last executing test programs:

19m5.505263109s ago: executing program 1 (id=591):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

19m5.082921707s ago: executing program 1 (id=595):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r3, 0x0, 0x78)
sendfile(r2, r3, &(0x7f00000001c0), 0x8)
fcntl$addseals(r3, 0x409, 0x8)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, r4)
timerfd_create(0x5, 0x0)

19m3.484009085s ago: executing program 1 (id=603):
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @remote}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002)
sendmsg(r0, &(0x7f0000000b40)={&(0x7f0000000000)=@ll={0x11, 0x18, r4, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="cfe9947a635524682e163055b369c1183bf35afed69b51d60792f5f39c81218977984f3985cc8340a04d56d9e12d6869f599a4314ee70acddf40da318d65b62102f53d5e8954444b4ff3fdd64875ba4665cc0184c6eef9eb1b3138f21b17b019a344eded35fad5c9b826aa0258495d1f4f4c9aa59a7eba8aabf481e79a1893e010de8302d3252b5563c1fa90ce42d4dc316648e16e58a1eeb5", 0x99}, {&(0x7f0000000380)="c0cd87ca112c211b516221302a4598ad6b68b7", 0x13}, {&(0x7f0000000400)="47fd8402cea3360b4e760761a414032e2337bb682e034f5191d24800ef79d7992ff8208c1aad813d8ba19cf3a873a97f3cca8cf00f0baf5d4c8af707061a2fe2a44af2da9d3761b868c58863a075346947e35497a61b110226f1e0790e67c4d46d87515ed3ada9db82ef5c95a50244b04b50aa9b27c85bceca0b2112ac9e5e955075999080858d0aff90a35dfa6d5aad971ae918b9f817512c6e97a76cd75ac0d553fa704500deab2f46c73e197993f7bb76bb9a5316f8593c5f12c73454c9ad82e74c4068e65f", 0xc7}], 0x3, &(0x7f0000000800)=[{0xc8, 0x10f, 0xa75, "ee2732f84dd9bf1accc5d48afb2f606afa19b671723f81b9391f364c22cfd9f420050895cbe68057ccd13bdf50939d3cf277dd72c1062e3c26ccec365d99fbcded82d5b048063428f2c286e1dfd26e75ae4f455db6fffd009d667ba25c9284fc14b7a3626948627d9607506edb5988ca8901bd57fc12c7f0f75ae90ef98477cfa164f6c13f2c81be9ecf703e7cc66bf3a3eb44a7f631b1852f5503a800abff475548a40fa72657c7adcce3564fbf87fade43e0e6"}, {0x30, 0x2, 0x357cfe31, "4d47a93d7b15bc403bc0ef3a38a81ed874160e01e3af8857546cedf691120d70"}, {0xf8, 0x10c, 0xd, "08b3cf810833b614ca132432cb8e55e0c0e5b9f6f08e8e1fb598af6edbb5582a4e28cf477f5468d1622b2cb8a54dbbbde624460dea0a2d12211f45e489c445ba0735b51a4bc4e7f5d027d0e1557ad7cb676bf1e844f04fd41dee44281713abf596ab0d34362f703e1e8832923164497ed5d4444a473cd8287770ea33598e9fb159b28f0c84cd63376c250e8a1c8e38f5deecdc9dba821d186b5865532fb0e1d68ad86c8015bc857533449770084ab5277690c3ad2d3cd2f6e498b71ad0d6047858d4655a6fe547683be7edf55997aa17dcd9f1189b2346e66fa36bf356ce3acfea1fe09331506e"}, {0xa0, 0x10f, 0x4, "977bcc814f99fe5d78558b9b05b83da02d39d6cc2873f96dec8dd2af403d8e809934540e123347b7280d918c78256fc9d99fb10e42bafdb75d0486c89c8aab25be6dcf262a83ae99a144a54b9d09327981775c0643478c24e85399ad37472c06479d9b7a86adccb198fdc49104edd5798f7c3e9c331881cd6ac70343e3d87f7f92da6d9f314926b090c8b34c"}, {0x58, 0x116, 0x3, "e0bd42576a8b2660db90aa452d49774541a92e2c3cc6435a252c3c85d86aa705f3c8b35e9a7c227267b76aabdbf5c30ccbd3ea439571a6b031cad22247aa42f37659"}, {0x40, 0x101, 0x5, "ed25f9e605bf38fab5e650f29425d55d69e73d873da8aecfedb1f49daa0d66e54b87d53bb2431425d5a9346532"}, {0x10, 0x108, 0x8fa}], 0x338}, 0x4000004)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @multicast2, 0xdffd, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44)
getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040))
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040)

19m2.317787102s ago: executing program 1 (id=607):
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
syz_emit_ethernet(0x56, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000080)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @dev}}}}, 0x0)

19m1.998844319s ago: executing program 1 (id=612):
syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), 0x0, &(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

19m1.193418709s ago: executing program 1 (id=616):
unshare(0x6020400)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0xe80, 0x0, &(0x7f0000000140)="f80204000000000000007f530800d31e0edf4dd3", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x400)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000300)=0x4)
bind$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x2, 0x2}, {0x10, 0xf}, {0xffff, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xfe, 0xc0}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0x1, 0x2}}}}]}, 0x48}}, 0x62741984eb7a0734)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044080)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

18m45.780236269s ago: executing program 32 (id=616):
unshare(0x6020400)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0xe80, 0x0, &(0x7f0000000140)="f80204000000000000007f530800d31e0edf4dd3", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x400)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000300)=0x4)
bind$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x2, 0x2}, {0x10, 0xf}, {0xffff, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xfe, 0xc0}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0x1, 0x2}}}}]}, 0x48}}, 0x62741984eb7a0734)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044080)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

14m21.969559336s ago: executing program 4 (id=1428):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x4)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00')
pread64(r3, &(0x7f00000000c0)=""/144, 0xfffffd48, 0x21908ed7)

14m20.539784548s ago: executing program 4 (id=1430):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000140)={&(0x7f00000000c0)=[{0x2416, 0x0, 0x0, 0x0}], 0x1})

14m15.013255782s ago: executing program 4 (id=1446):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff", 0x48}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf74", 0x92}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff1", 0x78}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

14m14.809397564s ago: executing program 4 (id=1448):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084)

14m11.15998312s ago: executing program 4 (id=1455):
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000340)={{0x2, 0x3, 0x401, 0x4, 'syz0\x00', 0x6}, 0x4, 0x4, 0x7, r2, 0x0, 0x7, 'syz1\x00', &(0x7f0000000080)})
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
r8 = timerfd_create(0x8, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240))
msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x6800)
readv(r8, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/104, 0x68}, {0x0}], 0x2)
ioctl$TFD_IOC_SET_TICKS(r8, 0x40085400, &(0x7f0000000240)=0x401)
ioctl$XFS_IOC_BULKSTAT(r7, 0x8040587f, &(0x7f0000000540)={{0x2, 0x3, 0x533b9df5, 0xfffffff7, 0x99}, &(0x7f0000000480)=[{}]})
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37)

14m8.311381107s ago: executing program 4 (id=1463):
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000002c0)={0xffffffee, "368cf99a33ad8127d00c36b713bcfe590db8e6223f39ea9f425b20f8191cc43d", 0x0, 0x800, 0x20007, 0x4, 0x10, 0x0, 0xc8, 0x8fd})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0)

14m5.428484497s ago: executing program 2 (id=1474):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29", 0x92}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6", 0x9}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

14m3.928172979s ago: executing program 2 (id=1478):
file_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x2000, 0x9, 0x1, 0x80000001, 0x4}, 0x18, 0x0)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
mq_open(0x0, 0x800, 0x1be, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmctl$SHM_UNLOCK(r1, 0xc)
r2 = openat(0xffffffffffffff9c, 0x0, 0x441c2, 0x0)
ftruncate(r2, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x40000, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r3, r2, 0x0, 0x578410eb)
landlock_restrict_self(r0, 0x9)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)
socket$nl_netfilter(0x10, 0x3, 0xc)

14m0.525214543s ago: executing program 2 (id=1484):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff", 0x48}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf74", 0x92}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff1", 0x78}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, 0x0, 0x0, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

14m0.259411322s ago: executing program 2 (id=1486):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r3, r3, &(0x7f0000000080), 0x7f03)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)

13m57.816558116s ago: executing program 2 (id=1496):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

13m56.713589861s ago: executing program 2 (id=1502):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0)
syz_open_procfs(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0xffff, 0x1, 0xaf25, 0x1000})

13m52.68158431s ago: executing program 33 (id=1463):
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000002c0)={0xffffffee, "368cf99a33ad8127d00c36b713bcfe590db8e6223f39ea9f425b20f8191cc43d", 0x0, 0x800, 0x20007, 0x4, 0x10, 0x0, 0xc8, 0x8fd})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0)

13m41.654871854s ago: executing program 34 (id=1502):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0)
syz_open_procfs(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0xffff, 0x1, 0xaf25, 0x1000})

11m18.338073206s ago: executing program 0 (id=1972):
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @remote}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002)
sendmsg(r0, &(0x7f0000000b40)={&(0x7f0000000000)=@ll={0x11, 0x18, r4, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="cfe9947a635524682e163055b369c1183bf35afed69b51d60792f5f39c81218977984f3985cc8340a04d56d9e12d6869f599a4314ee70acddf40da318d65b62102f53d5e8954444b4ff3fdd64875ba4665cc0184c6eef9eb1b3138f21b17b019a344eded35fad5c9b826aa0258495d1f4f4c9aa59a7eba8aabf481e79a1893e010de8302d3252b5563c1fa90ce42d4dc316648e16e58a1eeb5", 0x99}, {&(0x7f0000000380)="c0cd87ca112c211b516221302a4598ad6b68b7", 0x13}, {&(0x7f0000000400)="47fd8402cea3360b4e760761a414032e2337bb682e034f5191d24800ef79d7992ff8208c1aad813d8ba19cf3a873a97f3cca8cf00f0baf5d4c8af707061a2fe2a44af2da9d3761b868c58863a075346947e35497a61b110226f1e0790e67c4d46d87515ed3ada9db82ef5c95a50244b04b50aa9b27c85bceca0b2112ac9e5e955075999080858d0aff90a35dfa6d5aad971ae918b9f817512c6e97a76cd75ac0d553fa704500deab2f46c73e197993f7bb76bb9a5316f8593c5f12c73454c9ad82e74c4068e65f", 0xc7}], 0x3, &(0x7f0000000800)=[{0xc8, 0x10f, 0xa75, "ee2732f84dd9bf1accc5d48afb2f606afa19b671723f81b9391f364c22cfd9f420050895cbe68057ccd13bdf50939d3cf277dd72c1062e3c26ccec365d99fbcded82d5b048063428f2c286e1dfd26e75ae4f455db6fffd009d667ba25c9284fc14b7a3626948627d9607506edb5988ca8901bd57fc12c7f0f75ae90ef98477cfa164f6c13f2c81be9ecf703e7cc66bf3a3eb44a7f631b1852f5503a800abff475548a40fa72657c7adcce3564fbf87fade43e0e6"}, {0x30, 0x2, 0x357cfe31, "4d47a93d7b15bc403bc0ef3a38a81ed874160e01e3af8857546cedf691120d70"}, {0xf8, 0x10c, 0xd, "08b3cf810833b614ca132432cb8e55e0c0e5b9f6f08e8e1fb598af6edbb5582a4e28cf477f5468d1622b2cb8a54dbbbde624460dea0a2d12211f45e489c445ba0735b51a4bc4e7f5d027d0e1557ad7cb676bf1e844f04fd41dee44281713abf596ab0d34362f703e1e8832923164497ed5d4444a473cd8287770ea33598e9fb159b28f0c84cd63376c250e8a1c8e38f5deecdc9dba821d186b5865532fb0e1d68ad86c8015bc857533449770084ab5277690c3ad2d3cd2f6e498b71ad0d6047858d4655a6fe547683be7edf55997aa17dcd9f1189b2346e66fa36bf356ce3acfea1fe09331506e"}, {0xa0, 0x10f, 0x4, "977bcc814f99fe5d78558b9b05b83da02d39d6cc2873f96dec8dd2af403d8e809934540e123347b7280d918c78256fc9d99fb10e42bafdb75d0486c89c8aab25be6dcf262a83ae99a144a54b9d09327981775c0643478c24e85399ad37472c06479d9b7a86adccb198fdc49104edd5798f7c3e9c331881cd6ac70343e3d87f7f92da6d9f314926b090c8b34c"}, {0x58, 0x116, 0x3, "e0bd42576a8b2660db90aa452d49774541a92e2c3cc6435a252c3c85d86aa705f3c8b35e9a7c227267b76aabdbf5c30ccbd3ea439571a6b031cad22247aa42f37659"}, {0x40, 0x101, 0x5, "ed25f9e605bf38fab5e650f29425d55d69e73d873da8aecfedb1f49daa0d66e54b87d53bb2431425d5a9346532"}, {0x10, 0x108, 0x8fa}], 0x338}, 0x4000004)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @multicast2, 0xdffd, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44)
getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

11m13.459640268s ago: executing program 0 (id=1980):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

11m12.319351077s ago: executing program 0 (id=1981):
socket$kcm(0x11, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r5, &(0x7f0000003080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=""/172, 0xac}, 0x110}], 0x400000000000180, 0x1822b, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = socket(0xa, 0x3, 0x3a)
bind$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f)

11m11.471266859s ago: executing program 0 (id=1982):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
capset(0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x2002, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x5, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0xc, 0x0, 0xb, 0x1000000, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffa, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffff, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x100000000001, 0x0)

11m9.446481877s ago: executing program 0 (id=1987):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x3c0, &(0x7f0000000180)=[0x10082, 0xec66, 0xff, 0x8, 0x98bd, 0x9, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x0, 0x7, 0x5, 0x5, 0x49, 0x400, 0x5, 0x0, 0x9, 0x8, 0x4000000000007, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x2, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x4, 0x888f, 0x4, 0x7, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0xd, 0x400, 0x3, 0xfffefffffffffff7, 0xc4, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffefffffffc, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x3, 0x4, 0x4, 0xcdc, 0x7, 0x8, 0x3, 0x2, 0x7, 0xfff, 0x3, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x3, 0x4, 0x2000000000000006, 0x1, 0x5, 0x7, 0x3, 0x8, 0xf6, 0x4, 0x6, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332d, 0x4, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0xf, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xffffffffffffff26, 0xcd, 0x8, 0x3]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000680)={0x5, r0, 0x4, {0x80, 0x2}, 0x2}, 0x1)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000002c0)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x80, 0x0}, 0x8400)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
preadv(r4, &(0x7f0000000880)=[{&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f0000000700)=""/22, 0x16}, {&(0x7f0000000740)=""/150, 0x96}], 0x3, 0x8, 0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1)
socket(0x2b, 0x80801, 0x1)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5457, 0x0)
r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x10, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x87ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x2, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x3, 0x7, 0xf58, 0x6]})
ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x9, 0x1ff, 0x1, 0x0, 0x7ffe, 0xffffffffffff8000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2000000000008, 0xffffffffffffffff, 0x2, 0x3, 0x7, 0x80000006, 0x8}, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7})

11m8.140036752s ago: executing program 0 (id=1990):
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @remote}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002)
sendmsg(r0, &(0x7f0000000b40)={&(0x7f0000000000)=@ll={0x11, 0x18, r4, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="cfe9947a635524682e163055b369c1183bf35afed69b51d60792f5f39c81218977984f3985cc8340a04d56d9e12d6869f599a4314ee70acddf40da318d65b62102f53d5e8954444b4ff3fdd64875ba4665cc0184c6eef9eb1b3138f21b17b019a344eded35fad5c9b826aa0258495d1f4f4c9aa59a7eba8aabf481e79a1893e010de8302d3252b5563c1fa90ce42d4dc316648e16e58a1eeb5", 0x99}, {&(0x7f0000000380)="c0cd87ca112c211b516221302a4598ad6b68b7", 0x13}, {&(0x7f0000000400)="47fd8402cea3360b4e760761a414032e2337bb682e034f5191d24800ef79d7992ff8208c1aad813d8ba19cf3a873a97f3cca8cf00f0baf5d4c8af707061a2fe2a44af2da9d3761b868c58863a075346947e35497a61b110226f1e0790e67c4d46d87515ed3ada9db82ef5c95a50244b04b50aa9b27c85bceca0b2112ac9e5e955075999080858d0aff90a35dfa6d5aad971ae918b9f817512c6e97a76cd75ac0d553fa704500deab2f46c73e197993f7bb76bb9a5316f8593c5f12c73454c9ad82e74c4068e65f", 0xc7}], 0x3, &(0x7f0000000800)=[{0xc8, 0x10f, 0xa75, "ee2732f84dd9bf1accc5d48afb2f606afa19b671723f81b9391f364c22cfd9f420050895cbe68057ccd13bdf50939d3cf277dd72c1062e3c26ccec365d99fbcded82d5b048063428f2c286e1dfd26e75ae4f455db6fffd009d667ba25c9284fc14b7a3626948627d9607506edb5988ca8901bd57fc12c7f0f75ae90ef98477cfa164f6c13f2c81be9ecf703e7cc66bf3a3eb44a7f631b1852f5503a800abff475548a40fa72657c7adcce3564fbf87fade43e0e6"}, {0x30, 0x2, 0x357cfe31, "4d47a93d7b15bc403bc0ef3a38a81ed874160e01e3af8857546cedf691120d70"}, {0xf8, 0x10c, 0xd, "08b3cf810833b614ca132432cb8e55e0c0e5b9f6f08e8e1fb598af6edbb5582a4e28cf477f5468d1622b2cb8a54dbbbde624460dea0a2d12211f45e489c445ba0735b51a4bc4e7f5d027d0e1557ad7cb676bf1e844f04fd41dee44281713abf596ab0d34362f703e1e8832923164497ed5d4444a473cd8287770ea33598e9fb159b28f0c84cd63376c250e8a1c8e38f5deecdc9dba821d186b5865532fb0e1d68ad86c8015bc857533449770084ab5277690c3ad2d3cd2f6e498b71ad0d6047858d4655a6fe547683be7edf55997aa17dcd9f1189b2346e66fa36bf356ce3acfea1fe09331506e"}, {0xa0, 0x10f, 0x4, "977bcc814f99fe5d78558b9b05b83da02d39d6cc2873f96dec8dd2af403d8e809934540e123347b7280d918c78256fc9d99fb10e42bafdb75d0486c89c8aab25be6dcf262a83ae99a144a54b9d09327981775c0643478c24e85399ad37472c06479d9b7a86adccb198fdc49104edd5798f7c3e9c331881cd6ac70343e3d87f7f92da6d9f314926b090c8b34c"}, {0x58, 0x116, 0x3, "e0bd42576a8b2660db90aa452d49774541a92e2c3cc6435a252c3c85d86aa705f3c8b35e9a7c227267b76aabdbf5c30ccbd3ea439571a6b031cad22247aa42f37659"}, {0x40, 0x101, 0x5, "ed25f9e605bf38fab5e650f29425d55d69e73d873da8aecfedb1f49daa0d66e54b87d53bb2431425d5a9346532"}, {0x10, 0x108, 0x8fa}], 0x338}, 0x4000004)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @multicast2, 0xdffd, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44)
getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

10m53.059387784s ago: executing program 35 (id=1990):
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @remote}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002)
sendmsg(r0, &(0x7f0000000b40)={&(0x7f0000000000)=@ll={0x11, 0x18, r4, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="cfe9947a635524682e163055b369c1183bf35afed69b51d60792f5f39c81218977984f3985cc8340a04d56d9e12d6869f599a4314ee70acddf40da318d65b62102f53d5e8954444b4ff3fdd64875ba4665cc0184c6eef9eb1b3138f21b17b019a344eded35fad5c9b826aa0258495d1f4f4c9aa59a7eba8aabf481e79a1893e010de8302d3252b5563c1fa90ce42d4dc316648e16e58a1eeb5", 0x99}, {&(0x7f0000000380)="c0cd87ca112c211b516221302a4598ad6b68b7", 0x13}, {&(0x7f0000000400)="47fd8402cea3360b4e760761a414032e2337bb682e034f5191d24800ef79d7992ff8208c1aad813d8ba19cf3a873a97f3cca8cf00f0baf5d4c8af707061a2fe2a44af2da9d3761b868c58863a075346947e35497a61b110226f1e0790e67c4d46d87515ed3ada9db82ef5c95a50244b04b50aa9b27c85bceca0b2112ac9e5e955075999080858d0aff90a35dfa6d5aad971ae918b9f817512c6e97a76cd75ac0d553fa704500deab2f46c73e197993f7bb76bb9a5316f8593c5f12c73454c9ad82e74c4068e65f", 0xc7}], 0x3, &(0x7f0000000800)=[{0xc8, 0x10f, 0xa75, "ee2732f84dd9bf1accc5d48afb2f606afa19b671723f81b9391f364c22cfd9f420050895cbe68057ccd13bdf50939d3cf277dd72c1062e3c26ccec365d99fbcded82d5b048063428f2c286e1dfd26e75ae4f455db6fffd009d667ba25c9284fc14b7a3626948627d9607506edb5988ca8901bd57fc12c7f0f75ae90ef98477cfa164f6c13f2c81be9ecf703e7cc66bf3a3eb44a7f631b1852f5503a800abff475548a40fa72657c7adcce3564fbf87fade43e0e6"}, {0x30, 0x2, 0x357cfe31, "4d47a93d7b15bc403bc0ef3a38a81ed874160e01e3af8857546cedf691120d70"}, {0xf8, 0x10c, 0xd, "08b3cf810833b614ca132432cb8e55e0c0e5b9f6f08e8e1fb598af6edbb5582a4e28cf477f5468d1622b2cb8a54dbbbde624460dea0a2d12211f45e489c445ba0735b51a4bc4e7f5d027d0e1557ad7cb676bf1e844f04fd41dee44281713abf596ab0d34362f703e1e8832923164497ed5d4444a473cd8287770ea33598e9fb159b28f0c84cd63376c250e8a1c8e38f5deecdc9dba821d186b5865532fb0e1d68ad86c8015bc857533449770084ab5277690c3ad2d3cd2f6e498b71ad0d6047858d4655a6fe547683be7edf55997aa17dcd9f1189b2346e66fa36bf356ce3acfea1fe09331506e"}, {0xa0, 0x10f, 0x4, "977bcc814f99fe5d78558b9b05b83da02d39d6cc2873f96dec8dd2af403d8e809934540e123347b7280d918c78256fc9d99fb10e42bafdb75d0486c89c8aab25be6dcf262a83ae99a144a54b9d09327981775c0643478c24e85399ad37472c06479d9b7a86adccb198fdc49104edd5798f7c3e9c331881cd6ac70343e3d87f7f92da6d9f314926b090c8b34c"}, {0x58, 0x116, 0x3, "e0bd42576a8b2660db90aa452d49774541a92e2c3cc6435a252c3c85d86aa705f3c8b35e9a7c227267b76aabdbf5c30ccbd3ea439571a6b031cad22247aa42f37659"}, {0x40, 0x101, 0x5, "ed25f9e605bf38fab5e650f29425d55d69e73d873da8aecfedb1f49daa0d66e54b87d53bb2431425d5a9346532"}, {0x10, 0x108, 0x8fa}], 0x338}, 0x4000004)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @multicast2, 0xdffd, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44)
getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

8m13.547918683s ago: executing program 3 (id=2396):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a", 0x7b}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab50447", 0x6f}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6", 0x9}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

8m13.397129779s ago: executing program 3 (id=2398):
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x375040, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x5, {}, {0x4, 0x8, 0x8, 0x4, 0x29, 0x9, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, r1})
bind$alg(0xffffffffffffffff, 0x0, 0x0)

8m12.039654796s ago: executing program 3 (id=2404):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x4b}}, 0x400}], 0x0, 0x0, 0x0})

8m11.72007304s ago: executing program 3 (id=2408):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006dc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="3a822d6f0306bc598a25fbf98ce3df61eddbb19384ec19a1b8cc10cf952b7536e16239cb61c3ba224865dadc4b1088ed0ce5c9ede116bbde6c3a8329413526b61ec377c0f2833a31b0ec1819ae320ead44ca256a14c3c29f6fea826ce6dfcdbde79656574caca7d33f43358c1f09d1809f0fc894ad8dc2339e2acbd7b63580ad7b88bc00000000000000", 0x8a}, {&(0x7f00000005c0)="3c977216b675039a1d3cb9920fbde265b9fde5b6e2b783b007b86348fe27ba25eb95bb5c4801fb54160e8dc5a2dda4a5874012f61bc684f2fea324e5ce4f463d183394e9f1a10d4617821b5e3ab4f2db20309495630dc4069c2e5abcf78f36372b95eb5f7a9ad2fdd2de8dc2b2b8005b1c693326ee358c3ce5f07cc2a060b56dc4d32eda82d690deb953f171dcb504e13d612bddbf039175912c87bff251ecf18ab5fe4568d1219b6b424d0af0b117b73a8ad2c67c8e3597bcba5a86b20b1f3f657ced3bf6d67479cac4f1a1f9b67512acad7521711c33", 0xd7}, {&(0x7f00000006c0)="299b0c039d86bff86edd7b6de6dde7fadb86888a410060def3174d4d4ba1cf8c4fdde03e83abbdf73e695f165346a78d8d79108d9b516d9abf09a136ab52d0e19dfb2f00bb046d00000000001b000000000010000000", 0x56}], 0x3}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="9d70b2a7c34e6a7f3116cfa2b021c3136e6530cfe2b242564adf52d96187131c30b12cada737", 0x26}, {&(0x7f0000000100)="7b4bcc9089864d85e764b6bba256e6af91e69ae71ffef7df313e92c30fed65dae5961c2c163fb13606ee96db7249efdb195eb6cbc8462a0b7df5e9a2f2555d3959af1ca406f89e87409474f6c69230cbc89e4052b59bf2d40986e6547ee78b4c36db49a35f2949daa1dadcdb43d5cfb31839d3ce23eccf139ef9c2286a326d1ca5e18e449fe954cb9d33eb4e6761f41cefcaf0c88adc59a283c091f645fecade2b37c10bf3", 0xa5}, {&(0x7f0000000280)}, {&(0x7f0000000980)="c29cb7f0d84abb527465781b7e9862d32d94c7c3c6bb8fb89e2ebf411463c2fe2cab5342c357d052845c91b253d417dc628d1278897c0f4e4beacdf809f6bcfeb9fb40a58ce5f0031518ff01cfc839c38b160c99d4f1017bb7365846a626080e1c64746a24bdd0ed6c8fc1caf0ca30810f821f2b8f13bfb5dfae99023043f2062bcb93d6c1b7f8099a90cc0b5c82e41939138dfd535dda3e36996ecd83d13b2bef199f7e84a71f20dd5faf04803b36132ea4386cbde85a7a0b46eccdd0dcc35cf2c084f80c078bf68242a181c7994c80fd54e98e12c3f304c299db2b272d28b8023cf3f9dd2dfd7411ea818c17a6c47744f3aa2cbe81715d0cde3838d49c743c0345b49c64c12ac76cf201f1ca91de799bcf8858284e23d069031a094e067416840d8ee3aac0f45079c4e1782369b0ead6dff1c75680816b39b89a1778806606e28703c58bed5b15a827d0ca0584b40e39769162a633dce5502befcfa695309bad51c71bb1588278ab4deb1dd98e816aa7e7c5af463b6d2858c52737dffa5d3e305da17361972da2e08e04c2232e64cfc4b27030a8933f7d10b66f0383e65cba9e12e1d50910202389", 0x1a9}, {&(0x7f0000000480)="0aa732c38ba9f4ae98f8528cb4a558d6b836a04da29c5fabcb595bbb896d766f9073be7b0346b0ec225618bb72c878b4ac8e1cdadff66cbc6545652f2aba12fce7ee8fc1870ac0d6192d95cf39de108fbd34da90483f34083ffee7980365", 0x5e}, {&(0x7f0000000dc0)="128057c3ecdf99f18b48f0aae1987a57df52c3df6ef6655a29ada4e07fb82bc16b6d09acfd6561625554fabc92cec26138ba1e641d459b332d808d7d7acd57cf2abd209c59d2e676d3a25b109b1ded08377acc67fbd4015e03a13b9f761db934b988d34f45530b2bc710f89c2b0004f62a14c65f6c1a0c018bea98af07fa1dfeb41459930a71e9628b87defa7de243b58eb9eabdcfcedb666bfe5f", 0x9b}], 0x6}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000440)="40cbb7", 0x3}, {0x0}], 0x2}}], 0x4, 0x2000c044)

8m10.542753921s ago: executing program 3 (id=2411):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
open(0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000400)={0x20, 0x3, 0x4, 0x1, 0x0, 0x40000005, 0x0})
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
close(r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
write(r4, &(0x7f0000000140)="3b53ef89761611d73b5b5bf6", 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[], 0x1d8}}, 0x0)

8m9.427750753s ago: executing program 3 (id=2414):
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0x101000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000200)='mqueue\x00', 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15)

7m54.181361912s ago: executing program 36 (id=2414):
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0x101000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000200)='mqueue\x00', 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15)

7m47.547033057s ago: executing program 8 (id=2470):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r0, &(0x7f0000000300)=""/172, 0xdc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000004c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1})
socket$key(0xf, 0x3, 0x2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)

7m45.227590689s ago: executing program 8 (id=2476):
bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@phonet, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x606601, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @empty}, 0x2, 0x0, 0x0, 0x1}}, 0x2e)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x1, 0x0, 0x1}}, 0x2e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt(r3, 0x111, 0x4, 0x0, 0x0)

7m41.586124817s ago: executing program 8 (id=2481):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x1, 0x0, 0x40})

7m40.22754549s ago: executing program 8 (id=2483):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000037000004d232000000fc020000000000000000000000000000050000000000000400000000000000000000000000000000694200000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd7000053500000a0004005000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r2, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

7m39.931255263s ago: executing program 8 (id=2484):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002200)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfff}}, 0x18)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x4040)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680))
shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
preadv(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2051)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x4, 0x2, 0x2}})

7m38.184574447s ago: executing program 8 (id=2486):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0xfffffe23, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x1, 0x2, 0x0, 0x1}, 0x8)

7m22.296133515s ago: executing program 37 (id=2486):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0xfffffe23, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x1, 0x2, 0x0, 0x1}, 0x8)

4m33.374160264s ago: executing program 6 (id=2764):
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4m31.16777207s ago: executing program 6 (id=2766):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1}, 0x1c)
socket(0x10, 0x80002, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x80)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000100)=0x8000000f, 0x4)
sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
shutdown(r3, 0x1)

4m28.643747595s ago: executing program 6 (id=2768):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002200)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfff}}, 0x18)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
preadv(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4)
read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2051)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

4m27.625123161s ago: executing program 6 (id=2770):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x8800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000f40)=""/92, 0x5c}], 0x1}, 0x0)

4m27.439855826s ago: executing program 6 (id=2771):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e)
connect$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x0, @loopback}}, 0x1e)

4m27.343954505s ago: executing program 6 (id=2773):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000061b4d47900000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000006209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x0, 0x10000]}]}, 0xa0}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'})
sync_file_range(0xffffffffffffffff, 0x6b, 0x7, 0x7)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="19", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="f2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000000)="f35f79", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002ac0)='p', 0x1}], 0x1}}], 0x4, 0x4040040)
close(0x3)

4m11.157609374s ago: executing program 38 (id=2773):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000061b4d47900000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000006209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x0, 0x10000]}]}, 0xa0}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'})
sync_file_range(0xffffffffffffffff, 0x6b, 0x7, 0x7)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="19", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="f2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000000)="f35f79", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002ac0)='p', 0x1}], 0x1}}], 0x4, 0x4040040)
close(0x3)

16.151077745s ago: executing program 7 (id=3216):
pipe2$9p(0x0, 0x4000)
fcntl$addseals(0xffffffffffffffff, 0x409, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
socket$netlink(0x10, 0x3, 0xa)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x1400, 0x15a0}, &(0x7f0000000340)=0x90)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"})
r3 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c)
ftruncate(r3, 0x200004)
sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d1)

14.206828402s ago: executing program 7 (id=3219):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xff000000}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

14.051639325s ago: executing program 7 (id=3221):
r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0x4b, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]})

13.986981888s ago: executing program 7 (id=3223):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20)

13.87847195s ago: executing program 7 (id=3225):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001440)={0x0, 0x0, 0x800, 0x1, 0x1}, 0x20)

12.300354643s ago: executing program 7 (id=3227):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
syz_io_uring_setup(0x66f, &(0x7f0000000240)={0x0, 0x12f8, 0x800, 0xfffffffd, 0x2e9}, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x2, 0xc3, &(0x7f00000006c0)=""/195, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x71096000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000080)='./file0\x00', 0x81)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8970000000000000010000000040100"})
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000040)=0x2)

5.962698852s ago: executing program 5 (id=3234):
openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'tunl0\x00', 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x3, 0x7, 0x1, 0x81, 0x9, 0xf9, 0x8, 0x43, 0xfb, 0x0, 0xc, 0x0, 0xbe, 0x4, 0xfc, 0x38}})
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000140)={0x8, 0x49})
r3 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x584, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200080, 0x4000, 0x3, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x401, 0x5, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x80000000, 0x0, 0x0, 0x5, 0xf1e9, 0x0, 0x0, 0x2147, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x200040]})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004)
socket$nl_rdma(0x10, 0x3, 0x14)

3.549574174s ago: executing program 5 (id=3235):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000009000)={0x0, 0x0, &(0x7f0000008fc0)={&(0x7f0000008f40)={0x30, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x4048080, &(0x7f0000000200)={0x11, 0x1, r2, 0x1, 0x20, 0x6, @broadcast}, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.287699462s ago: executing program 5 (id=3236):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$I2C(&(0x7f0000003980), 0x0, 0x80801)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x3, "ffff92ae000000408000e224f417afd2d8c90300000000000000000900"})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xc0e00, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, <r4=>r2})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, &(0x7f0000000040)=0x1)

3.198281615s ago: executing program 5 (id=3237):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000001100), 0xffffffffffffffff)
socket$phonet_pipe(0x23, 0x5, 0x2)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r4, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14)
r5 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000003240)=[{&(0x7f0000002100)=""/4096, 0x1000}], 0x1, 0x1, 0x0)
syz_open_dev$vcsa(&(0x7f00000000c0), 0x1, 0x0)
pread64(r0, &(0x7f0000000000)=""/21, 0x15, 0x6)

111.249886ms ago: executing program 5 (id=3238):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000100)="76389e6a65585578", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 5 (id=3239):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x693d3506}, [@jmp={0x5, 0x1, 0x8, 0x3, 0x8, 0x1, 0xfffffffffffffff0}]}, 0x0, 0x9d, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xada1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff], 0x0, 0x10, 0xff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000002080)={0xa, {"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", 0x5b6}}, 0x1006)
sched_setscheduler(0x0, 0x1, 0x0)
close(0x3)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x200, 0x3, 0xb, 0x1}]})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r6, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
sync()
close_range(r5, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

kernel console output (not intermixed with test programs):

8] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2486'.
[ 1021.210975][T14698] netlink: 196 bytes leftover after parsing attributes in process `syz.8.2486'.
[ 1025.070724][ T5585] libceph: connect (1)[c::]:6789 error -101
[ 1025.095030][ T5585] libceph: mon0 (1)[c::]:6789 connect error
[ 1025.219761][ T5585] libceph: connect (1)[c::]:6789 error -101
[ 1025.219949][ T5585] libceph: mon0 (1)[c::]:6789 connect error
[ 1025.278028][T14708] ceph: No mds server is up or the cluster is laggy
[ 1025.514351][    T9] libceph: connect (1)[c::]:6789 error -101
[ 1025.514495][    T9] libceph: mon0 (1)[c::]:6789 connect error
[ 1026.020208][    T9] libceph: connect (1)[c::]:6789 error -101
[ 1026.020324][    T9] libceph: mon0 (1)[c::]:6789 connect error
[ 1026.783840][   T43] libceph: connect (1)[c::]:6789 error -101
[ 1026.783962][   T43] libceph: mon0 (1)[c::]:6789 connect error
[ 1026.807697][T14720] ceph: No mds server is up or the cluster is laggy
[ 1026.911951][   T43] libceph: connect (1)[c::]:6789 error -101
[ 1026.912143][   T43] libceph: mon0 (1)[c::]:6789 connect error
[ 1027.176772][  T821] libceph: connect (1)[c::]:6789 error -101
[ 1027.176967][  T821] libceph: mon0 (1)[c::]:6789 connect error
[ 1027.375913][T14584] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1027.479803][T14584] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1027.687285][   T43] libceph: connect (1)[c::]:6789 error -101
[ 1027.687473][   T43] libceph: mon0 (1)[c::]:6789 connect error
[ 1028.419345][T14584] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1028.452937][T14584] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1028.454376][T14584] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1028.553299][T14584] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1029.130886][T14584] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1029.316102][T14584] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1032.416941][  T821] usb 7-1: new low-speed USB device number 13 using dummy_hcd
[ 1032.579981][  T821] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1032.580006][  T821] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1032.580060][  T821] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[ 1032.580100][  T821] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1032.580121][  T821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1032.661470][T14802] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1032.676983][  T821] hub 7-1:1.0: bad descriptor, ignoring hub
[ 1032.677019][  T821] hub 7-1:1.0: probe with driver hub failed with error -5
[ 1032.677910][  T821] cdc_wdm 7-1:1.0: skipping garbage
[ 1032.677924][  T821] cdc_wdm 7-1:1.0: skipping garbage
[ 1032.740782][  T821] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1032.740803][  T821] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1033.268001][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1033.268158][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1033.269500][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1033.269520][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1033.269778][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1033.269796][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1033.270057][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1033.270075][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1033.270327][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1033.270344][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1033.270587][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1033.270606][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1033.270848][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1033.270865][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1033.271109][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1033.271128][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1033.271378][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1033.271397][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1033.272383][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1033.272403][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1033.406618][T14816] 9pnet_virtio: no channels available for device syz
[ 1037.581453][T14828] program syz.7.2504 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1037.873865][   T43] usb 7-1: USB disconnect, device number 13
[ 1043.935637][T14861] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2513'.
[ 1043.935709][T14861] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1048.043693][T14892] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[ 1051.611883][T14918] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2521'.
[ 1054.444227][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.444491][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[ 1057.790880][T14940] syzkaller0: entered promiscuous mode
[ 1057.790905][T14940] syzkaller0: entered allmulticast mode
[ 1063.156884][T14958] fuse: Bad value for 'fd'
[ 1065.664287][T11171] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1065.727957][T11171] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1065.754850][T11171] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1065.776635][T11171] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1065.779027][T11171] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1065.931029][T14584] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1067.190185][   T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1067.270451][   T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1067.284927][   T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1067.303081][   T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1067.304109][   T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1067.893043][T14997] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2543'.
[ 1067.907535][   T59] Bluetooth: hci6: command tx timeout
[ 1069.305398][T14986] ipip0: entered allmulticast mode
[ 1069.991342][T11171] Bluetooth: hci6: command tx timeout
[ 1070.296683][T11171] Bluetooth: hci7: command tx timeout
[ 1070.690070][T15020] fuse: Bad value for 'fd'
[ 1071.641566][T13362] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1073.438870][T11171] Bluetooth: hci6: command tx timeout
[ 1073.443012][T11171] Bluetooth: hci7: command tx timeout
[ 1074.559846][   T36] audit: type=1326 audit(1778244846.022:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.6.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296296cdd9 code=0x7ffc0000
[ 1074.560187][   T36] audit: type=1326 audit(1778244846.032:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.6.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2962966b57 code=0x7ffc0000
[ 1074.560509][   T36] audit: type=1326 audit(1778244846.032:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.6.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f296290e159 code=0x7ffc0000
[ 1074.565600][   T36] audit: type=1326 audit(1778244846.032:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.6.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2962966b57 code=0x7ffc0000
[ 1074.571234][   T36] audit: type=1326 audit(1778244846.032:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.6.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f296290e159 code=0x7ffc0000
[ 1074.571611][   T36] audit: type=1326 audit(1778244846.042:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.6.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2962966b57 code=0x7ffc0000
[ 1074.571891][   T36] audit: type=1326 audit(1778244846.042:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.6.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f296290e159 code=0x7ffc0000
[ 1074.572607][   T36] audit: type=1326 audit(1778244846.042:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.6.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2962966b57 code=0x7ffc0000
[ 1074.573982][   T36] audit: type=1326 audit(1778244846.042:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.6.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f296290e159 code=0x7ffc0000
[ 1074.578123][   T36] audit: type=1326 audit(1778244846.042:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.6.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296296cdd9 code=0x7ffc0000
[ 1075.417431][T13362] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1077.196054][T11171] Bluetooth: hci7: command tx timeout
[ 1077.196084][T11171] Bluetooth: hci6: command tx timeout
[ 1077.921776][T15087] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2572'.
[ 1078.432092][T13362] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1079.256668][   T59] Bluetooth: hci7: command tx timeout
[ 1079.410859][T13362] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1079.792814][T15114] 9pnet_virtio: no channels available for device syz
[ 1083.487566][T14821] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1083.487767][T14821] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.488039][T14821] bridge_slave_0: entered allmulticast mode
[ 1083.503896][T14821] bridge_slave_0: entered promiscuous mode
[ 1083.531543][T14821] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1083.531661][T14821] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1083.531871][T14821] bridge_slave_1: entered allmulticast mode
[ 1083.625877][T14821] bridge_slave_1: entered promiscuous mode
[ 1083.850946][T14821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1083.957929][T14821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1084.551147][T14821] team0: Port device team_slave_0 added
[ 1084.607695][T14821] team0: Port device team_slave_1 added
[ 1090.035268][T14982] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1090.035388][T14982] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1090.035664][T14982] bridge_slave_0: entered allmulticast mode
[ 1090.038669][T14982] bridge_slave_0: entered promiscuous mode
[ 1090.042790][T14821] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1090.042804][T14821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1090.042829][T14821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1090.044974][T14982] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1090.045116][T14982] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1090.045330][T14982] bridge_slave_1: entered allmulticast mode
[ 1090.048217][T14982] bridge_slave_1: entered promiscuous mode
[ 1090.099731][T14821] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1090.099747][T14821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1090.099771][T14821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1090.821811][T14982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1090.898864][T14982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1091.169232][T14821] hsr_slave_0: entered promiscuous mode
[ 1091.174281][T14821] hsr_slave_1: entered promiscuous mode
[ 1091.189871][T14821] debugfs: 'hsr0' already exists in 'hsr'
[ 1091.189894][T14821] Cannot create hsr debugfs directory
[ 1091.320624][T15173] 9pnet_virtio: no channels available for device syz
[ 1096.866940][T13362] bridge_slave_1: left allmulticast mode
[ 1096.866975][T13362] bridge_slave_1: left promiscuous mode
[ 1096.867222][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1096.988221][T13362] bridge_slave_0: left allmulticast mode
[ 1096.988256][T13362] bridge_slave_0: left promiscuous mode
[ 1096.988490][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1097.171668][T15186] fuse: Bad value for 'fd'
[ 1098.454558][T11171] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1098.512513][T11171] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1098.552451][T11171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1098.553870][T11171] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1098.554810][T11171] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1099.937381][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1100.010396][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1100.043601][T13362] bond0 (unregistering): Released all slaves
[ 1100.270537][T14982] team0: Port device team_slave_0 added
[ 1100.295460][T14982] team0: Port device team_slave_1 added
[ 1100.440590][T13362] tipc: Left network mode
[ 1100.460617][T14982] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1100.460632][T14982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1100.460655][T14982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1100.462905][T14982] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1100.462919][T14982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1100.462944][T14982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1100.824774][T11171] Bluetooth: hci2: command tx timeout
[ 1104.132837][T11171] Bluetooth: hci2: command tx timeout
[ 1104.405093][T14982] hsr_slave_0: entered promiscuous mode
[ 1104.409834][T14982] hsr_slave_1: entered promiscuous mode
[ 1104.410731][T14982] debugfs: 'hsr0' already exists in 'hsr'
[ 1104.410753][T14982] Cannot create hsr debugfs directory
[ 1104.599065][T15236] Bluetooth: MGMT ver 1.23
[ 1107.164328][T15239] loop9: detected capacity change from 0 to 7
[ 1107.178525][T11171] Bluetooth: hci2: command tx timeout
[ 1107.308994][    C1] blk_print_req_error: 10 callbacks suppressed
[ 1107.309016][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1107.309045][    C1] buffer_io_error: 10 callbacks suppressed
[ 1107.309056][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1107.442829][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1107.442867][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1107.448323][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1107.448362][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1107.482537][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1107.482570][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1107.527308][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1107.527344][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1107.527587][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1107.527685][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1107.527864][T15239] ldm_validate_partition_table(): Disk read failed.
[ 1107.528010][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1107.528037][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1107.528322][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1107.528347][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1107.528622][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1107.528648][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1107.528930][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1107.528956][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1107.529148][T15239] Dev loop9: unable to read RDB block 0
[ 1107.530238][T15239]  loop9: unable to read partition table
[ 1107.530467][T15239] loop9: partition table beyond EOD, truncated
[ 1107.530500][T15239] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5)
[ 1108.864526][ T5258] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1109.257175][T11171] Bluetooth: hci2: command tx timeout
[ 1114.041552][T13362] hsr_slave_0: left promiscuous mode
[ 1114.077790][T13362] hsr_slave_1: left promiscuous mode
[ 1114.079023][T13362] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1114.079048][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1114.139451][T13362] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1114.139478][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1114.396024][T13362] veth1_macvtap: left promiscuous mode
[ 1114.396129][T13362] veth0_macvtap: left promiscuous mode
[ 1114.396366][T13362] veth1_vlan: left promiscuous mode
[ 1114.436050][T13362] veth0_vlan: left promiscuous mode
[ 1115.820615][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.820676][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.847210][T13362] team0 (unregistering): Port device team_slave_1 removed
[ 1116.888462][T13362] team0 (unregistering): Port device team_slave_0 removed
[ 1117.181638][ T5258] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1117.851080][T15307] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2617'.
[ 1122.688490][T15194] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1122.692824][T15194] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1122.693092][T15194] bridge_slave_0: entered allmulticast mode
[ 1122.725105][T15194] bridge_slave_0: entered promiscuous mode
[ 1122.762269][T15194] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1122.762438][T15194] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1122.762679][T15194] bridge_slave_1: entered allmulticast mode
[ 1122.797320][T15194] bridge_slave_1: entered promiscuous mode
[ 1123.012083][T15194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1123.059354][T15194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1123.534990][T15194] team0: Port device team_slave_0 added
[ 1123.542752][T15194] team0: Port device team_slave_1 added
[ 1123.614415][T15194] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1123.614431][T15194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1123.614452][T15194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1123.655355][T15194] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1123.655370][T15194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1123.655390][T15194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1124.252548][ T5258] 8021q: adding VLAN 0 to HW filter on device eth15
[ 1124.736044][T15361] overlayfs: failed to resolve './file0': -2
[ 1124.832136][T15194] hsr_slave_0: entered promiscuous mode
[ 1124.833660][T15194] hsr_slave_1: entered promiscuous mode
[ 1124.834466][T15194] debugfs: 'hsr0' already exists in 'hsr'
[ 1124.852859][T15194] Cannot create hsr debugfs directory
[ 1127.808499][   T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1127.878830][   T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1127.881434][   T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1127.884805][   T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1127.892543][   T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1128.698596][ T5258] 8021q: adding VLAN 0 to HW filter on device eth16
[ 1129.132296][T15408] bond0: entered promiscuous mode
[ 1129.132318][T15408] bond_slave_0: entered promiscuous mode
[ 1129.133756][T15408] bond_slave_1: entered promiscuous mode
[ 1129.165717][T15408] batadv_slave_0: entered promiscuous mode
[ 1129.166059][T15408] batadv_slave_0: left promiscuous mode
[ 1129.247394][T15408] bond0: left promiscuous mode
[ 1129.247417][T15408] bond_slave_0: left promiscuous mode
[ 1129.247660][T15408] bond_slave_1: left promiscuous mode
[ 1129.761969][T13362] bridge_slave_1: left allmulticast mode
[ 1129.762004][T13362] bridge_slave_1: left promiscuous mode
[ 1129.762282][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1129.838357][T13362] bridge_slave_0: left allmulticast mode
[ 1129.838394][T13362] bridge_slave_0: left promiscuous mode
[ 1130.057016][T11171] Bluetooth: hci3: command tx timeout
[ 1130.101395][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1132.136850][T11171] Bluetooth: hci3: command tx timeout
[ 1132.876726][T13362] bridge_slave_1: left allmulticast mode
[ 1132.876751][T13362] bridge_slave_1: left promiscuous mode
[ 1132.876911][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1132.947533][T13362] bridge_slave_0: left allmulticast mode
[ 1132.947557][T13362] bridge_slave_0: left promiscuous mode
[ 1132.947791][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1133.398653][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1133.477720][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1133.544154][T13362] bond0 (unregistering): Released all slaves
[ 1134.216878][T11171] Bluetooth: hci3: command tx timeout
[ 1134.260158][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1134.357909][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1134.439524][T13362] bond0 (unregistering): Released all slaves
[ 1135.463021][T13362] hsr_slave_0: left promiscuous mode
[ 1135.508170][T13362] hsr_slave_1: left promiscuous mode
[ 1135.509202][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1135.571470][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1136.786643][T11171] Bluetooth: hci3: command tx timeout
[ 1136.788329][T13362] hsr_slave_0: left promiscuous mode
[ 1137.580795][T13362] hsr_slave_1: left promiscuous mode
[ 1137.581797][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1137.617460][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1137.937659][T13362] team0 (unregistering): Port device team_slave_1 removed
[ 1137.967137][T13362] team0 (unregistering): Port device team_slave_0 removed
[ 1138.347131][T13362] team0 (unregistering): Port device team_slave_1 removed
[ 1138.387366][T13362] team0 (unregistering): Port device team_slave_0 removed
[ 1139.628063][T15496] 9pnet_virtio: no channels available for device syz
[ 1148.245146][T15588] 9pnet_virtio: no channels available for device syz
[ 1150.099098][T15580] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2669'.
[ 1155.043701][T15618] 9pnet_virtio: no channels available for device syz
[ 1155.065824][   T36] kauditd_printk_skb: 195 callbacks suppressed
[ 1155.065844][   T36] audit: type=1326 audit(1778244926.532:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15607 comm="syz.7.2677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4758cdd9 code=0x7ffc0000
[ 1155.066137][   T36] audit: type=1326 audit(1778244926.532:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15607 comm="syz.7.2677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4758cdd9 code=0x7ffc0000
[ 1155.067132][   T36] audit: type=1326 audit(1778244926.542:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15607 comm="syz.7.2677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2b4758cdd9 code=0x7ffc0000
[ 1155.067167][   T36] audit: type=1326 audit(1778244926.542:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15607 comm="syz.7.2677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4758cdd9 code=0x7ffc0000
[ 1155.067189][   T36] audit: type=1326 audit(1778244926.542:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15607 comm="syz.7.2677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4758cdd9 code=0x7ffc0000
[ 1155.067592][   T36] audit: type=1326 audit(1778244926.542:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15607 comm="syz.7.2677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2b4758cdd9 code=0x7ffc0000
[ 1155.068262][   T36] audit: type=1326 audit(1778244926.542:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15607 comm="syz.7.2677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4758cdd9 code=0x7ffc0000
[ 1155.074951][   T36] audit: type=1326 audit(1778244926.542:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15607 comm="syz.7.2677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4758cdd9 code=0x7ffc0000
[ 1155.105728][   T36] audit: type=1326 audit(1778244926.572:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15607 comm="syz.7.2677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b4758cdd9 code=0x7ffc0000
[ 1155.119406][   T36] audit: type=1326 audit(1778244926.582:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15607 comm="syz.7.2677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4758cdd9 code=0x7ffc0000
[ 1155.375954][T15612] process 'syz.7.2677' launched './file2' with NULL argv: empty string added
[ 1155.714092][T15627] 9pnet_virtio: no channels available for device syz
[ 1159.630982][T15389] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1159.631048][T15389] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1159.631251][T15389] bridge_slave_0: entered allmulticast mode
[ 1159.647816][T15389] bridge_slave_0: entered promiscuous mode
[ 1159.670507][T15389] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1159.670624][T15389] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1159.670871][T15389] bridge_slave_1: entered allmulticast mode
[ 1159.688952][T15389] bridge_slave_1: entered promiscuous mode
[ 1161.583858][T15646] overlayfs: failed to clone lowerpath
[ 1162.309870][T15389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1162.457594][   T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1162.540820][   T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1162.542968][   T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1162.547325][   T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1162.548737][   T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1164.343238][T15389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1164.904145][T13147] bridge_slave_1: left allmulticast mode
[ 1164.904182][T13147] bridge_slave_1: left promiscuous mode
[ 1164.904431][T13147] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1165.207435][T13147] bridge_slave_0: left allmulticast mode
[ 1165.207468][T13147] bridge_slave_0: left promiscuous mode
[ 1165.207754][T13147] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1165.335638][T15687] 9pnet_virtio: no channels available for device syz
[ 1166.234989][T11171] Bluetooth: hci6: command tx timeout
[ 1166.972669][T15702] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2693'.
[ 1166.972825][T15702] netlink: Conntrack attr type has unexpected length (type=5, length=0, expected=16)
[ 1168.297014][T11171] Bluetooth: hci6: command tx timeout
[ 1170.376939][T11171] Bluetooth: hci6: command tx timeout
[ 1171.758588][T13147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1171.923820][T13147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1171.991485][T13147] bond0 (unregistering): Released all slaves
[ 1172.030806][T15389] team0: Port device team_slave_0 added
[ 1172.491565][T11171] Bluetooth: hci6: command tx timeout
[ 1172.575522][T15389] team0: Port device team_slave_1 added
[ 1172.865568][T15749] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2702'.
[ 1173.276630][T13147] hsr_slave_0: left promiscuous mode
[ 1173.317692][T13147] hsr_slave_1: left promiscuous mode
[ 1173.318424][T13147] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1173.438788][T15763] 9pnet_virtio: no channels available for device syz
[ 1175.159163][T13147] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1175.556048][T15773] fuse: Bad value for 'fd'
[ 1177.271457][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.271524][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[ 1180.761309][T13147] team0 (unregistering): Port device team_slave_1 removed
[ 1180.817447][T13147] team0 (unregistering): Port device team_slave_0 removed
[ 1181.133942][T15389] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1181.133958][T15389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1181.133981][T15389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1181.179584][T15389] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1181.179600][T15389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1181.179625][T15389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1181.719588][T15389] hsr_slave_0: entered promiscuous mode
[ 1181.724483][T15389] hsr_slave_1: entered promiscuous mode
[ 1181.724973][T15389] debugfs: 'hsr0' already exists in 'hsr'
[ 1181.724992][T15389] Cannot create hsr debugfs directory
[ 1182.937430][T15822] ucma_write: process 589 (syz.7.2715) changed security contexts after opening file descriptor, this is not allowed.
[ 1183.069231][T15832] /dev/nullb0: Can't lookup blockdev
[ 1183.665538][T13147] bridge_slave_1: left allmulticast mode
[ 1183.665573][T13147] bridge_slave_1: left promiscuous mode
[ 1183.665861][T13147] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1183.704764][T15846] fuse: Bad value for 'fd'
[ 1183.758813][T13147] bridge_slave_0: left allmulticast mode
[ 1183.758855][T13147] bridge_slave_0: left promiscuous mode
[ 1183.759128][T13147] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1184.274285][T15866] validate_nla: 43 callbacks suppressed
[ 1184.274311][T15866] netlink: 'syz.7.2725': attribute type 10 has an invalid length.
[ 1184.359380][T15860] netlink: 'syz.7.2725': attribute type 10 has an invalid length.
[ 1185.678894][T13147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1185.799613][T13147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1185.881604][T13147] bond0 (unregistering): Released all slaves
[ 1186.125981][T15866] team0: Port device dummy0 added
[ 1186.268152][T15860] team0: Port device dummy0 removed
[ 1186.324296][T15860] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1186.431447][T15896] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1186.757266][T13147] hsr_slave_0: left promiscuous mode
[ 1186.797867][T13147] hsr_slave_1: left promiscuous mode
[ 1186.798879][T13147] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1187.047362][T13147] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1189.210249][   T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1189.265955][   T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1189.274717][   T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1189.292136][   T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1189.292962][   T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1190.167470][T13147] team0 (unregistering): Port device team_slave_1 removed
[ 1190.217714][T13147] team0 (unregistering): Port device team_slave_0 removed
[ 1192.432531][   T59] Bluetooth: hci2: command tx timeout
[ 1194.003131][T15650] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1194.003243][T15650] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1194.003434][T15650] bridge_slave_0: entered allmulticast mode
[ 1194.007288][T15650] bridge_slave_0: entered promiscuous mode
[ 1194.018414][T15974] kAFS: unable to lookup cell 'syz1'
[ 1194.076383][T15650] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1194.077273][T15650] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1194.081478][T15650] bridge_slave_1: entered allmulticast mode
[ 1194.129946][T15650] bridge_slave_1: entered promiscuous mode
[ 1194.459380][   T59] Bluetooth: hci2: command tx timeout
[ 1195.553296][T15650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1195.851270][T15650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1197.223530][T15650] team0: Port device team_slave_0 added
[ 1197.310881][T15650] team0: Port device team_slave_1 added
[ 1197.583590][T15650] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1197.583606][T15650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1197.583631][T15650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1197.636886][T15650] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1197.636902][T15650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1197.636927][T15650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1198.150601][T15650] hsr_slave_0: entered promiscuous mode
[ 1198.157515][T15650] hsr_slave_1: entered promiscuous mode
[ 1198.158552][T15650] debugfs: 'hsr0' already exists in 'hsr'
[ 1198.158576][T15650] Cannot create hsr debugfs directory
[ 1198.412103][   T59] Bluetooth: hci2: command tx timeout
[ 1200.132668][T16036] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2753'.
[ 1202.186628][   T59] Bluetooth: hci2: command tx timeout
[ 1203.894982][T16071] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2762'.
[ 1211.591660][T15926] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1211.591877][T15926] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1211.592092][T15926] bridge_slave_0: entered allmulticast mode
[ 1211.595069][T15926] bridge_slave_0: entered promiscuous mode
[ 1211.599181][T15926] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1211.599408][T15926] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1211.599945][T15926] bridge_slave_1: entered allmulticast mode
[ 1211.602836][T15926] bridge_slave_1: entered promiscuous mode
[ 1211.652153][T15926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1211.659920][T15926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1211.779402][T15926] team0: Port device team_slave_0 added
[ 1211.783373][T15926] team0: Port device team_slave_1 added
[ 1211.967748][T16131] 9pnet_virtio: no channels available for device syz
[ 1215.108642][T15926] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1215.108658][T15926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1215.108680][T15926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1215.117220][T15926] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1215.117234][T15926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1215.117258][T15926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1219.288331][T16173] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2782'.
[ 1222.518670][T16177] fuse: Bad value for 'fd'
[ 1222.910009][T15926] hsr_slave_0: entered promiscuous mode
[ 1222.911081][T15926] hsr_slave_1: entered promiscuous mode
[ 1222.911808][T15926] debugfs: 'hsr0' already exists in 'hsr'
[ 1222.911827][T15926] Cannot create hsr debugfs directory
[ 1223.367801][T11171] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1223.419778][T11171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1223.422705][T11171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1223.451294][T11171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1223.451931][T11171] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1224.088634][T16218] fuse: Bad value for 'fd'
[ 1224.463593][T16223] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2793'.
[ 1224.463621][T16223] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2793'.
[ 1224.464210][T16223] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2793'.
[ 1224.464229][T16223] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2793'.
[ 1224.464642][T16223] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2793'.
[ 1224.464660][T16223] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2793'.
[ 1224.465803][T16223] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2793'.
[ 1224.465825][T16223] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2793'.
[ 1224.466212][T16223] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2793'.
[ 1224.466232][T16223] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2793'.
[ 1226.707195][T11171] Bluetooth: hci3: command tx timeout
[ 1228.107670][   T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1228.123084][   T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1228.163350][   T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1228.174455][   T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1228.182954][   T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1228.189695][T16263] fuse: Bad value for 'fd'
[ 1228.631162][T16270] fuse: Bad value for 'fd'
[ 1228.790638][T11171] Bluetooth: hci3: command tx timeout
[ 1229.637703][T13362] bridge_slave_1: left allmulticast mode
[ 1229.637839][T13362] bridge_slave_1: left promiscuous mode
[ 1229.638117][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1229.639229][T16298] fuse: Bad value for 'fd'
[ 1229.708376][T13362] bridge_slave_0: left allmulticast mode
[ 1229.708411][T13362] bridge_slave_0: left promiscuous mode
[ 1229.708670][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1229.937236][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1230.037651][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1230.099221][T13362] bond0 (unregistering): Released all slaves
[ 1230.193645][T16302] fuse: Bad value for 'fd'
[ 1230.379199][T11171] Bluetooth: hci6: command tx timeout
[ 1230.880351][T11171] Bluetooth: hci3: command tx timeout
[ 1231.501544][T16328] kAFS: unable to lookup cell 'syz1'
[ 1231.596638][T13362] hsr_slave_0: left promiscuous mode
[ 1231.749940][T13362] hsr_slave_1: left promiscuous mode
[ 1231.750977][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1231.905607][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1232.457691][T11171] Bluetooth: hci6: command tx timeout
[ 1232.946416][T11171] Bluetooth: hci3: command tx timeout
[ 1233.127478][T13362] team0 (unregistering): Port device team_slave_1 removed
[ 1233.197924][T13362] team0 (unregistering): Port device team_slave_0 removed
[ 1233.557536][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1234.544828][T11171] Bluetooth: hci6: command tx timeout
[ 1234.873813][T16199] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1234.874011][T16199] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1234.874430][T16199] bridge_slave_0: entered allmulticast mode
[ 1234.922773][T16199] bridge_slave_0: entered promiscuous mode
[ 1234.983375][T16199] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1234.983496][T16199] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1234.983734][T16199] bridge_slave_1: entered allmulticast mode
[ 1235.013118][T16199] bridge_slave_1: entered promiscuous mode
[ 1236.124504][T16366] fuse: Bad value for 'fd'
[ 1236.184764][T16199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1236.199621][T16199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1236.248342][T16370] fuse: Bad value for 'fd'
[ 1236.381314][T16199] team0: Port device team_slave_0 added
[ 1236.405351][T16199] team0: Port device team_slave_1 added
[ 1236.616712][T11171] Bluetooth: hci6: command tx timeout
[ 1236.848104][T16376] block device autoloading is deprecated and will be removed.
[ 1237.116298][T13362] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.231089][T15630] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[ 1237.315331][T16199] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1237.315347][T16199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1237.315371][T16199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1237.386561][T15630] usb 8-1: Using ep0 maxpacket: 32
[ 1237.395007][T15630] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1237.396232][T15630] usb 8-1: config 8 has an invalid interface number: 188 but max is 0
[ 1237.396256][T15630] usb 8-1: config 8 has no interface number 0
[ 1237.396293][T15630] usb 8-1: config 8 interface 188 has no altsetting 0
[ 1237.405817][T16199] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1237.405833][T16199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1237.405858][T16199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1237.675657][T15630] usb 8-1: string descriptor 0 read error: -22
[ 1237.675798][T15630] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[ 1237.675828][T15630] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1237.731555][T15630] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[ 1237.731607][T15630] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1237.732252][T15630] dvb-usb: bulk message failed: -22 (2/0)
[ 1237.821898][T15630] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1237.822822][T15630] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[ 1237.822883][T15630] usb 8-1: media controller created
[ 1237.856140][T15630] dvb-usb: bulk message failed: -22 (6/0)
[ 1237.856164][T15630] dw2102: i2c transfer failed.
[ 1237.856185][T15630] dvb-usb: bulk message failed: -22 (6/0)
[ 1237.856197][T15630] dw2102: i2c transfer failed.
[ 1237.856212][T15630] dvb-usb: bulk message failed: -22 (6/0)
[ 1237.856224][T15630] dw2102: i2c transfer failed.
[ 1237.856239][T15630] dvb-usb: bulk message failed: -22 (6/0)
[ 1237.856251][T15630] dw2102: i2c transfer failed.
[ 1237.856266][T15630] dvb-usb: bulk message failed: -22 (6/0)
[ 1237.856278][T15630] dw2102: i2c transfer failed.
[ 1237.856293][T15630] dvb-usb: bulk message failed: -22 (6/0)
[ 1237.856305][T15630] dw2102: i2c transfer failed.
[ 1237.856314][T15630] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1237.951514][T15630] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1238.139986][T16391] kAFS: No cell specified
[ 1238.267095][T15630] dvb-usb: bulk message failed: -22 (3/0)
[ 1238.268292][T15630] dw2102: command 0x0e transfer failed.
[ 1238.271395][T15630] dvb-usb: bulk message failed: -22 (3/0)
[ 1238.271416][T15630] dw2102: command 0x0e transfer failed.
[ 1238.595689][T15630] dvb-usb: bulk message failed: -22 (3/0)
[ 1238.595721][T15630] dw2102: command 0x0e transfer failed.
[ 1238.595732][T15630] dvb-usb: bulk message failed: -22 (3/0)
[ 1238.595744][T15630] dw2102: command 0x0e transfer failed.
[ 1238.595753][T15630] dvb-usb: bulk message failed: -22 (1/0)
[ 1238.595765][T15630] dw2102: command 0x51 transfer failed.
[ 1238.786527][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.786594][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.812645][T15630] DVB: Unable to find symbol ds3000_attach()
[ 1238.812667][T15630] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[ 1238.999291][T13362] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.006684][T15630] rc_core: IR keymap rc-su3000 not found
[ 1239.006702][T15630] Registered IR keymap rc-empty
[ 1239.063880][T15630] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0
[ 1239.101980][T15630] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input14
[ 1239.385060][T16262] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1239.385153][T16262] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1239.385380][T16262] bridge_slave_0: entered allmulticast mode
[ 1239.395598][T16262] bridge_slave_0: entered promiscuous mode
[ 1239.458959][T15630] dvb-usb: schedule remote query interval to 150 msecs.
[ 1239.458982][T15630] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1239.458999][T15630] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[ 1239.623530][T15630] dvb-usb: bulk message failed: -22 (1/0)
[ 1239.623550][T15630] dw2102: i2c transfer failed.
[ 1239.627471][T16262] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1239.627577][T16262] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1239.627820][T16262] bridge_slave_1: entered allmulticast mode
[ 1239.634985][T16262] bridge_slave_1: entered promiscuous mode
[ 1239.876610][T15630] dvb-usb: bulk message failed: -22 (1/0)
[ 1239.876632][T15630] dw2102: i2c transfer failed.
[ 1240.076678][T15630] dvb-usb: bulk message failed: -22 (1/0)
[ 1240.076700][T15630] dw2102: i2c transfer failed.
[ 1240.256779][T13362] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1240.274680][T15630] dvb-usb: bulk message failed: -22 (1/0)
[ 1240.274701][T15630] dw2102: i2c transfer failed.
[ 1240.360532][T16199] hsr_slave_0: entered promiscuous mode
[ 1240.362393][T16199] hsr_slave_1: entered promiscuous mode
[ 1240.365333][T16199] debugfs: 'hsr0' already exists in 'hsr'
[ 1240.365356][T16199] Cannot create hsr debugfs directory
[ 1240.426605][T15630] dvb-usb: bulk message failed: -22 (1/0)
[ 1240.426635][T15630] dw2102: i2c transfer failed.
[ 1240.455652][T16262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1240.586626][T15630] dvb-usb: bulk message failed: -22 (1/0)
[ 1240.586648][T15630] dw2102: i2c transfer failed.
[ 1240.592367][T16262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1240.746557][T15630] dvb-usb: bulk message failed: -22 (1/0)
[ 1240.746579][T15630] dw2102: i2c transfer failed.
[ 1240.815552][T13362] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1240.906563][T15630] dvb-usb: bulk message failed: -22 (1/0)
[ 1240.906582][T15630] dw2102: i2c transfer failed.
[ 1240.976282][T15926] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1241.018646][T15926] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1241.066592][T15630] dvb-usb: bulk message failed: -22 (1/0)
[ 1241.066610][T15630] dw2102: i2c transfer failed.
[ 1241.171122][T15926] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1241.202264][T15926] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1241.231885][T16262] team0: Port device team_slave_0 added
[ 1241.233570][T11760] dvb-usb: bulk message failed: -22 (1/0)
[ 1241.233589][T11760] dw2102: i2c transfer failed.
[ 1241.386645][T11760] dvb-usb: bulk message failed: -22 (1/0)
[ 1241.386667][T11760] dw2102: i2c transfer failed.
[ 1241.387456][T15926] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1241.432410][T15926] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1241.454737][T16262] team0: Port device team_slave_1 added
[ 1241.475276][T15926] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1241.546610][T11760] dvb-usb: bulk message failed: -22 (1/0)
[ 1241.546631][T11760] dw2102: i2c transfer failed.
[ 1241.556017][T15926] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1241.706725][T11760] dvb-usb: bulk message failed: -22 (1/0)
[ 1241.706750][T11760] dw2102: i2c transfer failed.
[ 1241.823908][T16262] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1241.823925][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1241.823948][T16262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1241.866617][T11760] dvb-usb: bulk message failed: -22 (1/0)
[ 1241.866638][T11760] dw2102: i2c transfer failed.
[ 1241.926651][T16262] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1241.926667][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1241.926698][T16262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1241.930694][T16425] fuse: Bad value for 'fd'
[ 1242.026757][T11760] dvb-usb: bulk message failed: -22 (1/0)
[ 1242.026776][T11760] dw2102: i2c transfer failed.
[ 1242.088329][T16432] fuse: Bad value for 'fd'
[ 1242.192416][T11760] dvb-usb: bulk message failed: -22 (1/0)
[ 1242.192437][T11760] dw2102: i2c transfer failed.
[ 1242.351235][   T31] dvb-usb: bulk message failed: -22 (1/0)
[ 1242.351257][   T31] dw2102: i2c transfer failed.
[ 1242.445168][T16262] hsr_slave_0: entered promiscuous mode
[ 1242.450776][T16262] hsr_slave_1: entered promiscuous mode
[ 1242.451612][T16262] debugfs: 'hsr0' already exists in 'hsr'
[ 1242.451640][T16262] Cannot create hsr debugfs directory
[ 1242.498716][ T5838] usb 8-1: USB disconnect, device number 15
[ 1242.855929][ T5838] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[ 1243.425960][T16451] fuse: Bad value for 'fd'
[ 1243.842231][T16456] fuse: Bad value for 'fd'
[ 1244.562620][T15926] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1245.041875][T15926] 8021q: adding VLAN 0 to HW filter on device team0
[ 1245.077252][ T6813] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1245.077428][ T6813] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1245.127523][T14044] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1245.127652][T14044] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1245.238523][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1245.739548][T13362] bridge_slave_1: left allmulticast mode
[ 1245.739583][T13362] bridge_slave_1: left promiscuous mode
[ 1245.739840][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1245.819676][T13362] bridge_slave_0: left allmulticast mode
[ 1245.819711][T13362] bridge_slave_0: left promiscuous mode
[ 1245.819967][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1245.869315][T16482] netlink: 'syz.5.2842': attribute type 10 has an invalid length.
[ 1245.966724][T13362] bridge_slave_1: left allmulticast mode
[ 1245.966749][T13362] bridge_slave_1: left promiscuous mode
[ 1245.966900][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1246.017571][T13362] bridge_slave_0: left allmulticast mode
[ 1246.017596][T13362] bridge_slave_0: left promiscuous mode
[ 1246.017744][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1246.737399][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1246.817167][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1246.861138][T13362] bond0 (unregistering): Released all slaves
[ 1248.114046][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1248.197431][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1248.239320][T13362] bond0 (unregistering): Released all slaves
[ 1248.433376][T16482] team0: Port device dummy0 added
[ 1248.645072][T16491] fuse: Bad value for 'fd'
[ 1249.924548][   T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1249.975821][   T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1249.990840][   T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1250.003430][   T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1250.008653][   T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1250.828872][T16517] =======================================================
[ 1250.828872][T16517] WARNING: The mand mount option has been deprecated and
[ 1250.828872][T16517]          and is ignored by this kernel. Remove the mand
[ 1250.828872][T16517]          option from the mount to silence this warning.
[ 1250.828872][T16517] =======================================================
[ 1251.289236][T16517] NILFS (loop7): device size too small
[ 1252.381938][T11171] Bluetooth: hci1: command tx timeout
[ 1253.042472][T16532] netlink: 'syz.5.2852': attribute type 10 has an invalid length.
[ 1253.460669][T16537] fuse: Bad value for 'fd'
[ 1254.513916][T11171] Bluetooth: hci1: command tx timeout
[ 1256.116188][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1256.700591][T11171] Bluetooth: hci1: command tx timeout
[ 1257.103838][T16569] netlink: 'syz.5.2860': attribute type 10 has an invalid length.
[ 1257.249854][T16573] fuse: Bad value for 'fd'
[ 1258.298648][T13362] hsr_slave_0: left promiscuous mode
[ 1258.336730][T13362] hsr_slave_1: left promiscuous mode
[ 1258.337606][T13362] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1258.337622][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1258.369017][T16603] netlink: 'syz.5.2869': attribute type 10 has an invalid length.
[ 1258.399224][T13362] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1258.399250][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1258.536858][T13362] hsr_slave_0: left promiscuous mode
[ 1258.557221][T13362] hsr_slave_1: left promiscuous mode
[ 1258.557899][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1258.587251][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1258.648031][T13362] veth1_macvtap: left promiscuous mode
[ 1258.648118][T13362] veth0_macvtap: left promiscuous mode
[ 1258.648250][T13362] veth1_vlan: left promiscuous mode
[ 1258.648339][T13362] veth0_vlan: left promiscuous mode
[ 1258.776609][T11171] Bluetooth: hci1: command tx timeout
[ 1259.338539][T13362] team0 (unregistering): Port device team_slave_1 removed
[ 1259.368474][T13362] team0 (unregistering): Port device team_slave_0 removed
[ 1259.727114][T13362] team0 (unregistering): Port device team_slave_1 removed
[ 1259.767663][T13362] team0 (unregistering): Port device team_slave_0 removed
[ 1259.957386][T16603] team0: Port device dummy0 removed
[ 1259.962636][T16603] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1259.977482][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1260.163147][T16607] fuse: Bad value for 'fd'
[ 1261.412285][T16199] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1261.474543][T16199] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1261.604626][T16637] fuse: Bad value for 'fd'
[ 1261.752312][T16199] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1261.933014][T16644] netlink: 'syz.7.2878': attribute type 10 has an invalid length.
[ 1262.092817][T16199] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1262.169861][T16646] fuse: Bad value for 'fd'
[ 1262.481486][T16199] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1262.512881][T16199] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1262.537880][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1262.608828][T16199] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1262.721209][T16199] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1263.376013][T16505] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1263.376219][T16505] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1263.391991][T16505] bridge_slave_0: entered allmulticast mode
[ 1263.395585][T16505] bridge_slave_0: entered promiscuous mode
[ 1263.649863][T16505] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1263.649930][T16505] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1263.650108][T16505] bridge_slave_1: entered allmulticast mode
[ 1263.686200][T16505] bridge_slave_1: entered promiscuous mode
[ 1264.064799][T16505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1264.095041][T16505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1264.190737][T16262] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1264.322632][T16262] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1264.424864][T16262] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1264.469365][T16262] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1264.472711][T16505] team0: Port device team_slave_0 added
[ 1264.473009][T16262] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1264.558465][T16687] fuse: Bad value for 'fd'
[ 1264.565605][T16262] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1264.581812][T16505] team0: Port device team_slave_1 added
[ 1264.598906][T16262] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1264.705746][T16262] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1265.009716][T16697] netlink: 'syz.5.2888': attribute type 10 has an invalid length.
[ 1265.156776][T16505] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1265.156792][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1265.156816][T16505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1265.227686][T16505] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1265.227701][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1265.227726][T16505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1265.652648][T16505] hsr_slave_0: entered promiscuous mode
[ 1265.654008][T16505] hsr_slave_1: entered promiscuous mode
[ 1267.361567][T16199] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1267.486737][T16199] 8021q: adding VLAN 0 to HW filter on device team0
[ 1267.511017][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1267.514429][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1267.541517][ T6813] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1267.541605][ T6813] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1267.643855][T16262] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1267.764185][T16262] 8021q: adding VLAN 0 to HW filter on device team0
[ 1269.048300][T14044] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1269.048450][T14044] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1269.076424][T13147] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1269.151381][T13147] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1269.763752][T16772] netlink: 'syz.7.2896': attribute type 10 has an invalid length.
[ 1271.556009][T16792] fuse: Bad value for 'fd'
[ 1273.032733][T16838] netlink: 'syz.7.2904': attribute type 10 has an invalid length.
[ 1274.433035][T16199] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1275.229186][T16262] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1276.304868][T16863] netlink: 'syz.7.2906': attribute type 10 has an invalid length.
[ 1276.626771][T13362] bridge_slave_1: left allmulticast mode
[ 1276.626794][T13362] bridge_slave_1: left promiscuous mode
[ 1276.626960][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1276.738199][T13362] bridge_slave_0: left allmulticast mode
[ 1276.738221][T13362] bridge_slave_0: left promiscuous mode
[ 1276.738400][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1276.865357][T16869] kAFS: No cell specified
[ 1278.050581][T16899] fuse: Bad value for 'fd'
[ 1278.220248][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1278.287818][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1278.309503][T13362] bond0 (unregistering): Released all slaves
[ 1278.462160][T16863] bond0: (slave dummy0): Releasing backup interface
[ 1278.502590][T16863] team0: Port device dummy0 added
[ 1278.519256][T16199] veth0_vlan: entered promiscuous mode
[ 1278.959257][T16915] netlink: 'syz.7.2912': attribute type 10 has an invalid length.
[ 1280.049712][T16915] team0: Port device dummy0 removed
[ 1280.052768][T16915] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1280.220572][T13362] hsr_slave_0: left promiscuous mode
[ 1280.259712][T13362] hsr_slave_1: left promiscuous mode
[ 1280.261906][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1280.312606][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1281.656814][T13362] team0 (unregistering): Port device team_slave_1 removed
[ 1281.743859][T13362] team0 (unregistering): Port device team_slave_0 removed
[ 1283.847886][T16958] Can't find a SQUASHFS superblock on nullb0
[ 1284.022470][T16199] veth1_vlan: entered promiscuous mode
[ 1284.310394][   T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1284.351633][   T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1284.390041][   T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1284.398700][   T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1284.402276][   T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1285.948600][T16987] kAFS: No cell specified
[ 1286.299349][T16992] netlink: 'syz.5.2919': attribute type 10 has an invalid length.
[ 1286.377871][T16992] bond0: (slave dummy0): Releasing backup interface
[ 1286.410363][T16992] team0: Failed to send port change of device dummy0 via netlink (err -105)
[ 1286.410457][T16992] team0: Failed to send options change via netlink (err -105)
[ 1286.410466][T16992] team0: Port device dummy0 added
[ 1286.443965][T16996] fuse: Bad value for 'fd'
[ 1286.492796][T16998] netlink: 'syz.5.2921': attribute type 10 has an invalid length.
[ 1286.537856][   T59] Bluetooth: hci2: command tx timeout
[ 1286.552916][T16998] team0: Failed to send port change of device dummy0 via netlink (err -105)
[ 1286.553319][T16998] team0: Port device dummy0 removed
[ 1286.555901][T16998] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1286.959982][T16262] veth0_vlan: entered promiscuous mode
[ 1287.015664][T16262] veth1_vlan: entered promiscuous mode
[ 1287.902391][T16262] veth0_macvtap: entered promiscuous mode
[ 1287.906359][T16262] veth1_macvtap: entered promiscuous mode
[ 1288.618455][   T59] Bluetooth: hci2: command tx timeout
[ 1289.095598][T11171] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1289.161063][T11171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1289.163136][T11171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1289.220657][T11171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1289.236397][T11171] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1290.793544][T11171] Bluetooth: hci2: command tx timeout
[ 1291.797954][T11171] Bluetooth: hci3: command tx timeout
[ 1292.746093][T17062] netlink: 'syz.7.2929': attribute type 10 has an invalid length.
[ 1292.859881][T11171] Bluetooth: hci2: command tx timeout
[ 1293.773130][T17079] fuse: Bad value for 'fd'
[ 1293.837379][T11171] Bluetooth: hci3: command tx timeout
[ 1294.411273][T16505] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1294.479159][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1294.543362][T16505] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1294.570044][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1294.571338][T16973] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1294.571460][T16973] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1294.571604][T16973] bridge_slave_0: entered allmulticast mode
[ 1294.574806][T16973] bridge_slave_0: entered promiscuous mode
[ 1294.621186][T16505] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1294.681333][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1295.248901][T16973] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1295.249056][T16973] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1295.249296][T16973] bridge_slave_1: entered allmulticast mode
[ 1295.253557][T16973] bridge_slave_1: entered promiscuous mode
[ 1295.298052][T16505] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1295.455883][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1295.675538][T16973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1295.721023][T16973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1295.899889][T11171] Bluetooth: hci3: command tx timeout
[ 1295.941649][T16973] team0: Port device team_slave_0 added
[ 1295.962083][T16973] team0: Port device team_slave_1 added
[ 1296.370187][T16973] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1296.370203][T16973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1296.370228][T16973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1296.384577][T16973] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1296.384592][T16973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1296.384616][T16973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1297.367766][T16973] hsr_slave_0: entered promiscuous mode
[ 1297.369121][T16973] hsr_slave_1: entered promiscuous mode
[ 1297.371804][T16973] debugfs: 'hsr0' already exists in 'hsr'
[ 1297.371828][T16973] Cannot create hsr debugfs directory
[ 1297.646854][T13362] bridge_slave_1: left allmulticast mode
[ 1297.646890][T13362] bridge_slave_1: left promiscuous mode
[ 1297.647157][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1297.729756][T13362] bridge_slave_0: left allmulticast mode
[ 1297.729791][T13362] bridge_slave_0: left promiscuous mode
[ 1297.730028][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1297.806643][ T5788] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 1297.965396][ T5788] usb 8-1: too many configurations: 36, using maximum allowed: 8
[ 1297.976612][T11171] Bluetooth: hci3: command tx timeout
[ 1298.004062][ T5788] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1298.004090][ T5788] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1298.004108][ T5788] usb 8-1: Product: syz
[ 1298.004121][ T5788] usb 8-1: Manufacturer: syz
[ 1298.004133][ T5788] usb 8-1: SerialNumber: syz
[ 1298.053726][ T5788] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1298.693816][ T5585] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1299.196654][T17129] netlink: 'syz.5.2939': attribute type 10 has an invalid length.
[ 1300.148444][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.148513][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.175579][ T5585] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[ 1300.179136][ T5585] ath9k_htc: Failed to initialize the device
[ 1300.242452][T17126] usb 8-1: USB disconnect, device number 16
[ 1300.385454][T17126] usb 8-1: ath9k_htc: USB layer deinitialized
[ 1300.399558][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1300.448680][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1300.478687][T13362] bond0 (unregistering): Released all slaves
[ 1300.652474][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1301.019206][T17140] overlayfs: failed to resolve './file0': -2
[ 1301.126701][T13362] hsr_slave_0: left promiscuous mode
[ 1301.153142][T13362] hsr_slave_1: left promiscuous mode
[ 1301.154232][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1301.219418][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1301.639012][T13362] veth1_vlan: left promiscuous mode
[ 1301.646958][T13362] veth0_vlan: left promiscuous mode
[ 1302.628551][T13362] team0 (unregistering): Port device team_slave_1 removed
[ 1302.659058][T17160] netlink: 'syz.7.2947': attribute type 10 has an invalid length.
[ 1302.689515][T13362] team0 (unregistering): Port device team_slave_0 removed
[ 1303.419912][T17018] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1303.420043][T17018] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1303.420228][T17018] bridge_slave_0: entered allmulticast mode
[ 1303.455088][T17018] bridge_slave_0: entered promiscuous mode
[ 1303.499634][T17018] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1303.499761][T17018] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1303.500001][T17018] bridge_slave_1: entered allmulticast mode
[ 1303.540009][T17018] bridge_slave_1: entered promiscuous mode
[ 1304.546811][T16505] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1304.551363][T17018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1304.562913][T17018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1304.792628][T17018] team0: Port device team_slave_0 added
[ 1304.808720][T17018] team0: Port device team_slave_1 added
[ 1305.234533][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1305.254835][T17018] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1305.254846][T17018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1305.254859][T17018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1305.260241][T16505] 8021q: adding VLAN 0 to HW filter on device team0
[ 1305.437155][T17018] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1305.437165][T17018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1305.437180][T17018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1305.451002][ T6815] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1305.451136][ T6815] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1305.465693][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1305.465822][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1305.743679][T17018] hsr_slave_0: entered promiscuous mode
[ 1305.744441][T17018] hsr_slave_1: entered promiscuous mode
[ 1305.747158][T17018] debugfs: 'hsr0' already exists in 'hsr'
[ 1305.747182][T17018] Cannot create hsr debugfs directory
[ 1307.473117][T17205] overlayfs: failed to resolve './file0': -2
[ 1309.195741][T17220] netlink: 'syz.5.2955': attribute type 10 has an invalid length.
[ 1310.719294][T17242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1310.799734][T17242] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1310.846564][T17242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1310.864009][T17242] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1310.864727][T17242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1311.846337][T17249] netlink: 'syz.7.2957': attribute type 4 has an invalid length.
[ 1311.911547][T17260] netlink: 'syz.7.2957': attribute type 4 has an invalid length.
[ 1313.017239][T11171] Bluetooth: hci6: command tx timeout
[ 1315.109469][T11171] Bluetooth: hci6: command tx timeout
[ 1316.049899][T17307] overlayfs: failed to resolve './file0': -2
[ 1316.616939][T13362] bridge_slave_1: left allmulticast mode
[ 1316.616973][T13362] bridge_slave_1: left promiscuous mode
[ 1316.617972][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1316.698825][T13362] bridge_slave_0: left allmulticast mode
[ 1316.698862][T13362] bridge_slave_0: left promiscuous mode
[ 1316.699106][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1317.186615][T11171] Bluetooth: hci6: command tx timeout
[ 1319.256723][T11171] Bluetooth: hci6: command tx timeout
[ 1319.397893][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1319.507234][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1319.533239][T13362] bond0 (unregistering): Released all slaves
[ 1320.100509][T17379] overlayfs: failed to resolve './file1': -2
[ 1320.866588][T13362] hsr_slave_0: left promiscuous mode
[ 1320.907139][T13362] hsr_slave_1: left promiscuous mode
[ 1320.910080][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1320.937946][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1321.018121][T13362] veth1_macvtap: left promiscuous mode
[ 1321.018196][T13362] veth0_macvtap: left promiscuous mode
[ 1321.018327][T13362] veth1_vlan: left promiscuous mode
[ 1321.018442][T13362] veth0_vlan: left promiscuous mode
[ 1322.137900][T13362] team0 (unregistering): Port device team_slave_1 removed
[ 1322.209176][T13362] team0 (unregistering): Port device team_slave_0 removed
[ 1322.670475][T17404] 9pnet_virtio: no channels available for device syz
[ 1325.166936][T17410] 9pnet_virtio: no channels available for device syz
[ 1329.572652][T17423] Can't find a SQUASHFS superblock on nullb0
[ 1333.823057][T17236] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1333.823196][T17236] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1333.823377][T17236] bridge_slave_0: entered allmulticast mode
[ 1333.825089][T17236] bridge_slave_0: entered promiscuous mode
[ 1333.835546][T17236] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1333.835761][T17236] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1333.836014][T17236] bridge_slave_1: entered allmulticast mode
[ 1333.853510][T17236] bridge_slave_1: entered promiscuous mode
[ 1334.020079][T17236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1334.047442][T17236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1334.144687][T17236] team0: Port device team_slave_0 added
[ 1334.191624][T17236] team0: Port device team_slave_1 added
[ 1334.394934][T17236] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1334.394945][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1334.394958][T17236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1334.397262][T17236] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1334.397271][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1334.397284][T17236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1334.851632][T17467] 9pnet_virtio: no channels available for device syz
[ 1334.978348][T17236] hsr_slave_0: entered promiscuous mode
[ 1335.002418][T17236] hsr_slave_1: entered promiscuous mode
[ 1335.015587][T17236] debugfs: 'hsr0' already exists in 'hsr'
[ 1335.017865][T17236] Cannot create hsr debugfs directory
[ 1338.951610][T17475] 9pnet_virtio: no channels available for device syz
[ 1343.627631][T17490] Can't find a SQUASHFS superblock on nullb0
[ 1345.038638][T17242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1345.097252][T17242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1345.105509][T17242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1345.124122][T17242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1345.146564][T17242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1345.725237][T17505] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1345.725569][T17505] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1346.273705][T17505] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1346.293032][T17505] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1346.858824][ T6813] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.900072][ T6813] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1347.258257][T11171] Bluetooth: hci1: command tx timeout
[ 1347.287176][ T6813] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1347.306082][ T6813] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1348.695591][T17242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1348.753839][T17242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1348.756153][T17242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1348.760707][T17242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1348.763327][T17242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1350.106882][T17242] Bluetooth: hci1: command tx timeout
[ 1350.846738][T17242] Bluetooth: hci2: command tx timeout
[ 1352.136793][T17242] Bluetooth: hci1: command tx timeout
[ 1352.937125][T17242] Bluetooth: hci2: command tx timeout
[ 1353.117799][T13362] bridge_slave_1: left allmulticast mode
[ 1353.117831][T13362] bridge_slave_1: left promiscuous mode
[ 1353.118122][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1354.216628][T17242] Bluetooth: hci1: command tx timeout
[ 1354.864026][T13362] bridge_slave_0: left allmulticast mode
[ 1354.864048][T13362] bridge_slave_0: left promiscuous mode
[ 1354.864195][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1355.016675][T17242] Bluetooth: hci2: command tx timeout
[ 1355.607549][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1355.687783][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1355.709460][T13362] bond0 (unregistering): Released all slaves
[ 1355.782618][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1357.448261][T17500] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1357.448469][T17500] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1357.448740][T17500] bridge_slave_0: entered allmulticast mode
[ 1357.467026][T17500] bridge_slave_0: entered promiscuous mode
[ 1357.504789][T17500] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1357.504915][T17500] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1357.505139][T17500] bridge_slave_1: entered allmulticast mode
[ 1357.528722][T17500] bridge_slave_1: entered promiscuous mode
[ 1358.095529][T17242] Bluetooth: hci2: command tx timeout
[ 1358.639358][T13362] hsr_slave_0: left promiscuous mode
[ 1358.699433][T13362] hsr_slave_1: left promiscuous mode
[ 1358.700275][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1358.728205][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1359.087566][T17622] netlink: 'syz.7.3021': attribute type 10 has an invalid length.
[ 1360.048515][T13362] team0 (unregistering): Port device team_slave_1 removed
[ 1360.077266][T13362] team0 (unregistering): Port device team_slave_0 removed
[ 1360.341698][T17622] bond0: (slave dummy0): Releasing backup interface
[ 1360.394076][T17622] team0: Port device dummy0 added
[ 1360.593787][T17500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1360.626137][   T36] kauditd_printk_skb: 6 callbacks suppressed
[ 1360.626153][   T36] audit: type=1326 audit(1778245132.092:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17628 comm="syz.7.3024" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4758cdd9 code=0x7ffc0000
[ 1360.641184][   T36] audit: type=1326 audit(1778245132.122:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17628 comm="syz.7.3024" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4758cdd9 code=0x7ffc0000
[ 1360.641566][   T36] audit: type=1326 audit(1778245132.122:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17628 comm="syz.7.3024" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b4758cdd9 code=0x7ffc0000
[ 1360.645641][   T36] audit: type=1326 audit(1778245132.122:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17628 comm="syz.7.3024" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4758cdd9 code=0x7ffc0000
[ 1360.663559][   T36] audit: type=1326 audit(1778245132.132:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17628 comm="syz.7.3024" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b4758cdd9 code=0x7ffc0000
[ 1360.678340][T17500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1361.036260][T17500] team0: Port device team_slave_0 added
[ 1361.065867][T17500] team0: Port device team_slave_1 added
[ 1361.580061][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.580128][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.789615][T17500] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1361.789633][T17500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1361.789656][T17500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1361.973899][T17500] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1361.973913][T17500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1361.973936][T17500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1362.937011][T17500] hsr_slave_0: entered promiscuous mode
[ 1362.941671][T17500] hsr_slave_1: entered promiscuous mode
[ 1363.922207][T17538] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1363.922421][T17538] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1363.922662][T17538] bridge_slave_0: entered allmulticast mode
[ 1363.949184][T17538] bridge_slave_0: entered promiscuous mode
[ 1365.374969][T17538] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1365.375083][T17538] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1365.375275][T17538] bridge_slave_1: entered allmulticast mode
[ 1365.378032][T17538] bridge_slave_1: entered promiscuous mode
[ 1367.120190][T17538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1367.162162][T17538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1367.764954][T17538] team0: Port device team_slave_0 added
[ 1367.773237][T17538] team0: Port device team_slave_1 added
[ 1368.180412][T17538] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1368.180422][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1368.180436][T17538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1368.180799][T17236] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1368.288409][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1368.294955][T17538] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1368.294971][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1368.294995][T17538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1368.380601][T17236] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1368.449653][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1368.506133][T17687] /dev/nullb0: Can't lookup blockdev
[ 1368.607190][T17236] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1368.671802][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1368.876897][T17694] 9pnet_virtio: no channels available for device syz
[ 1368.986408][T17236] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1369.023983][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1369.174828][T17538] hsr_slave_0: entered promiscuous mode
[ 1369.175767][T17538] hsr_slave_1: entered promiscuous mode
[ 1369.176426][T17538] debugfs: 'hsr0' already exists in 'hsr'
[ 1369.180325][T17538] Cannot create hsr debugfs directory
[ 1369.821227][T17236] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1369.847948][T17236] 8021q: adding VLAN 0 to HW filter on device team0
[ 1369.970396][ T2260] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1369.970533][ T2260] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1369.982904][ T2260] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1369.983059][ T2260] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1371.158081][T11171] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1371.212385][T11171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1371.228475][T11171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1371.230487][T11171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1371.254501][T11171] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1371.862092][T17715] ceph: No mds server is up or the cluster is laggy
[ 1372.861692][T13362] bridge_slave_1: left allmulticast mode
[ 1372.861724][T13362] bridge_slave_1: left promiscuous mode
[ 1372.861960][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1372.963113][T13362] bridge_slave_0: left allmulticast mode
[ 1372.963147][T13362] bridge_slave_0: left promiscuous mode
[ 1372.963414][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1373.197752][T13362] bridge_slave_1: left allmulticast mode
[ 1373.197785][T13362] bridge_slave_1: left promiscuous mode
[ 1373.198048][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1373.282736][T13362] bridge_slave_0: left allmulticast mode
[ 1373.282760][T13362] bridge_slave_0: left promiscuous mode
[ 1373.283051][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1373.496654][T17242] Bluetooth: hci3: command tx timeout
[ 1373.873520][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1373.975537][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1374.039587][T13362] bond0 (unregistering): Released all slaves
[ 1374.401777][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1374.479340][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1374.543265][T13362] bond0 (unregistering): Released all slaves
[ 1374.798677][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1375.328368][T17761] 9pnet_virtio: no channels available for device syz
[ 1375.576655][T17242] Bluetooth: hci3: command tx timeout
[ 1376.365533][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1376.622727][T13362] hsr_slave_0: left promiscuous mode
[ 1376.664801][T13362] hsr_slave_1: left promiscuous mode
[ 1376.665948][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1376.697743][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1377.106764][T13362] hsr_slave_0: left promiscuous mode
[ 1377.127176][T13362] hsr_slave_1: left promiscuous mode
[ 1377.127972][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1377.169708][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1377.656677][T17242] Bluetooth: hci3: command tx timeout
[ 1377.717435][T13362] team0 (unregistering): Port device team_slave_1 removed
[ 1377.897455][T13362] team0 (unregistering): Port device team_slave_0 removed
[ 1378.573122][T13362] team0 (unregistering): Port device team_slave_1 removed
[ 1378.628716][T13362] team0 (unregistering): Port device team_slave_0 removed
[ 1379.736656][T17242] Bluetooth: hci3: command tx timeout
[ 1380.508260][T17814] 9pnet_virtio: no channels available for device syz
[ 1381.284726][T17716] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1381.284909][T17716] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1381.285091][T17716] bridge_slave_0: entered allmulticast mode
[ 1381.287371][T17716] bridge_slave_0: entered promiscuous mode
[ 1381.290235][T17716] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1381.290405][T17716] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1381.290597][T17716] bridge_slave_1: entered allmulticast mode
[ 1381.292911][T17716] bridge_slave_1: entered promiscuous mode
[ 1381.412798][T17716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1381.416223][T17716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1381.505772][T17716] team0: Port device team_slave_0 added
[ 1381.532569][T17716] team0: Port device team_slave_1 added
[ 1381.574876][T17716] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1381.574891][T17716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1381.574911][T17716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1381.621264][T17716] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1381.621280][T17716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1381.621303][T17716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1381.787219][T17716] hsr_slave_0: entered promiscuous mode
[ 1381.788925][T17716] hsr_slave_1: entered promiscuous mode
[ 1381.793105][T17716] debugfs: 'hsr0' already exists in 'hsr'
[ 1381.793130][T17716] Cannot create hsr debugfs directory
[ 1385.148370][T17881] 9pnet_virtio: no channels available for device syz
[ 1388.971092][T17500] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1389.043101][T17500] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1389.049463][T17500] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1389.148905][T17500] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1389.194559][T17500] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1389.301312][T17500] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1389.304935][T17500] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1389.346280][T17500] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1393.228364][T17538] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1393.311471][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1393.363254][T17538] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1393.533008][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1393.590044][T17538] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1393.629420][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1393.634496][T17538] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1393.703969][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1393.905007][T17500] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1393.993908][T17500] 8021q: adding VLAN 0 to HW filter on device team0
[ 1394.180186][T17957] lo speed is unknown, defaulting to 1000
[ 1394.180288][T17957] lo speed is unknown, defaulting to 1000
[ 1394.183898][T17957] lo speed is unknown, defaulting to 1000
[ 1394.185470][T17957] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 1394.185492][T17957] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 1394.185514][T17957] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 1394.190827][T17957] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1394.200523][T17957] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1394.276057][ T2260] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1394.317682][T17961] 9pnet_virtio: no channels available for device syz
[ 1394.319947][ T2260] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1394.359364][T17957] lo speed is unknown, defaulting to 1000
[ 1394.361510][T17957] lo speed is unknown, defaulting to 1000
[ 1394.362930][T17957] lo speed is unknown, defaulting to 1000
[ 1394.368244][T17957] lo speed is unknown, defaulting to 1000
[ 1394.369661][T17957] lo speed is unknown, defaulting to 1000
[ 1394.371084][T17957] lo speed is unknown, defaulting to 1000
[ 1394.372396][T17957] lo speed is unknown, defaulting to 1000
[ 1394.374354][T17957] lo speed is unknown, defaulting to 1000
[ 1394.422552][T14044] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1394.422734][T14044] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1394.874926][T17967] 9pnet_virtio: no channels available for device syz
[ 1395.758737][T17960] smbdirect: ib_dev[syz2] removed
[ 1398.326759][T13362] bridge_slave_1: left allmulticast mode
[ 1398.326793][T13362] bridge_slave_1: left promiscuous mode
[ 1398.327297][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1398.461627][T13362] bridge_slave_0: left allmulticast mode
[ 1398.461662][T13362] bridge_slave_0: left promiscuous mode
[ 1398.461895][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1403.277354][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1403.318861][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1403.340849][T13362] bond0 (unregistering): Released all slaves
[ 1403.360268][T17990] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1403.360293][T17990] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1403.360309][T17990] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1403.659154][T17538] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1404.434382][T13362] hsr_slave_0: left promiscuous mode
[ 1404.487204][T13362] hsr_slave_1: left promiscuous mode
[ 1404.487812][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1404.514592][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1405.106132][T13362] team0 (unregistering): Port device team_slave_1 removed
[ 1405.168101][T13362] team0 (unregistering): Port device team_slave_0 removed
[ 1405.362068][T17538] 8021q: adding VLAN 0 to HW filter on device team0
[ 1405.380343][ T6813] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1405.380547][ T6813] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1405.557058][ T6813] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1405.558333][ T6813] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1406.708420][T11171] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1406.828014][T11171] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1406.844899][T11171] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1406.862312][T11171] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1406.885908][T11171] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1408.954759][T17242] Bluetooth: hci6: command tx timeout
[ 1409.403856][T11171] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1409.445780][T11171] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1409.457061][T11171] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1409.504565][T11171] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1409.522495][T11171] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1411.019587][T17242] Bluetooth: hci6: command tx timeout
[ 1411.747762][T17242] Bluetooth: hci1: command tx timeout
[ 1413.098918][T17242] Bluetooth: hci6: command tx timeout
[ 1413.816996][T17242] Bluetooth: hci1: command tx timeout
[ 1415.259686][T17242] Bluetooth: hci6: command tx timeout
[ 1415.896617][T17242] Bluetooth: hci1: command tx timeout
[ 1417.982979][T17242] Bluetooth: hci1: command tx timeout
[ 1419.164567][T17716] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1419.204516][T17716] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1419.624153][T17716] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1419.692053][T17716] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1419.717252][T17716] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1419.743582][T17716] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1419.801491][T17716] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1419.835356][T17716] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1421.237807][T18182] netlink: 'syz.7.3138': attribute type 10 has an invalid length.
[ 1421.586810][T18182] team0: Failed to send port change of device dummy0 via netlink (err -105)
[ 1421.587188][T18182] team0: Port device dummy0 removed
[ 1421.629498][T18182] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1421.817700][T13362] bridge_slave_1: left allmulticast mode
[ 1421.817734][T13362] bridge_slave_1: left promiscuous mode
[ 1421.820945][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1421.888722][T13362] bridge_slave_0: left allmulticast mode
[ 1421.888757][T13362] bridge_slave_0: left promiscuous mode
[ 1421.889066][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1423.018682][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.018745][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.318180][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1423.392688][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1423.414719][T13362] bond0 (unregistering): Released all slaves
[ 1424.271524][T13362] hsr_slave_0: left promiscuous mode
[ 1424.319959][T13362] hsr_slave_1: left promiscuous mode
[ 1424.320913][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1424.338401][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1425.130695][   T36] audit: type=1326 audit(1778245196.572:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18215 comm="syz.5.3148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d75edcdd9 code=0x7ffc0000
[ 1425.130972][   T36] audit: type=1326 audit(1778245196.572:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18215 comm="syz.5.3148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d75edcdd9 code=0x7ffc0000
[ 1425.131236][   T36] audit: type=1326 audit(1778245196.582:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18215 comm="syz.5.3148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d75edcdd9 code=0x7ffc0000
[ 1425.131484][   T36] audit: type=1326 audit(1778245196.582:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18215 comm="syz.5.3148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d75edcdd9 code=0x7ffc0000
[ 1425.131722][   T36] audit: type=1326 audit(1778245196.582:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18215 comm="syz.5.3148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d75edcdd9 code=0x7ffc0000
[ 1425.131985][   T36] audit: type=1326 audit(1778245196.592:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18215 comm="syz.5.3148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2d75edcdd9 code=0x7ffc0000
[ 1425.261120][T18221] /dev/nullb0: Can't lookup blockdev
[ 1425.917936][T13362] team0 (unregistering): Port device team_slave_1 removed
[ 1425.967388][T13362] team0 (unregistering): Port device team_slave_0 removed
[ 1426.152413][T18029] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1426.152739][T18029] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1426.152986][T18029] bridge_slave_0: entered allmulticast mode
[ 1426.155621][T18029] bridge_slave_0: entered promiscuous mode
[ 1426.214152][T18029] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1426.214295][T18029] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1426.214523][T18029] bridge_slave_1: entered allmulticast mode
[ 1426.253437][T18029] bridge_slave_1: entered promiscuous mode
[ 1426.270049][T18085] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1426.270185][T18085] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1426.270426][T18085] bridge_slave_0: entered allmulticast mode
[ 1426.273043][T18085] bridge_slave_0: entered promiscuous mode
[ 1426.369489][T18085] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1426.369682][T18085] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1426.369888][T18085] bridge_slave_1: entered allmulticast mode
[ 1426.373299][T18085] bridge_slave_1: entered promiscuous mode
[ 1426.484314][T18029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1426.544045][T18029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1426.570909][T18085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1426.633238][   T36] audit: type=1326 audit(1778245198.112:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18228 comm="syz.5.3151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d75edcdd9 code=0x7ffc0000
[ 1426.633939][T18085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1426.635276][   T36] audit: type=1326 audit(1778245198.112:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18228 comm="syz.5.3151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2d75edcdd9 code=0x7ffc0000
[ 1426.635461][   T36] audit: type=1326 audit(1778245198.112:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18228 comm="syz.5.3151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d75edcdd9 code=0x7ffc0000
[ 1426.635923][   T36] audit: type=1326 audit(1778245198.112:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18228 comm="syz.5.3151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f2d75edcdd9 code=0x7ffc0000
[ 1426.848954][T18029] team0: Port device team_slave_0 added
[ 1426.937352][T18029] team0: Port device team_slave_1 added
[ 1426.976999][T18085] team0: Port device team_slave_0 added
[ 1427.014793][T18085] team0: Port device team_slave_1 added
[ 1427.055608][T18029] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1427.055623][T18029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1427.055643][T18029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1427.126111][T18029] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1427.126126][T18029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1427.126152][T18029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1427.179022][T18085] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1427.179039][T18085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1427.179063][T18085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1427.254020][T17716] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1427.256027][T18085] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1427.256041][T18085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1427.256065][T18085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1427.992498][T18029] hsr_slave_0: entered promiscuous mode
[ 1427.993786][T18029] hsr_slave_1: entered promiscuous mode
[ 1428.112650][T18085] hsr_slave_0: entered promiscuous mode
[ 1428.113967][T18085] hsr_slave_1: entered promiscuous mode
[ 1428.114877][T18085] debugfs: 'hsr0' already exists in 'hsr'
[ 1428.114900][T18085] Cannot create hsr debugfs directory
[ 1428.454684][T18257] fuse: Bad value for 'fd'
[ 1428.516152][T17716] 8021q: adding VLAN 0 to HW filter on device team0
[ 1428.677609][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1428.870589][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1428.870821][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1429.142675][T14044] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1429.142818][T14044] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1431.763860][T18296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1431.786736][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1432.061888][T11171] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1432.095706][T11171] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1432.105584][T11171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1432.118048][T11171] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1432.142211][T11171] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1432.534620][T18315] __nla_validate_parse: 154 callbacks suppressed
[ 1432.534638][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3167'.
[ 1433.207377][T18315] hsr_slave_1 (unregistering): left promiscuous mode
[ 1434.296697][T11171] Bluetooth: hci2: command tx timeout
[ 1434.978005][   T31] libceph: connect (1)[c::]:6789 error -99
[ 1434.978124][   T31] libceph: mon0 (1)[c::]:6789 connect error
[ 1435.017133][   T31] libceph: connect (1)[c::]:6789 error -99
[ 1435.017324][   T31] libceph: mon0 (1)[c::]:6789 connect error
[ 1435.032643][T18327] ceph: No mds server is up or the cluster is laggy
[ 1435.326880][   T43] libceph: connect (1)[c::]:6789 error -99
[ 1435.327068][   T43] libceph: mon0 (1)[c::]:6789 connect error
[ 1436.380100][T11171] Bluetooth: hci2: command tx timeout
[ 1438.324589][T13362] bridge_slave_1: left allmulticast mode
[ 1438.324625][T13362] bridge_slave_1: left promiscuous mode
[ 1438.324872][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1438.408274][T13362] bridge_slave_0: left allmulticast mode
[ 1438.408307][T13362] bridge_slave_0: left promiscuous mode
[ 1438.408579][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1438.458281][T11171] Bluetooth: hci2: command tx timeout
[ 1438.546666][ T5788] usb 8-1: new full-speed USB device number 17 using dummy_hcd
[ 1438.703820][ T5788] usb 8-1: config index 0 descriptor too short (expected 28277, got 36)
[ 1438.703846][ T5788] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1438.703863][ T5788] usb 8-1: config 0 has no interfaces?
[ 1438.703890][ T5788] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 1438.703910][ T5788] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1438.714264][ T5788] usb 8-1: config 0 descriptor??
[ 1440.008232][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1440.139944][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1440.182961][T13362] bond0 (unregistering): Released all slaves
[ 1440.222412][T18420] 9pnet_virtio: no channels available for device syz
[ 1440.537847][T11171] Bluetooth: hci2: command tx timeout
[ 1441.142032][   T43] usb 8-1: USB disconnect, device number 17
[ 1441.517735][T13362] hsr_slave_0: left promiscuous mode
[ 1441.557035][T13362] hsr_slave_1: left promiscuous mode
[ 1441.557732][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1441.598328][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1443.560265][T13362] team0 (unregistering): Port device team_slave_1 removed
[ 1443.621618][T13362] team0 (unregistering): Port device team_slave_0 removed
[ 1446.724146][T18300] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1446.724824][T18300] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1446.725043][T18300] bridge_slave_0: entered allmulticast mode
[ 1446.781163][T18300] bridge_slave_0: entered promiscuous mode
[ 1446.820020][T18300] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1446.821929][T18300] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1446.822213][T18300] bridge_slave_1: entered allmulticast mode
[ 1446.828350][T18300] bridge_slave_1: entered promiscuous mode
[ 1447.559807][T18300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1447.567844][T18300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1447.732799][T18300] team0: Port device team_slave_0 added
[ 1447.752606][T18300] team0: Port device team_slave_1 added
[ 1449.425067][T18300] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1449.425078][T18300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1449.425095][T18300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1449.473085][T18300] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1449.473096][T18300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1449.473111][T18300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1449.783723][T18300] hsr_slave_0: entered promiscuous mode
[ 1449.794310][T18300] hsr_slave_1: entered promiscuous mode
[ 1449.806089][T18300] debugfs: 'hsr0' already exists in 'hsr'
[ 1449.808140][T18300] Cannot create hsr debugfs directory
[ 1452.161261][T18503] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8)
[ 1452.161286][T18503] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1452.357950][T13362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1452.365603][T18506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1452.375607][T18503] vhci_hcd vhci_hcd.0: Device attached
[ 1455.233043][   T31] usb 48-1: SetAddress Request (2) to port 0
[ 1455.233127][   T31] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1456.106956][T18504] vhci_hcd: connection reset by peer
[ 1456.302160][   T66] vhci_hcd vhci_hcd.7: stop threads
[ 1456.311676][   T66] vhci_hcd vhci_hcd.7: release socket
[ 1456.373339][   T66] vhci_hcd vhci_hcd.7: disconnect device
[ 1456.399879][T13362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1458.668998][T18029] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1458.818847][T18029] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1459.337991][T13362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1460.528512][T18029] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1460.862009][   T31] usb 48-1: device descriptor read/8, error -110
[ 1460.892650][T18029] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1460.903865][T18029] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1460.975958][T18029] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1461.341945][   T31] usb usb48-port1: attempt power cycle
[ 1461.432764][T18029] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1461.459341][T18029] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1461.712002][T13362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1461.898832][   T31] usb usb48-port1: unable to enumerate USB device
[ 1462.101481][T18085] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1462.140617][T18085] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1462.193318][T18085] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1462.264367][T18085] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1462.574272][T18085] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1462.633842][T18085] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1462.708242][T18580] fuse: Bad value for 'fd'
[ 1463.222443][T18085] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1463.272881][T18085] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1464.634320][T18029] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1465.140364][T18619] fuse: Bad value for 'fd'
[ 1465.215944][T18029] 8021q: adding VLAN 0 to HW filter on device team0
[ 1465.242078][ T3412] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1465.242244][ T3412] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1465.668441][ T2260] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1465.668699][ T2260] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1466.902609][T18085] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1466.940317][T17242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1466.992669][T17242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1467.004370][T17242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1467.022722][T17242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1467.033057][T17242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1467.193468][T18085] 8021q: adding VLAN 0 to HW filter on device team0
[ 1467.203314][T14044] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1467.203513][T14044] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1467.214469][T14044] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1467.214664][T14044] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1467.950440][T11171] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1468.030311][T11171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1468.041948][T11171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1468.044723][T11171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1468.047909][T11171] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1468.569959][T13362] bridge_slave_1: left allmulticast mode
[ 1468.569995][T13362] bridge_slave_1: left promiscuous mode
[ 1468.570264][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1468.658325][T13362] bridge_slave_0: left allmulticast mode
[ 1468.658359][T13362] bridge_slave_0: left promiscuous mode
[ 1468.658622][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1468.711742][T13362] veth0_vlan: left allmulticast mode
[ 1468.786794][T13362] bridge_slave_1: left allmulticast mode
[ 1468.786820][T13362] bridge_slave_1: left promiscuous mode
[ 1468.786974][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1468.848607][T13362] bridge_slave_0: left allmulticast mode
[ 1468.848631][T13362] bridge_slave_0: left promiscuous mode
[ 1468.848782][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1469.097426][T17242] Bluetooth: hci0: command tx timeout
[ 1469.210497][T11171] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1469.265109][T11171] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1469.276998][T11171] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1469.288632][T11171] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1469.289290][T11171] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1470.296892][T17242] Bluetooth: hci3: command tx timeout
[ 1470.322045][T13362] erspan0 (unregistering): left allmulticast mode
[ 1471.177665][T17242] Bluetooth: hci0: command tx timeout
[ 1471.339437][T17242] Bluetooth: hci6: command tx timeout
[ 1471.407265][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1471.487237][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1471.508756][T13362] bond0 (unregistering): Released all slaves
[ 1472.067476][T13362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1472.129696][T13362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1472.169277][T13362] bond0 (unregistering): Released all slaves
[ 1472.376959][T17242] Bluetooth: hci3: command tx timeout
[ 1472.669148][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1473.324533][T17242] Bluetooth: hci0: command tx timeout
[ 1474.493782][T17242] Bluetooth: hci6: command tx timeout
[ 1474.493936][T17242] Bluetooth: hci3: command tx timeout
[ 1475.546494][T11171] Bluetooth: hci0: command tx timeout
[ 1476.062424][T18702] 9pnet_virtio: no channels available for device syz
[ 1476.543285][T11171] Bluetooth: hci3: command tx timeout
[ 1476.543319][T11171] Bluetooth: hci6: command tx timeout
[ 1476.961098][T18300] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1477.023496][T18300] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1477.327130][T18300] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1477.372296][T18300] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1477.398131][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1477.554113][T18300] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1477.615232][T18300] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1477.702995][T18300] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1477.739766][T18300] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1478.569003][T13362] hsr_slave_0: left promiscuous mode
[ 1478.607653][T13362] hsr_slave_1: left promiscuous mode
[ 1478.609581][T13362] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1478.609608][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1478.616612][T17242] Bluetooth: hci6: command tx timeout
[ 1478.647777][T13362] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1478.647805][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1478.784319][T17242] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[ 1478.784358][T17242] CPU: 0 UID: 0 PID: 17242 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1478.784392][T17242] Tainted: [L]=SOFTLOCKUP
[ 1478.784398][T17242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026[ 1478.784398][T17242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1478.784410][T17242] Workqueue: hci5 hci_rx_work
[ 1478.784440][T17242] Call Trace:
[ 1478.784447][T17242]  <TASK>
[ 1478.784455][T17242]  dump_stack_lvl+0xe8/0x150
[ 1478.784479][T17242]  sysfs_create_dir_ns+0x271/0x2a0
[ 1478.784505][T17242]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1478.784525][T17242]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1478.784552][T17242]  ? rt_spin_unlock+0x160/0x200
[ 1478.784570][T17242]  kobject_add_internal+0x631/0xd10
[ 1478.784600][T17242]  kobject_add+0x163/0x240
[ 1478.784626][T17242]  ? __pfx_kobject_add+0x10/0x10
[ 1478.784655][T17242]  ? get_device_parent+0x370/0x3a0
[ 1478.784679][T17242]  device_add+0x408/0xbb0
[ 1478.784701][T17242]  hci_conn_add_sysfs+0xd5/0x210
[ 1478.784724][T17242]  le_conn_complete_evt+0x10e6/0x16b0
[ 1478.784759][T17242]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1478.784785][T17242]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1478.784806][T17242]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1478.784829][T17242]  ? skb_pull_data+0xfb/0x200
[ 1478.784857][T17242]  hci_le_conn_complete_evt+0x187/0x470
[ 1478.784886][T17242]  hci_event_packet+0x659/0xef0
[ 1478.784910][T17242]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1478.784925][T17242]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1478.784947][T17242]  ? __pfx_hci_event_packet+0x10/0x10
[ 1478.784966][T17242]  ? rt_spin_unlock+0x14f/0x200
[ 1478.784988][T17242]  ? hci_send_to_monitor+0xe2/0x590
[ 1478.785016][T17242]  hci_rx_work+0x3ee/0x1040
[ 1478.785037][T17242]  ? preempt_schedule_thunk+0x16/0x30
[ 1478.785064][T17242]  ? process_scheduled_works+0xa70/0x1860
[ 1478.785085][T17242]  process_scheduled_works+0xb5d/0x1860
[ 1478.785130][T17242]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1478.785154][T17242]  ? assign_work+0x3d5/0x5e0
[ 1478.785176][T17242]  worker_thread+0xa53/0xfc0
[ 1478.785216][T17242]  kthread+0x388/0x470
[ 1478.785239][T17242]  ? __pfx_worker_thread+0x10/0x10
[ 1478.785257][T17242]  ? __pfx_kthread+0x10/0x10
[ 1478.785279][T17242]  ret_from_fork+0x514/0xb70
[ 1478.785301][T17242]  ? __pfx_ret_from_fork+0x10/0x10
[ 1478.785320][T17242]  ? __switch_to+0xc79/0x1410
[ 1478.785348][T17242]  ? __pfx_kthread+0x10/0x10
[ 1478.785381][T17242]  ret_from_fork_asm+0x1a/0x30
[ 1478.785417][T17242]  </TASK>
[ 1478.785448][T17242] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1478.785482][T17242] Bluetooth: hci5: failed to register connection device
[ 1478.876194][T17242] ==================================================================
[ 1478.876214][T17242] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x902/0x1560
[ 1478.876332][T17242] Read of size 8 at addr ffff88803ab81500 by task kworker/u9:2/17242
[ 1478.876347][T17242] 
[ 1478.876359][T17242] CPU: 0 UID: 0 PID: 17242 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1478.876381][T17242] Tainted: [L]=SOFTLOCKUP
[ 1478.876386][T17242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1478.876400][T17242] Workqueue: hci5 hci_rx_work
[ 1478.876424][T17242] Call Trace:
[ 1478.876438][T17242]  <TASK>
[ 1478.876447][T17242]  dump_stack_lvl+0xe8/0x150
[ 1478.876468][T17242]  print_address_description+0x55/0x1e0
[ 1478.876504][T17242]  ? l2cap_connect_cfm+0x902/0x1560
[ 1478.876519][T17242]  print_report+0x58/0x70
[ 1478.876535][T17242]  kasan_report+0x117/0x150
[ 1478.876610][T17242]  ? l2cap_connect_cfm+0x902/0x1560
[ 1478.876631][T17242]  l2cap_connect_cfm+0x902/0x1560
[ 1478.876652][T17242]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1478.876667][T17242]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1478.876689][T17242]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1478.876720][T17242]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1478.876740][T17242]  ? mutex_lock_nested+0x152/0x1d0
[ 1478.876764][T17242]  ? hci_connect_cfm+0x2c/0x140
[ 1478.876786][T17242]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1478.876803][T17242]  hci_connect_cfm+0x95/0x140
[ 1478.876827][T17242]  le_conn_complete_evt+0x1134/0x16b0
[ 1478.876854][T17242]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1478.876878][T17242]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1478.876897][T17242]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1478.876917][T17242]  ? skb_pull_data+0xfb/0x200
[ 1478.876942][T17242]  hci_le_conn_complete_evt+0x187/0x470
[ 1478.876968][T17242]  hci_event_packet+0x659/0xef0
[ 1478.876990][T17242]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1478.877006][T17242]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1478.877026][T17242]  ? __pfx_hci_event_packet+0x10/0x10
[ 1478.877045][T17242]  ? rt_spin_unlock+0x14f/0x200
[ 1478.877064][T17242]  ? hci_send_to_monitor+0xe2/0x590
[ 1478.877090][T17242]  hci_rx_work+0x3ee/0x1040
[ 1478.877110][T17242]  ? preempt_schedule_thunk+0x16/0x30
[ 1478.877135][T17242]  ? process_scheduled_works+0xa70/0x1860
[ 1478.877154][T17242]  process_scheduled_works+0xb5d/0x1860
[ 1478.877184][T17242]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1478.877204][T17242]  ? assign_work+0x3d5/0x5e0
[ 1478.877223][T17242]  worker_thread+0xa53/0xfc0
[ 1478.877252][T17242]  kthread+0x388/0x470
[ 1478.877272][T17242]  ? __pfx_worker_thread+0x10/0x10
[ 1478.877286][T17242]  ? __pfx_kthread+0x10/0x10
[ 1478.877306][T17242]  ret_from_fork+0x514/0xb70
[ 1478.877325][T17242]  ? __pfx_ret_from_fork+0x10/0x10
[ 1478.877343][T17242]  ? __switch_to+0xc79/0x1410
[ 1478.877367][T17242]  ? __pfx_kthread+0x10/0x10
[ 1478.877388][T17242]  ret_from_fork_asm+0x1a/0x30
[ 1478.877415][T17242]  </TASK>
[ 1478.877422][T17242] 
[ 1478.877433][T17242] Allocated by task 17242:
[ 1478.877443][T17242]  kasan_save_track+0x3e/0x80
[ 1478.877459][T17242]  __kasan_kmalloc+0x93/0xb0
[ 1478.877475][T17242]  __kmalloc_cache_noprof+0x3a6/0x690
[ 1478.877552][T17242]  l2cap_chan_create+0x51/0x7a0
[ 1478.877571][T17242]  l2cap_sock_new_connection_cb+0x191/0x2f0
[ 1478.877587][T17242]  l2cap_connect_cfm+0x368/0x1560
[ 1478.877601][T17242]  hci_connect_cfm+0x95/0x140
[ 1478.877622][T17242]  le_conn_complete_evt+0x1134/0x16b0
[ 1478.877645][T17242]  hci_le_conn_complete_evt+0x187/0x470
[ 1478.877665][T17242]  hci_event_packet+0x659/0xef0
[ 1478.877681][T17242]  hci_rx_work+0x3ee/0x1040
[ 1478.877704][T17242]  process_scheduled_works+0xb5d/0x1860
[ 1478.877720][T17242]  worker_thread+0xa53/0xfc0
[ 1478.877737][T17242]  kthread+0x388/0x470
[ 1478.877756][T17242]  ret_from_fork+0x514/0xb70
[ 1478.877772][T17242]  ret_from_fork_asm+0x1a/0x30
[ 1478.877790][T17242] 
[ 1478.877793][T17242] Freed by task 18732:
[ 1478.877801][T17242]  kasan_save_track+0x3e/0x80
[ 1478.877815][T17242]  kasan_save_free_info+0x46/0x50
[ 1478.877862][T17242]  __kasan_slab_free+0x5c/0x80
[ 1478.877876][T17242]  kfree+0x1c5/0x6c0
[ 1478.877889][T17242]  l2cap_sock_cleanup_listen+0xf0/0x440
[ 1478.877906][T17242]  l2cap_sock_release+0x6e/0x270
[ 1478.877921][T17242]  sock_close+0xc3/0x240
[ 1478.877975][T17242]  __fput+0x461/0xa70
[ 1478.878115][T17242]  task_work_run+0x1d9/0x270
[ 1478.878137][T17242]  exit_to_user_mode_loop+0xed/0x480
[ 1478.878199][T17242]  do_syscall_64+0x33e/0xf80
[ 1478.878218][T17242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1478.878236][T17242] 
[ 1478.878240][T17242] The buggy address belongs to the object at ffff88803ab81000
[ 1478.878240][T17242]  which belongs to the cache kmalloc-2k of size 2048
[ 1478.878255][T17242] The buggy address is located 1280 bytes inside of
[ 1478.878255][T17242]  freed 2048-byte region [ffff88803ab81000, ffff88803ab81800)
[ 1478.878272][T17242] 
[ 1478.878278][T17242] The buggy address belongs to the physical page:
[ 1478.878292][T17242] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3ab80
[ 1478.878308][T17242] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1478.878322][T17242] flags: 0x80000000000040(head|node=0|zone=1)
[ 1478.878343][T17242] page_type: f5(slab)
[ 1478.878357][T17242] raw: 0080000000000040 ffff88801a011000 dead000000000100 dead000000000122
[ 1478.878372][T17242] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[ 1478.878388][T17242] head: 0080000000000040 ffff88801a011000 dead000000000100 dead000000000122
[ 1478.878402][T17242] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[ 1478.878417][T17242] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 1478.878430][T17242] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 1478.878439][T17242] page dumped because: kasan: bad access detected
[ 1478.878453][T17242] page_owner tracks the page as allocated
[ 1478.878460][T17242] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6816, tgid 6816 (kworker/u8:20), ts 400159575221, free_ts 400136027623
[ 1478.878492][T17242]  post_alloc_hook+0x231/0x280
[ 1478.878546][T17242]  get_page_from_freelist+0x27c8/0x2840
[ 1478.878567][T17242]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1478.878586][T17242]  allocate_slab+0x77/0x660
[ 1478.878606][T17242]  refill_objects+0x33c/0x3d0
[ 1478.878626][T17242]  __pcs_replace_empty_main+0x373/0x720
[ 1478.878648][T17242]  __kmalloc_noprof+0x530/0x7b0
[ 1478.878663][T17242]  ___neigh_create+0x722/0x2350
[ 1478.878712][T17242]  ip6_finish_output2+0x729/0x1430
[ 1478.878782][T17242]  ip6_output+0x340/0x550
[ 1478.878800][T17242]  ndisc_send_skb+0xd0b/0x1670
[ 1478.878849][T17242]  ndisc_send_ns+0xd7/0x160
[ 1478.878864][T17242]  addrconf_dad_work+0xbea/0x1680
[ 1478.878905][T17242]  process_scheduled_works+0xb5d/0x1860
[ 1478.878922][T17242]  worker_thread+0xa53/0xfc0
[ 1478.878939][T17242]  kthread+0x388/0x470
[ 1478.878958][T17242] page last free pid 5583 tgid 5583 stack trace:
[ 1478.878969][T17242]  __free_frozen_pages+0xfa6/0x10f0
[ 1478.878986][T17242]  __folio_put+0x2eb/0x3a0
[ 1478.879058][T17242]  skb_release_data+0x544/0xa60
[ 1478.879077][T17242]  __kfree_skb+0x5d/0x210
[ 1478.879094][T17242]  tcp_ack+0x284f/0x7e00
[ 1478.879169][T17242]  tcp_rcv_established+0x8c4/0x2800
[ 1478.879188][T17242]  tcp_v4_do_rcv+0x959/0x13f0
[ 1478.879225][T17242]  __release_sock+0x285/0x3d0
[ 1478.879245][T17242]  release_sock+0x1be/0x290
[ 1478.879260][T17242]  tcp_sendmsg+0x39/0x50
[ 1478.879308][T17242]  sock_write_iter+0x40c/0x4f0
[ 1478.879329][T17242]  vfs_write+0x629/0xba0
[ 1478.879346][T17242]  ksys_write+0x156/0x270
[ 1478.879360][T17242]  do_syscall_64+0x15f/0xf80
[ 1478.879378][T17242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1478.879394][T17242] 
[ 1478.879398][T17242] Memory state around the buggy address:
[ 1478.879408][T17242]  ffff88803ab81400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1478.879420][T17242]  ffff88803ab81480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1478.879431][T17242] >ffff88803ab81500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1478.879440][T17242]                    ^
[ 1478.879448][T17242]  ffff88803ab81580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1478.879459][T17242]  ffff88803ab81600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1478.879468][T17242] ==================================================================
[ 1478.881906][T17242] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1478.881927][T17242] CPU: 0 UID: 0 PID: 17242 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1478.881952][T17242] Tainted: [L]=SOFTLOCKUP
[ 1478.881958][T17242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1478.881971][T17242] Workqueue: hci5 hci_rx_work
[ 1478.881995][T17242] Call Trace:
[ 1478.882002][T17242]  <TASK>
[ 1478.882010][T17242]  vpanic+0x56c/0xa60
[ 1478.882034][T17242]  ? __pfx_vpanic+0x10/0x10
[ 1478.882058][T17242]  panic+0xc5/0xd0
[ 1478.882078][T17242]  ? __pfx_panic+0x10/0x10
[ 1478.882099][T17242]  ? preempt_schedule_thunk+0x16/0x30
[ 1478.882124][T17242]  ? l2cap_connect_cfm+0x902/0x1560
[ 1478.882140][T17242]  ? preempt_schedule_thunk+0x16/0x30
[ 1478.882164][T17242]  ? l2cap_connect_cfm+0x902/0x1560
[ 1478.882179][T17242]  check_panic_on_warn+0x89/0xb0
[ 1478.882202][T17242]  ? l2cap_connect_cfm+0x902/0x1560
[ 1478.882218][T17242]  end_report+0x73/0x170
[ 1478.882242][T17242]  ? l2cap_connect_cfm+0x902/0x1560
[ 1478.882258][T17242]  kasan_report+0x128/0x150
[ 1478.882278][T17242]  ? l2cap_connect_cfm+0x902/0x1560
[ 1478.882297][T17242]  l2cap_connect_cfm+0x902/0x1560
[ 1478.882318][T17242]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1478.882335][T17242]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1478.882355][T17242]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1478.882375][T17242]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1478.882394][T17242]  ? mutex_lock_nested+0x152/0x1d0
[ 1478.882418][T17242]  ? hci_connect_cfm+0x2c/0x140
[ 1478.882440][T17242]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1478.882455][T17242]  hci_connect_cfm+0x95/0x140
[ 1478.882478][T17242]  le_conn_complete_evt+0x1134/0x16b0
[ 1478.882505][T17242]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1478.882527][T17242]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1478.882547][T17242]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1478.882566][T17242]  ? skb_pull_data+0xfb/0x200
[ 1478.882591][T17242]  hci_le_conn_complete_evt+0x187/0x470
[ 1478.882617][T17242]  hci_event_packet+0x659/0xef0
[ 1478.882640][T17242]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1478.882655][T17242]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1478.882675][T17242]  ? __pfx_hci_event_packet+0x10/0x10
[ 1478.882694][T17242]  ? rt_spin_unlock+0x14f/0x200
[ 1478.882722][T17242]  ? hci_send_to_monitor+0xe2/0x590
[ 1478.882748][T17242]  hci_rx_work+0x3ee/0x1040
[ 1478.882768][T17242]  ? preempt_schedule_thunk+0x16/0x30
[ 1478.882793][T17242]  ? process_scheduled_works+0xa70/0x1860
[ 1478.882813][T17242]  process_scheduled_works+0xb5d/0x1860
[ 1478.882843][T17242]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1478.882864][T17242]  ? assign_work+0x3d5/0x5e0
[ 1478.882883][T17242]  worker_thread+0xa53/0xfc0
[ 1478.882912][T17242]  kthread+0x388/0x470
[ 1478.882934][T17242]  ? __pfx_worker_thread+0x10/0x10
[ 1478.882951][T17242]  ? __pfx_kthread+0x10/0x10
[ 1478.882972][T17242]  ret_from_fork+0x514/0xb70
[ 1478.882991][T17242]  ? __pfx_ret_from_fork+0x10/0x10
[ 1478.883010][T17242]  ? __switch_to+0xc79/0x1410
[ 1478.883034][T17242]  ? __pfx_kthread+0x10/0x10
[ 1478.883055][T17242]  ret_from_fork_asm+0x1a/0x30
[ 1478.883082][T17242]  </TASK>
[ 1478.883475][T17242] Kernel Offset: disabled