last executing test programs:

1m40.725443728s ago: executing program 3 (id=4):
syz_io_uring_setup(0x2666, &(0x7f0000000240)={0x0, 0x7736, 0x1ff, 0xefffffff, 0x3c3}, &(0x7f00000001c0), &(0x7f0000000180))
openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/{ys/kCrn0l/debug/sync/inf\x8c\x00'}, 0x30)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r3)
fcntl$setsig(r1, 0xa, 0x11)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101})
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r6, 0x4b3a, 0x1)
ioctl$TCXONC(r6, 0x4b3a, 0x2)

1m39.093652021s ago: executing program 3 (id=13):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x7812, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000300), 0x0, 0x0, 0x0, {0x0, r3}})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
socket$can_j1939(0x1d, 0x2, 0x7)
pipe(0x0)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x1, 0x2, 0x0, 0xfbff, 0x8, "008ef14ba278887cb0baba08431799317e6324"})
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) (fail_nth: 1)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x1, 0xf0, 0x3}}, 0x18)

1m22.622893251s ago: executing program 32 (id=13):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x7812, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000300), 0x0, 0x0, 0x0, {0x0, r3}})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
socket$can_j1939(0x1d, 0x2, 0x7)
pipe(0x0)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x1, 0x2, 0x0, 0xfbff, 0x8, "008ef14ba278887cb0baba08431799317e6324"})
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) (fail_nth: 1)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x1, 0xf0, 0x3}}, 0x18)

54.805320535s ago: executing program 1 (id=84):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x740, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c094}, 0x2000004)

54.196106158s ago: executing program 1 (id=87):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000300000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000100)=0x3)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)

53.10130849s ago: executing program 1 (id=92):
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000100)='pagemap\x00')
pread64(r2, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
socket(0x8, 0x0, 0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x40000000000, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x9, 0x8000, 0xfffffffffffffffc, 0x7fffffff}, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

51.18242025s ago: executing program 1 (id=97):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x45, 0x90, 0xb8, 0x8, 0x17ef, 0x721e, 0x8d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x3, 0x50, 0x7, [{{0x9, 0x4, 0x70, 0x7, 0x0, 0xff, 0xff, 0xff, 0x6}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x5, &(0x7f0000000d00)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x81a}}]})

39.343490865s ago: executing program 1 (id=113):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000001b00)=""/102392, 0x18ff8)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
setsockopt$packet_int(r3, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004842, 0x0)
r5 = syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x0, 0x10711, 0x1, 0xffffffff}, &(0x7f0000000540), &(0x7f0000000140))
io_uring_enter(r5, 0x567, 0x20, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00'})
sendmsg$AUDIT_USER(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x3ed, 0x4, 0x70bd26, 0x25dfdbfc, "57a511735e807091b1840f5c10a5407c0e499677193c8c094f39cef2ffcebb9a1f5f14f1", ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x48040}, 0x4000000)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1001, 0x7, 0x6, 0x17, 0x4, 0x4, 0x1}}, @TCA_RED_STAB={0x104, 0x2, "22ad34a26fd9fdd0fa84e5643abcdc3d29b19e81c791c8f03d54386a842d3a755e6a4ff1817af4577260e0491e2f1aab50bd30a85cfb3c3b81d95746e8a679e45b5a80be6ad2a10cbfa6e81d12e6b81d4b224ace949c598fcb2e77f36eee09467c1effb0cbb137444aad46486c4ed191ac2aa3de38bf563891c25fdceb9fcc00000000000000006b88711c0797c1bafee29b10892205ade757f5e1ca15ccbe7e78b432ac5ae20a8e526e11d7d95ca2bad6caf35df277bf2bf90dbd3c548920c9beb4935d16492ed1499c673ad12810358a792e0d80b53508c53fd4771311879267a9aaf3eb9e6eec4522d803a2636abeb3c300"}]}}]}, 0x148}}, 0x0)

36.210052924s ago: executing program 1 (id=117):
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x200081)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
dup(r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x28, 0x8001, 0x5, 0xa4a, 0x0, 0x9, 0xfa0d, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x0, 0x100)
close(0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102, 0x44400}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004804}, 0x24040004)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000), 0x4)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r6=>r4, {0x2}}, './file0\x00'})
write$UHID_INPUT(r6, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000000c0)={0x8, 'tunl0\x00', {'vcan0\x00'}, 0x2})
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65)

34.558897641s ago: executing program 2 (id=121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4008000)

33.801612344s ago: executing program 2 (id=122):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@cgroup, 0xffffffffffffffff, 0x9, 0x2000}, 0x20)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async)
capset(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x89c}) (async)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000500)="46dd93573829", 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20100)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000002c0)={0x4, 0x0, 0x4, 0x0, 0xd})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x126, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff31000000330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000}, 0x50) (async)
r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40)
ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x3)

33.434360939s ago: executing program 2 (id=123):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}}, 0x40880) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x8000000000000000, 0x8, 0x4, 0x4, 0xa19}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10000]}, 0x8}) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async, rerun: 64)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 64)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0xfffffec0, 0x20000000) (async, rerun: 64)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
r4 = socket$inet6(0xa, 0x2, 0x0) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@loopback={0xa4, 0x7ffffffff000}, 0x800, 0x0, 0x2, 0x1, 0x0, 0xffff}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2, 0x1, 0x0, 0xffff}, 0x20) (async)
syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x0, 0xf, 0x4c, {0x4c, 0x1, "001094d14d7bfca1b72d5caf1107014e769182d5f077de47988c965ddd43d4978b96d64c310cb62a0459086b84698492b0e7e80f9219802df69bcb4ab7cfd8707cbb75f2b6452197f450"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000080)=0xfffffffb)

30.493876737s ago: executing program 0 (id=127):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x802, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0xfffffffffffffffd, 0x6, 0xfa11, 0xfff7ffff}, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000480)={{0xbb, 0x94}, 'port0\x00', 0x18, 0x10000, 0x1, 0x5, 0x1, 0x5, 0x1, 0x0, 0x4, 0xe6})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) (fail_nth: 1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0)
pwritev2(r5, &(0x7f0000022e80)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x41)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x8b22, 0x0, 0x0, 0x16, 0x11, "fee8a2ab78fc979fd1e00d96072000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x0, 0x2000000000001]}})
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x1ff, {0x0, 0x0, 0x0, 0x6, 0x9a5, 0x0, 0x0, 0x2, 0xc, "9f76d16b39ed8553c9a455a2d3f61f34dc4218026eba7e961cc6389be9c783e61c64ba45dd9acd2526b7bf853e9431ed58b008e855fa229d2f55a1eef5fb0c15", "ffb39190bdcb69070000000000845ff0501f48aa25b7f4fbcdfd940548274be7c8f600006000fd65bea100000000e3ffffff00", "68a4521672630ef5bb1600000000000092d267eddbc80000004000", [0x383a40da, 0x7fffffff]}})
sendmmsg(r0, 0x0, 0x0, 0x4000000)
openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/card0/oss_mixer\x00', 0x80880, 0x0)
fcntl$setlease(r6, 0x400, 0x2)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
syz_open_dev$dmmidi(&(0x7f0000000000), 0x2, 0x10080)

30.437514536s ago: executing program 2 (id=128):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x740, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c094}, 0x2000004)

29.400830373s ago: executing program 2 (id=129):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xec1af57558979226, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "f99fae00"}, 0x0, 0x2, {0x0}, 0x20002})
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x16, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x4000)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
chdir(&(0x7f00000000c0)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)

27.685016299s ago: executing program 0 (id=130):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xec1af57558979226, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "f99fae00"}, 0x0, 0x2, {0x0}, 0x20002})
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x16, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x4000)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
chdir(&(0x7f00000000c0)='./bus\x00')
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)

26.27844959s ago: executing program 0 (id=131):
add_key(&(0x7f0000000140)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = fsmount(0xffffffffffffffff, 0x1, 0xe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0800000000000000000000020000000000008000000000090300000000a1f15252c9ac5401968bb3c9aa00"], 0x0, 0x3e}, 0x28)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

25.940142749s ago: executing program 2 (id=132):
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/86, 0x56}], 0x1}, 0x8}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc)
ioprio_set$pid(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0)
sendfile(r1, r1, 0x0, 0x4800000009)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40}, 0x94)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r6, 0xc038943b, &(0x7f0000000480)={0xb, 0x7, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r5, r7, 0x25, 0x3, @val=@iter={&(0x7f0000000380)=@cgroup={0x1, 0xffffffffffffffff, 0x1}, 0x10}}, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000e3", @ANYRES16=0x0, @ANYRESOCT=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)

25.385232384s ago: executing program 0 (id=133):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000040)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000040000ff0500000005001300000095154e400800000000000000000000000000000000000500140000000000"], 0x38}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
setrlimit(0x0, &(0x7f0000000280)={0x3, 0x697})
r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)={0x30000000})
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r6, 0xc038943b, &(0x7f0000000340)={0x4, 0x8, '\x00', 0x1, &(0x7f00000000c0)=[0x0]})

22.957477819s ago: executing program 0 (id=134):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'batadv0\x00', &(0x7f00000004c0)=@ethtool_sset_info={0x37, 0xccaa, 0x7fffffffffffffff}})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x19}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x20048014)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x2, 0x4002)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=@newlink={0x3c, 0x10, 0x40b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24f2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000040))
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)

21.202558415s ago: executing program 0 (id=136):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200), &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'tgr160\x00'}}, 0x0, 0x0) (fail_nth: 1)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

11.089585925s ago: executing program 33 (id=117):
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x200081)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
dup(r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x28, 0x8001, 0x5, 0xa4a, 0x0, 0x9, 0xfa0d, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x0, 0x100)
close(0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102, 0x44400}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004804}, 0x24040004)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000), 0x4)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r6=>r4, {0x2}}, './file0\x00'})
write$UHID_INPUT(r6, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000000c0)={0x8, 'tunl0\x00', {'vcan0\x00'}, 0x2})
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65)

10.387558226s ago: executing program 34 (id=132):
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/86, 0x56}], 0x1}, 0x8}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc)
ioprio_set$pid(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0)
sendfile(r1, r1, 0x0, 0x4800000009)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40}, 0x94)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r6, 0xc038943b, &(0x7f0000000480)={0xb, 0x7, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r5, r7, 0x25, 0x3, @val=@iter={&(0x7f0000000380)=@cgroup={0x1, 0xffffffffffffffff, 0x1}, 0x10}}, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000e3", @ANYRES16=0x0, @ANYRESOCT=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)

5.767528207s ago: executing program 35 (id=136):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200), &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'tgr160\x00'}}, 0x0, 0x0) (fail_nth: 1)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

5.223335026s ago: executing program 4 (id=142):
add_key(&(0x7f0000000140)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = fsmount(0xffffffffffffffff, 0x1, 0xe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0800000000000000000000020000000000008000000000090300000000a1f15252c9ac5401968bb3c9aa00"], 0x0, 0x3e}, 0x28)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.539031986s ago: executing program 4 (id=143):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x7, 0xb7, &(0x7f0000000280)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socket$kcm(0x29, 0x2, 0x0)
r0 = socket(0x11, 0x2, 0x1)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x803, 0x6)
r2 = epoll_create1(0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0xd0002008})
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x4, 0x40100000, 0x5, 0x0, 0x1, "362e851f84882fb90efa3fa665d2eb144970e2", 0x8, 0x81})
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00', 0x0, [0x10000, 0x0, 0xa, 0x4, 0x4c2]}, &(0x7f0000000380)=0x54)
ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000240)={0x1, 0x60, 0x6, 0x1, 0xa})
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_open_dev$video(0x0, 0x7, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
read$FUSE(r6, 0x0, 0x0)
connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) (fail_nth: 1)

2.924214524s ago: executing program 4 (id=144):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000001b00)=""/102392, 0x18ff8)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
setsockopt$packet_int(r3, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x10000000000000, 0x0})
io_uring_enter(0xffffffffffffffff, 0x567, 0x20, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00'})
sendmsg$AUDIT_USER(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x3ed, 0x4, 0x70bd26, 0x25dfdbfc, "57a511735e807091b1840f5c10a5407c0e499677193c8c094f39cef2ffcebb9a1f5f14f1", ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x48040}, 0x4000000)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1001, 0x7, 0x6, 0x17, 0x4, 0x4, 0x1}}, @TCA_RED_STAB={0x104, 0x2, "22ad34a26fd9fdd0fa84e5643abcdc3d29b19e81c791c8f03d54386a842d3a755e6a4ff1817af4577260e0491e2f1aab50bd30a85cfb3c3b81d95746e8a679e45b5a80be6ad2a10cbfa6e81d12e6b81d4b224ace949c598fcb2e77f36eee09467c1effb0cbb137444aad46486c4ed191ac2aa3de38bf563891c25fdceb9fcc00000000000000006b88711c0797c1bafee29b10892205ade757f5e1ca15ccbe7e78b432ac5ae20a8e526e11d7d95ca2bad6caf35df277bf2bf90dbd3c548920c9beb4935d16492ed1499c673ad12810358a792e0d80b53508c53fd4771311879267a9aaf3eb9e6eec4522d803a2636abeb3c300"}]}}]}, 0x148}}, 0x0)

1.945564003s ago: executing program 4 (id=145):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe)
add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000001180)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c1286306ff6ee45265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b8da13c4e7bbeedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce070", 0xc2, 0xffffffffffffffff)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4010)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$nci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="710502063fd72771a698960202bfe9773c6a"], 0x12)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0)

793.755293ms ago: executing program 4 (id=146):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000000001050500000000000000000a000000240002801400018008000100ac1414bb14bb0c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000106000340000200000800074000000001"], 0x84}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x60}}, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2000000000000366, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10)
io_uring_enter(r3, 0x2d3e, 0x1, 0x24, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1], 0x50)
socket$kcm(0x2, 0x5, 0x84)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

0s ago: executing program 4 (id=147):
r0 = syz_io_uring_setup(0x2666, &(0x7f0000000240)={0x0, 0x7736, 0x1ff, 0xefffffff, 0x3c3}, &(0x7f00000001c0), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fcntl$setsig(0xffffffffffffffff, 0x3, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r4)
fcntl$setsig(r2, 0xa, 0x11)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r7, 0x4b3a, 0x1)
ioctl$TCXONC(r7, 0x4b3a, 0x2)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r8, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}, {&(0x7f0000000240)}, {0x0}], 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000400000000008400000000000010ff0700000300000018000000000000008400000007000000ffffffff00000000"], 0x30, 0x14001}], 0x1, 0x4044040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x38}, 0x94)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100de2ae663e7005d35b94082058d00ac7a010203010902120001000000000904000000959ec800"], 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts.
[   90.432722][ T5825] cgroup: Unknown subsys name 'net'
[   90.681150][ T5825] cgroup: Unknown subsys name 'cpuset'
[   90.715291][ T5825] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   92.229354][    T9] cfg80211: failed to load regulatory.db
[   92.753886][ T5825] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   95.787390][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.789648][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.805095][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.816424][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.819200][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.825535][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.835291][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.836778][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.859717][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   95.875910][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   95.886331][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   95.887758][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   95.888706][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   95.891950][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.895119][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   95.919771][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   95.929254][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   95.930760][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   95.932290][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   95.952116][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   95.959430][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   95.984794][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   95.987920][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   95.998297][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   95.999692][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   97.124933][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   97.142042][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   97.159958][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   97.171181][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   97.506345][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   97.986386][ T5851] Bluetooth: hci2: command tx timeout
[   97.986395][ T5846] Bluetooth: hci3: command tx timeout
[   97.986564][ T5851] Bluetooth: hci1: command tx timeout
[   98.064595][ T5857] Bluetooth: hci0: command tx timeout
[   98.064933][ T5846] Bluetooth: hci4: command tx timeout
[   98.485998][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.487262][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.487971][ T5837] bridge_slave_0: entered allmulticast mode
[   98.490079][ T5837] bridge_slave_0: entered promiscuous mode
[   98.494178][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.497407][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.497769][ T5840] bridge_slave_0: entered allmulticast mode
[   98.500994][ T5840] bridge_slave_0: entered promiscuous mode
[   98.505503][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.505672][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.505910][ T5838] bridge_slave_0: entered allmulticast mode
[   98.509077][ T5838] bridge_slave_0: entered promiscuous mode
[   98.527952][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.528186][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.528795][ T5839] bridge_slave_0: entered allmulticast mode
[   98.532009][ T5839] bridge_slave_0: entered promiscuous mode
[   98.600378][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.600492][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.600669][ T5837] bridge_slave_1: entered allmulticast mode
[   98.602765][ T5837] bridge_slave_1: entered promiscuous mode
[   98.631599][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.631696][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.632950][ T5840] bridge_slave_1: entered allmulticast mode
[   98.636781][ T5840] bridge_slave_1: entered promiscuous mode
[   98.646105][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.646266][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.646948][ T5838] bridge_slave_1: entered allmulticast mode
[   98.650084][ T5838] bridge_slave_1: entered promiscuous mode
[   98.785358][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.785499][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.785667][ T5839] bridge_slave_1: entered allmulticast mode
[   98.787573][ T5839] bridge_slave_1: entered promiscuous mode
[   99.527052][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.527232][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.527465][ T5848] bridge_slave_0: entered allmulticast mode
[   99.530531][ T5848] bridge_slave_0: entered promiscuous mode
[   99.623476][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.637883][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.642810][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.643075][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.643286][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.643484][ T5848] bridge_slave_1: entered allmulticast mode
[   99.663257][ T5848] bridge_slave_1: entered promiscuous mode
[   99.688393][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.698530][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.708477][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.712487][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.820819][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.064675][ T5846] Bluetooth: hci3: command tx timeout
[  100.074596][ T5846] Bluetooth: hci1: command tx timeout
[  100.074606][ T5857] Bluetooth: hci2: command tx timeout
[  100.144616][ T5857] Bluetooth: hci4: command tx timeout
[  100.144653][ T5857] Bluetooth: hci0: command tx timeout
[  100.351143][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.429593][ T5837] team0: Port device team_slave_0 added
[  100.432808][ T5840] team0: Port device team_slave_0 added
[  100.436996][ T5838] team0: Port device team_slave_0 added
[  100.441045][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.446736][ T5839] team0: Port device team_slave_0 added
[  100.450077][ T5837] team0: Port device team_slave_1 added
[  100.458233][ T5840] team0: Port device team_slave_1 added
[  100.461279][ T5838] team0: Port device team_slave_1 added
[  100.537833][ T5839] team0: Port device team_slave_1 added
[  101.389233][ T5848] team0: Port device team_slave_0 added
[  101.468647][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.468665][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.468693][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.473105][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.473122][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.473150][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.478395][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.478414][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.478447][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.487179][ T5848] team0: Port device team_slave_1 added
[  101.489082][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.489098][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.489129][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.492364][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.492380][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.492413][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.496254][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.496271][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.496303][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.499156][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.499172][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.499203][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.598421][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.598442][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.598477][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.816808][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.816851][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.816882][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.927180][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.927197][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.927225][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.144469][ T5846] Bluetooth: hci2: command tx timeout
[  102.144504][ T5846] Bluetooth: hci3: command tx timeout
[  102.144528][ T5846] Bluetooth: hci1: command tx timeout
[  102.226002][ T5846] Bluetooth: hci0: command tx timeout
[  102.226100][ T5857] Bluetooth: hci4: command tx timeout
[  102.457131][ T5837] hsr_slave_0: entered promiscuous mode
[  102.458438][ T5837] hsr_slave_1: entered promiscuous mode
[  102.480648][ T5840] hsr_slave_0: entered promiscuous mode
[  102.481701][ T5840] hsr_slave_1: entered promiscuous mode
[  102.482539][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[  102.482632][ T5840] Cannot create hsr debugfs directory
[  102.502170][ T5838] hsr_slave_0: entered promiscuous mode
[  102.503633][ T5838] hsr_slave_1: entered promiscuous mode
[  102.515057][ T5838] debugfs: 'hsr0' already exists in 'hsr'
[  102.515091][ T5838] Cannot create hsr debugfs directory
[  102.631217][ T5839] hsr_slave_0: entered promiscuous mode
[  102.632454][ T5839] hsr_slave_1: entered promiscuous mode
[  102.633112][ T5839] debugfs: 'hsr0' already exists in 'hsr'
[  102.633135][ T5839] Cannot create hsr debugfs directory
[  103.087008][ T5848] hsr_slave_0: entered promiscuous mode
[  103.089051][ T5848] hsr_slave_1: entered promiscuous mode
[  103.089688][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[  103.089712][ T5848] Cannot create hsr debugfs directory
[  104.225297][ T5857] Bluetooth: hci1: command tx timeout
[  104.225332][ T5857] Bluetooth: hci3: command tx timeout
[  104.225355][ T5857] Bluetooth: hci2: command tx timeout
[  104.304673][ T5846] Bluetooth: hci4: command tx timeout
[  104.304708][ T5846] Bluetooth: hci0: command tx timeout
[  104.792932][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  104.859167][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  104.887386][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  104.940842][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  105.134535][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  105.183325][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  105.222002][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  105.279789][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  105.451393][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  105.484098][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  105.529568][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  105.591777][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  105.776729][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  105.830653][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  105.859199][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  105.923752][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  106.050853][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.100518][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  106.140715][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  106.213707][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  106.248361][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  106.353151][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[  106.401385][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.402387][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.478412][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.478589][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.510656][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.622568][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[  106.691363][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.691579][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.717620][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.767546][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.767732][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.861908][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[  106.891467][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.931650][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.931891][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.019967][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.020193][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.093308][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[  107.199658][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.199846][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.223047][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.291461][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.293091][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.437040][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[  107.510276][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.510573][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.544246][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.603269][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.605283][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.048143][ T5837] veth0_vlan: entered promiscuous mode
[  108.108826][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.162926][ T5837] veth1_vlan: entered promiscuous mode
[  108.179179][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.468743][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.474089][ T5837] veth0_macvtap: entered promiscuous mode
[  108.523926][ T5837] veth1_macvtap: entered promiscuous mode
[  108.540186][ T5838] veth0_vlan: entered promiscuous mode
[  108.579420][ T5840] veth0_vlan: entered promiscuous mode
[  108.621690][ T5838] veth1_vlan: entered promiscuous mode
[  108.654060][ T5840] veth1_vlan: entered promiscuous mode
[  108.664014][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.716341][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.752560][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.804943][   T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.838064][   T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.850395][   T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.894729][   T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.080051][ T5838] veth0_macvtap: entered promiscuous mode
[  109.113980][ T5840] veth0_macvtap: entered promiscuous mode
[  109.205359][ T5838] veth1_macvtap: entered promiscuous mode
[  109.236387][ T5840] veth1_macvtap: entered promiscuous mode
[  109.341577][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.341605][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.412933][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.443760][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.478345][ T5848] veth0_vlan: entered promiscuous mode
[  109.510356][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.532960][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.547589][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.547611][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.602295][ T3651] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.639297][ T3651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.640983][ T5848] veth1_vlan: entered promiscuous mode
[  109.655947][ T3651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.657278][ T5839] veth0_vlan: entered promiscuous mode
[  109.676536][ T3651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.700818][ T3651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.718747][ T3651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.723616][ T3651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.778224][ T3651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.849136][ T5839] veth1_vlan: entered promiscuous mode
[  110.462213][ T5848] veth0_macvtap: entered promiscuous mode
[  110.522019][ T3651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.522042][ T3651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.551901][ T5848] veth1_macvtap: entered promiscuous mode
[  110.619572][ T5839] veth0_macvtap: entered promiscuous mode
[  110.677620][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.677643][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.703197][ T5839] veth1_macvtap: entered promiscuous mode
[  110.785687][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.792387][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.792408][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.857098][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.937151][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.937174][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.938741][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.944120][   T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.981169][   T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.002555][   T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.019405][   T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.026052][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.144865][ T3610] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.146886][ T3610] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.159409][ T3610] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.167429][ T3610] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.519865][ T5968] Zero length message leads to an empty skb
[  114.041171][    C1] vkms_vblank_simulate: vblank timer overrun
[  114.114590][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.114609][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.324510][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  114.891819][    C1] vkms_vblank_simulate: vblank timer overrun
[  114.944602][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  114.946996][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  114.955084][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  114.955131][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  114.955169][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  114.955207][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  114.955245][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  114.955283][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  114.955338][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  115.139540][    C1] vkms_vblank_simulate: vblank timer overrun
[  115.747662][    C1] vkms_vblank_simulate: vblank timer overrun
[  116.085723][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.085746][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.416265][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.416282][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.939743][ T3651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.939761][ T3651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.739552][    C1] vkms_vblank_simulate: vblank timer overrun
[  117.943026][    C1] vkms_vblank_simulate: vblank timer overrun
[  119.369737][ T6010] FAULT_INJECTION: forcing a failure.
[  119.369737][ T6010] name failslab, interval 1, probability 0, space 0, times 0
[  119.369797][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  119.369822][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  119.369843][ T6010] Call Trace:
[  119.369852][ T6010]  <TASK>
[  119.369861][ T6010]  dump_stack_lvl+0x189/0x250
[  119.369907][ T6010]  ? __pfx____ratelimit+0x10/0x10
[  119.369938][ T6010]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.369970][ T6010]  ? __pfx__printk+0x10/0x10
[  119.370000][ T6010]  ? __pfx___might_resched+0x10/0x10
[  119.370022][ T6010]  ? fs_reclaim_acquire+0x7d/0x100
[  119.370042][ T6010]  should_fail_ex+0x46c/0x600
[  119.370069][ T6010]  should_failslab+0xa8/0x100
[  119.370094][ T6010]  __kvmalloc_node_noprof+0x15a/0x550
[  119.370117][ T6010]  ? file_tty_write+0x2e8/0xa30
[  119.370146][ T6010]  ? file_tty_write+0x217/0xa30
[  119.370172][ T6010]  file_tty_write+0x2e8/0xa30
[  119.370203][ T6010]  vfs_write+0x5d2/0xb40
[  119.370228][ T6010]  ? __pfx_tty_write+0x10/0x10
[  119.370251][ T6010]  ? __pfx_vfs_write+0x10/0x10
[  119.370281][ T6010]  ? __fget_files+0x2a/0x420
[  119.370312][ T6010]  ksys_write+0x14b/0x260
[  119.370335][ T6010]  ? __pfx_ksys_write+0x10/0x10
[  119.370361][ T6010]  ? do_syscall_64+0xbe/0x3b0
[  119.370388][ T6010]  do_syscall_64+0xfa/0x3b0
[  119.370411][ T6010]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.370433][ T6010]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.370449][ T6010]  ? clear_bhb_loop+0x60/0xb0
[  119.370470][ T6010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.370486][ T6010] RIP: 0033:0x7f1f4050ebe9
[  119.370504][ T6010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.370519][ T6010] RSP: 002b:00007f1f3e755038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  119.370537][ T6010] RAX: ffffffffffffffda RBX: 00007f1f40746090 RCX: 00007f1f4050ebe9
[  119.370549][ T6010] RDX: 00000000fffffdef RSI: 0000200000001040 RDI: 0000000000000007
[  119.370560][ T6010] RBP: 00007f1f3e755090 R08: 0000000000000000 R09: 0000000000000000
[  119.370570][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.370580][ T6010] R13: 00007f1f40746128 R14: 00007f1f40746090 R15: 00007fff47572d58
[  119.370606][ T6010]  </TASK>
[  120.203542][    C0] vkms_vblank_simulate: vblank timer overrun
[  120.942135][ T5958] IPVS: starting estimator thread 0...
[  120.965903][ T5857] Bluetooth: hci2: unexpected cc 0x0c7a length: 5 > 1
[  121.022359][ T5857] Bluetooth: Frame is too long (len 11, expected len 4)
[  121.026602][ T6022] IPVS: using max 7 ests per chain, 16800 per kthread
[  121.719613][ T6027] syz.2.19 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  121.950913][    C0] vkms_vblank_simulate: vblank timer overrun
[  123.016279][    C0] vkms_vblank_simulate: vblank timer overrun
[  125.166950][ T6046] random: crng reseeded on system resumption
[  125.369186][ T6048] FAULT_INJECTION: forcing a failure.
[  125.369186][ T6048] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  125.369239][ T6048] CPU: 0 UID: 0 PID: 6048 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  125.369265][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  125.369278][ T6048] Call Trace:
[  125.369286][ T6048]  <TASK>
[  125.369295][ T6048]  dump_stack_lvl+0x189/0x250
[  125.369334][ T6048]  ? __pfx____ratelimit+0x10/0x10
[  125.369363][ T6048]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.369397][ T6048]  ? __pfx__printk+0x10/0x10
[  125.369437][ T6048]  should_fail_ex+0x46c/0x600
[  125.369473][ T6048]  _copy_to_user+0x31/0xb0
[  125.369501][ T6048]  simple_read_from_buffer+0xe1/0x170
[  125.369537][ T6048]  proc_fail_nth_read+0x1b6/0x220
[  125.369563][ T6048]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  125.369590][ T6048]  ? rw_verify_area+0x2ac/0x4e0
[  125.369616][ T6048]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  125.369640][ T6048]  vfs_read+0x203/0xa30
[  125.369676][ T6048]  ? __pfx_vfs_read+0x10/0x10
[  125.369699][ T6048]  ? try_to_take_rt_mutex+0x7fd/0xac0
[  125.369740][ T6048]  ? mutex_lock_nested+0x154/0x1d0
[  125.369762][ T6048]  ? fdget_pos+0x253/0x320
[  125.369804][ T6048]  ksys_read+0x14b/0x260
[  125.369829][ T6048]  ? __fget_files+0x3a6/0x420
[  125.369865][ T6048]  ? __pfx_ksys_read+0x10/0x10
[  125.369898][ T6048]  ? do_syscall_64+0xbe/0x3b0
[  125.369933][ T6048]  do_syscall_64+0xfa/0x3b0
[  125.369963][ T6048]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.369991][ T6048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.370013][ T6048]  ? clear_bhb_loop+0x60/0xb0
[  125.370040][ T6048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.370061][ T6048] RIP: 0033:0x7f098074d5fc
[  125.370080][ T6048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  125.370098][ T6048] RSP: 002b:00007f097e995030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  125.370129][ T6048] RAX: ffffffffffffffda RBX: 00007f0980986090 RCX: 00007f098074d5fc
[  125.370146][ T6048] RDX: 000000000000000f RSI: 00007f097e9950a0 RDI: 0000000000000004
[  125.370159][ T6048] RBP: 00007f097e995090 R08: 0000000000000000 R09: 0000000000000000
[  125.370172][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.370185][ T6048] R13: 00007f0980986128 R14: 00007f0980986090 R15: 00007ffe18dfc118
[  125.370219][ T6048]  </TASK>
[  128.325820][    C1] vkms_vblank_simulate: vblank timer overrun
[  128.673753][    C1] vkms_vblank_simulate: vblank timer overrun
[  130.408019][    C1] vkms_vblank_simulate: vblank timer overrun
[  130.488092][    C1] vkms_vblank_simulate: vblank timer overrun
[  130.758855][    C1] vkms_vblank_simulate: vblank timer overrun
[  130.918611][    C1] vkms_vblank_simulate: vblank timer overrun
[  131.604137][    C1] vkms_vblank_simulate: vblank timer overrun
[  132.027352][    C1] vkms_vblank_simulate: vblank timer overrun
[  132.916923][    C1] vkms_vblank_simulate: vblank timer overrun
[  133.633045][ T6090] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13)
[  133.633077][ T6090] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  133.633710][ T6087] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10)
[  133.633738][ T6087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  133.716319][ T6090] vhci_hcd vhci_hcd.0: Device attached
[  133.733108][ T6078] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  133.733139][ T6078] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  133.733201][ T6078] vhci_hcd vhci_hcd.0: Device attached
[  133.733401][ T6087] vhci_hcd vhci_hcd.0: Device attached
[  133.863692][ T6100] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9)
[  133.878613][ T6100] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  134.093365][ T6078] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(16)
[  134.093413][ T6078] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  134.093687][ T6078] vhci_hcd vhci_hcd.0: Device attached
[  134.145531][ T6087] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  134.498684][ T6106] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  134.854594][ T6100] vhci_hcd vhci_hcd.0: Device attached
[  134.887225][ T5958] vhci_hcd: vhci_device speed not set
[  134.944779][ T5958] usb 41-3: new full-speed USB device number 2 using vhci_hcd
[  134.954367][ T5892] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  135.003912][ T6094] vhci_hcd: connection reset by peer
[  135.014465][ T6093] vhci_hcd: connection closed
[  135.025519][ T6089] vhci_hcd: connection closed
[  135.028603][   T57] vhci_hcd: stop threads
[  135.029158][   T57] vhci_hcd: release socket
[  135.060032][   T57] vhci_hcd: disconnect device
[  135.062464][   T57] vhci_hcd: stop threads
[  135.062482][   T57] vhci_hcd: release socket
[  135.062563][   T57] vhci_hcd: disconnect device
[  135.062724][   T57] vhci_hcd: stop threads
[  135.062733][   T57] vhci_hcd: release socket
[  135.062798][   T57] vhci_hcd: disconnect device
[  135.165647][ T6101] vhci_hcd: connection closed
[  135.168582][   T57] vhci_hcd: stop threads
[  135.168604][   T57] vhci_hcd: release socket
[  135.168836][   T57] vhci_hcd: disconnect device
[  135.251462][ T6102] vhci_hcd: connection closed
[  135.262536][   T12] vhci_hcd: stop threads
[  135.262559][   T12] vhci_hcd: release socket
[  135.280285][   T12] vhci_hcd: disconnect device
[  135.366808][ T6109] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  135.366838][ T6109] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  135.370927][ T6109] vhci_hcd vhci_hcd.0: Device attached
[  135.547252][ T5916] vhci_hcd: vhci_device speed not set
[  135.547531][ T6109] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10)
[  135.547557][ T6109] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  135.548940][ T6109] vhci_hcd vhci_hcd.0: Device attached
[  135.578457][ T6114] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13)
[  135.581233][ T6114] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  135.603212][ T6115] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16)
[  135.603242][ T6115] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  135.607509][ T6114] vhci_hcd vhci_hcd.0: Device attached
[  135.615575][ T5916] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  135.622351][ T6115] vhci_hcd vhci_hcd.0: Device attached
[  135.827142][ T6114] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  135.952167][ T6109] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(19)
[  135.952197][ T6109] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  135.969694][ T6109] vhci_hcd vhci_hcd.0: Device attached
[  135.986779][ T6122] vhci_hcd: connection closed
[  135.992022][ T3651] vhci_hcd: stop threads
[  135.992043][ T3651] vhci_hcd: release socket
[  135.992079][ T3651] vhci_hcd: disconnect device
[  135.992145][ T6118] vhci_hcd: connection closed
[  136.005518][ T6117] vhci_hcd: connection closed
[  136.016711][ T3651] vhci_hcd: stop threads
[  136.016729][ T3651] vhci_hcd: release socket
[  136.016818][ T3651] vhci_hcd: disconnect device
[  136.034361][ T3651] vhci_hcd: stop threads
[  136.034385][ T3651] vhci_hcd: release socket
[  136.034477][ T3651] vhci_hcd: disconnect device
[  136.038291][ T6110] vhci_hcd: connection reset by peer
[  136.048557][ T3610] vhci_hcd: stop threads
[  136.048575][ T3610] vhci_hcd: release socket
[  136.048680][ T3610] vhci_hcd: disconnect device
[  136.073772][ T6113] vhci_hcd: connection closed
[  136.084800][ T3651] vhci_hcd: stop threads
[  136.084820][ T3651] vhci_hcd: release socket
[  136.084895][ T3651] vhci_hcd: disconnect device
[  137.396387][    C0] vkms_vblank_simulate: vblank timer overrun
[  137.413272][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  137.429104][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  137.431063][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  137.432460][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  137.433307][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  137.626446][ T6145] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  137.634658][    C0] vkms_vblank_simulate: vblank timer overrun
[  137.893702][    C0] vkms_vblank_simulate: vblank timer overrun
[  138.041520][    C0] vkms_vblank_simulate: vblank timer overrun
[  138.317462][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[  138.317568][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[  138.376989][    C0] vkms_vblank_simulate: vblank timer overrun
[  138.718457][    C0] vkms_vblank_simulate: vblank timer overrun
[  139.741327][    C0] vkms_vblank_simulate: vblank timer overrun
[  140.229532][ T5857] Bluetooth: hci4: command tx timeout
[  140.316854][ T5958] vhci_hcd: vhci_device speed not set
[  140.463074][    C0] vkms_vblank_simulate: vblank timer overrun
[  140.582888][    C0] vkms_vblank_simulate: vblank timer overrun
[  140.664917][    C0] vkms_vblank_simulate: vblank timer overrun
[  140.744542][ T6162] team0: entered allmulticast mode
[  140.744634][ T6162] team_slave_0: entered allmulticast mode
[  140.747795][ T6162] team_slave_1: entered allmulticast mode
[  140.780003][    C0] vkms_vblank_simulate: vblank timer overrun
[  140.858991][    C0] vkms_vblank_simulate: vblank timer overrun
[  140.866812][ T5916] vhci_hcd: vhci_device speed not set
[  141.024177][    C0] vkms_vblank_simulate: vblank timer overrun
[  141.064629][ T6162] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  141.586783][ T6168] FAULT_INJECTION: forcing a failure.
[  141.586783][ T6168] name failslab, interval 1, probability 0, space 0, times 0
[  141.586854][ T6168] CPU: 0 UID: 0 PID: 6168 Comm: syz.2.46 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  141.586879][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  141.586892][ T6168] Call Trace:
[  141.586901][ T6168]  <TASK>
[  141.586911][ T6168]  dump_stack_lvl+0x189/0x250
[  141.586949][ T6168]  ? __pfx____ratelimit+0x10/0x10
[  141.586979][ T6168]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.587011][ T6168]  ? __pfx__printk+0x10/0x10
[  141.587042][ T6168]  ? __pfx___might_resched+0x10/0x10
[  141.587066][ T6168]  ? fs_reclaim_acquire+0x7d/0x100
[  141.587092][ T6168]  should_fail_ex+0x46c/0x600
[  141.587127][ T6168]  should_failslab+0xa8/0x100
[  141.587159][ T6168]  __kmalloc_noprof+0xcb/0x430
[  141.587187][ T6168]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  141.587225][ T6168]  tomoyo_realpath_from_path+0xe3/0x5d0
[  141.587258][ T6168]  ? tomoyo_domain+0xda/0x130
[  141.587295][ T6168]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  141.587321][ T6168]  tomoyo_path_number_perm+0x1e8/0x5a0
[  141.587350][ T6168]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  141.587380][ T6168]  ? __pfx___schedule+0x10/0x10
[  141.587404][ T6168]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  141.587446][ T6168]  ? __lock_acquire+0xab9/0xd20
[  141.587498][ T6168]  ? __fget_files+0x2a/0x420
[  141.587533][ T6168]  ? __fget_files+0x2a/0x420
[  141.587562][ T6168]  ? __fget_files+0x3a6/0x420
[  141.587591][ T6168]  ? __fget_files+0x2a/0x420
[  141.587627][ T6168]  security_file_ioctl+0xcb/0x2d0
[  141.587657][ T6168]  __se_sys_ioctl+0x47/0x170
[  141.587684][ T6168]  do_syscall_64+0xfa/0x3b0
[  141.587716][ T6168]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.587737][ T6168]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  141.587758][ T6168]  ? clear_bhb_loop+0x60/0xb0
[  141.587792][ T6168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.587812][ T6168] RIP: 0033:0x7f447db9ebe9
[  141.587831][ T6168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.587849][ T6168] RSP: 002b:00007f447bdc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  141.587872][ T6168] RAX: ffffffffffffffda RBX: 00007f447ddd6180 RCX: 00007f447db9ebe9
[  141.587887][ T6168] RDX: 0000000000000000 RSI: 0000000040184152 RDI: 0000000000000007
[  141.587900][ T6168] RBP: 00007f447bdc4090 R08: 0000000000000000 R09: 0000000000000000
[  141.587912][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.587924][ T6168] R13: 00007f447ddd6218 R14: 00007f447ddd6180 R15: 00007ffe88c9b498
[  141.587958][ T6168]  </TASK>
[  141.587997][ T6168] ERROR: Out of memory at tomoyo_realpath_from_path.
[  141.592374][    C0] vkms_vblank_simulate: vblank timer overrun
[  142.304437][ T5857] Bluetooth: hci4: command tx timeout
[  142.487662][ T6169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.44'.
[  142.520326][ T5917] usb usb42-port1: attempt power cycle
[  143.027696][ T6178] loop2: detected capacity change from 0 to 7
[  143.047192][ T5892] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  143.075653][ T6178] Dev loop2: unable to read RDB block 7
[  143.075713][ T6178]  loop2: unable to read partition table
[  143.076104][ T6178] loop2: partition table beyond EOD, truncated
[  143.076146][ T6178] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  143.105769][ T5917] usb usb42-port1: unable to enumerate USB device
[  143.203299][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.203328][ T5892] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3
[  143.203385][ T5892] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  143.203409][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.333458][ T5892] usb 2-1: config 0 descriptor??
[  143.888785][ T6183] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  143.946503][ T5892] Bluetooth: Can't get version to change to load ram patch err
[  143.946523][ T5892] Bluetooth: Loading patch file failed
[  143.946565][ T5892] ath3k 2-1:0.0: probe with driver ath3k failed with error -121
[  144.020981][ T6183] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  144.043780][   T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.403841][ T5857] Bluetooth: hci4: command tx timeout
[  145.402535][ T6192] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  146.338124][ T1232] usb 2-1: USB disconnect, device number 3
[  146.464515][ T5857] Bluetooth: hci4: command tx timeout
[  148.028313][   T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.446624][    C1] vkms_vblank_simulate: vblank timer overrun
[  149.558972][    C1] vkms_vblank_simulate: vblank timer overrun
[  149.859370][    C1] vkms_vblank_simulate: vblank timer overrun
[  150.277539][    C1] vkms_vblank_simulate: vblank timer overrun
[  150.657617][    C1] vkms_vblank_simulate: vblank timer overrun
[  151.027224][    C1] vkms_vblank_simulate: vblank timer overrun
[  151.103544][   T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.370722][    C1] vkms_vblank_simulate: vblank timer overrun
[  153.037020][ T6239] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  153.047950][    C1] vkms_vblank_simulate: vblank timer overrun
[  153.272688][    C1] vkms_vblank_simulate: vblank timer overrun
[  153.681419][    C1] vkms_vblank_simulate: vblank timer overrun
[  154.681517][   T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.822279][ T6142] chnl_net:caif_netlink_parms(): no params data found
[  156.632265][ T6266] block device autoloading is deprecated and will be removed.
[  158.005616][ T6277] ubi31: attaching mtd0
[  158.040157][ T6277] ubi31: scanning is finished
[  158.040185][ T6277] ubi31: empty MTD device detected
[  159.760580][ T6277] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  161.655632][ T6297] PKCS7: Unknown OID: [4] 0.0
[  161.655654][ T6297] PKCS7: Only support pkcs7_signedData type
[  161.728441][ T6299] syz.0.78 uses obsolete (PF_INET,SOCK_PACKET)
[  162.052485][ T6297] ceph: No mds server is up or the cluster is laggy
[  162.056302][ T5892] libceph: connect (1)[c::]:6789 error -101
[  162.057023][ T5892] libceph: mon0 (1)[c::]:6789 connect error
[  162.193177][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.193328][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.193566][ T6142] bridge_slave_0: entered allmulticast mode
[  162.208328][ T6142] bridge_slave_0: entered promiscuous mode
[  162.298994][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.299148][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.299404][ T6142] bridge_slave_1: entered allmulticast mode
[  162.321589][ T6142] bridge_slave_1: entered promiscuous mode
[  163.070211][ T6142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.143952][ T6142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.229891][ T6323] tipc: Can't bind to reserved service type 1
[  163.907547][ T6333] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  163.923412][ T6142] team0: Port device team_slave_0 added
[  163.975987][ T6142] team0: Port device team_slave_1 added
[  164.703108][   T67] bridge_slave_1: left allmulticast mode
[  164.703499][   T67] bridge_slave_1: left promiscuous mode
[  164.719919][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.909268][   T67] bridge_slave_0: left allmulticast mode
[  164.909304][   T67] bridge_slave_0: left promiscuous mode
[  164.909591][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.247771][ T6350] FAULT_INJECTION: forcing a failure.
[  165.247771][ T6350] name failslab, interval 1, probability 0, space 0, times 0
[  165.247869][ T6350] CPU: 0 UID: 0 PID: 6350 Comm: syz.0.93 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  165.247896][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  165.247909][ T6350] Call Trace:
[  165.247918][ T6350]  <TASK>
[  165.247927][ T6350]  dump_stack_lvl+0x189/0x250
[  165.247964][ T6350]  ? __pfx____ratelimit+0x10/0x10
[  165.247995][ T6350]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.248027][ T6350]  ? __pfx__printk+0x10/0x10
[  165.248057][ T6350]  ? __pfx___might_resched+0x10/0x10
[  165.248088][ T6350]  ? fs_reclaim_acquire+0x7d/0x100
[  165.248113][ T6350]  should_fail_ex+0x46c/0x600
[  165.248146][ T6350]  ? getname_flags+0xb8/0x540
[  165.248179][ T6350]  should_failslab+0xa8/0x100
[  165.248208][ T6350]  ? getname_flags+0xb8/0x540
[  165.248238][ T6350]  kmem_cache_alloc_noprof+0x6e/0x310
[  165.248275][ T6350]  getname_flags+0xb8/0x540
[  165.248320][ T6350]  do_sys_openat2+0xbc/0x1c0
[  165.248345][ T6350]  ? __pfx_do_sys_openat2+0x10/0x10
[  165.248382][ T6350]  __x64_sys_openat+0x138/0x170
[  165.248411][ T6350]  do_syscall_64+0xfa/0x3b0
[  165.248441][ T6350]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.248469][ T6350]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.248491][ T6350]  ? clear_bhb_loop+0x60/0xb0
[  165.248519][ T6350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.248540][ T6350] RIP: 0033:0x7f098074ebe9
[  165.248559][ T6350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.248576][ T6350] RSP: 002b:00007f097e9b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  165.248599][ T6350] RAX: ffffffffffffffda RBX: 00007f0980985fa0 RCX: 00007f098074ebe9
[  165.248615][ T6350] RDX: 00000000001c0002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  165.248630][ T6350] RBP: 00007f097e9b6090 R08: 0000000000000000 R09: 0000000000000000
[  165.248643][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.248655][ T6350] R13: 00007f0980986038 R14: 00007f0980985fa0 R15: 00007ffe18dfc118
[  165.248689][ T6350]  </TASK>
[  166.665016][ T6359] FAULT_INJECTION: forcing a failure.
[  166.665016][ T6359] name failslab, interval 1, probability 0, space 0, times 0
[  166.665043][ T6359] CPU: 1 UID: 0 PID: 6359 Comm: syz.2.95 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  166.665060][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  166.665070][ T6359] Call Trace:
[  166.665075][ T6359]  <TASK>
[  166.665089][ T6359]  dump_stack_lvl+0x189/0x250
[  166.665118][ T6359]  ? __pfx____ratelimit+0x10/0x10
[  166.665139][ T6359]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.665162][ T6359]  ? __pfx__printk+0x10/0x10
[  166.665183][ T6359]  ? __pfx___might_resched+0x10/0x10
[  166.665201][ T6359]  ? fs_reclaim_acquire+0x7d/0x100
[  166.665218][ T6359]  should_fail_ex+0x46c/0x600
[  166.665243][ T6359]  should_failslab+0xa8/0x100
[  166.665266][ T6359]  __kmalloc_noprof+0xcb/0x430
[  166.665286][ T6359]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  166.665312][ T6359]  tomoyo_realpath_from_path+0xe3/0x5d0
[  166.665336][ T6359]  ? tomoyo_domain+0xda/0x130
[  166.665362][ T6359]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  166.665380][ T6359]  tomoyo_path_number_perm+0x1e8/0x5a0
[  166.665400][ T6359]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  166.665421][ T6359]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  166.665442][ T6359]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.665469][ T6359]  ? __lock_acquire+0xab9/0xd20
[  166.665505][ T6359]  ? __fget_files+0x2a/0x420
[  166.665530][ T6359]  ? __fget_files+0x2a/0x420
[  166.665550][ T6359]  ? __fget_files+0x3a6/0x420
[  166.665571][ T6359]  ? __fget_files+0x2a/0x420
[  166.665596][ T6359]  security_file_ioctl+0xcb/0x2d0
[  166.665617][ T6359]  __se_sys_ioctl+0x47/0x170
[  166.665637][ T6359]  do_syscall_64+0xfa/0x3b0
[  166.665657][ T6359]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.665677][ T6359]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.665692][ T6359]  ? clear_bhb_loop+0x60/0xb0
[  166.665711][ T6359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.665726][ T6359] RIP: 0033:0x7f447db9ebe9
[  166.665739][ T6359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.665751][ T6359] RSP: 002b:00007f447be06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  166.665767][ T6359] RAX: ffffffffffffffda RBX: 00007f447ddd5fa0 RCX: 00007f447db9ebe9
[  166.665778][ T6359] RDX: 00002000000000c0 RSI: 00000000000007a5 RDI: 0000000000000003
[  166.665788][ T6359] RBP: 00007f447be06090 R08: 0000000000000000 R09: 0000000000000000
[  166.665797][ T6359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.665805][ T6359] R13: 00007f447ddd6038 R14: 00007f447ddd5fa0 R15: 00007ffe88c9b498
[  166.665829][ T6359]  </TASK>
[  166.665835][ T6359] ERROR: Out of memory at tomoyo_realpath_from_path.
[  169.124497][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  169.441392][   T10] usb 2-1: Using ep0 maxpacket: 8
[  169.483805][   T10] usb 2-1: config 9 has an invalid interface number: 112 but max is 0
[  169.483826][   T10] usb 2-1: config 9 has no interface number 0
[  169.483851][   T10] usb 2-1: config 9 interface 112 has no altsetting 0
[  169.522866][   T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3
[  169.522889][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.522903][   T10] usb 2-1: Product: syz
[  169.522913][   T10] usb 2-1: Manufacturer: syz
[  169.522923][   T10] usb 2-1: SerialNumber: syz
[  169.656948][   T10] r8152-cfgselector 2-1: Unknown version 0x0000
[  170.824396][ T5916] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  171.441447][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.441484][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.441527][ T5916] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  171.441550][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.738197][ T5916] usb 1-1: config 0 descriptor??
[  173.222894][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.272394][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.359771][   T67] bond0 (unregistering): Released all slaves
[  174.263237][ T5916] usbhid 1-1:0.0: can't add hid device: -71
[  174.382697][ T5916] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  175.439009][ T5916] usb 1-1: USB disconnect, device number 2
[  175.572623][ T6392] binder: 6391:6392 ioctl c018620c 0 returned -14
[  175.573459][ T6392] netlink: 96 bytes leftover after parsing attributes in process `syz.0.105'.
[  175.639476][   T10] r8152 2-1:9.112: Expected endpoints are not found
[  175.834927][ T6395] Illegal XDP return value 6395 on prog  (id 21) dev N/A, expect packet loss!
[  175.929998][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.930016][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.930053][ T6142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.098155][ T6392] binder: 6391:6392 ioctl c0306201 200000000240 returned -11
[  176.207170][ T5892] r8152-cfgselector 2-1: USB disconnect, device number 4
[  176.934558][ T5916] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  177.045606][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.045624][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.045654][ T6142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.114525][ T5916] usb 3-1: Using ep0 maxpacket: 16
[  177.119614][ T5916] usb 3-1: config 0 has an invalid interface number: 145 but max is 0
[  177.119644][ T5916] usb 3-1: config 0 has no interface number 0
[  177.162188][ T5916] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  177.162210][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.162223][ T5916] usb 3-1: Product: syz
[  177.162233][ T5916] usb 3-1: Manufacturer: syz
[  177.162243][ T5916] usb 3-1: SerialNumber: syz
[  177.198304][ T5916] usb 3-1: config 0 descriptor??
[  177.212428][ T5916] hub 3-1:0.145: bad descriptor, ignoring hub
[  177.212457][ T5916] hub 3-1:0.145: probe with driver hub failed with error -5
[  177.249235][ T5916] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input7
[  177.425559][ T6401] FAULT_INJECTION: forcing a failure.
[  177.425559][ T6401] name failslab, interval 1, probability 0, space 0, times 0
[  177.425596][ T6401] CPU: 0 UID: 0 PID: 6401 Comm: syz.2.108 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  177.425619][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  177.425632][ T6401] Call Trace:
[  177.425640][ T6401]  <TASK>
[  177.425649][ T6401]  dump_stack_lvl+0x189/0x250
[  177.425687][ T6401]  ? __pfx____ratelimit+0x10/0x10
[  177.425717][ T6401]  ? __pfx_dump_stack_lvl+0x10/0x10
[  177.425749][ T6401]  ? __pfx__printk+0x10/0x10
[  177.425779][ T6401]  ? __pfx___might_resched+0x10/0x10
[  177.425802][ T6401]  ? fs_reclaim_acquire+0x7d/0x100
[  177.425828][ T6401]  should_fail_ex+0x46c/0x600
[  177.425861][ T6401]  ? getname_flags+0xb8/0x540
[  177.425892][ T6401]  should_failslab+0xa8/0x100
[  177.425922][ T6401]  ? getname_flags+0xb8/0x540
[  177.425951][ T6401]  kmem_cache_alloc_noprof+0x6e/0x310
[  177.426036][ T6401]  getname_flags+0xb8/0x540
[  177.426076][ T6401]  do_sys_openat2+0xbc/0x1c0
[  177.426101][ T6401]  ? __pfx_do_sys_openat2+0x10/0x10
[  177.426124][ T6401]  ? ksys_write+0x230/0x260
[  177.426152][ T6401]  ? __pfx_ksys_write+0x10/0x10
[  177.426183][ T6401]  ? rcu_is_watching+0x15/0xb0
[  177.426219][ T6401]  __x64_sys_openat+0x138/0x170
[  177.426253][ T6401]  do_syscall_64+0xfa/0x3b0
[  177.426285][ T6401]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.426306][ T6401]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  177.426326][ T6401]  ? clear_bhb_loop+0x60/0xb0
[  177.426353][ T6401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.426374][ T6401] RIP: 0033:0x7f447db9ebe9
[  177.426393][ T6401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.426410][ T6401] RSP: 002b:00007f447be06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  177.426432][ T6401] RAX: ffffffffffffffda RBX: 00007f447ddd5fa0 RCX: 00007f447db9ebe9
[  177.426448][ T6401] RDX: 0000000000000302 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  177.426462][ T6401] RBP: 00007f447be06090 R08: 0000000000000000 R09: 0000000000000000
[  177.426476][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.426488][ T6401] R13: 00007f447ddd6038 R14: 00007f447ddd5fa0 R15: 00007ffe88c9b498
[  177.426522][ T6401]  </TASK>
[  178.827289][ T6408] netlink: 256 bytes leftover after parsing attributes in process `syz.0.112'.
[  180.245685][ T5192] usb 3-1: reset high-speed USB device number 2 using dummy_hcd
[  181.405164][ T5192] usb 3-1: device firmware changed
[  181.486600][   T31] usb 3-1: USB disconnect, device number 2
[  183.157768][ T6142] hsr_slave_0: entered promiscuous mode
[  183.165246][ T6142] hsr_slave_1: entered promiscuous mode
[  183.166296][ T6142] debugfs: 'hsr0' already exists in 'hsr'
[  183.166318][ T6142] Cannot create hsr debugfs directory
[  184.875047][   T67] hsr_slave_0: left promiscuous mode
[  185.054414][ T5892] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  185.127886][   T67] hsr_slave_1: left promiscuous mode
[  185.129003][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.129082][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.607015][ T5892] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  185.607048][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.643976][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.644002][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.678376][ T5892] usb 3-1: config 0 descriptor??
[  185.716458][ T5892] cp210x 3-1:0.0: cp210x converter detected
[  185.888677][ T6462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.889240][ T6462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.652039][   T67] veth1_macvtap: left promiscuous mode
[  186.655138][   T67] veth0_macvtap: left promiscuous mode
[  186.690362][   T67] veth1_vlan: left promiscuous mode
[  186.725792][   T67] veth0_vlan: left promiscuous mode
[  187.404567][ T5892] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  187.404608][ T5892] cp210x 3-1:0.0: querying part number failed
[  187.451665][ T5892] usb 3-1: cp210x converter now attached to ttyUSB0
[  187.490095][ T5892] usb 3-1: USB disconnect, device number 4
[  187.914815][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  187.917073][ T5892] cp210x 3-1:0.0: device disconnected
[  189.832652][   T67] team0 (unregistering): Port device team_slave_1 removed
[  189.933114][ T6486] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  190.075259][   T67] team0 (unregistering): Port device team_slave_0 removed
[  190.831465][ T6490] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  194.427023][ T6496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.133'.
[  206.769895][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[  206.769977][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[  207.010517][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  207.124152][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  207.127311][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  207.132982][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  207.139037][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  209.274454][ T5846] Bluetooth: hci5: command tx timeout
[  211.934343][ T5846] Bluetooth: hci5: command tx timeout
[  212.078553][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  212.092482][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  212.094167][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  212.126972][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  212.144558][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  212.340224][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  212.352136][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  212.362853][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  212.372516][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  212.384567][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  214.036246][ T5846] Bluetooth: hci5: command tx timeout
[  214.267490][ T5846] Bluetooth: hci3: command tx timeout
[  214.464424][ T5846] Bluetooth: hci4: command tx timeout
[  214.685972][ T6566] FAULT_INJECTION: forcing a failure.
[  214.685972][ T6566] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  214.686000][ T6566] CPU: 1 UID: 0 PID: 6566 Comm: syz.4.143 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  214.686018][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  214.686027][ T6566] Call Trace:
[  214.686033][ T6566]  <TASK>
[  214.686039][ T6566]  dump_stack_lvl+0x189/0x250
[  214.686067][ T6566]  ? __pfx____ratelimit+0x10/0x10
[  214.686096][ T6566]  ? __pfx_dump_stack_lvl+0x10/0x10
[  214.686118][ T6566]  ? __pfx__printk+0x10/0x10
[  214.686135][ T6566]  ? __might_fault+0xb0/0x130
[  214.686166][ T6566]  should_fail_ex+0x46c/0x600
[  214.686191][ T6566]  _copy_from_user+0x2d/0xb0
[  214.686208][ T6566]  __sys_connect+0x124/0x450
[  214.686231][ T6566]  ? __pfx___sys_connect+0x10/0x10
[  214.686260][ T6566]  ? __pfx_ksys_write+0x10/0x10
[  214.686277][ T6566]  ? rcu_is_watching+0x15/0xb0
[  214.686306][ T6566]  __x64_sys_connect+0x7a/0x90
[  214.686326][ T6566]  do_syscall_64+0xfa/0x3b0
[  214.686347][ T6566]  ? lockdep_hardirqs_on+0x9c/0x150
[  214.686366][ T6566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.686381][ T6566]  ? clear_bhb_loop+0x60/0xb0
[  214.686400][ T6566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.686414][ T6566] RIP: 0033:0x7fed4f16ebe9
[  214.686427][ T6566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.686440][ T6566] RSP: 002b:00007fed4d3ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  214.686456][ T6566] RAX: ffffffffffffffda RBX: 00007fed4f3a5fa0 RCX: 00007fed4f16ebe9
[  214.686467][ T6566] RDX: 000000000000000a RSI: 00002000000000c0 RDI: 0000000000000009
[  214.686477][ T6566] RBP: 00007fed4d3ce090 R08: 0000000000000000 R09: 0000000000000000
[  214.686486][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.686494][ T6566] R13: 00007fed4f3a6038 R14: 00007fed4f3a5fa0 R15: 00007ffe453c8958
[  214.686517][ T6566]  </TASK>
[  215.065886][ T5857] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  215.069364][ T5857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  215.088335][ T5857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  215.103291][ T5857] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  215.124838][ T5857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  215.805262][ T6527] chnl_net:caif_netlink_parms(): no params data found
[  216.067234][ T5846] Bluetooth: hci5: command tx timeout
[  216.855568][ T6581] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  217.084357][ T5846] Bluetooth: hci3: command tx timeout
[  217.084407][ T5846] Bluetooth: hci4: command tx timeout
[  217.184472][ T5857] Bluetooth: hci6: command tx timeout
[  217.708426][ T6586] netlink: 76 bytes leftover after parsing attributes in process `syz.4.146'.
[  217.708446][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.146'.
[  217.708457][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'.
[  218.755845][ T6591] 
[  218.755861][ T6591] ======================================================
[  218.755870][ T6591] WARNING: possible circular locking dependency detected
[  218.755885][ T6591] syzkaller #0 Not tainted
[  218.755897][ T6591] ------------------------------------------------------
[  218.755906][ T6591] syz.4.147/6591 is trying to acquire lock:
[  218.755918][ T6591] ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  218.755981][ T6591] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  218.755981][ T6591] but task is already holding lock:
[  218.755989][ T6591] ffff8881433ec3a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380
[  218.756038][ T6591] 
[  218.756038][ T6591] which lock already depends on the new lock.
[  218.756038][ T6591] 
[  218.756045][ T6591] 
[  218.756045][ T6591] the existing dependency chain (in reverse order) is:
[  218.756053][ T6591] 
[  218.756053][ T6591] -> #4 (&dev->vblank_time_lock){+.+.}-{3:3}:
[  218.756081][ T6591]        lock_acquire+0x120/0x360
[  218.756108][ T6591]        rt_spin_lock+0x88/0x2c0
[  218.756128][ T6591]        drm_crtc_vblank_on_config+0x2cd/0x860
[  218.756150][ T6591]        drm_crtc_vblank_on+0x88/0xc0
[  218.756172][ T6591]        drm_atomic_helper_commit_modeset_enables+0x602/0xe10
[  218.756197][ T6591]        vkms_atomic_commit_tail+0x69/0x210
[  218.756218][ T6591]        commit_tail+0x281/0x3a0
[  218.756239][ T6591]        drm_atomic_helper_commit+0xa6b/0xb10
[  218.756261][ T6591]        drm_atomic_commit+0x262/0x2c0
[  218.756280][ T6591]        drm_client_modeset_commit_atomic+0x620/0x760
[  218.756310][ T6591]        drm_client_modeset_commit_locked+0xce/0x4d0
[  218.756340][ T6591]        drm_client_modeset_commit+0x4a/0x70
[  218.756369][ T6591]        __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0
[  218.756392][ T6591]        drm_fb_helper_set_par+0xaf/0x100
[  218.756413][ T6591]        fbcon_init+0x1255/0x2370
[  218.756438][ T6591]        visual_init+0x2ef/0x650
[  218.756461][ T6591]        do_bind_con_driver+0x890/0xf70
[  218.756503][ T6591]        do_take_over_console+0x899/0xa10
[  218.756530][ T6591]        do_fbcon_takeover+0x118/0x200
[  218.756556][ T6591]        fbcon_fb_registered+0x35e/0x610
[  218.756581][ T6591]        register_framebuffer+0x70f/0x890
[  218.756612][ T6591]        __drm_fb_helper_initial_config_and_unlock+0x130a/0x18a0
[  218.756637][ T6591]        drm_fbdev_client_hotplug+0x16f/0x230
[  218.756662][ T6591]        drm_client_register+0x16f/0x210
[  218.756691][ T6591]        drm_fbdev_client_setup+0x19f/0x3f0
[  218.756716][ T6591]        drm_client_setup+0x10a/0x230
[  218.756739][ T6591]        vkms_init+0x3e0/0x4b0
[  218.756767][ T6591]        do_one_initcall+0x233/0x820
[  218.756785][ T6591]        do_initcall_level+0x104/0x190
[  218.756805][ T6591]        do_initcalls+0x59/0xa0
[  218.756822][ T6591]        kernel_init_freeable+0x334/0x4b0
[  218.756853][ T6591]        kernel_init+0x1d/0x1d0
[  218.756872][ T6591]        ret_from_fork+0x3f9/0x770
[  218.756899][ T6591]        ret_from_fork_asm+0x1a/0x30
[  218.756918][ T6591] 
[  218.756918][ T6591] -> #3 (&dev->vbl_lock){+.+.}-{3:3}:
[  218.756947][ T6591]        lock_acquire+0x120/0x360
[  218.756972][ T6591]        rt_spin_lock+0x88/0x2c0
[  218.756990][ T6591]        vblank_disable_fn+0x72/0x190
[  218.757009][ T6591]        call_timer_fn+0x17b/0x5f0
[  218.757035][ T6591]        __run_timer_base+0x648/0x970
[  218.757057][ T6591]        run_timer_softirq+0xb7/0x180
[  218.757079][ T6591]        handle_softirqs+0x22c/0x710
[  218.757103][ T6591]        run_ktimerd+0xcf/0x190
[  218.757128][ T6591]        smpboot_thread_fn+0x542/0xa60
[  218.757152][ T6591]        kthread+0x711/0x8a0
[  218.757180][ T6591]        ret_from_fork+0x3f9/0x770
[  218.757203][ T6591]        ret_from_fork_asm+0x1a/0x30
[  218.757221][ T6591] 
[  218.757221][ T6591] -> #2 ((&vblank->disable_timer)){+...}-{0:0}:
[  218.757250][ T6591]        lock_acquire+0x120/0x360
[  218.757275][ T6591]        call_timer_fn+0xdb/0x5f0
[  218.757301][ T6591]        __run_timer_base+0x648/0x970
[  218.757324][ T6591]        run_timer_softirq+0xb7/0x180
[  218.757355][ T6591]        handle_softirqs+0x22c/0x710
[  218.757379][ T6591]        run_ktimerd+0xcf/0x190
[  218.757405][ T6591]        smpboot_thread_fn+0x542/0xa60
[  218.757430][ T6591]        kthread+0x711/0x8a0
[  218.757459][ T6591]        ret_from_fork+0x3f9/0x770
[  218.757484][ T6591]        ret_from_fork_asm+0x1a/0x30
[  218.757503][ T6591] 
[  218.757503][ T6591] -> #1 (&base->expiry_lock){+...}-{3:3}:
[  218.757532][ T6591]        lock_acquire+0x120/0x360
[  218.757564][ T6591]        rt_spin_lock+0x88/0x2c0
[  218.757587][ T6591]        __run_timer_base+0x114/0x970
[  218.757610][ T6591]        run_timer_softirq+0x67/0x180
[  218.757635][ T6591]        handle_softirqs+0x22c/0x710
[  218.757660][ T6591]        run_ktimerd+0xcf/0x190
[  218.757689][ T6591]        smpboot_thread_fn+0x542/0xa60
[  218.757714][ T6591]        kthread+0x711/0x8a0
[  218.757744][ T6591]        ret_from_fork+0x3f9/0x770
[  218.757770][ T6591]        ret_from_fork_asm+0x1a/0x30
[  218.757789][ T6591] 
[  218.757789][ T6591] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}:
[  218.757818][ T6591]        validate_chain+0xb9b/0x2140
[  218.757856][ T6591]        __lock_acquire+0xab9/0xd20
[  218.757881][ T6591]        reacquire_held_locks+0x127/0x1d0
[  218.757910][ T6591]        lock_release+0x1b4/0x3e0
[  218.757934][ T6591]        __local_bh_enable_ip+0x10c/0x270
[  218.757957][ T6591]        hrtimer_cancel+0x39/0x60
[  218.757984][ T6591]        drm_vblank_disable_and_save+0x1bc/0x380
[  218.758004][ T6591]        drm_crtc_vblank_off+0x22e/0x820
[  218.758026][ T6591]        drm_atomic_helper_commit_modeset_disables+0xc89/0x2010
[  218.758050][ T6591]        vkms_atomic_commit_tail+0x51/0x210
[  218.758071][ T6591]        commit_tail+0x281/0x3a0
[  218.758098][ T6591]        drm_atomic_helper_commit+0xa6b/0xb10
[  218.758120][ T6591]        drm_atomic_commit+0x262/0x2c0
[  218.758139][ T6591]        drm_atomic_helper_set_config+0xe2/0x160
[  218.758178][ T6591]        drm_mode_setcrtc+0x9a4/0x1c50
[  218.758208][ T6591]        drm_ioctl_kernel+0x2d2/0x3a0
[  218.758236][ T6591]        drm_ioctl+0x685/0xb20
[  218.758262][ T6591]        __se_sys_ioctl+0xfc/0x170
[  218.758284][ T6591]        do_syscall_64+0xfa/0x3b0
[  218.758324][ T6591]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.758349][ T6591] 
[  218.758349][ T6591] other info that might help us debug this:
[  218.758349][ T6591] 
[  218.758357][ T6591] Chain exists of:
[  218.758357][ T6591]   (softirq_ctrl.lock) --> &dev->vbl_lock --> &dev->vblank_time_lock
[  218.758357][ T6591] 
[  218.758403][ T6591]  Possible unsafe locking scenario:
[  218.758403][ T6591] 
[  218.758410][ T6591]        CPU0                    CPU1
[  218.758417][ T6591]        ----                    ----
[  218.758424][ T6591]   lock(&dev->vblank_time_lock);
[  218.758439][ T6591]                                lock(&dev->vbl_lock);
[  218.758455][ T6591]                                lock(&dev->vblank_time_lock);
[  218.758472][ T6591]   lock((softirq_ctrl.lock));
[  218.758492][ T6591] 
[  218.758492][ T6591]  *** DEADLOCK ***
[  218.758492][ T6591] 
[  218.758498][ T6591] 8 locks held by syz.4.147/6591:
[  218.758511][ T6591]  #0: ffffc90005a5fb20 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_setcrtc+0x555/0x1c50
[  218.758570][ T6591]  #1: ffffc90005a5fb48 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_mode_setcrtc+0x555/0x1c50
[  218.758627][ T6591]  #2: ffff8881433ec4b8 (&dev->event_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xe4/0x820
[  218.758679][ T6591]  #3: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[  218.758728][ T6591]  #4: ffff8881433ec420 (&dev->vbl_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xf5/0x820
[  218.758780][ T6591]  #5: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[  218.758828][ T6591]  #6: ffff8881433ec3a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380
[  218.758887][ T6591]  #7: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[  218.758935][ T6591] 
[  218.758935][ T6591] stack backtrace:
[  218.758948][ T6591] CPU: 1 UID: 0 PID: 6591 Comm: syz.4.147 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  218.758973][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  218.758987][ T6591] Call Trace:
[  218.758997][ T6591]  <TASK>
[  218.759007][ T6591]  dump_stack_lvl+0x189/0x250
[  218.759042][ T6591]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.759073][ T6591]  ? __pfx__printk+0x10/0x10
[  218.759098][ T6591]  ? print_lock_name+0xde/0x100
[  218.759122][ T6591]  print_circular_bug+0x2ee/0x310
[  218.759145][ T6591]  check_noncircular+0x134/0x160
[  218.759184][ T6591]  validate_chain+0xb9b/0x2140
[  218.759219][ T6591]  ? preempt_schedule+0xae/0xc0
[  218.759246][ T6591]  ? preempt_schedule_common+0x83/0xd0
[  218.759274][ T6591]  ? preempt_schedule+0xae/0xc0
[  218.759300][ T6591]  ? __pfx_preempt_schedule+0x10/0x10
[  218.759332][ T6591]  __lock_acquire+0xab9/0xd20
[  218.759364][ T6591]  reacquire_held_locks+0x127/0x1d0
[  218.759398][ T6591]  ? __local_bh_disable_ip+0x264/0x400
[  218.759429][ T6591]  lock_release+0x1b4/0x3e0
[  218.759456][ T6591]  ? __local_bh_enable_ip+0x100/0x270
[  218.759485][ T6591]  __local_bh_enable_ip+0x10c/0x270
[  218.759513][ T6591]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  218.759542][ T6591]  ? rt_spin_unlock+0x65/0x80
[  218.759565][ T6591]  ? hrtimer_cancel_wait_running+0xe5/0x180
[  218.759599][ T6591]  ? hrtimer_cancel_wait_running+0x142/0x180
[  218.759631][ T6591]  ? __pfx_vkms_disable_vblank+0x10/0x10
[  218.759659][ T6591]  hrtimer_cancel+0x39/0x60
[  218.759690][ T6591]  drm_vblank_disable_and_save+0x1bc/0x380
[  218.759715][ T6591]  drm_crtc_vblank_off+0x22e/0x820
[  218.759743][ T6591]  ? drm_atomic_helper_commit_modeset_disables+0xa94/0x2010
[  218.759772][ T6591]  ? __pfx_vkms_crtc_atomic_disable+0x10/0x10
[  218.759800][ T6591]  drm_atomic_helper_commit_modeset_disables+0xc89/0x2010
[  218.759839][ T6591]  vkms_atomic_commit_tail+0x51/0x210
[  218.759864][ T6591]  ? read_tsc+0x9/0x20
[  218.759888][ T6591]  ? __pfx_vkms_atomic_commit_tail+0x10/0x10
[  218.759913][ T6591]  commit_tail+0x281/0x3a0
[  218.759941][ T6591]  drm_atomic_helper_commit+0xa6b/0xb10
[  218.759969][ T6591]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[  218.759994][ T6591]  drm_atomic_commit+0x262/0x2c0
[  218.760018][ T6591]  ? __pfx_drm_atomic_commit+0x10/0x10
[  218.760040][ T6591]  ? __pfx___drm_printfn_info+0x10/0x10
[  218.760081][ T6591]  drm_atomic_helper_set_config+0xe2/0x160
[  218.760110][ T6591]  drm_mode_setcrtc+0x9a4/0x1c50
[  218.760153][ T6591]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  218.760181][ T6591]  ? lockdep_hardirqs_on+0x9c/0x150
[  218.760212][ T6591]  ? __pfx_drm_mode_setcrtc+0x10/0x10
[  218.760257][ T6591]  ? __rcu_read_unlock+0x84/0xe0
[  218.760285][ T6591]  ? drm_is_current_master+0x1a2/0x210
[  218.760311][ T6591]  drm_ioctl_kernel+0x2d2/0x3a0
[  218.760339][ T6591]  ? __pfx_drm_mode_setcrtc+0x10/0x10
[  218.760370][ T6591]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  218.760404][ T6591]  drm_ioctl+0x685/0xb20
[  218.760440][ T6591]  ? smk_tskacc+0x2fc/0x370
[  218.760478][ T6591]  ? __pfx_drm_mode_setcrtc+0x10/0x10
[  218.760512][ T6591]  ? __pfx_drm_ioctl+0x10/0x10
[  218.760548][ T6591]  ? __fget_files+0x2a/0x420
[  218.760582][ T6591]  ? bpf_lsm_file_ioctl+0x9/0x20
[  218.760608][ T6591]  ? __pfx_drm_ioctl+0x10/0x10
[  218.760636][ T6591]  __se_sys_ioctl+0xfc/0x170
[  218.760661][ T6591]  do_syscall_64+0xfa/0x3b0
[  218.760693][ T6591]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.760714][ T6591]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  218.760736][ T6591]  ? clear_bhb_loop+0x60/0xb0
[  218.760761][ T6591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.760783][ T6591] RIP: 0033:0x7fed4f16ebe9
[  218.760803][ T6591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.760821][ T6591] RSP: 002b:00007fed4cf69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  218.760850][ T6591] RAX: ffffffffffffffda RBX: 00007fed4f3a6270 RCX: 00007fed4f16ebe9
[  218.760867][ T6591] RDX: 0000200000000740 RSI: 00000000c06864a2 RDI: 0000000000000005
[  218.760881][ T6591] RBP: 00007fed4f1f1e19 R08: 0000000000000000 R09: 0000000000000000
[  218.760895][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.760908][ T6591] R13: 00007fed4f3a6308 R14: 00007fed4f3a6270 R15: 00007ffe453c8958
[  218.760932][ T6591]  </TASK>
[  219.137005][ T5857] Bluetooth: hci4: command tx timeout
[  219.166396][ T5857] Bluetooth: hci3: command tx timeout
[  219.294323][ T5857] Bluetooth: hci6: command tx timeout
[  219.524456][ T5892] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  220.507809][   T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.184508][ T5857] Bluetooth: hci3: command tx timeout
[  221.184539][ T5857] Bluetooth: hci4: command tx timeout
[  221.267115][   T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.529334][   T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.786392][   T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.078293][   T67] bridge_slave_1: left allmulticast mode
[  222.078322][   T67] bridge_slave_1: left promiscuous mode
[  222.078513][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.175094][   T67] bridge_slave_0: left allmulticast mode
[  222.175121][   T67] bridge_slave_0: left promiscuous mode
[  222.175311][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.286383][   T67] bridge_slave_1: left allmulticast mode
[  222.286410][   T67] bridge_slave_1: left promiscuous mode
[  222.286569][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.385380][   T67] bridge_slave_0: left allmulticast mode
[  222.385408][   T67] bridge_slave_0: left promiscuous mode
[  222.385581][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.904851][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.985689][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.006300][   T67] bond0 (unregistering): Released all slaves
[  224.164836][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.254997][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.325857][   T67] bond0 (unregistering): Released all slaves
[  225.407095][   T67] hsr_slave_0: left promiscuous mode
[  225.444381][   T67] hsr_slave_1: left promiscuous mode
[  225.445874][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.445897][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.505327][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.505354][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.624429][   T67] hsr_slave_0: left promiscuous mode
[  225.671728][   T67] hsr_slave_1: left promiscuous mode
[  225.672235][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.715068][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.775298][   T67] veth1_macvtap: left promiscuous mode
[  225.775370][   T67] veth0_macvtap: left promiscuous mode
[  225.775516][   T67] veth1_vlan: left promiscuous mode
[  225.775620][   T67] veth0_vlan: left promiscuous mode
[  227.425912][   T67] team0 (unregistering): Port device team_slave_1 removed
[  227.594962][   T67] team0 (unregistering): Port device team_slave_0 removed