13160] BTRFS info (device loop2): using sha256 checksum algorithm
[  787.522685][T13160] BTRFS info (device loop2): enabling ssd optimizations
[  787.530165][T13160] BTRFS info (device loop2): turning on sync discard
[  787.536925][T13160] BTRFS info (device loop2): enabling free space tree
[  787.543875][T13160] BTRFS info (device loop2): use zlib compression, level 3
[  788.098550][ T5641] Bluetooth: hci4: command 0x0406 tx timeout
[  788.128936][   T30] audit: type=1800 audit(1785519164.208:96): pid=13181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1747" name="file1" dev="loop2" ino=260 res=0 errno=0
[  788.613988][ T9615] bridge0: port 3(netdevsim0) entered disabled state
[  788.770428][ T9615] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode
[  788.791478][ T9615] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[  789.023911][ T9615] bridge0: port 3(netdevsim0) entered disabled state
[  789.052149][ T9615] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.542235][T12125] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  794.839377][T13210] 9p: Bad value for 'rfdno'
[  795.138329][T13206] xt_cgroup: path and classid specified
[  795.916309][T11783] Bluetooth: hci4: unexpected event for opcode 0x204e
[  796.772305][T13230] loop9: detected capacity change from 0 to 512
[  797.947053][T13230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  797.962883][T13230] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  799.712677][ T5641] Bluetooth: hci7: command 0x0406 tx timeout
[  801.343318][T12317] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  801.434728][T12942] bridge0: port 1(bridge_slave_0) entered blocking state
[  801.467762][T12942] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.702424][T12942] bridge_slave_0: entered allmulticast mode
[  801.725875][T12942] bridge_slave_0: entered promiscuous mode
[  803.055113][T12942] bridge0: port 2(bridge_slave_1) entered blocking state
[  803.798800][T13275] loop9: detected capacity change from 0 to 256
[  803.806065][T13275] exfat: Deprecated parameter 'utf8'
[  804.056050][ T5750] IPVS: starting estimator thread 0...
[  804.056816][T12942] bridge0: port 2(bridge_slave_1) entered disabled state
[  804.091017][T12942] bridge_slave_1: entered allmulticast mode
[  804.108041][T12942] bridge_slave_1: entered promiscuous mode
[  804.122064][T13275] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  804.210702][T13281] IPVS: using max 23 ests per chain, 55200 per kthread
[  805.984191][ T9615] bridge_slave_1: left allmulticast mode
[  805.992653][ T9615] bridge_slave_1: left promiscuous mode
[  806.002059][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state
[  806.318963][ T9615] bridge_slave_0: left allmulticast mode
[  806.462056][ T9615] bridge_slave_0: left promiscuous mode
[  806.633776][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.642733][T13307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  810.139596][ T9615] bond1 (unregistering): (slave geneve4): Releasing active interface
[  810.604639][T11783] Bluetooth: hci4: command 0x0406 tx timeout
[  810.970608][   T30] audit: type=1326 audit(1785519185.448:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.9.1775" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a8b9e019 code=0x7fc00000
[  811.200389][ T9615] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  811.661855][ T9615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  811.681617][ T9615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  811.717604][ T9615] bond0 (unregistering): Released all slaves
[  811.805530][ T9615] bond1 (unregistering): Released all slaves
[  812.668007][T12942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  812.815601][ T5641] Bluetooth: hci4: command 0x0406 tx timeout
[  814.427437][T12942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  814.472311][ T9615] tipc: Left network mode
[  814.830300][T13377] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  816.580283][T12991] bridge0: port 1(bridge_slave_0) entered blocking state
[  817.268994][T12991] bridge0: port 1(bridge_slave_0) entered disabled state
[  817.301027][T12991] bridge_slave_0: entered allmulticast mode
[  817.482564][T13395] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  817.505560][T12991] bridge_slave_0: entered promiscuous mode
[  817.568733][T12991] bridge0: port 2(bridge_slave_1) entered blocking state
[  817.622883][T12991] bridge0: port 2(bridge_slave_1) entered disabled state
[  817.666500][T12991] bridge_slave_1: entered allmulticast mode
[  817.732758][T13402] loop2: detected capacity change from 0 to 512
[  817.773906][T12991] bridge_slave_1: entered promiscuous mode
[  818.272286][T13402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  818.285437][T13402] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  819.215139][T11783] Bluetooth: hci4: unexpected event for opcode 0x2028
[  819.238731][T12942] team0: Port device team_slave_0 added
[  819.335671][T12942] team0: Port device team_slave_1 added
[  819.716254][T12125] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  819.723889][T12991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  820.631651][T13417] loop5: detected capacity change from 0 to 256
[  820.639045][T13417] exfat: Deprecated parameter 'utf8'
[  820.653724][T11356] IPVS: starting estimator thread 0...
[  820.702833][T13417] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  820.759534][T13419] IPVS: using max 24 ests per chain, 57600 per kthread
[  820.905727][T12942] batman_adv: batadv0: Adding interface: batadv_slave_0
[  820.958419][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  821.009779][T13422] loop2: detected capacity change from 0 to 128
[  821.065569][T13422] EXT4-fs: Ignoring removed orlov option
[  821.166436][T13427] trusted_key: encrypted_key: key trusted:syz not found
[  821.851234][T11783] Bluetooth: hci2: command 0x0406 tx timeout
[  821.891027][T12942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  821.944075][T13422] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  821.958320][T12991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  822.188792][T13422] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  822.303493][T12942] batman_adv: batadv0: Adding interface: batadv_slave_1
[  822.331931][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  822.793997][T13443] loop5: detected capacity change from 0 to 256
[  822.809877][T13443] exfat: Deprecated parameter 'utf8'
[  823.476133][T13443] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  823.479470][T12942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  825.095131][T11783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  825.111450][T11783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  825.119314][T11783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  825.130021][T11783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  825.142575][T11783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  826.293754][T12125] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  827.663973][ T5641] Bluetooth: hci0: command tx timeout
[  827.672023][   T30] audit: type=1326 audit(1785519200.866:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.5.1800" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc019e019 code=0x7fc00000
[  828.837311][T13496] hub 8-0:1.0: USB hub found
[  828.843477][T13496] hub 8-0:1.0: 1 port detected
[  829.608537][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  829.622901][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  829.646967][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  829.656696][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  829.666364][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  829.917274][ T5641] Bluetooth: hci0: command tx timeout
[  830.055371][T13507] xt_hashlimit: size too large, truncated to 1048576
[  831.221549][T13511] netlink: 'syz.4.1807': attribute type 13 has an invalid length.
[  831.273862][T13511] netlink: 'syz.4.1807': attribute type 27 has an invalid length.
[  831.306667][T13514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1807'.
[  832.267731][ T5641] Bluetooth: hci3: command tx timeout
[  832.274631][ T5641] Bluetooth: hci0: command tx timeout
[  832.972269][T13514] bond0: (slave bond_slave_0): Releasing backup interface
[  833.490123][T13533] loop5: detected capacity change from 0 to 256
[  833.497468][T13533] exfat: Deprecated parameter 'utf8'
[  833.958327][T13533] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  834.948644][T11783] Bluetooth: hci0: command tx timeout
[  834.954248][T11783] Bluetooth: hci3: command tx timeout
[  835.420724][T13514] bond_slave_0: entered promiscuous mode
[  835.466117][T13514] bond_slave_0: entered allmulticast mode
[  835.626539][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  835.635043][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  837.222123][ T5641] Bluetooth: hci3: command tx timeout
[  838.511561][ T9615] hsr_slave_0: left promiscuous mode
[  838.692612][T13567] 
[  838.694977][T13567] ======================================================
[  838.701988][T13567] WARNING: possible circular locking dependency detected
[  838.709016][T13567] syzkaller #0 Not tainted
[  838.713439][T13567] ------------------------------------------------------
[  838.720461][T13567] syz.5.1815/13567 is trying to acquire lock:
[  838.726536][T13567] ffffffff901d3828 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950
[  838.736354][T13567] 
[  838.736354][T13567] but task is already holding lock:
[  838.743781][T13567] ffff88804fb33a40 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0
[  838.753531][T13567] 
[  838.753531][T13567] which lock already depends on the new lock.
[  838.753531][T13567] 
[  838.763938][T13567] 
[  838.763938][T13567] the existing dependency chain (in reverse order) is:
[  838.772950][T13567] 
[  838.772950][T13567] -> #2 (&sb->s_type->i_mutex_key#26){++++}-{4:4}:
[  838.781685][T13567]        lock_acquire+0x1b9/0x370
[  838.786735][T13567]        down_write+0x8b/0x1f0
[  838.791525][T13567]        configfs_depend_item_unlocked+0xf3/0x6a0
[  838.797956][T13567]        usbg_make_tpg+0x261/0x620
[  838.803089][T13567]        target_fabric_make_tpg+0xab/0x8c0
[  838.808927][T13567]        configfs_mkdir+0x51e/0xb70
[  838.814141][T13567]        vfs_mkdir+0x361/0x850
[  838.818917][T13567]        filename_mkdirat+0x48b/0x5e0
[  838.824320][T13567]        __x64_sys_mkdir+0x6b/0x90
[  838.829462][T13567]        do_syscall_64+0x115/0x870
[  838.834597][T13567]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.841034][T13567] 
[  838.841034][T13567] -> #1 (&opts->dep_lock){+.+.}-{4:4}:
[  838.848719][T13567]        lock_acquire+0x1b9/0x370
[  838.853764][T13567]        __mutex_lock+0x1a4/0x1bd0
[  838.858908][T13567]        tcm_set_name+0x29/0xb0
[  838.863776][T13567]        function_make+0x21c/0x3f0
[  838.868954][T13567]        configfs_mkdir+0x51e/0xb70
[  838.874169][T13567]        vfs_mkdir+0x361/0x850
[  838.878952][T13567]        filename_mkdirat+0x48b/0x5e0
[  838.884358][T13567]        __x64_sys_mkdir+0x6b/0x90
[  838.889502][T13567]        do_syscall_64+0x115/0x870
[  838.894637][T13567]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.901070][T13567] 
[  838.901070][T13567] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[  838.909354][T13567]        check_prev_add+0xeb/0xe60
[  838.914486][T13567]        __lock_acquire+0x136c/0x1a40
[  838.919878][T13567]        lock_acquire+0x1b9/0x370
[  838.924920][T13567]        __mutex_lock+0x1a4/0x1bd0
[  838.930053][T13567]        configfs_rmdir+0x5ae/0x950
[  838.935263][T13567]        vfs_rmdir+0x328/0x8a0
[  838.940043][T13567]        filename_rmdir+0x31a/0x5c0
[  838.945272][T13567]        __x64_sys_rmdir+0x46/0x70
[  838.950413][T13567]        do_syscall_64+0x115/0x870
[  838.955544][T13567]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.961972][T13567] 
[  838.961972][T13567] other info that might help us debug this:
[  838.961972][T13567] 
[  838.972200][T13567] Chain exists of:
[  838.972200][T13567]   gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#26
[  838.972200][T13567] 
[  838.986948][T13567]  Possible unsafe locking scenario:
[  838.986948][T13567] 
[  838.994396][T13567]        CPU0                    CPU1
[  838.999756][T13567]        ----                    ----
[  839.005115][T13567]   lock(&sb->s_type->i_mutex_key#26);
[  839.010600][T13567]                                lock(&opts->dep_lock);
[  839.017545][T13567]                                lock(&sb->s_type->i_mutex_key#26);
[  839.025552][T13567]   lock(gadget_subsys.su_mutex);
[  839.030585][T13567] 
[  839.030585][T13567]  *** DEADLOCK ***
[  839.030585][T13567] 
[  839.038720][T13567] 3 locks held by syz.5.1815/13567:
[  839.043917][T13567]  #0: ffff88801df62450 (sb_writers#14){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0
[  839.053405][T13567]  #1: ffff88804f8e4600 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0
[  839.064829][T13567]  #2: ffff88804fb33a40 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0
[  839.075000][T13567] 
[  839.075000][T13567] stack backtrace:
[  839.080888][T13567] CPU: 1 UID: 0 PID: 13567 Comm: syz.5.1815 Not tainted syzkaller #0 PREEMPT(full) 
[  839.080931][T13567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  839.080952][T13567] Call Trace:
[  839.080965][T13567]  <TASK>
[  839.080979][T13567]  dump_stack_lvl+0x100/0x190
[  839.081022][T13567]  print_circular_bug.cold+0x178/0x1c7
[  839.081083][T13567]  check_noncircular+0x146/0x160
[  839.081117][T13567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  839.081169][T13567]  check_prev_add+0xeb/0xe60
[  839.081207][T13567]  ? __bfs+0x150/0x2a0
[  839.081264][T13567]  __lock_acquire+0x136c/0x1a40
[  839.081313][T13567]  lock_acquire+0x1b9/0x370
[  839.081351][T13567]  ? configfs_rmdir+0x5ae/0x950
[  839.081389][T13567]  ? __pfx___might_resched+0x10/0x10
[  839.081429][T13567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  839.081472][T13567]  ? __lock_acquire+0x49f/0x1a40
[  839.081513][T13567]  __mutex_lock+0x1a4/0x1bd0
[  839.081561][T13567]  ? configfs_rmdir+0x5ae/0x950
[  839.081596][T13567]  ? configfs_rmdir+0x5ae/0x950
[  839.081633][T13567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  839.081678][T13567]  ? reacquire_held_locks+0xce/0x1e0
[  839.081724][T13567]  ? __pfx___mutex_lock+0x10/0x10
[  839.081771][T13567]  ? do_raw_spin_lock+0x128/0x260
[  839.081817][T13567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  839.081860][T13567]  ? find_held_lock+0x2b/0x80
[  839.081912][T13567]  ? fast_dput+0x2fe/0x6d0
[  839.081950][T13567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  839.081997][T13567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  839.082040][T13567]  ? _raw_spin_unlock+0x28/0x50
[  839.082076][T13567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  839.082119][T13567]  ? fast_dput+0x168/0x6d0
[  839.082159][T13567]  ? configfs_rmdir+0x5ae/0x950
[  839.082193][T13567]  configfs_rmdir+0x5ae/0x950
[  839.082235][T13567]  ? __pfx_configfs_rmdir+0x10/0x10
[  839.082271][T13567]  ? __pfx_down_write+0x10/0x10
[  839.082319][T13567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  839.082368][T13567]  vfs_rmdir+0x328/0x8a0
[  839.082409][T13567]  filename_rmdir+0x31a/0x5c0
[  839.082466][T13567]  ? __pfx_filename_rmdir+0x10/0x10
[  839.082531][T13567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  839.082574][T13567]  ? do_getname+0x191/0x390
[  839.082611][T13567]  __x64_sys_rmdir+0x46/0x70
[  839.082666][T13567]  do_syscall_64+0x115/0x870
[  839.082719][T13567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  839.082758][T13567] RIP: 0033:0x7fdfc019e019
[  839.082786][T13567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  839.082821][T13567] RSP: 002b:00007fdfc10c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  839.082855][T13567] RAX: ffffffffffffffda RBX: 00007fdfc0426180 RCX: 00007fdfc019e019
[  839.082879][T13567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440
[  839.082902][T13567] RBP: 00007fdfc023500c R08: 0000000000000000 R09: 0000000000000000
[  839.082924][T13567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  839.082947][T13567] R13: 00007fdfc0426218 R14: 00007fdfc0426180 R15: 00007ffc1024ba98
[  839.082984][T13567]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  839.769677][ T5641] Bluetooth: hci3: command tx timeout
[  841.222349][ T9615] hsr_slave_1: left promiscuous mode
[  841.228153][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  841.240097][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_0
[  841.261789][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  841.396412][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_1
[  841.421286][ T9615] virt_wifi0: left promiscuous mode
[  841.437834][ T9615] veth0_macvtap: left promiscuous mode
[  841.452975][ T9615] veth1_vlan: left promiscuous mode
[  841.468176][ T9615] veth0_vlan: left promiscuous mode
[  841.690656][ T9615] team0 (unregistering): Port device team_slave_1 removed
[  842.334464][ T9615] IPVS: stop unused estimator thread 0...
[  842.668234][ T9615] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.769804][ T9615] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.857902][ T9615] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.917306][ T9615] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.086977][ T9615] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.146497][ T9615] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.209672][ T9615] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.245363][ T9615] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.726425][ T9615] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.773239][ T9615] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.817588][ T9615] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.883044][ T9615] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  844.772510][ T9615] bridge_slave_1: left allmulticast mode
[  844.783297][ T9615] bridge_slave_1: left promiscuous mode
[  844.789513][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state
[  844.802789][ T9615] bridge_slave_0: left allmulticast mode
[  844.814186][ T9615] bridge_slave_0: left promiscuous mode
[  844.819946][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state
[  844.832704][ T9615] bridge_slave_1: left allmulticast mode
[  844.838399][ T9615] bridge_slave_1: left promiscuous mode
[  844.846058][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state
[  844.854887][ T9615] bridge_slave_0: left allmulticast mode
[  844.860570][ T9615] bridge_slave_0: left promiscuous mode
[  844.868902][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state
[  844.885651][ T9615] bridge_slave_1: left allmulticast mode
[  844.891342][ T9615] bridge_slave_1: left promiscuous mode
[  844.902595][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state
[  844.911390][ T9615] bridge_slave_0: left allmulticast mode
[  844.917297][ T9615] bridge_slave_0: left promiscuous mode
[  844.923012][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state
[  844.933783][ T9615] bridge_slave_1: left allmulticast mode
[  844.940834][ T9615] bridge_slave_1: left promiscuous mode
[  844.946548][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state
[  844.955802][ T9615] bridge_slave_0: left allmulticast mode
[  844.964681][ T9615] bridge_slave_0: left promiscuous mode
[  844.970435][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state
[  844.986166][ T9615] bridge_slave_1: left allmulticast mode
[  844.991876][ T9615] bridge_slave_1: left promiscuous mode
[  845.000941][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state
[  845.011465][ T9615] bridge_slave_0: left allmulticast mode
[  845.023564][ T9615] bridge_slave_0: left promiscuous mode
[  845.029611][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state
[  845.162542][ T9615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  845.174241][ T9615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  845.184603][ T9615] bond0 (unregistering): Released all slaves
[  845.222405][ T9615] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  845.238099][ T9615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  845.250159][ T9615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  845.261713][ T9615] bond0 (unregistering): Released all slaves
[  845.289507][ T9615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  845.301529][ T9615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  845.311819][ T9615] bond0 (unregistering): Released all slaves
[  845.381328][ T9615] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  845.393115][ T9615] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  845.420163][ T9615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  845.431803][ T9615] bond0 (unregistering): Released all slaves
[  845.440818][ T9615] bond1 (unregistering): Released all slaves
[  845.473310][ T9615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  845.483475][ T9615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  845.493293][ T9615] bond0 (unregistering): Released all slaves
[  845.639645][ T9615] tipc: Left network mode
[  846.166570][ T9615] hsr_slave_0: left promiscuous mode
[  846.172497][ T9615] hsr_slave_1: left promiscuous mode
[  846.179337][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  846.191528][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_0
[  846.199287][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  846.206807][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_1
[  846.216864][ T9615] hsr_slave_0: left promiscuous mode
[  846.223074][ T9615] hsr_slave_1: left promiscuous mode
[  846.228874][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  846.236267][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_0
[  846.244020][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  846.251423][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_1
[  846.260950][ T9615] hsr_slave_0: left promiscuous mode
[  846.266621][ T9615] hsr_slave_1: left promiscuous mode
[  846.272566][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  846.279953][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_0
[  846.287748][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  846.295196][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_1
[  846.302731][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_0
[  846.311784][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_1
[  846.327857][ T9615] veth1_macvtap: left promiscuous mode
[  846.333332][ T9615] veth0_macvtap: left promiscuous mode
[  846.339333][ T9615] veth1_vlan: left promiscuous mode
[  846.344580][ T9615] veth0_vlan: left promiscuous mode
[  846.350871][ T9615] veth1_macvtap: left promiscuous mode
[  846.356347][ T9615] veth0_macvtap: left promiscuous mode
[  846.361969][ T9615] veth1_vlan: left promiscuous mode
[  846.367238][ T9615] veth0_vlan: left promiscuous mode
[  846.374886][ T9615] veth0_macvtap: left promiscuous mode
[  846.380501][ T9615] veth1_vlan: left promiscuous mode
[  846.385700][ T9615] veth0_vlan: left promiscuous mode
[  846.565933][ T9615] team0 (unregistering): Port device team_slave_1 removed
[  846.579591][ T9615] team0 (unregistering): Port device team_slave_0 removed
[  846.744910][ T9615] team0 (unregistering): Port device team_slave_1 removed
[  846.761637][ T9615] team0 (unregistering): Port device team_slave_0 removed
[  847.016077][ T9615] team0 (unregistering): Port device team_slave_1 removed
[  847.098815][ T9615] team0 (unregistering): Port device team_slave_1 removed
[  847.110590][ T9615] team0 (unregistering): Port device team_slave_0 removed
[  848.228181][ T9615] IPVS: stop unused estimator thread 0...
[  848.234539][ T9615] IPVS: stop unused estimator thread 0...
[  848.240946][ T9615] IPVS: stop unused estimator thread 0...
[  848.389153][ T9615] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  848.399575][ T9615] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.455184][ T9615] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  848.465618][ T9615] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.521416][ T9615] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  848.531907][ T9615] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.586301][ T9615] bridge0: port 3(netdevsim0) entered disabled state
[  848.607243][ T9615] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode
[  848.618663][ T9615] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode
[  848.629430][ T9615] bridge0: port 3(netdevsim0) entered disabled state
[  848.638954][ T9615] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  848.650082][ T9615] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0