last executing test programs:

29m23.749309849s ago: executing program 32 (id=231):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r0 = io_uring_setup(0x1b1e, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0xffffffff, 0x17a})
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
r4 = socket(0x2b, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000200))
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000002c0)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000340)={0x0, 0x2fc3b, 0x8, 0x2, 0x235, 0x0, r0}, 0x1)
mount(0x0, 0x0, &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000004c0)='tcpci 0x2', 0x9)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)

26m51.376265307s ago: executing program 3 (id=427):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000192c0), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000019300)={0x3f})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
write$uinput_user_dev(r4, &(0x7f0000019340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c)
write$binfmt_format(0xffffffffffffffff, &(0x7f0000019800)='-1\x00', 0x2)
ioctl$UI_DEV_CREATE(r4, 0x5501)

26m45.808699422s ago: executing program 3 (id=433):
socket(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
r0 = socket(0xa, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
listns(0x0, &(0x7f0000000040)=[0x0], 0x1, 0x0)
listen(r0, 0x100)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x18, 0x40}, 0x20048844)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x80000000}, &(0x7f0000000180)=0x8)

26m41.713040806s ago: executing program 3 (id=437):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x130, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_NAT_DST={0x11c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x130}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r6)
sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4806}, 0x0)
listen(0xffffffffffffffff, 0xfffffffe)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

26m40.275018169s ago: executing program 3 (id=438):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000480)={0x28, 0x0, 0x0, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff224000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000007c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000800), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./tracing\x00', &(0x7f0000000940)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./tracing/uprobe_events\x00', 0x181101, 0x0)
write(r4, &(0x7f0000000a00)='p:s/_ ./file0:0', 0xf)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a80)='-:s/', 0x4)
listen(r0, 0x4)

26m30.888207546s ago: executing program 3 (id=445):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000192c0), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000019300)={0x3f})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
write$uinput_user_dev(r4, &(0x7f0000019340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c)
r5 = openat$binfmt_format(0xffffff9c, &(0x7f00000197c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
write$binfmt_format(r5, &(0x7f0000019800)='-1\x00', 0x2)
ioctl$UI_DEV_CREATE(r4, 0x5501)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)

26m28.688066425s ago: executing program 3 (id=446):
socket(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
r0 = socket(0xa, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
listns(0x0, &(0x7f0000000040)=[0x0], 0x1, 0x0)
listen(r0, 0x100)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x18, 0x40}, 0x20048844)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x80000000}, &(0x7f0000000180)=0x8)

26m12.472081935s ago: executing program 33 (id=446):
socket(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
r0 = socket(0xa, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
listns(0x0, &(0x7f0000000040)=[0x0], 0x1, 0x0)
listen(r0, 0x100)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x18, 0x40}, 0x20048844)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x80000000}, &(0x7f0000000180)=0x8)

23m56.911718859s ago: executing program 1 (id=579):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x3}, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40042, 0x1)
r3 = socket$unix(0x1, 0x5, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4000}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000280)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000380), 0x40000000000032a, 0x0)
recvmmsg(r5, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00')
pread64(r7, &(0x7f0000000480)=""/237, 0xed, 0x4eb)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000000580)="04", 0x1)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f00000005c0)=0x237a, 0x4)
sendmmsg$inet6(r8, &(0x7f0000000600)=[{{&(0x7f0000000640)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r8, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12141, 0x0)
mount$9p_fd(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x400, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
unlinkat(r2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(r4, &(0x7f0000000780)='net/anycast6\x00')

23m54.997763737s ago: executing program 1 (id=581):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000004400)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f000001d400)=0x80000000000003)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f000001d440), 0x88b02, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f000001d480), 0x400000001ff, 0x101201)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f000001d4c0)=@urb_type_control={0x2, {}, 0xfffffff6, 0xc0, &(0x7f000001d500)={0x0, 0x3, 0x1, 0x5}, 0x8, 0x8000, 0x4, 0x0, 0x1000010, 0x20004, 0x0})
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
pread64(r6, &(0x7f0000004200)=""/236, 0xec, 0x0)
fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000000)=0x2)
write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7}, 0x50)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x3, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080)

23m48.112029583s ago: executing program 1 (id=585):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setns(0xc9, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10)
listen(r3, 0x5)
connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10)
r5 = accept$inet(r3, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000280), 0x4)
setsockopt$inet_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28)
setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000300), 0x4)
setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28)
sendto$inet(r4, &(0x7f0000000380)='\x00', 0x4000, 0x40, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f00000003c0), 0x4000, 0x1d40, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
socket$nl_route(0x10, 0x3, 0x0)

23m40.54370516s ago: executing program 1 (id=592):
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
rt_sigtimedwait(&(0x7f0000000380)={[0xfffffffffffffffb]}, 0x0, 0x0, 0x8)
mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04"], 0x7)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_int(r3, 0x0, 0x2, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0)
getdents(r4, &(0x7f0000000140)=""/117, 0x75)

23m37.383526501s ago: executing program 0 (id=595):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6)
r4 = fanotify_init(0x200, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r4, 0x161, 0x40000867, r5, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x22060, 0x0)
clock_adjtime(0x1, &(0x7f0000000440)={0x6, 0x9, 0xfffffffffffffffb, 0x7fff, 0xfffffffffffffffd, 0x10001, 0xffffffffba8372f8, 0xfc84, 0x100000000, 0x1, 0x6, 0x4e3, 0x1ff, 0x2, 0x7, 0x80000000, 0x7, 0x4, 0x7, 0x5, 0x80000000, 0x0, 0x5, 0xffff, 0x0, 0xfffffffffffffffb})
fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000540), 0x0, 0x0, 0x0)
fremovexattr(r6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r7, &(0x7f0000000680)='0', 0x1)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c", 0x30}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0)

23m35.737146703s ago: executing program 1 (id=596):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000780), 0x10106, 0x2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x41, 0x0)
write$binfmt_aout(r4, 0x0, 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000800)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r5 = syz_open_pts(r4, 0x200)
r6 = dup3(r5, r4, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000840)=0xff)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0xb, &(0x7f00000004c0)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000540)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x94)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
r8 = syz_open_dev$usbmon(&(0x7f0000000100), 0x8001, 0x0)
shutdown(r7, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x40140, 0x1)
setxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f0000000880)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="020000042100050000380e00000002000080000010000500000001002000020000000000f893cec4924cdb64dd29b327"], 0x24, 0x1)
getxattr(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=@known='system.posix_acl_access\x00', 0x0, 0x0)
listen(r7, 0xb)
sendmsg$unix(r7, &(0x7f0000000380)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000001c0)="37e8b197c787", 0x6}, {&(0x7f0000000200)="1e64dd602eaa304af89d1297b1a2aaa9d904b27ab78da6d6236f25002034755f0c1c68d77afa7aa162ca18ad179d8da2336c930679634474f13696da2c4951ac53a7ca407aaaa8814325994a5cbfe57300c6075f187b8f1f439c79f9fc937d600e7a2a16fa748dea764f69dcec6a0ffbba8b87181a84ffa5c4602f946a6f0430d4f25d199ef222c590fa43c6d3ebce9a2a698246b527b2ffc958ad", 0x9b}, {&(0x7f00000002c0)="5d31e9e544adc6c43b806f6802f4d663c562a8a5ad0f552ca0ca8a4b402eb4eab27a5cf4c1325c864075e587ba4f227983ae567a0991821a0f66b5e85245073fd4098c285be729866ea81c7a2a8b96600d39f4cd541c14d8afb99a41fa946a75577f625f2f4c", 0x66}], 0x3, 0x0, 0x0, 0x4000090}, 0x20040085)
connect$unix(r7, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
ioctl$F2FS_IOC_GET_PIN_FILE(r8, 0x8004f50e, &(0x7f00000003c0))

23m30.048046421s ago: executing program 1 (id=598):
r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x8000, 0x183)
getdents(r0, 0x0, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000100)=0x67)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000300)='pipefs\x00', 0x100cc0a, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc)
socket$kcm(0x21, 0x2, 0x2)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0})
syz_open_dev$I2C(0x0, 0xa, 0x200000)
read$FUSE(0xffffffffffffffff, &(0x7f0000001580)={0x2020}, 0x2020)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x72c067e8f02bec76, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'wg2\x00', 0x2})
dup(r6)
geteuid()
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)

23m24.185002226s ago: executing program 0 (id=600):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r4, 0x5607, 0x2d)
keyctl$read(0xb, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140))
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r6, 0x402c542c, 0x0)
ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
setns(0xc9, 0x0)
r7 = socket(0x8, 0x5, 0x7fff)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
ioctl$sock_SIOCOUTQNSD(r7, 0x400261f3, &(0x7f0000000000))
r8 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8)
sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c811}, 0x8000)

23m18.942625005s ago: executing program 0 (id=602):
socket(0x2a, 0x2, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_open_dev$tty20(0xc, 0x4, 0x1)
memfd_create(0x0, 0x8340b1aabcc04bec)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x20010, 0xffffffffffffffff, 0x0)
syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0xa4d, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x4, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x6, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x40, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x1, 0x2], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x0, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x7, 0x1100004, 0x9, 0x4, 0x9, 0x8, 0xd, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x9, 0x4, 0x1, 0x7, 0x6, 0x8, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0xd, 0x5, 0x6, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0xb, 0x7, 0x2, 0x1, 0xf, 0x8, 0x84, 0x3800, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x6, 0x4, 0x2, 0x0, 0xa2, 0xa, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x800, 0x0, 0x6, 0xfffffff8, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x5, 0xfffffffc, 0x5, 0x978, 0x6, 0xd36b, 0x400, 0x5, 0xce7, 0x1ff, 0x53f, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x3, 0x6, 0x4, 0xffff, 0x80000003, 0x1072, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x9, 0x12000000, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x40000000, 0x2, 0x1005, 0xb20, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c0000002d00070125bd7000fedbdf25067c0000080001800400dd806f0003"], 0x8c}, 0x1, 0x0, 0x0, 0x10000004}, 0x4014)
r4 = syz_open_dev$evdev(&(0x7f0000000800), 0x3, 0x822b01)
syz_io_uring_setup(0xf08, 0x0, &(0x7f00000008c0)=<r5=>0x0, &(0x7f0000000900)=<r6=>0x0, &(0x7f0000000940)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
write$char_usb(r4, &(0x7f0000000a00)="e2", 0x918)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000180)='wlan0\x00', 0x10)
bind$inet(r8, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10)

23m11.202128506s ago: executing program 0 (id=604):
read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r3 = syz_open_procfs(0x0, &(0x7f0000006100)='cmdline\x00')
preadv(r3, 0x0, 0x0, 0xc03, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
ioprio_get$uid(0x3, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'})
r5 = getpgid(0x0)
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x24020000)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x76)
socket$netlink(0x10, 0x3, 0x0)

23m10.977535352s ago: executing program 34 (id=598):
r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x8000, 0x183)
getdents(r0, 0x0, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000100)=0x67)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000300)='pipefs\x00', 0x100cc0a, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc)
socket$kcm(0x21, 0x2, 0x2)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0})
syz_open_dev$I2C(0x0, 0xa, 0x200000)
read$FUSE(0xffffffffffffffff, &(0x7f0000001580)={0x2020}, 0x2020)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x72c067e8f02bec76, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'wg2\x00', 0x2})
dup(r6)
geteuid()
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)

23m8.521664375s ago: executing program 0 (id=606):
syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000007c0))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x149a82, 0x40)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
fcntl$setstatus(r3, 0x4, 0x0)
write$tcp_congestion(r3, 0x0, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, 0x0, 0x0)
listen(r4, 0x8)
accept4(r4, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)

23m2.76050288s ago: executing program 0 (id=608):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
symlink(0x0, &(0x7f0000000300)='./file0/file0\x00')
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x549})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
ioctl$UFFDIO_POISON(r5, 0xc020aa08, &(0x7f0000000900)={{&(0x7f000002a000/0x1000)=nil, 0x1000}, 0x1})
rename(&(0x7f0000000580)='./file0\x00', 0x0)
mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94)

22m45.503849241s ago: executing program 35 (id=608):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
symlink(0x0, &(0x7f0000000300)='./file0/file0\x00')
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x549})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
ioctl$UFFDIO_POISON(r5, 0xc020aa08, &(0x7f0000000900)={{&(0x7f000002a000/0x1000)=nil, 0x1000}, 0x1})
rename(&(0x7f0000000580)='./file0\x00', 0x0)
mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94)

22m1.940697756s ago: executing program 2 (id=625):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x130, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_NAT_DST={0x11c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x130}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000500000014000180060001000a00000008000500010000004000028014000100000000000000000000000000000000010600020050000000080003000000000008000400010000000800050000000000080006000000000023a02fad66ec53a7c463059f69ad23d3d25fad55aefe1a232b9abac427fa1aa2ae838ea39ce4c09eafcdd7e75685b38ce373f22dde79cc86fd2f03a02d19fc184ee9031661cc728bb96e568b4e58172a7a72cba5dcc2d2958b4acfa85bf05ef489daf844ce4506ed799a43e575b89784b7e5de83826a314ad629f84ba2c1c0be566870c418b32ae30f5473639b569c1d3b7f729f7b4aafcc24b5e0c1fc"], 0x68}, 0x1, 0x0, 0x0, 0x4806}, 0x0)
listen(0xffffffffffffffff, 0xfffffffe)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x2)

21m56.942576931s ago: executing program 2 (id=626):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
creat(0x0, 0x175)
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84)
close(0x4)
acct(&(0x7f0000000000)='./bus\x00')
acct(0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[], 0xa4}}, 0x4)
listen(0xffffffffffffffff, 0x5)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0, 0x0)
r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
syz_ublk_add_dev(r7, r5, r6, 0x0, 0x0, &(0x7f0000000440)=<r8=>0x0)
syz_ublk_setup_queues(r7, r8, 0x0, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0)

21m21.113317424s ago: executing program 2 (id=633):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x178)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345)
r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil)
fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x200a7a)
sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x4)
r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019580)=0x410000002)
syz_open_procfs(0x0, &(0x7f00000195c0)='net/tcp6\x00')
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x11, 0x5, 0x3, 0x0)
mount(0x0, 0x0, 0x0, 0x100054, 0x0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000019600), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000019640)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b)
mount(&(0x7f00000196c0)=@filename='mtd0\x00', &(0x7f0000019700)='./file0\x00', &(0x7f0000019740)='jffs2\x00', 0x800040, 0x0)
chdir(&(0x7f0000019780)='./file0\x00')
creat(&(0x7f00000197c0)='./file0\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000019800)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000019840)='./proc\x00', &(0x7f0000019880)='proc\x00', 0x0, 0x0)

21m20.267565992s ago: executing program 2 (id=635):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
r2 = socket$inet(0x2, 0x3, 0x4)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r4, {0x80000000}}, './cifs\x00'})
bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10)
listen(r4, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cifs\x00', 0x0)
mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00')
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r7, 0xc0405519, &(0x7f0000000100)={0x5, 0x4, 0x8, 0x7, 'syz1\x00', 0xffff})
write(r6, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000001c0), 0x0)
close_range(r3, r3, 0x2)

21m14.752730162s ago: executing program 2 (id=629):
mmap(&(0x7f00006ce000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xee)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000019180)={0x0, {}, 0x0, {}, 0x2000004, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe140f580000dfff0000080000040031623e1a0000000008", [0x7a, 0xd]})
mkdir(&(0x7f0000019240)='dir0\x00', 0x2ba)
mount(0x0, &(0x7f0000019280)='dir0\x00', &(0x7f00000192c0)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000019300)='dir0/tracing_on\x00', 0x1, 0x0)
setxattr$security_capability(&(0x7f0000019340)='./file0\x00', &(0x7f0000019380), 0x0, 0x0, 0x3)
write$binfmt_format(r4, &(0x7f00000193c0)='1\x00', 0x2)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000019400)={0x1, 0x1, 0x1000, 0x7, 0x0, 0x3b, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000019480), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000194c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000019500)='./dev\x00', &(0x7f0000019540)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000019580)='./mnt\x00', 0x1ff)
mount(&(0x7f00000195c0)=@filename='./dev/sda1\x00', &(0x7f0000019600)='./mnt\x00', &(0x7f0000019640)='ext4\x00', 0x8410, 0x0)
setxattr$system_posix_acl(&(0x7f0000019680)='./mnt\x00', &(0x7f00000196c0)='system.posix_acl_default\x00', &(0x7f0000019700)={{}, {0x1, 0x1}, [{}], {}, [], {}, {0x20, 0x5}}, 0x2c, 0x2)

21m12.776135474s ago: executing program 2 (id=630):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000300), 0x19a, 0x0)
recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netlink\x00')
preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000540)=""/245, 0xf5}, {0x0}], 0x2, 0x162, 0xb)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt(r5, 0x6, 0x23, 0x0, &(0x7f00000006c0))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/syz0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x103a42, 0x70)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x61)
mlockall(0x7)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000007c0)='pagemap\x00')
read$eventfd(r6, &(0x7f0000000800), 0x8)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
sched_setaffinity(r1, 0xffffffffffffff8d, &(0x7f0000000440)=0x5)

20m56.162464131s ago: executing program 36 (id=630):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000300), 0x19a, 0x0)
recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netlink\x00')
preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000540)=""/245, 0xf5}, {0x0}], 0x2, 0x162, 0xb)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt(r5, 0x6, 0x23, 0x0, &(0x7f00000006c0))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/syz0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x103a42, 0x70)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x61)
mlockall(0x7)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000007c0)='pagemap\x00')
read$eventfd(r6, &(0x7f0000000800), 0x8)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
sched_setaffinity(r1, 0xffffffffffffff8d, &(0x7f0000000440)=0x5)

16m6.684844542s ago: executing program 7 (id=766):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0)
faccessat2(r0, &(0x7f0000000040)='\x00', 0x2, 0x1200)
unshare(0x8040480)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4cc05e77d1228d31, 0xa57, 0x1}}, 0x20)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000004c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000007c0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000840), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000880), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94)
r5 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f00000009c0)={&(0x7f0000000a00)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c8ac)
setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000a40), 0x24)
r6 = syz_open_dev$vim2m(0x0, 0x40000000e, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000a80)={0x3e, 0x2, 0x457f1c9146f8f874, "464905e100000000000000007f00000000000000000000000000000000000100", 0x584e4f53})
close(r5)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000ac0)={0x2, 0x0, @loopback}, 0x10)

16m2.441013047s ago: executing program 7 (id=767):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x23}}}}}}]}, 0x48}}, 0x24008000)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000200)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
unshare(0x26020480)
pselect6(0x40, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x3}, 0x0, &(0x7f00000002c0)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f0000000340)={0x0, 0x3938700}, 0x0)
pipe(&(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
unshare(0x400)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000680), 0x366, 0x10, &(0x7f00000006c0), 0x1dd}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xf, 0x10000, 0x4, 0x12, 0x800, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)={@map=r8, r7, 0x26}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)={@map=r8, r7, 0x5}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r6)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000008c0)={r9, &(0x7f0000000900), 0x0}, 0x20)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x2c, r11, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40408c0}, 0x80)
sendmsg$SMC_PNETID_GET(r3, 0x0, 0x8081)
ioctl$int_in(r5, 0x5452, &(0x7f0000000a40)=0x22c00000000)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002140)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
read$FUSE(r1, &(0x7f000001b140)={0x2020}, 0x2020)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@gettaction={0x18, 0x32, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x804)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)

15m52.369181516s ago: executing program 7 (id=770):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x70, &(0x7f0000000680)={0x70, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}, {0x0, 0x89, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffe}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x80000000}, &(0x7f0000001c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200, 0x0, 0x0, 0x2f6}}], 0x1, &(0x7f0000000900)={0x2e, 0x66, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x0, 0x6a, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=<r8=>0x0)
nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40))
r9 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0))
pread64$ublk_bdev(0xffffffffffffffff, &(0x7f0000005000)=""/4096, 0x1000, 0x0)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000001b00)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10)
r11 = socket$tipc(0x1e, 0x5, 0x0)
r12 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r12, &(0x7f0000001b40)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r12, &(0x7f0000001b80)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
bind$tipc(r11, &(0x7f0000001bc0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10)
r13 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r13, &(0x7f0000001c00)={&(0x7f0000001c40)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000800}, 0x20000051)
syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}})
socket$packet(0x11, 0x3, 0x300)
r14 = syz_open_dev$sg(&(0x7f0000001f00), 0x0, 0x401)
write$tun(r14, &(0x7f0000001f40)=ANY=[@ANYBLOB="0022891424ae", @ANYRES64=r14], 0xb2)
io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0)

15m50.184590087s ago: executing program 7 (id=773):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000192c0), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000019300)={0x3f})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
write$uinput_user_dev(r4, &(0x7f0000019340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c)
r5 = openat$binfmt_format(0xffffff9c, &(0x7f00000197c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
write$binfmt_format(r5, &(0x7f0000019800)='-1\x00', 0x2)
ioctl$UI_DEV_CREATE(r4, 0x5501)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)

15m48.426579946s ago: executing program 7 (id=774):
r0 = socket$key(0xf, 0x3, 0x2)
syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000300), 0x1000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@subj_type={'subj_type', 0x3d, ':'}}]}})
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='dir0\x00', &(0x7f00000004c0)='tracefs\x00', 0x0, 0x0)
creat(&(0x7f00000000c0)='dir0/per_cpu/cpu0/trace\x00', 0x78)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x4, &(0x7f0000000080)=""/4, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x44}}, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
truncate(&(0x7f00000000c0)='./file0\x00', 0xffffffff7fffffff)
r4 = socket$igmp(0x2, 0x3, 0x2)
pipe2(&(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140))
fcntl$setpipe(r6, 0x407, 0x0)
read$FUSE(r5, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_ENTRY(r6, &(0x7f00000024c0)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x80000000, 0x9, 0x8, 0x0, 0x0, {0x1, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x0, 0x9, 0x9, 0x0, 0xa000, 0x0, 0x0, r8, 0x3, 0x2}}}, 0x90)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'veth1_vlan\x00', 0x1}, 0x18)
r9 = open_tree(r1, &(0x7f0000000240)='./file0\x00', 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f00000005c0), 0x8)
move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V1(r9, 0x80705864, &(0x7f0000000280))
r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r10, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
poll(&(0x7f0000000000)=[{r10, 0x141}], 0x1, 0x3)
sendmsg$key(r0, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x2, 0x18, 0x1, 0x0, 0x14, 0x0, 0x20024, 0x10, [@sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast2}}, @sadb_x_policy={0x8, 0x12, 0xfffe, 0x0, 0x0, 0x20004, 0x7, {0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d5}]}, 0xa0}}, 0x20000000)

15m41.069455916s ago: executing program 7 (id=776):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = msgget$private(0x0, 0x790)
msgrcv(r3, 0x0, 0x0, 0x3, 0x2000)
msgrcv(r3, 0x0, 0x0, 0x1, 0x3000)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0xa17}, 0x0, 0x0, 0x9, 0x5, 0xffffffff, 0x4, 0x6, 0x7, 0x85c3, 0x3})
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
fcntl$lock(r4, 0x5, 0x0)
r5 = socket(0x18, 0x0, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0)
keyctl$session_to_parent(0x12)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'})
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x2, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x4000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f00000005c0)={0x20, r9, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)

15m24.367400527s ago: executing program 37 (id=776):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = msgget$private(0x0, 0x790)
msgrcv(r3, 0x0, 0x0, 0x3, 0x2000)
msgrcv(r3, 0x0, 0x0, 0x1, 0x3000)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0xa17}, 0x0, 0x0, 0x9, 0x5, 0xffffffff, 0x4, 0x6, 0x7, 0x85c3, 0x3})
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
fcntl$lock(r4, 0x5, 0x0)
r5 = socket(0x18, 0x0, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0)
keyctl$session_to_parent(0x12)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'})
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x2, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x4000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f00000005c0)={0x20, r9, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)

12m31.970848284s ago: executing program 9 (id=1000):
syz_open_dev$dvb_frontend(&(0x7f00000005c0), 0x0, 0x40002)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')

12m31.714048216s ago: executing program 9 (id=1004):
r0 = socket(0x2, 0x3, 0xff)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='lo\x00')

12m27.4583521s ago: executing program 9 (id=1006):
ioperm(0x6, 0x8, 0x10001)
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)

12m25.580000241s ago: executing program 9 (id=1010):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4)
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4806}, 0x0)
listen(0xffffffffffffffff, 0xfffffffe)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

12m12.438504708s ago: executing program 9 (id=1042):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x130, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_NAT_DST={0x11c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x130}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r6)
sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4806}, 0x0)
listen(0xffffffffffffffff, 0xfffffffe)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x2)

12m6.509318991s ago: executing program 9 (id=1052):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4)
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4806}, 0x0)
listen(0xffffffffffffffff, 0xfffffffe)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

12m6.272929272s ago: executing program 8 (id=1055):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400000002060104000000000000000000000000050005000a000300050004000000000010000300686173683a69702c6d61630005000100070000000c00078008001240000009000900020073797a31"], 0x54}}, 0x0)

12m5.840983319s ago: executing program 8 (id=1057):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

12m1.234857404s ago: executing program 8 (id=1063):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x130, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_NAT_DST={0x11c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x130}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r6)
sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4806}, 0x0)
listen(0xffffffffffffffff, 0xfffffffe)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x2)

11m59.974239179s ago: executing program 8 (id=1068):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
creat(0x0, 0x175)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84)
close(0x4)
acct(&(0x7f0000000000)='./bus\x00')
acct(0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[], 0xa4}}, 0x4)
listen(0xffffffffffffffff, 0x5)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0, 0x0)
r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
syz_ublk_add_dev(r7, r5, r6, 0x0, 0x0, &(0x7f0000000440)=<r8=>0x0)
syz_ublk_setup_queues(r7, r8, 0x0, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0)

11m51.939541036s ago: executing program 8 (id=1073):
fchmodat(0xffffffffffffff9c, &(0x7f00000007c0)='.\x00', 0xfffffffb)

11m51.6250987s ago: executing program 8 (id=1076):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x130, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_NAT_DST={0x11c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x130}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r6)
sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4806}, 0x0)
listen(0xffffffffffffffff, 0xfffffffe)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x2)

11m48.348865403s ago: executing program 38 (id=1052):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4)
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4806}, 0x0)
listen(0xffffffffffffffff, 0xfffffffe)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

11m33.587036857s ago: executing program 39 (id=1076):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x130, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_NAT_DST={0x11c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x130}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r6)
sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000500000014000180060001000a00000008000500010000004000028014000100000000000000000000000000000000010600020050000000080003000000000008000400010000000800050000000000080006000000000023a02fad66ec53a7c463059f69ad23d3d25fad55aefe1a232b9abac427fa1aa2ae838ea39ce4c09eafcdd7e75685b38ce373f22dde79cc86fd2f03a02d19fc184ee9031661cc728bb96e568b4e58172a7a72cba5dcc2d2958b4acfa85bf05ef489daf844ce4506ed799a43e575b89784b7e5de83826a314ad629f84ba2c1c0be566870c418b32ae30f5473639b569c1d3b7f729f7b4aafcc24b5e0c1fc"], 0x68}, 0x1, 0x0, 0x0, 0x4806}, 0x0)
listen(0xffffffffffffffff, 0xfffffffe)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x2)

56.627037455s ago: executing program 5 (id=2136):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

56.296982046s ago: executing program 5 (id=2138):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x1, 0xb2, 0x5, 0x2}, 0x9c)
gettimeofday(0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x1b7c, &(0x7f0000000440)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000740)=@assoc_value, &(0x7f0000000780)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f00000007c0)='.\x00', 0xfffffffb)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x2)
mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x200000, 0x0)

51.463612616s ago: executing program 5 (id=2141):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0)

51.073333066s ago: executing program 5 (id=2142):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

50.90551333s ago: executing program 5 (id=2144):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000980)=0x7e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e)

50.707430656s ago: executing program 6 (id=2145):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x1, 0xb2, 0x5, 0x2}, 0x9c)
gettimeofday(0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x1, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x1b7c, &(0x7f0000000440)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000740)=@assoc_value, &(0x7f0000000780)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f00000007c0)='.\x00', 0xfffffffb)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x2)
mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x200000, 0x0)

44.190796192s ago: executing program 6 (id=2149):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

44.190603734s ago: executing program 5 (id=2150):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3ff)
sendfile(r0, r1, 0x0, 0x10ffff)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x0, 0x483aa011, 0x8, 0xfffff801, 0x15, "000000000000f00a00"})

43.96784015s ago: executing program 40 (id=2150):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3ff)
sendfile(r0, r1, 0x0, 0x10ffff)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x0, 0x483aa011, 0x8, 0xfffff801, 0x15, "000000000000f00a00"})

40.777785578s ago: executing program 6 (id=2156):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='27', 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000540)={0x80000001, 0x1, 0x4})

40.315203595s ago: executing program 6 (id=2158):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x84000, 0x0)

39.765215867s ago: executing program 6 (id=2159):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14)
write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {0x1, 0x1, 0x1, 0x1}, 0x1, [0xfa, 0x21, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200a, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8008000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x1, 0x7], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000140)={{}, 0x14, 0x1}, 0x18)
write$input_event(r0, &(0x7f0000000180), 0x18)

38.923109437s ago: executing program 6 (id=2161):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000880)={0x1, &(0x7f0000000900)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl(r2, 0x4048aecb, &(0x7f0000000880))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

37.810775896s ago: executing program 41 (id=2161):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000880)={0x1, &(0x7f0000000900)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl(r2, 0x4048aecb, &(0x7f0000000880))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.534931795s ago: executing program 4 (id=2191):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffff80900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="140000000a0a0101"], 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4800)

4.339109037s ago: executing program 4 (id=2192):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="000a09000000090902", @ANYRES16], 0x0, 0x0, 0x0}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000001ac0), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000001b00)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001b40)={0xf0f041, 0x800000, '\x00', @ptr}})

2.626168216s ago: executing program 4 (id=2193):
connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffe49}, 0x10)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x3dd8, 0x1f480, 0x2, 0x325})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84)
io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)

1.19901043s ago: executing program 4 (id=2194):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000940)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002080)="c60b96bd", 0x4}], 0x1}}], 0x2, 0x8020)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="0e"], 0xa)

125.156361ms ago: executing program 4 (id=2195):
mkdirat(0xffffffffffffff9c, &(0x7f00000020c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000002100)='./proc\x00', &(0x7f0000002140)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f00000021c0)='7', 0x1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)

0s ago: executing program 4 (id=2196):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000026c0)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000002700)='./debug\x00', &(0x7f0000002780)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000027c0)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0)
write(r1, &(0x7f0000002800)='b', 0x1)

kernel console output (not intermixed with test programs):

 1898.786377][   T13] hsr_slave_1: left promiscuous mode
[ 1898.789324][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1898.790347][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1904.100063][T15429] input: syz0 as /devices/virtual/input/input64
[ 1904.237043][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1904.434323][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1906.801691][T11417] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1906.971059][T11417] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1906.972234][T11417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1907.030834][T11417] usb 5-1: config 0 descriptor??
[ 1907.359325][T11417] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1910.461689][   T13] bridge_slave_1: left allmulticast mode
[ 1910.461719][   T13] bridge_slave_1: left promiscuous mode
[ 1910.461922][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1910.476508][   T13] bridge_slave_0: left allmulticast mode
[ 1910.476533][   T13] bridge_slave_0: left promiscuous mode
[ 1910.476719][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1912.239414][T11417] [drm:udl_init] *ERROR* Selecting channel failed
[ 1912.484237][T15483] Bluetooth: MGMT ver 1.23
[ 1913.168264][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1913.222371][T15498] input: syz0 as /devices/virtual/input/input65
[ 1913.344888][T15498] input: failed to attach handler leds to device input65, error: -6
[ 1913.348136][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1913.368779][   T13] bond0 (unregistering): Released all slaves
[ 1913.435147][T15155] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1913.435235][T15155] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1913.435393][T15155] bridge_slave_0: entered allmulticast mode
[ 1913.437409][T15155] bridge_slave_0: entered promiscuous mode
[ 1913.444545][ T5248] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1913.498229][T15155] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1913.498333][T15155] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1913.498532][T15155] bridge_slave_1: entered allmulticast mode
[ 1913.513986][T15155] bridge_slave_1: entered promiscuous mode
[ 1914.046021][T15509] loop9: detected capacity change from 0 to 7
[ 1914.152984][T15509] Dev loop9: unable to read RDB block 7
[ 1914.153059][T15509]  loop9: AHDI p1
[ 1914.153077][T15509] loop9: partition table partially beyond EOD, truncated
[ 1914.175904][T15155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1914.382244][T11417] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1
[ 1914.382266][T11417] [drm] Initialized udl on minor 1
[ 1914.469831][T15155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1919.327955][T11417] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1919.580241][T11417] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1919.978358][T11417] usb 5-1: USB disconnect, device number 20
[ 1920.719729][T15241] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1920.719824][T15241] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1920.719964][T15241] bridge_slave_0: entered allmulticast mode
[ 1920.748050][T15241] bridge_slave_0: entered promiscuous mode
[ 1925.538112][   T13] hsr_slave_0: left promiscuous mode
[ 1925.575139][   T13] hsr_slave_1: left promiscuous mode
[ 1925.576374][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1925.604841][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1926.086649][T15560] FAULT_INJECTION: forcing a failure.
[ 1926.086649][T15560] name failslab, interval 1, probability 5, space 0, times 9994
[ 1926.086681][T15560] CPU: 0 UID: 0 PID: 15560 Comm: syz.6.1927 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1926.086726][T15560] Tainted: [L]=SOFTLOCKUP
[ 1926.086732][T15560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1926.086741][T15560] Call Trace:
[ 1926.086747][T15560]  <TASK>
[ 1926.086754][T15560]  dump_stack_lvl+0xe8/0x150
[ 1926.086783][T15560]  should_fail_ex+0x46b/0x600
[ 1926.086815][T15560]  should_failslab+0xa8/0x100
[ 1926.086834][T15560]  __kmalloc_cache_noprof+0xa1/0x680
[ 1926.086859][T15560]  ? shmem_init_fs_context+0x54/0x290
[ 1926.086880][T15560]  ? shmem_init_fs_context+0x54/0x290
[ 1926.086907][T15560]  shmem_init_fs_context+0x54/0x290
[ 1926.086927][T15560]  ? devtmpfs_init_fs_context+0xe/0x70
[ 1926.086951][T15560]  devtmpfs_init_fs_context+0x16/0x70
[ 1926.086973][T15560]  alloc_fs_context+0x9a3/0xd00
[ 1926.087003][T15560]  __se_sys_fsopen+0xa5/0x2c0
[ 1926.087020][T15560]  do_syscall_64+0x166/0x520
[ 1926.087056][T15560]  ? trace_irq_disable+0x3b/0x140
[ 1926.087077][T15560]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1926.087092][T15560]  ? clear_bhb_loop+0x70/0xc0
[ 1926.087112][T15560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1926.087127][T15560] RIP: 0033:0x7f710d74e559
[ 1926.087140][T15560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1926.087153][T15560] RSP: 002b:00007f710b9a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[ 1926.087169][T15560] RAX: ffffffffffffffda RBX: 00007f710d9d5fa0 RCX: 00007f710d74e559
[ 1926.087181][T15560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140
[ 1926.087190][T15560] RBP: 00007f710d7e5ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1926.087200][T15560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1926.087209][T15560] R13: 00007f710d9d6038 R14: 00007f710d9d5fa0 R15: 00007fff8dae7378
[ 1926.087232][T15560]  </TASK>
[ 1926.562090][ T9033] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1926.605098][ T9033] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1926.614409][ T9033] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1926.616107][ T9033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1926.626894][ T9033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1927.140274][T15576] FAULT_INJECTION: forcing a failure.
[ 1927.140274][T15576] name failslab, interval 1, probability 5, space 0, times 9993
[ 1927.140306][T15576] CPU: 0 UID: 0 PID: 15576 Comm: syz.4.1932 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1927.140328][T15576] Tainted: [L]=SOFTLOCKUP
[ 1927.140335][T15576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1927.140344][T15576] Call Trace:
[ 1927.140351][T15576]  <TASK>
[ 1927.140358][T15576]  dump_stack_lvl+0xe8/0x150
[ 1927.140388][T15576]  should_fail_ex+0x46b/0x600
[ 1927.140420][T15576]  should_failslab+0xa8/0x100
[ 1927.140438][T15576]  ? prepare_creds+0x30/0x820
[ 1927.140457][T15576]  kmem_cache_alloc_noprof+0x9e/0x690
[ 1927.140485][T15576]  ? prepare_creds+0x30/0x820
[ 1927.140508][T15576]  prepare_creds+0x30/0x820
[ 1927.140530][T15576]  __sys_setfsgid+0xcd/0x370
[ 1927.140557][T15576]  do_syscall_64+0x166/0x520
[ 1927.140581][T15576]  ? trace_irq_disable+0x3b/0x140
[ 1927.140605][T15576]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1927.140622][T15576]  ? clear_bhb_loop+0x70/0xc0
[ 1927.140642][T15576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1927.140658][T15576] RIP: 0033:0x7f71f0d2e559
[ 1927.140680][T15576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1927.140694][T15576] RSP: 002b:00007f71eef86028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b
[ 1927.140712][T15576] RAX: ffffffffffffffda RBX: 00007f71f0fb5fa0 RCX: 00007f71f0d2e559
[ 1927.140725][T15576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00
[ 1927.140735][T15576] RBP: 00007f71f0dc5ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1927.140745][T15576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1927.140756][T15576] R13: 00007f71f0fb6038 R14: 00007f71f0fb5fa0 R15: 00007fff35a6b7b8
[ 1927.140782][T15576]  </TASK>
[ 1927.331045][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1927.374888][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1927.453558][T15580] FAULT_INJECTION: forcing a failure.
[ 1927.453558][T15580] name failslab, interval 1, probability 5, space 0, times 9992
[ 1927.453602][T15580] CPU: 0 UID: 0 PID: 15580 Comm: syz.4.1934 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1927.453625][T15580] Tainted: [L]=SOFTLOCKUP
[ 1927.453631][T15580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1927.453642][T15580] Call Trace:
[ 1927.453648][T15580]  <TASK>
[ 1927.453654][T15580]  dump_stack_lvl+0xe8/0x150
[ 1927.453683][T15580]  should_fail_ex+0x46b/0x600
[ 1927.453715][T15580]  should_failslab+0xa8/0x100
[ 1927.453734][T15580]  __kmalloc_node_track_caller_noprof+0xfb/0x7b0
[ 1927.453769][T15580]  ? key_alloc+0x352/0xfe0
[ 1927.453785][T15580]  ? key_alloc+0x352/0xfe0
[ 1927.453806][T15580]  kmemdup_noprof+0x2b/0x70
[ 1927.453826][T15580]  key_alloc+0x352/0xfe0
[ 1927.453853][T15580]  keyring_alloc+0x45/0xb0
[ 1927.453876][T15580]  lookup_user_key+0x428/0x1150
[ 1927.453898][T15580]  ? __pfx_lookup_user_key+0x10/0x10
[ 1927.453917][T15580]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[ 1927.453942][T15580]  ? strncpy_from_user+0x150/0x2c0
[ 1927.453970][T15580]  __se_sys_add_key+0x315/0x420
[ 1927.453995][T15580]  ? __pfx___se_sys_add_key+0x10/0x10
[ 1927.454025][T15580]  ? __x64_sys_add_key+0x20/0xc0
[ 1927.454049][T15580]  do_syscall_64+0x166/0x520
[ 1927.454072][T15580]  ? trace_irq_disable+0x3b/0x140
[ 1927.454094][T15580]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1927.454110][T15580]  ? clear_bhb_loop+0x70/0xc0
[ 1927.454129][T15580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1927.454145][T15580] RIP: 0033:0x7f71f0d2e559
[ 1927.454159][T15580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1927.454173][T15580] RSP: 002b:00007f71eef86028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 1927.454189][T15580] RAX: ffffffffffffffda RBX: 00007f71f0fb5fa0 RCX: 00007f71f0d2e559
[ 1927.454201][T15580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0
[ 1927.454211][T15580] RBP: 00007f71f0dc5ab8 R08: ffffffffffffffff R09: 0000000000000000
[ 1927.454221][T15580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1927.454231][T15580] R13: 00007f71f0fb6038 R14: 00007f71f0fb5fa0 R15: 00007fff35a6b7b8
[ 1927.454255][T15580]  </TASK>
[ 1927.651098][T15268] Bluetooth: hci0: Zero size dump init pkt
[ 1927.863997][T15241] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1927.864140][T15241] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1927.864266][T15241] bridge_slave_1: entered allmulticast mode
[ 1927.868262][T15241] bridge_slave_1: entered promiscuous mode
[ 1928.007912][T15572] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1931'.
[ 1928.329805][T15241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1928.362688][T15241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1928.519369][T15595] random: crng reseeded on system resumption
[ 1928.681859][ T6113] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1928.839538][ T9243] kernel read not supported for file /kmsg (pid: 9243 comm: kworker/0:8)
[ 1928.922475][T15241] team0: Port device team_slave_0 added
[ 1928.926648][ T6113] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[ 1928.929345][ T6113] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1928.929383][ T6113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1928.931459][T15268] Bluetooth: hci4: command tx timeout
[ 1928.963443][T15241] team0: Port device team_slave_1 added
[ 1928.966022][T15595] FAULT_INJECTION: forcing a failure.
[ 1928.966022][T15595] name failslab, interval 1, probability 5, space 0, times 9991
[ 1928.966097][T15595] CPU: 0 UID: 0 PID: 15595 Comm: syz.6.1938 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1928.966120][T15595] Tainted: [L]=SOFTLOCKUP
[ 1928.966127][T15595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1928.966137][T15595] Call Trace:
[ 1928.966143][T15595]  <TASK>
[ 1928.966150][T15595]  dump_stack_lvl+0xe8/0x150
[ 1928.966179][T15595]  should_fail_ex+0x46b/0x600
[ 1928.966210][T15595]  should_failslab+0xa8/0x100
[ 1928.966230][T15595]  __kmalloc_cache_noprof+0xa1/0x680
[ 1928.966256][T15595]  ? memory_bm_create+0x131/0xf70
[ 1928.966275][T15595]  ? memory_bm_create+0x131/0xf70
[ 1928.966299][T15595]  memory_bm_create+0x131/0xf70
[ 1928.966319][T15595]  ? __kasan_kmalloc+0x93/0xb0
[ 1928.966336][T15595]  ? __kmalloc_cache_noprof+0x3d5/0x680
[ 1928.966360][T15595]  ? create_basic_memory_bitmaps+0x81/0x360
[ 1928.966379][T15595]  ? create_basic_memory_bitmaps+0x81/0x360
[ 1928.966404][T15595]  create_basic_memory_bitmaps+0x98/0x360
[ 1928.966429][T15595]  snapshot_open+0x1b0/0x290
[ 1928.966453][T15595]  ? __pfx_snapshot_open+0x10/0x10
[ 1928.966475][T15595]  misc_open+0x2de/0x350
[ 1928.966499][T15595]  chrdev_open+0x4dc/0x600
[ 1928.966517][T15595]  ? __pfx_chrdev_open+0x10/0x10
[ 1928.966547][T15595]  ? __pfx_chrdev_open+0x10/0x10
[ 1928.966561][T15595]  do_dentry_open+0x849/0x1420
[ 1928.966586][T15595]  vfs_open+0x3b/0x350
[ 1928.966601][T15595]  ? path_openat+0x16a9/0x20a0
[ 1928.966627][T15595]  path_openat+0x16c4/0x20a0
[ 1928.966665][T15595]  do_file_open+0x23e/0x4a0
[ 1928.966712][T15595]  ? __pfx_do_file_open+0x10/0x10
[ 1928.966755][T15595]  ? alloc_fd+0x654/0x6d0
[ 1928.966783][T15595]  do_sys_openat2+0x115/0x200
[ 1928.966801][T15595]  ? __se_sys_futex+0x3a8/0x450
[ 1928.966819][T15595]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1928.966841][T15595]  ? rcu_is_watching+0x16/0xb0
[ 1928.966861][T15595]  __x64_sys_openat+0x138/0x170
[ 1928.966884][T15595]  do_syscall_64+0x166/0x520
[ 1928.966908][T15595]  ? trace_irq_disable+0x3b/0x140
[ 1928.966931][T15595]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1928.966948][T15595]  ? clear_bhb_loop+0x70/0xc0
[ 1928.966971][T15595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1928.966988][T15595] RIP: 0033:0x7f710d74e559
[ 1928.967003][T15595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1928.967017][T15595] RSP: 002b:00007f710b9a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1928.967035][T15595] RAX: ffffffffffffffda RBX: 00007f710d9d5fa0 RCX: 00007f710d74e559
[ 1928.967047][T15595] RDX: 0000000000000081 RSI: 0000200000000f00 RDI: ffffffffffffff9c
[ 1928.967058][T15595] RBP: 00007f710d7e5ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1928.967068][T15595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1928.967078][T15595] R13: 00007f710d9d6038 R14: 00007f710d9d5fa0 R15: 00007fff8dae7378
[ 1928.967104][T15595]  </TASK>
[ 1929.021986][ T6113] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[ 1929.022181][ T6113] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81
[ 1929.022229][ T6113] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1
[ 1929.069617][ T6113] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[ 1929.069689][ T6113] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[ 1929.092735][ T6113] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1929.189044][ T6113] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[ 1929.189107][ T6113] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[ 1929.309735][ T6113] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1929.361452][T15602] device-mapper: ioctl: Unable to rename non-existent device,  to V¶
[ 1933.810229][T15268] Bluetooth: hci4: command tx timeout
[ 1934.012422][   T13] bridge_slave_1: left allmulticast mode
[ 1934.012450][   T13] bridge_slave_1: left promiscuous mode
[ 1934.012637][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1934.161769][ T6113] usb 6-1: USB disconnect, device number 28
[ 1934.197041][   T13] bridge_slave_0: left allmulticast mode
[ 1934.197067][   T13] bridge_slave_0: left promiscuous mode
[ 1934.197245][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1934.372010][ T6113] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1934.419237][ T6113] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1934.552152][ T6113] keyspan 6-1:1.0: device disconnected
[ 1935.013346][T15268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1935.065780][T15268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1935.070790][T15268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1935.082545][T15268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1935.097975][T15268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1935.574512][T15631] loop9: detected capacity change from 0 to 255852544
[ 1935.608420][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1935.708681][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1935.721391][   T13] bond0 (unregistering): Released all slaves
[ 1935.763874][T15241] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1935.763888][T15241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1935.763909][T15241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1936.004941][T15565] rxe_eth0 speed is unknown, defaulting to 1000
[ 1936.048746][T15268] Bluetooth: hci4: command tx timeout
[ 1937.679495][T15268] Bluetooth: hci5: command tx timeout
[ 1938.246458][ T5248] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1938.286118][T15268] Bluetooth: hci4: command tx timeout
[ 1939.298597][T15678] size and base must be multiples of 4 kiB
[ 1939.298616][T15678] CPU: 0 UID: 0 PID: 15678 Comm: syz.6.1957 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1939.298638][T15678] Tainted: [L]=SOFTLOCKUP
[ 1939.298645][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1939.298655][T15678] Call Trace:
[ 1939.298661][T15678]  <TASK>
[ 1939.298668][T15678]  dump_stack_lvl+0xe8/0x150
[ 1939.298709][T15678]  mtrr_add+0xd5/0x100
[ 1939.298734][T15678]  mtrr_ioctl+0xca4/0x13c0
[ 1939.298748][T15678]  ? smk_tskacc+0x2fb/0x370
[ 1939.298771][T15678]  ? __pfx_mtrr_ioctl+0x10/0x10
[ 1939.298783][T15678]  ? smack_file_ioctl+0x265/0x370
[ 1939.298822][T15678]  ? __fget_files+0x2a/0x420
[ 1939.298840][T15678]  ? __fget_files+0x3a8/0x420
[ 1939.298857][T15678]  ? __fget_files+0x2a/0x420
[ 1939.298874][T15678]  ? __pfx_mtrr_ioctl+0x10/0x10
[ 1939.298888][T15678]  proc_reg_unlocked_ioctl+0x1df/0x2d0
[ 1939.298914][T15678]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[ 1939.298938][T15678]  __se_sys_ioctl+0xff/0x170
[ 1939.298963][T15678]  do_syscall_64+0x166/0x520
[ 1939.299004][T15678]  ? trace_irq_disable+0x3b/0x140
[ 1939.299026][T15678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1939.299043][T15678]  ? clear_bhb_loop+0x70/0xc0
[ 1939.299062][T15678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1939.299078][T15678] RIP: 0033:0x7f710d74e559
[ 1939.299092][T15678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1939.299106][T15678] RSP: 002b:00007f710b9a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1939.299123][T15678] RAX: ffffffffffffffda RBX: 00007f710d9d5fa0 RCX: 00007f710d74e559
[ 1939.299135][T15678] RDX: 0000200000000a00 RSI: 00000000400c4d01 RDI: 0000000000000003
[ 1939.299145][T15678] RBP: 00007f710d7e5ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1939.299155][T15678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1939.299164][T15678] R13: 00007f710d9d6038 R14: 00007f710d9d5fa0 R15: 00007fff8dae7378
[ 1939.299189][T15678]  </TASK>
[ 1939.932993][T15268] Bluetooth: hci5: command tx timeout
[ 1940.089381][T15625] rxe_eth0 speed is unknown, defaulting to 1000
[ 1940.506973][ T9243] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1940.703462][ T9243] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 1940.704951][ T9243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1940.966617][T11417] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[ 1941.142101][T11417] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1941.142593][T11417] usb 5-1: not running at top speed; connect to a high speed hub
[ 1941.142620][T11417] usb 5-1: New USB device found, idVendor=0582, idProduct=044c, bcdDevice= 0.40
[ 1941.145575][T11417] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1941.145593][T11417] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1941.150233][T11417] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1941.150251][T11417] usb 5-1: Product: syz
[ 1941.150261][T11417] usb 5-1: Manufacturer: syz
[ 1941.150271][T11417] usb 5-1: SerialNumber: syz
[ 1941.560406][T11417] usb 5-1: unit 4 not found!
[ 1941.976178][ T5248] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1941.996682][ T9243] cxacru_cm: 4 callbacks suppressed
[ 1941.996701][ T9243] cxacru 6-1:1.0: wrong cm 0xa0 in response to cm 0x91
[ 1941.996793][ T9243] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5
[ 1941.996803][ T9243] ATM dev 0: usbatm_atm_init: atm_start failed: -5!
[ 1942.190087][T15268] Bluetooth: hci5: command tx timeout
[ 1942.389459][ T9243] cxacru 6-1:1.0: probe with driver cxacru failed with error -5
[ 1942.447849][ T9243] usb 6-1: USB disconnect, device number 29
[ 1942.589370][T11417] usb 5-1: USB disconnect, device number 21
[ 1943.208583][   T13] bridge_slave_1: left allmulticast mode
[ 1943.208611][   T13] bridge_slave_1: left promiscuous mode
[ 1943.208800][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1943.211462][   T13] bridge_slave_0: left allmulticast mode
[ 1943.211484][   T13] bridge_slave_0: left promiscuous mode
[ 1943.211650][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1943.229137][T15704] udevd[15704]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1943.509348][T11417] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1943.692580][T11417] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1943.695722][T11417] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1943.695745][T11417] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 128, using maximum allowed: 30
[ 1943.695769][T11417] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE
[ 1943.695787][T11417] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 128
[ 1943.701720][T11417] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1943.701739][T11417] usb 5-1: Product: syz
[ 1943.701749][T11417] usb 5-1: Manufacturer: syz
[ 1943.701760][T11417] usb 5-1: SerialNumber: syz
[ 1943.848603][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1943.874679][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1943.903637][   T13] bond0 (unregistering): Released all slaves
[ 1944.441048][T15268] Bluetooth: hci5: command tx timeout
[ 1949.238444][T11417] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS
[ 1949.238854][T11417] cdc_ncm 5-1:1.0: bind() failure
[ 1949.643654][T11417] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 1949.643707][T11417] cdc_ncm 5-1:1.1: bind() failure
[ 1949.728022][T11417] usb 5-1: USB disconnect, device number 22
[ 1954.370285][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 1955.553194][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1955.869128][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1955.921645][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1956.170325][T15775] overlayfs: overlapping lowerdir path
[ 1956.656692][ T5248] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1956.900828][T11417] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1956.967725][T15565] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1956.967810][T15565] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1956.967940][T15565] bridge_slave_0: entered allmulticast mode
[ 1956.971307][T15565] bridge_slave_0: entered promiscuous mode
[ 1957.040991][T15565] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1957.041094][T15565] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1957.041294][T15565] bridge_slave_1: entered allmulticast mode
[ 1957.046566][T15565] bridge_slave_1: entered promiscuous mode
[ 1957.089466][T11417] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1957.090581][T11417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1957.094801][T11417] usb 6-1: config 0 descriptor??
[ 1957.395439][T11417] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1957.800250][T15625] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1957.800335][T15625] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1957.800449][T15625] bridge_slave_0: entered allmulticast mode
[ 1957.804187][T15625] bridge_slave_0: entered promiscuous mode
[ 1958.061215][T15565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1958.084127][T15625] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1958.084214][T15625] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1958.084377][T15625] bridge_slave_1: entered allmulticast mode
[ 1958.255642][T11417] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1
[ 1958.255664][T11417] [drm] Initialized udl on minor 1
[ 1958.256912][T15625] bridge_slave_1: entered promiscuous mode
[ 1958.264926][T11417] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1958.318131][T15565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1958.479997][T11417] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[ 1958.639678][T11417] usb 6-1: USB disconnect, device number 30
[ 1959.080252][T15625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1959.096416][T15565] team0: Port device team_slave_0 added
[ 1959.114129][T15565] team0: Port device team_slave_1 added
[ 1959.188438][T15625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1959.724781][T15565] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1959.724796][T15565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1959.724827][T15565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1959.734774][T15625] team0: Port device team_slave_0 added
[ 1959.736200][T15565] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1959.736211][T15565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1959.736232][T15565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1959.848041][T15625] team0: Port device team_slave_1 added
[ 1959.971515][T11417] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1960.138057][T11417] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1960.139319][T11417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1960.170449][T11417] usb 6-1: config 0 descriptor??
[ 1960.206513][T15625] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1960.206526][T15625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1960.206544][T15625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1960.289900][T15565] hsr_slave_0: entered promiscuous mode
[ 1960.356302][T15565] hsr_slave_1: entered promiscuous mode
[ 1960.364399][T15565] debugfs: 'hsr0' already exists in 'hsr'
[ 1960.364420][T15565] Cannot create hsr debugfs directory
[ 1960.406196][T11417] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1960.431467][T15625] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1960.431481][T15625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1960.431502][T15625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1964.039489][T11417] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1
[ 1964.039509][T11417] [drm] Initialized udl on minor 1
[ 1964.105409][T11417] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1964.126238][T11417] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[ 1964.149019][T11417] usb 6-1: USB disconnect, device number 31
[ 1964.469025][T15625] hsr_slave_0: entered promiscuous mode
[ 1964.480241][T15625] hsr_slave_1: entered promiscuous mode
[ 1964.481016][T15625] debugfs: 'hsr0' already exists in 'hsr'
[ 1964.481036][T15625] Cannot create hsr debugfs directory
[ 1964.742658][T15826] FAULT_INJECTION: forcing a failure.
[ 1964.742658][T15826] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1964.742687][T15826] CPU: 0 UID: 0 PID: 15826 Comm: syz.4.1987 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1964.742709][T15826] Tainted: [L]=SOFTLOCKUP
[ 1964.742714][T15826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1964.742723][T15826] Call Trace:
[ 1964.742730][T15826]  <TASK>
[ 1964.742737][T15826]  dump_stack_lvl+0xe8/0x150
[ 1964.742764][T15826]  should_fail_ex+0x46b/0x600
[ 1964.742793][T15826]  prepare_alloc_pages+0x223/0x650
[ 1964.742813][T15826]  __alloc_frozen_pages_noprof+0x1a1/0x5c0
[ 1964.742831][T15826]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1964.742849][T15826]  ? __pfx_policy_nodemask+0x10/0x10
[ 1964.742873][T15826]  alloc_pages_mpol+0xd4/0x280
[ 1964.742893][T15826]  folio_alloc_mpol_noprof+0x3b/0x1e0
[ 1964.742912][T15826]  migrate_pages_batch+0x80c/0x43b0
[ 1964.742946][T15826]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[ 1964.742968][T15826]  ? __pfx_migrate_pages_batch+0x10/0x10
[ 1964.742987][T15826]  ? walk_pgd_range+0x1b1f/0x1c30
[ 1964.743031][T15826]  ? __pfx_walk_pgd_range+0x10/0x10
[ 1964.743059][T15826]  migrate_pages+0x1b96/0x2900
[ 1964.743087][T15826]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[ 1964.743114][T15826]  ? __pfx_migrate_pages+0x10/0x10
[ 1964.743130][T15826]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1964.743156][T15826]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1964.743181][T15826]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1964.743211][T15826]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1964.743234][T15826]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1964.743259][T15826]  __se_sys_mbind+0xe82/0x10e0
[ 1964.743281][T15826]  ? __pfx___se_sys_mbind+0x10/0x10
[ 1964.743303][T15826]  ? __se_sys_futex+0x3a8/0x450
[ 1964.743325][T15826]  ? rcu_is_watching+0x16/0xb0
[ 1964.743344][T15826]  ? __x64_sys_mbind+0x21/0xf0
[ 1964.743361][T15826]  do_syscall_64+0x166/0x520
[ 1964.743382][T15826]  ? trace_irq_disable+0x3b/0x140
[ 1964.743403][T15826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1964.743418][T15826]  ? clear_bhb_loop+0x70/0xc0
[ 1964.743436][T15826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1964.743451][T15826] RIP: 0033:0x7f71f0d2e559
[ 1964.743465][T15826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1964.743478][T15826] RSP: 002b:00007f71eef86028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1964.743493][T15826] RAX: ffffffffffffffda RBX: 00007f71f0fb5fa0 RCX: 00007f71f0d2e559
[ 1964.743504][T15826] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000
[ 1964.743522][T15826] RBP: 00007f71f0dc5ab8 R08: 0000000000000000 R09: 0000000000000002
[ 1964.743532][T15826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1964.743541][T15826] R13: 00007f71f0fb6038 R14: 00007f71f0fb5fa0 R15: 00007fff35a6b7b8
[ 1964.743566][T15826]  </TASK>
[ 1966.956795][T15867] FAULT_INJECTION: forcing a failure.
[ 1966.956795][T15867] name failslab, interval 1, probability 5, space 0, times 9990
[ 1966.956827][T15867] CPU: 0 UID: 0 PID: 15867 Comm: syz.5.1996 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1966.956849][T15867] Tainted: [L]=SOFTLOCKUP
[ 1966.956855][T15867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1966.956865][T15867] Call Trace:
[ 1966.956871][T15867]  <TASK>
[ 1966.956878][T15867]  dump_stack_lvl+0xe8/0x150
[ 1966.956908][T15867]  should_fail_ex+0x46b/0x600
[ 1966.956939][T15867]  should_failslab+0xa8/0x100
[ 1966.956956][T15867]  ? do_fcntl_add_lease+0xa1/0x480
[ 1966.956979][T15867]  kmem_cache_alloc_noprof+0x9e/0x690
[ 1966.957004][T15867]  ? do_fcntl_add_lease+0xa1/0x480
[ 1966.957031][T15867]  do_fcntl_add_lease+0xa1/0x480
[ 1966.957057][T15867]  ? __pfx_do_fcntl_add_lease+0x10/0x10
[ 1966.957081][T15867]  ? futex_wait+0x2a2/0x390
[ 1966.957110][T15867]  fcntl_setlease+0x126/0x180
[ 1966.957135][T15867]  ? __pfx_fcntl_setlease+0x10/0x10
[ 1966.957165][T15867]  do_fcntl+0x914/0x1a50
[ 1966.957192][T15867]  ? smack_file_fcntl+0x152/0x320
[ 1966.957215][T15867]  ? __pfx_do_fcntl+0x10/0x10
[ 1966.957238][T15867]  ? __pfx_smack_file_fcntl+0x10/0x10
[ 1966.957268][T15867]  ? __fget_files+0x2a/0x420
[ 1966.957292][T15867]  ? bpf_lsm_file_fcntl+0x9/0x20
[ 1966.957316][T15867]  __se_sys_fcntl+0xcb/0x160
[ 1966.957340][T15867]  do_syscall_64+0x166/0x520
[ 1966.957364][T15867]  ? trace_irq_disable+0x3b/0x140
[ 1966.957386][T15867]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1966.957402][T15867]  ? clear_bhb_loop+0x70/0xc0
[ 1966.957421][T15867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1966.957446][T15867] RIP: 0033:0x7f97c612e559
[ 1966.957461][T15867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1966.957475][T15867] RSP: 002b:00007f97c4386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[ 1966.957494][T15867] RAX: ffffffffffffffda RBX: 00007f97c63b5fa0 RCX: 00007f97c612e559
[ 1966.957506][T15867] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000003
[ 1966.957516][T15867] RBP: 00007f97c61c5ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1966.957526][T15867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1966.957536][T15867] R13: 00007f97c63b6038 R14: 00007f97c63b5fa0 R15: 00007ffd2a1078a8
[ 1966.957561][T15867]  </TASK>
[ 1969.865097][T15900] loop5: detected capacity change from 0 to 7
[ 1969.875765][T15900] Dev loop5: unable to read RDB block 7
[ 1969.875797][T15900]  loop5: unable to read partition table
[ 1969.875953][T15900] loop5: partition table beyond EOD, truncated
[ 1969.875966][T15900] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1970.459953][T11417] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1970.698813][T11417] usb 6-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00
[ 1970.727294][T11417] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1970.727325][T11417] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1970.727346][T11417] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1970.727386][T11417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1970.741921][T11417] usb 6-1: config 0 descriptor??
[ 1971.231328][T11417] hid-penmount 0003:14E1:6000.0008: nested delimiters
[ 1971.231346][T11417] hid-penmount 0003:14E1:6000.0008: item 0 4 2 10 parsing failed
[ 1971.236645][T11417] hid-penmount 0003:14E1:6000.0008: probe with driver hid-penmount failed with error -22
[ 1971.492209][T11417] usb 6-1: USB disconnect, device number 32
[ 1971.945681][T15928] FAULT_INJECTION: forcing a failure.
[ 1971.945681][T15928] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1971.945718][T15928] CPU: 0 UID: 0 PID: 15928 Comm: syz.6.2009 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1971.945741][T15928] Tainted: [L]=SOFTLOCKUP
[ 1971.945746][T15928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1971.945756][T15928] Call Trace:
[ 1971.945763][T15928]  <TASK>
[ 1971.945770][T15928]  dump_stack_lvl+0xe8/0x150
[ 1971.945799][T15928]  should_fail_ex+0x46b/0x600
[ 1971.945830][T15928]  _copy_from_user+0x2d/0xb0
[ 1971.945850][T15928]  kstrtouint_from_user+0xd6/0x180
[ 1971.945876][T15928]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1971.945907][T15928]  ? lock_acquire+0x115/0x350
[ 1971.945933][T15928]  proc_fail_nth_write+0x8e/0x210
[ 1971.945957][T15928]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1971.945998][T15928]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1971.946020][T15928]  vfs_write+0x29f/0xbb0
[ 1971.946046][T15928]  ? __pfx_vfs_write+0x10/0x10
[ 1971.946067][T15928]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1971.946091][T15928]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1971.946113][T15928]  ? mutex_lock_nested+0x152/0x1d0
[ 1971.946129][T15928]  ? fdget_pos+0x252/0x320
[ 1971.946154][T15928]  ksys_write+0x156/0x270
[ 1971.946176][T15928]  ? __pfx_ksys_write+0x10/0x10
[ 1971.946204][T15928]  do_syscall_64+0x166/0x520
[ 1971.946225][T15928]  ? trace_irq_disable+0x3b/0x140
[ 1971.946246][T15928]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1971.946261][T15928]  ? clear_bhb_loop+0x70/0xc0
[ 1971.946280][T15928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1971.946294][T15928] RIP: 0033:0x7f710d74e559
[ 1971.946308][T15928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1971.946321][T15928] RSP: 002b:00007f710b9a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1971.946338][T15928] RAX: ffffffffffffffda RBX: 00007f710d9d5fa0 RCX: 00007f710d74e559
[ 1971.946349][T15928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 1971.946362][T15928] RBP: 00007f710d7e5ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1971.946371][T15928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1971.946380][T15928] R13: 00007f710d9d6038 R14: 00007f710d9d5fa0 R15: 00007fff8dae7378
[ 1971.946404][T15928]  </TASK>
[ 1975.780976][T15969] FAULT_INJECTION: forcing a failure.
[ 1975.780976][T15969] name failslab, interval 1, probability 5, space 0, times 9989
[ 1975.781008][T15969] CPU: 0 UID: 0 PID: 15969 Comm: syz.5.2017 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1975.781031][T15969] Tainted: [L]=SOFTLOCKUP
[ 1975.781037][T15969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1975.781047][T15969] Call Trace:
[ 1975.781053][T15969]  <TASK>
[ 1975.781061][T15969]  dump_stack_lvl+0xe8/0x150
[ 1975.781091][T15969]  should_fail_ex+0x46b/0x600
[ 1975.781123][T15969]  should_failslab+0xa8/0x100
[ 1975.781143][T15969]  __kmalloc_noprof+0xfb/0x790
[ 1975.781168][T15969]  ? udp_init_sock+0x1a9/0x3c0
[ 1975.781188][T15969]  ? udp_init_sock+0x1a9/0x3c0
[ 1975.781214][T15969]  udp_init_sock+0x1a9/0x3c0
[ 1975.781239][T15969]  inet_create+0xd2c/0x1000
[ 1975.781257][T15969]  ? inet_create+0x9d/0x1000
[ 1975.781277][T15969]  __sock_create+0x4b3/0x9d0
[ 1975.781303][T15969]  __sys_socket+0xd6/0x1b0
[ 1975.781324][T15969]  __x64_sys_socket+0x7a/0x90
[ 1975.781343][T15969]  do_syscall_64+0x166/0x520
[ 1975.781368][T15969]  ? trace_irq_disable+0x3b/0x140
[ 1975.781391][T15969]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1975.781408][T15969]  ? clear_bhb_loop+0x70/0xc0
[ 1975.781428][T15969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1975.781444][T15969] RIP: 0033:0x7f97c612e559
[ 1975.781460][T15969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1975.781474][T15969] RSP: 002b:00007f97c4386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1975.781492][T15969] RAX: ffffffffffffffda RBX: 00007f97c63b5fa0 RCX: 00007f97c612e559
[ 1975.781504][T15969] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[ 1975.781514][T15969] RBP: 00007f97c61c5ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1975.781524][T15969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1975.781533][T15969] R13: 00007f97c63b6038 R14: 00007f97c63b5fa0 R15: 00007ffd2a1078a8
[ 1975.781559][T15969]  </TASK>
[ 1976.491809][T15976] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2019'.
[ 1977.326171][T15994] FAULT_INJECTION: forcing a failure.
[ 1977.326171][T15994] name failslab, interval 1, probability 5, space 0, times 9988
[ 1977.326200][T15994] CPU: 0 UID: 0 PID: 15994 Comm: syz.4.2025 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1977.326219][T15994] Tainted: [L]=SOFTLOCKUP
[ 1977.326224][T15994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1977.326233][T15994] Call Trace:
[ 1977.326240][T15994]  <TASK>
[ 1977.326247][T15994]  dump_stack_lvl+0xe8/0x150
[ 1977.326274][T15994]  should_fail_ex+0x46b/0x600
[ 1977.326301][T15994]  should_failslab+0xa8/0x100
[ 1977.326319][T15994]  __kmalloc_node_noprof+0xfd/0x7b0
[ 1977.326342][T15994]  ? load_msg+0x41/0x3b0
[ 1977.326358][T15994]  ? load_msg+0x41/0x3b0
[ 1977.326379][T15994]  load_msg+0x41/0x3b0
[ 1977.326400][T15994]  do_msgsnd+0x1a9/0x14f0
[ 1977.326420][T15994]  ? __pfx_do_futex+0x10/0x10
[ 1977.326439][T15994]  ? lock_acquire+0x115/0x350
[ 1977.326463][T15994]  ? __pfx_do_msgsnd+0x10/0x10
[ 1977.326484][T15994]  ? __might_fault+0xaf/0x130
[ 1977.326507][T15994]  ? __x64_sys_msgsnd+0xee/0x120
[ 1977.326528][T15994]  do_syscall_64+0x166/0x520
[ 1977.326548][T15994]  ? trace_irq_disable+0x3b/0x140
[ 1977.326567][T15994]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1977.326582][T15994]  ? clear_bhb_loop+0x70/0xc0
[ 1977.326599][T15994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1977.326612][T15994] RIP: 0033:0x7f71f0d2e559
[ 1977.326625][T15994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1977.326637][T15994] RSP: 002b:00007f71eef86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045
[ 1977.326658][T15994] RAX: ffffffffffffffda RBX: 00007f71f0fb5fa0 RCX: 00007f71f0d2e559
[ 1977.326668][T15994] RDX: 0000000000000008 RSI: 0000200000000580 RDI: 0000000000000000
[ 1977.326677][T15994] RBP: 00007f71f0dc5ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1977.326686][T15994] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000
[ 1977.326694][T15994] R13: 00007f71f0fb6038 R14: 00007f71f0fb5fa0 R15: 00007fff35a6b7b8
[ 1977.326716][T15994]  </TASK>
[ 1979.019684][T15565] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1980.108767][T15565] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1980.109780][T15565] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1982.311574][T15565] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1982.314526][T15565] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1982.526970][T16009] binder: 16008:16009 ioctl 40046205 0 returned -22
[ 1982.882572][T15565] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1982.918019][T15565] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1983.294866][T15565] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1984.285684][T16047] loop5: detected capacity change from 0 to 7
[ 1984.438720][T16047] Dev loop5: unable to read RDB block 7
[ 1984.438761][T16047]  loop5: unable to read partition table
[ 1984.438926][T16047] loop5: partition table beyond EOD, truncated
[ 1984.438952][T16047] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1985.286174][T16035] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1985.286306][T16035] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1985.785757][T16035] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1985.879171][T16035] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1985.879485][T16035] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1985.894509][T16035] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1987.296750][T16082] random: crng reseeded on system resumption
[ 1989.452679][T16082] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff]
[ 1989.452716][T16082] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[ 1989.452737][T16082] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[ 1989.457200][T16082] PM: hibernation: Basic memory bitmaps created
[ 1991.743127][T15268] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1991.849142][T16075] PM: hibernation: Basic memory bitmaps freed
[ 1992.340314][T15625] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1992.407866][ T9033] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1992.560092][ T9033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1992.563165][ T9033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1992.577025][ T9033] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1992.622044][ T9033] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1992.823983][T15625] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1992.856846][T15625] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1993.247963][T15625] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1993.295345][T15625] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1993.349444][T15625] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1993.359712][T15625] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1993.515647][T15625] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1993.692336][T16109] IPVS: persistence engine module ip_vs_pe_À not found
[ 1993.953092][T15268] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1995.084675][T15268] Bluetooth: hci0: command tx timeout
[ 1995.316604][T16139] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input67
[ 1996.205358][T15268] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1996.446295][T16088] rxe_eth0 speed is unknown, defaulting to 1000
[ 1997.338045][T15268] Bluetooth: hci0: command tx timeout
[ 1997.775616][T16158] FAULT_INJECTION: forcing a failure.
[ 1997.775616][T16158] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1997.775649][T16158] CPU: 0 UID: 0 PID: 16158 Comm: syz.5.2058 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1997.775672][T16158] Tainted: [L]=SOFTLOCKUP
[ 1997.775678][T16158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1997.775696][T16158] Call Trace:
[ 1997.775703][T16158]  <TASK>
[ 1997.775710][T16158]  dump_stack_lvl+0xe8/0x150
[ 1997.775742][T16158]  should_fail_ex+0x46b/0x600
[ 1997.775774][T16158]  _copy_from_user+0x2d/0xb0
[ 1997.775794][T16158]  oom_score_adj_write+0xd0/0x200
[ 1997.775820][T16158]  ? __pfx_oom_score_adj_write+0x10/0x10
[ 1997.775853][T16158]  ? __pfx_oom_score_adj_write+0x10/0x10
[ 1997.775889][T16158]  vfs_write+0x29f/0xbb0
[ 1997.775918][T16158]  ? __pfx_vfs_write+0x10/0x10
[ 1997.775942][T16158]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1997.775969][T16158]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1997.775997][T16158]  ? mutex_lock_nested+0x152/0x1d0
[ 1997.776015][T16158]  ? fdget_pos+0x252/0x320
[ 1997.776042][T16158]  ksys_write+0x156/0x270
[ 1997.776066][T16158]  ? __pfx_ksys_write+0x10/0x10
[ 1997.776098][T16158]  do_syscall_64+0x166/0x520
[ 1997.776122][T16158]  ? trace_irq_disable+0x3b/0x140
[ 1997.776145][T16158]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1997.776162][T16158]  ? clear_bhb_loop+0x70/0xc0
[ 1997.776182][T16158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1997.776198][T16158] RIP: 0033:0x7f97c612e559
[ 1997.776214][T16158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1997.776228][T16158] RSP: 002b:00007f97c4386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1997.776246][T16158] RAX: ffffffffffffffda RBX: 00007f97c63b5fa0 RCX: 00007f97c612e559
[ 1997.776259][T16158] RDX: 0000000000000012 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1997.776269][T16158] RBP: 00007f97c61c5ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1997.776279][T16158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1997.776289][T16158] R13: 00007f97c63b6038 R14: 00007f97c63b5fa0 R15: 00007ffd2a1078a8
[ 1997.776315][T16158]  </TASK>
[ 1999.003645][T16174] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2063'.
[ 1999.587564][T15268] Bluetooth: hci0: command tx timeout
[ 2001.029441][ T9033] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2001.088952][ T9033] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2001.116665][ T9033] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2001.117939][ T9033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2001.157914][ T9033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2001.840262][T15268] Bluetooth: hci0: command tx timeout
[ 2006.468305][T15268] Bluetooth: hci4: command tx timeout
[ 2006.743972][T16222] kvm: MWAIT instruction emulated as NOP!
[ 2006.809843][   T13] bridge_slave_1: left allmulticast mode
[ 2006.809871][   T13] bridge_slave_1: left promiscuous mode
[ 2006.810067][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2006.820846][   T13] bridge_slave_0: left allmulticast mode
[ 2006.820870][   T13] bridge_slave_0: left promiscuous mode
[ 2006.821045][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2007.498140][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2007.505450][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2007.514766][   T13] bond0 (unregistering): Released all slaves
[ 2007.587706][T16192] rxe_eth0 speed is unknown, defaulting to 1000
[ 2007.903242][T16088] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2007.903328][T16088] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2007.903451][T16088] bridge_slave_0: entered allmulticast mode
[ 2007.918049][T16088] bridge_slave_0: entered promiscuous mode
[ 2007.928308][T16088] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2007.935471][T16088] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2007.935605][T16088] bridge_slave_1: entered allmulticast mode
[ 2007.969658][T16088] bridge_slave_1: entered promiscuous mode
[ 2008.275112][T16088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2008.393684][T16088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2008.690571][ T9033] Bluetooth: hci4: command tx timeout
[ 2008.773523][T16088] team0: Port device team_slave_0 added
[ 2008.821343][T16088] team0: Port device team_slave_1 added
[ 2008.963605][T16255] FAULT_INJECTION: forcing a failure.
[ 2008.963605][T16255] name failslab, interval 1, probability 5, space 0, times 9987
[ 2008.963636][T16255] CPU: 0 UID: 0 PID: 16255 Comm: syz.5.2080 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2008.963659][T16255] Tainted: [L]=SOFTLOCKUP
[ 2008.963665][T16255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 2008.963676][T16255] Call Trace:
[ 2008.963682][T16255]  <TASK>
[ 2008.963689][T16255]  dump_stack_lvl+0xe8/0x150
[ 2008.963719][T16255]  should_fail_ex+0x46b/0x600
[ 2008.963751][T16255]  should_failslab+0xa8/0x100
[ 2008.963774][T16255]  __kmalloc_cache_noprof+0xa1/0x680
[ 2008.963801][T16255]  ? alloc_netdev_mqs+0xcb5/0x12c0
[ 2008.963826][T16255]  ? alloc_netdev_mqs+0xcb5/0x12c0
[ 2008.963858][T16255]  alloc_netdev_mqs+0xcb5/0x12c0
[ 2008.963889][T16255]  tun_set_iff+0x520/0xf20
[ 2008.963914][T16255]  __tun_chr_ioctl+0x7e8/0x1e70
[ 2008.963935][T16255]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 2008.963961][T16255]  ? __pfx___tun_chr_ioctl+0x10/0x10
[ 2008.963983][T16255]  ? __fget_files+0x2a/0x420
[ 2008.964003][T16255]  ? __fget_files+0x3a8/0x420
[ 2008.964022][T16255]  ? __fget_files+0x2a/0x420
[ 2008.964044][T16255]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 2008.964065][T16255]  ? __pfx_tun_chr_ioctl+0x10/0x10
[ 2008.964082][T16255]  __se_sys_ioctl+0xff/0x170
[ 2008.964109][T16255]  do_syscall_64+0x166/0x520
[ 2008.964134][T16255]  ? trace_irq_disable+0x3b/0x140
[ 2008.964156][T16255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2008.964173][T16255]  ? clear_bhb_loop+0x70/0xc0
[ 2008.964193][T16255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2008.964210][T16255] RIP: 0033:0x7f97c612e559
[ 2008.964225][T16255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2008.964240][T16255] RSP: 002b:00007f97c4386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2008.964257][T16255] RAX: ffffffffffffffda RBX: 00007f97c63b5fa0 RCX: 00007f97c612e559
[ 2008.964269][T16255] RDX: 0000200000000740 RSI: 00000000400454ca RDI: 0000000000000004
[ 2008.964280][T16255] RBP: 00007f97c61c5ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2008.964290][T16255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2008.964300][T16255] R13: 00007f97c63b6038 R14: 00007f97c63b5fa0 R15: 00007ffd2a1078a8
[ 2008.964327][T16255]  </TASK>
[ 2009.506978][T16265] device-mapper: ioctl: Unable to rename non-existent device,  to uuid DUfwˆ™ª»ÌÝîÿ0
[ 2009.552659][T16088] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2009.552673][T16088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2009.552692][T16088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2009.686663][T16088] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2009.686677][T16088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2009.686696][T16088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2014.208320][ T9033] Bluetooth: hci4: command tx timeout
[ 2016.799195][T16088] hsr_slave_0: entered promiscuous mode
[ 2016.802099][T16088] hsr_slave_1: entered promiscuous mode
[ 2016.802722][T16088] debugfs: 'hsr0' already exists in 'hsr'
[ 2016.802741][T16088] Cannot create hsr debugfs directory
[ 2019.059423][ T9033] Bluetooth: hci4: command tx timeout
[ 2019.347602][   T13] hsr_slave_0: left promiscuous mode
[ 2019.349218][   T13] hsr_slave_1: left promiscuous mode
[ 2019.350104][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2019.350657][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2020.130950][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 2020.190863][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 2020.939370][ T5248] 8021q: adding VLAN 0 to HW filter on device eth5
[ 2021.551675][ T9317] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 2021.715200][ T9317] usb 6-1: Using ep0 maxpacket: 16
[ 2021.719592][ T9317] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 2021.722538][ T9317] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[ 2021.722558][ T9317] usb 6-1: config 0 has no interface number 0
[ 2021.722590][ T9317] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 2021.722609][ T9317] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 2021.726658][ T9317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2021.726677][ T9317] usb 6-1: Product: syz
[ 2021.726687][ T9317] usb 6-1: Manufacturer: syz
[ 2021.726698][ T9317] usb 6-1: SerialNumber: syz
[ 2021.819260][ T9317] usb 6-1: config 0 descriptor??
[ 2021.820049][T16317] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2021.820208][T16317] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2022.069262][T16317] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2022.069411][T16317] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2022.457018][ T9317] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 2026.890672][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 2027.227284][ T9317] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 2027.227353][ T9317] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[ 2027.227542][ T9317] asix 6-1:0.34: probe with driver asix failed with error -71
[ 2027.351953][ T9317] usb 6-1: USB disconnect, device number 33
[ 2027.883381][T16346] netlink: 'syz.5.2100': attribute type 10 has an invalid length.
[ 2031.515699][ T5248] 8021q: adding VLAN 0 to HW filter on device eth6
[ 2032.092941][T16192] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2032.093323][T16192] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2032.093504][T16192] bridge_slave_0: entered allmulticast mode
[ 2032.103034][T16192] bridge_slave_0: entered promiscuous mode
[ 2032.711864][T16192] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2032.716600][T16192] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2032.717184][T16192] bridge_slave_1: entered allmulticast mode
[ 2032.722736][T16192] bridge_slave_1: entered promiscuous mode
[ 2033.304958][T16192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2033.380279][T16192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2033.975456][T16192] team0: Port device team_slave_0 added
[ 2034.090182][T16192] team0: Port device team_slave_1 added
[ 2034.374531][T16192] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2034.374552][T16192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2034.374572][T16192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2034.447315][T16192] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2034.447329][T16192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2034.447350][T16192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2035.050496][T16192] hsr_slave_0: entered promiscuous mode
[ 2035.065779][T16192] hsr_slave_1: entered promiscuous mode
[ 2035.066548][T16192] debugfs: 'hsr0' already exists in 'hsr'
[ 2035.066626][T16192] Cannot create hsr debugfs directory
[ 2039.249723][ T9243] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 2039.427989][ T9243] usb 5-1: Using ep0 maxpacket: 16
[ 2039.428563][ T9243] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 2039.434484][ T9243] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[ 2039.434511][ T9243] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 2039.434527][ T9243] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 2039.434541][ T9243] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 2039.434555][ T9243] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2039.434576][ T9243] usb 5-1: config 0 has no interface number 0
[ 2039.434609][ T9243] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 2039.434629][ T9243] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 2039.434645][ T9243] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2039.434670][ T9243] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2039.434691][ T9243] usb 5-1: config 0 interface 125 has no altsetting 0
[ 2039.434704][ T9243] usb 5-1: config 0 interface 125 has no altsetting 2
[ 2039.466193][ T9243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2039.466214][ T9243] usb 5-1: Product: syz
[ 2039.466226][ T9243] usb 5-1: Manufacturer: syz
[ 2039.466237][ T9243] usb 5-1: SerialNumber: syz
[ 2039.500111][ T9243] usb 5-1: config 0 descriptor??
[ 2039.534686][ T9243] usb 5-1: selecting invalid altsetting 2
[ 2039.652197][T11417] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 2039.818268][T11417] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.40
[ 2039.819763][T11417] usb 6-1: config 1 interface 0 has no altsetting 0
[ 2039.836206][T11417] usb 6-1: string descriptor 0 read error: -22
[ 2039.836651][T11417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2040.583417][T11417] hid (null): report_id 34933 is invalid
[ 2040.872467][ T9243] usb 5-1: USB disconnect, device number 23
[ 2041.009451][T11417] hid_parser_main: 449 callbacks suppressed
[ 2041.009469][T11417] itetech 0003:258A:6A88.0009: unknown main item tag 0x1
[ 2041.009488][T11417] itetech 0003:258A:6A88.0009: report_id 34933 is invalid
[ 2041.009516][T11417] itetech 0003:258A:6A88.0009: item 0 2 1 8 parsing failed
[ 2041.011173][T11417] itetech 0003:258A:6A88.0009: probe with driver itetech failed with error -22
[ 2041.068816][T11417] usb 6-1: USB disconnect, device number 34
[ 2042.070810][T16503] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[ 2042.079756][T16088] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2042.115225][T16088] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2042.120481][T16088] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2042.158268][T16088] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2042.163264][   T13] bridge_slave_1: left allmulticast mode
[ 2042.163290][   T13] bridge_slave_1: left promiscuous mode
[ 2042.163467][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2045.452090][   T13] bridge_slave_0: left allmulticast mode
[ 2045.452120][   T13] bridge_slave_0: left promiscuous mode
[ 2045.453712][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2047.404119][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2047.408071][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2047.414755][   T13] bond0 (unregistering): Released all slaves
[ 2047.440546][T16088] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2047.480516][   T37] audit: type=1800 audit(1792213676.856:509): pid=16527 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2143" name="file0" dev="tmpfs" ino=2275 res=0 errno=0
[ 2047.532397][T16088] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2047.774361][T16088] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2047.857981][T16088] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2053.494810][T16088] kthread_run failed with err -4
[ 2053.574113][   T13] hsr_slave_0: left promiscuous mode
[ 2053.584060][   T13] hsr_slave_1: left promiscuous mode
[ 2053.585099][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2053.595749][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2054.385703][T16549] netlink: 'syz.6.2149': attribute type 4 has an invalid length.
[ 2054.438585][T16552] netlink: 'syz.6.2149': attribute type 4 has an invalid length.
[ 2054.754307][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 2054.951821][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 2055.013309][T15268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2055.114710][T15268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2055.127979][T15268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2055.162658][T15268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2055.172848][T15268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2055.716749][T15268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2055.762855][T15268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2055.799657][T15268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2055.826760][T15268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2055.829090][T15268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2057.604435][T15268] Bluetooth: hci0: command tx timeout
[ 2057.699974][T16597] FAULT_INJECTION: forcing a failure.
[ 2057.699974][T16597] name failslab, interval 1, probability 5, space 0, times 9986
[ 2057.700005][T16597] CPU: 0 UID: 0 PID: 16597 Comm: syz.4.2155 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2057.700028][T16597] Tainted: [L]=SOFTLOCKUP
[ 2057.700034][T16597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 2057.700045][T16597] Call Trace:
[ 2057.700051][T16597]  <TASK>
[ 2057.700059][T16597]  dump_stack_lvl+0xe8/0x150
[ 2057.700089][T16597]  should_fail_ex+0x46b/0x600
[ 2057.700124][T16597]  should_failslab+0xa8/0x100
[ 2057.700145][T16597]  kmem_cache_alloc_node_noprof+0xac/0x660
[ 2057.700170][T16597]  ? net_generic+0x1e/0x240
[ 2057.700190][T16597]  ? __alloc_skb+0x1db/0x7a0
[ 2057.700209][T16597]  ? __alloc_skb+0x1db/0x7a0
[ 2057.700235][T16597]  __alloc_skb+0x1db/0x7a0
[ 2057.700259][T16597]  tipc_msg_create+0x4c/0x4c0
[ 2057.700280][T16597]  ? tipc_node_remove_conn+0x2a0/0x3e0
[ 2057.700306][T16597]  __tipc_shutdown+0xea8/0x15a0
[ 2057.700327][T16597]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2057.700367][T16597]  ? __pfx___tipc_shutdown+0x10/0x10
[ 2057.700388][T16597]  ? __pfx_woken_wake_function+0x10/0x10
[ 2057.700412][T16597]  ? __local_bh_enable_ip+0x1ad/0x2b0
[ 2057.700437][T16597]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2057.700465][T16597]  tipc_release+0x303/0x2500
[ 2057.700483][T16597]  ? lock_acquire+0x115/0x350
[ 2057.700515][T16597]  ? __pfx_tipc_release+0x10/0x10
[ 2057.700532][T16597]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2057.700567][T16597]  ? rwbase_write_lock+0x550/0x720
[ 2057.700591][T16597]  __sock_release+0xa0/0x1f0
[ 2057.700609][T16597]  ? __pfx_sock_close+0x10/0x10
[ 2057.700625][T16597]  sock_close+0x1c/0x30
[ 2057.700639][T16597]  __fput+0x41f/0xa80
[ 2057.700665][T16597]  fput_close_sync+0x11f/0x240
[ 2057.700684][T16597]  ? __pfx_fput_close_sync+0x10/0x10
[ 2057.700721][T16597]  __x64_sys_close+0x7e/0x110
[ 2057.700742][T16597]  do_syscall_64+0x166/0x520
[ 2057.700766][T16597]  ? trace_irq_disable+0x3b/0x140
[ 2057.700800][T16597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2057.700818][T16597]  ? clear_bhb_loop+0x70/0xc0
[ 2057.700839][T16597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2057.700856][T16597] RIP: 0033:0x7f71f0d2e559
[ 2057.700872][T16597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2057.700886][T16597] RSP: 002b:00007f71eef86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 2057.700903][T16597] RAX: ffffffffffffffda RBX: 00007f71f0fb5fa0 RCX: 00007f71f0d2e559
[ 2057.700916][T16597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2057.700926][T16597] RBP: 00007f71f0dc5ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2057.700936][T16597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2057.700946][T16597] R13: 00007f71f0fb6038 R14: 00007f71f0fb5fa0 R15: 00007fff35a6b7b8
[ 2057.700973][T16597]  </TASK>
[ 2057.835098][T16598] FAULT_INJECTION: forcing a failure.
[ 2057.835098][T16598] name failslab, interval 1, probability 5, space 0, times 9985
[ 2057.835128][T16598] CPU: 0 UID: 0 PID: 16598 Comm: syz.6.2156 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2057.835151][T16598] Tainted: [L]=SOFTLOCKUP
[ 2057.835158][T16598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 2057.835168][T16598] Call Trace:
[ 2057.835175][T16598]  <TASK>
[ 2057.835183][T16598]  dump_stack_lvl+0xe8/0x150
[ 2057.835212][T16598]  should_fail_ex+0x46b/0x600
[ 2057.835245][T16598]  should_failslab+0xa8/0x100
[ 2057.835266][T16598]  __kmalloc_noprof+0xfb/0x790
[ 2057.835292][T16598]  ? vb2_core_reqbufs+0x931/0x1470
[ 2057.835317][T16598]  ? vb2_core_reqbufs+0x931/0x1470
[ 2057.835343][T16598]  ? vb2_core_reqbufs+0x8c4/0x1470
[ 2057.835371][T16598]  vb2_core_reqbufs+0x931/0x1470
[ 2057.835409][T16598]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[ 2057.835434][T16598]  ? vb2_verify_memory_type+0x1fc/0x570
[ 2057.835463][T16598]  ? vb2_reqbufs+0x399/0x630
[ 2057.835494][T16598]  v4l2_m2m_ioctl_reqbufs+0x110/0x200
[ 2057.835518][T16598]  __video_do_ioctl+0x8b2/0xc70
[ 2057.835556][T16598]  ? __pfx___video_do_ioctl+0x10/0x10
[ 2057.835586][T16598]  video_usercopy+0x860/0x1430
[ 2057.835609][T16598]  ? __pfx___video_do_ioctl+0x10/0x10
[ 2057.835628][T16598]  ? __pfx_video_usercopy+0x10/0x10
[ 2057.835644][T16598]  ? smack_file_ioctl+0x2c4/0x370
[ 2057.835683][T16598]  ? __fget_files+0x2a/0x420
[ 2057.835702][T16598]  ? __fget_files+0x3a8/0x420
[ 2057.835726][T16598]  v4l2_ioctl+0x190/0x1e0
[ 2057.835766][T16598]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 2057.835791][T16598]  __se_sys_ioctl+0xff/0x170
[ 2057.835818][T16598]  do_syscall_64+0x166/0x520
[ 2057.835842][T16598]  ? trace_irq_disable+0x3b/0x140
[ 2057.835865][T16598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2057.835882][T16598]  ? clear_bhb_loop+0x70/0xc0
[ 2057.835902][T16598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2057.835918][T16598] RIP: 0033:0x7f710d74e559
[ 2057.835933][T16598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2057.835947][T16598] RSP: 002b:00007f710b9a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2057.835965][T16598] RAX: ffffffffffffffda RBX: 00007f710d9d5fa0 RCX: 00007f710d74e559
[ 2057.835978][T16598] RDX: 0000200000000540 RSI: 00000000c0145608 RDI: 0000000000000004
[ 2057.835989][T16598] RBP: 00007f710d7e5ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2057.835999][T16598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2057.836009][T16598] R13: 00007f710d9d6038 R14: 00007f710d9d5fa0 R15: 00007fff8dae7378
[ 2057.836035][T16598]  </TASK>
[ 2057.906161][T16554] rxe_eth0 speed is unknown, defaulting to 1000
[ 2058.296314][T15268] Bluetooth: hci2: command tx timeout
[ 2059.422471][T16558] rxe_eth0 speed is unknown, defaulting to 1000
[ 2059.878468][T15268] Bluetooth: hci0: command tx timeout
[ 2060.535142][T15268] Bluetooth: hci2: command tx timeout
[ 2061.476431][ T9033] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2061.530424][ T9033] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2061.547462][ T9033] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2061.548788][ T9033] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2061.558881][ T9033] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2062.097073][ T9033] Bluetooth: hci0: command tx timeout
[ 2062.789977][ T9033] Bluetooth: hci2: command tx timeout
[ 2063.245413][T16646] FAULT_INJECTION: forcing a failure.
[ 2063.245413][T16646] name failslab, interval 1, probability 5, space 0, times 9984
[ 2063.245459][T16646] CPU: 0 UID: 0 PID: 16646 Comm: syz.4.2167 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2063.245483][T16646] Tainted: [L]=SOFTLOCKUP
[ 2063.245489][T16646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 2063.245500][T16646] Call Trace:
[ 2063.245506][T16646]  <TASK>
[ 2063.245514][T16646]  dump_stack_lvl+0xe8/0x150
[ 2063.245544][T16646]  should_fail_ex+0x46b/0x600
[ 2063.245576][T16646]  should_failslab+0xa8/0x100
[ 2063.245595][T16646]  ? alloc_vfsmnt+0x23/0x510
[ 2063.245621][T16646]  kmem_cache_alloc_noprof+0x9e/0x690
[ 2063.245647][T16646]  ? alloc_vfsmnt+0x23/0x510
[ 2063.245672][T16646]  ? rt_spin_unlock+0x159/0x200
[ 2063.245696][T16646]  alloc_vfsmnt+0x23/0x510
[ 2063.245724][T16646]  clone_mnt+0x4c/0xad0
[ 2063.245756][T16646]  lock_mount_exact+0x17f/0x9b0
[ 2063.245786][T16646]  open_new_namespace+0x2de/0xba0
[ 2063.245819][T16646]  ? __pfx_open_new_namespace+0x10/0x10
[ 2063.245850][T16646]  ? do_getname+0x151/0x250
[ 2063.245875][T16646]  vfs_open_tree+0x32d/0x3d0
[ 2063.245901][T16646]  ? __pfx_vfs_open_tree+0x10/0x10
[ 2063.245933][T16646]  __x64_sys_open_tree+0x96/0x110
[ 2063.245953][T16646]  do_syscall_64+0x166/0x520
[ 2063.245977][T16646]  ? trace_irq_disable+0x3b/0x140
[ 2063.246000][T16646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2063.246016][T16646]  ? clear_bhb_loop+0x70/0xc0
[ 2063.246036][T16646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2063.246052][T16646] RIP: 0033:0x7f71f0d2e559
[ 2063.246067][T16646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2063.246082][T16646] RSP: 002b:00007f71eef86028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[ 2063.246105][T16646] RAX: ffffffffffffffda RBX: 00007f71f0fb5fa0 RCX: 00007f71f0d2e559
[ 2063.246118][T16646] RDX: 0000000000081802 RSI: 0000200000000640 RDI: ffffffffffffff9c
[ 2063.246129][T16646] RBP: 00007f71f0dc5ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2063.246140][T16646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2063.246150][T16646] R13: 00007f71f0fb6038 R14: 00007f71f0fb5fa0 R15: 00007fff35a6b7b8
[ 2063.246176][T16646]  </TASK>
[ 2063.378156][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2063.552002][T16648] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2063.582322][T16648] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2063.584120][T16648] team0: Device bridge0 failed to register rx_handler
[ 2063.584363][T16648] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2064.010611][ T9033] Bluetooth: hci1: command tx timeout
[ 2064.276948][T11417] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 2064.300891][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2064.350815][ T9033] Bluetooth: hci0: command tx timeout
[ 2064.441457][T11417] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2064.442665][T11417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2064.442689][T11417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2064.442717][T11417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2064.446527][T11417] usb 5-1: config 0 descriptor??
[ 2065.037226][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2065.052016][ T9033] Bluetooth: hci2: command tx timeout
[ 2065.125290][T11417] usb 5-1: language id specifier not provided by device, defaulting to English
[ 2065.189415][T16626] rxe_eth0 speed is unknown, defaulting to 1000
[ 2065.807262][T11417] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #100: -71
[ 2065.807317][T11417] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71
[ 2065.807331][T11417] uclogic 0003:256C:006D.000A: failed probing pen v1 parameters: -71
[ 2065.807378][T11417] uclogic 0003:256C:006D.000A: failed probing parameters: -71
[ 2065.807455][T11417] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71
[ 2065.864744][T11417] usb 5-1: USB disconnect, device number 24
[ 2066.096652][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2066.266399][ T9033] Bluetooth: hci1: command tx timeout
[ 2066.815954][T16554] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2066.816050][T16554] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2066.816216][T16554] bridge_slave_0: entered allmulticast mode
[ 2066.832112][T16554] bridge_slave_0: entered promiscuous mode
[ 2066.978612][T16554] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2066.978701][T16554] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2066.978848][T16554] bridge_slave_1: entered allmulticast mode
[ 2066.984571][T16554] bridge_slave_1: entered promiscuous mode
[ 2067.357202][T15268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2067.400199][T15268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2067.416573][T15268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2067.434051][T15268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2067.472791][T15268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2067.921430][T16554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2068.228634][T16554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2068.513146][ T9033] Bluetooth: hci1: command tx timeout
[ 2068.888104][T16554] team0: Port device team_slave_0 added
[ 2069.182665][T16554] team0: Port device team_slave_1 added
[ 2069.184320][T16673] rxe_eth0 speed is unknown, defaulting to 1000
[ 2069.366593][T16693] FAULT_INJECTION: forcing a failure.
[ 2069.366593][T16693] name failslab, interval 1, probability 5, space 0, times 9983
[ 2069.366625][T16693] CPU: 0 UID: 60928 PID: 16693 Comm: syz.4.2175 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2069.366648][T16693] Tainted: [L]=SOFTLOCKUP
[ 2069.366655][T16693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 2069.366665][T16693] Call Trace:
[ 2069.366672][T16693]  <TASK>
[ 2069.366679][T16693]  dump_stack_lvl+0xe8/0x150
[ 2069.366708][T16693]  should_fail_ex+0x46b/0x600
[ 2069.366740][T16693]  should_failslab+0xa8/0x100
[ 2069.366758][T16693]  ? key_alloc+0x30e/0xfe0
[ 2069.366776][T16693]  kmem_cache_alloc_noprof+0x9e/0x690
[ 2069.366801][T16693]  ? key_alloc+0x30e/0xfe0
[ 2069.366823][T16693]  key_alloc+0x30e/0xfe0
[ 2069.366850][T16693]  keyring_alloc+0x45/0xb0
[ 2069.366874][T16693]  look_up_user_keyrings+0x461/0x670
[ 2069.366900][T16693]  ? __pfx_look_up_user_keyrings+0x10/0x10
[ 2069.366922][T16693]  ? lookup_user_key+0xd0/0x1150
[ 2069.366948][T16693]  lookup_user_key+0x361/0x1150
[ 2069.366970][T16693]  ? __pfx_lookup_user_key+0x10/0x10
[ 2069.366989][T16693]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[ 2069.367015][T16693]  ? try_to_wake_up+0x887/0x1430
[ 2069.367044][T16693]  keyctl_get_persistent+0x273/0x820
[ 2069.367071][T16693]  ? __pfx_keyctl_get_persistent+0x10/0x10
[ 2069.367092][T16693]  ? futex_wake+0x51e/0x600
[ 2069.367117][T16693]  ? __pfx_futex_wake+0x10/0x10
[ 2069.367137][T16693]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2069.367165][T16693]  __se_sys_keyctl+0x797/0x9d0
[ 2069.367183][T16693]  ? __pfx___se_sys_keyctl+0x10/0x10
[ 2069.367202][T16693]  ? __pfx_do_futex+0x10/0x10
[ 2069.367219][T16693]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2069.367244][T16693]  ? __se_sys_futex+0x3a8/0x450
[ 2069.367268][T16693]  ? rcu_is_watching+0x16/0xb0
[ 2069.367289][T16693]  ? __x64_sys_keyctl+0x20/0xc0
[ 2069.367307][T16693]  do_syscall_64+0x166/0x520
[ 2069.367330][T16693]  ? trace_irq_disable+0x3b/0x140
[ 2069.367353][T16693]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2069.367371][T16693]  ? clear_bhb_loop+0x70/0xc0
[ 2069.367392][T16693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2069.367408][T16693] RIP: 0033:0x7f71f0d2e559
[ 2069.367423][T16693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2069.367437][T16693] RSP: 002b:00007f71eef86028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 2069.367455][T16693] RAX: ffffffffffffffda RBX: 00007f71f0fb5fa0 RCX: 00007f71f0d2e559
[ 2069.367467][T16693] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016
[ 2069.367484][T16693] RBP: 00007f71f0dc5ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2069.367494][T16693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2069.367504][T16693] R13: 00007f71f0fb6038 R14: 00007f71f0fb5fa0 R15: 00007fff35a6b7b8
[ 2069.367530][T16693]  </TASK>
[ 2071.778332][T16554] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2071.778347][T16554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2071.778367][T16554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2074.035613][ T9033] Bluetooth: hci5: command tx timeout
[ 2074.044449][ T9033] Bluetooth: hci1: command tx timeout
[ 2074.164059][T16554] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2074.164073][T16554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2074.164094][T16554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2074.811385][T16707] binder: 16706:16707 ioctl c0306201 200000000080 returned -14
[ 2074.941510][T16558] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2074.941603][T16558] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2074.941741][T16558] bridge_slave_0: entered allmulticast mode
[ 2074.946439][T16558] bridge_slave_0: entered promiscuous mode
[ 2074.991657][T16554] hsr_slave_0: entered promiscuous mode
[ 2074.994553][T16554] hsr_slave_1: entered promiscuous mode
[ 2074.996403][T16554] debugfs: 'hsr0' already exists in 'hsr'
[ 2074.996423][T16554] Cannot create hsr debugfs directory
[ 2075.422231][T16714] input: syz1 as /devices/virtual/input/input69
[ 2075.639830][T16716] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 5 (only 8 groups)
[ 2075.990684][T16558] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2075.990814][T16558] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2075.990974][T16558] bridge_slave_1: entered allmulticast mode
[ 2075.999186][T16558] bridge_slave_1: entered promiscuous mode
[ 2076.228669][T15268] Bluetooth: hci5: command tx timeout
[ 2077.331426][T16558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2079.525966][T16558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2080.756537][ T9033] Bluetooth: hci5: command tx timeout
[ 2081.137321][T16558] team0: Port device team_slave_0 added
[ 2083.311356][T16558] team0: Port device team_slave_1 added
[ 2083.325522][T16626] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2083.326512][T16626] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2083.326643][T16626] bridge_slave_0: entered allmulticast mode
[ 2084.369825][T16626] bridge_slave_0: entered promiscuous mode
[ 2084.414041][T16626] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2084.414150][T16626] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2084.414282][T16626] bridge_slave_1: entered allmulticast mode
[ 2084.416211][T16626] bridge_slave_1: entered promiscuous mode
[ 2085.404382][T16558] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2085.404397][T16558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2085.404418][T16558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2085.607187][T15268] Bluetooth: hci5: command tx timeout
[ 2085.792785][T16558] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2085.792799][T16558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2085.792820][T16558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2086.394992][T16626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2086.537017][T16626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2087.111494][T16626] team0: Port device team_slave_0 added
[ 2087.133787][T16748] input: syz0 as /devices/virtual/input/input70
[ 2087.230140][T16626] team0: Port device team_slave_1 added
[ 2087.333683][T16558] hsr_slave_0: entered promiscuous mode
[ 2087.342326][T16558] hsr_slave_1: entered promiscuous mode
[ 2087.347112][T16558] debugfs: 'hsr0' already exists in 'hsr'
[ 2087.347132][T16558] Cannot create hsr debugfs directory
[ 2087.577847][ T5248] 8021q: adding VLAN 0 to HW filter on device eth5
[ 2087.578684][T16626] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2087.578708][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2087.578728][T16626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2087.886165][T16626] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2087.886180][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2087.886201][T16626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2088.229189][T16673] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2088.229340][T16673] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2088.229500][T16673] bridge_slave_0: entered allmulticast mode
[ 2088.234779][T16673] bridge_slave_0: entered promiscuous mode
[ 2088.273414][T16673] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2088.273558][T16673] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2088.273673][T16673] bridge_slave_1: entered allmulticast mode
[ 2088.286530][T16673] bridge_slave_1: entered promiscuous mode
[ 2088.306999][T16626] hsr_slave_0: entered promiscuous mode
[ 2088.311614][T16626] hsr_slave_1: entered promiscuous mode
[ 2088.313038][T16626] debugfs: 'hsr0' already exists in 'hsr'
[ 2088.313130][T16626] Cannot create hsr debugfs directory
[ 2088.554509][T16673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2088.693497][T16673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2089.057600][T16673] team0: Port device team_slave_0 added
[ 2091.362360][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2092.452626][T16673] team0: Port device team_slave_1 added
[ 2094.328389][    T9] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[ 2094.440428][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2094.480604][T16673] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2094.480619][T16673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2094.480639][T16673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2094.502145][T16673] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2094.502158][T16673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2094.502177][T16673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2094.512226][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2094.513286][    T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2094.513309][    T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2094.513336][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2094.543560][    T9] hub 5-1:4.0: USB hub found
[ 2094.767346][    T9] hub 5-1:4.0: 2 ports detected
[ 2094.767407][    T9] usb 5-1: selecting invalid altsetting 1
[ 2094.767420][    T9] hub 5-1:4.0: Using single TT (err -22)
[ 2095.003439][T16771] vivid-000: disconnect
[ 2095.035927][T16770] vivid-000: reconnect
[ 2095.041680][    T9] hub 5-1:4.0: config failed, can't get hub status (err -71)
[ 2095.125637][    T9] usb 5-1: USB disconnect, device number 25
[ 2095.196654][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2095.354559][T16673] hsr_slave_0: entered promiscuous mode
[ 2095.366888][T16673] hsr_slave_1: entered promiscuous mode
[ 2095.369026][T16673] debugfs: 'hsr0' already exists in 'hsr'
[ 2095.369047][T16673] Cannot create hsr debugfs directory
[ 2095.499713][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2095.652204][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 2098.666630][ T5248] 8021q: adding VLAN 0 to HW filter on device eth6
[ 2099.921253][   T13] bridge_slave_1: left allmulticast mode
[ 2099.921282][   T13] bridge_slave_1: left promiscuous mode
[ 2099.921501][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2099.925429][   T13] bridge_slave_0: left allmulticast mode
[ 2099.925454][   T13] bridge_slave_0: left promiscuous mode
[ 2099.925628][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2099.957030][   T13] bridge_slave_1: left allmulticast mode
[ 2099.957057][   T13] bridge_slave_1: left promiscuous mode
[ 2099.957244][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2099.960758][   T13] bridge_slave_0: left allmulticast mode
[ 2099.960780][   T13] bridge_slave_0: left promiscuous mode
[ 2099.961012][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2099.970313][   T13] bridge_slave_1: left allmulticast mode
[ 2099.970494][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2099.976609][   T13] bridge_slave_0: left allmulticast mode
[ 2099.976632][   T13] bridge_slave_0: left promiscuous mode
[ 2099.976788][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2100.734701][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2100.737682][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2100.739763][   T13] bond0 (unregistering): Released all slaves
[ 2101.059976][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2101.063640][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2101.074912][   T13] bond0 (unregistering): Released all slaves
[ 2101.082948][ T5248] 8021q: adding VLAN 0 to HW filter on device eth7
[ 2101.571346][   T13] tipc: Left network mode
[ 2103.358760][ T5248] 8021q: adding VLAN 0 to HW filter on device eth8
[ 2104.325878][   T13] hsr_slave_0: left promiscuous mode
[ 2104.326498][   T13] hsr_slave_1: left promiscuous mode
[ 2104.327239][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2104.327257][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2104.328023][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2104.328040][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2104.360466][   T13] hsr_slave_0: left promiscuous mode
[ 2104.361063][   T13] hsr_slave_1: left promiscuous mode
[ 2104.361759][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2104.362424][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2104.401868][   T13] hsr_slave_0: left promiscuous mode
[ 2104.404181][   T13] hsr_slave_1: left promiscuous mode
[ 2104.405035][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2104.405054][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2104.420648][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2104.420667][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2104.585779][   T13] veth1_macvtap: left promiscuous mode
[ 2104.585860][   T13] veth0_macvtap: left promiscuous mode
[ 2104.586040][   T13] veth1_vlan: left promiscuous mode
[ 2104.586171][   T13] veth0_vlan: left promiscuous mode
[ 2104.617988][   T13] veth1_macvtap: left promiscuous mode
[ 2104.618072][   T13] veth0_macvtap: left promiscuous mode
[ 2104.618248][   T13] veth1_vlan: left promiscuous mode
[ 2104.618374][   T13] veth0_vlan: left promiscuous mode
[ 2105.228824][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 2105.244058][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 2105.668754][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 2105.684124][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 2106.192453][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 2106.206641][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 2106.561633][ T5248] 8021q: adding VLAN 0 to HW filter on device eth21
[ 2107.485594][   T13] IPVS: stop unused estimator thread 0...
[ 2108.204829][ T5248] 8021q: adding VLAN 0 to HW filter on device eth22
[ 2109.790453][ T5248] 8021q: adding VLAN 0 to HW filter on device eth23
[ 2110.116143][   T13] bridge_slave_1: left allmulticast mode
[ 2110.118985][   T13] bridge_slave_1: left promiscuous mode
[ 2110.119205][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2110.121905][   T13] bridge_slave_0: left allmulticast mode
[ 2110.121929][   T13] bridge_slave_0: left promiscuous mode
[ 2110.122136][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2110.421797][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2110.427505][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2110.429481][   T13] bond0 (unregistering): Released all slaves
[ 2111.037456][   T13] hsr_slave_0: left promiscuous mode
[ 2111.038149][   T13] hsr_slave_1: left promiscuous mode
[ 2111.039035][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2111.039579][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2111.449647][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 2111.477827][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 2115.308389][T15268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2115.357489][T15268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2115.369737][T15268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2115.372609][T15268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2115.373425][T15268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2115.644066][T16981] rxe_eth0 speed is unknown, defaulting to 1000
[ 2116.712354][T16981] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2116.714140][T16981] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2116.714291][T16981] bridge_slave_0: entered allmulticast mode
[ 2116.725118][T16981] bridge_slave_0: entered promiscuous mode
[ 2116.727529][T16981] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2116.729575][T16981] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2116.729693][T16981] bridge_slave_1: entered allmulticast mode
[ 2116.733493][T16981] bridge_slave_1: entered promiscuous mode
[ 2116.818606][T16981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2116.831213][T16981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2116.873432][T16981] team0: Port device team_slave_0 added
[ 2116.879651][T16981] team0: Port device team_slave_1 added
[ 2116.971793][T16981] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2116.971807][T16981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2116.971828][T16981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2116.976129][T16981] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2116.976142][T16981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2116.976163][T16981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2117.070143][T16981] hsr_slave_0: entered promiscuous mode
[ 2117.074322][T16981] hsr_slave_1: entered promiscuous mode
[ 2117.646193][ T5248] 8021q: adding VLAN 0 to HW filter on device eth16
[ 2117.758621][T15268] Bluetooth: hci4: command tx timeout
[ 2120.012872][T15268] Bluetooth: hci4: command tx timeout
[ 2120.863346][ T9033] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2120.905146][ T9033] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2120.906625][ T9033] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2120.909859][ T9033] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2120.917513][ T9033] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2121.123091][T17118] rxe_eth0 speed is unknown, defaulting to 1000
[ 2122.144783][ T9033] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2122.187121][ T9033] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2122.220551][ T9033] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2122.222042][ T9033] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2122.222574][ T9033] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2122.270996][T13401] Bluetooth: hci4: command tx timeout
[ 2122.604330][T17118] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2122.604462][T17118] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2122.604588][T17118] bridge_slave_0: entered allmulticast mode
[ 2122.608389][T17118] bridge_slave_0: entered promiscuous mode
[ 2122.616294][T17147] rxe_eth0 speed is unknown, defaulting to 1000
[ 2122.618593][T17118] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2122.618680][T17118] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2122.618800][T17118] bridge_slave_1: entered allmulticast mode
[ 2122.622453][T17118] bridge_slave_1: entered promiscuous mode
[ 2122.772264][T17118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2122.785967][T17118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2122.888663][T17118] team0: Port device team_slave_0 added
[ 2122.899896][T17118] team0: Port device team_slave_1 added
[ 2123.087499][T17118] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2123.087514][T17118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2123.087535][T17118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2123.096863][T17118] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2123.096875][T17118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2123.096895][T17118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2123.220673][ T9033] Bluetooth: hci6: command tx timeout
[ 2123.349178][T17118] hsr_slave_0: entered promiscuous mode
[ 2123.353140][T17118] hsr_slave_1: entered promiscuous mode
[ 2123.353866][T17118] debugfs: 'hsr0' already exists in 'hsr'
[ 2123.353885][T17118] Cannot create hsr debugfs directory
[ 2124.151677][T17147] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2124.152760][T17147] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2124.152885][T17147] bridge_slave_0: entered allmulticast mode
[ 2124.157158][T17147] bridge_slave_0: entered promiscuous mode
[ 2124.161090][T17147] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2124.161251][T17147] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2124.161592][T17147] bridge_slave_1: entered allmulticast mode
[ 2124.167826][T17147] bridge_slave_1: entered promiscuous mode
[ 2124.271461][T17147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2124.285558][T17147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2124.353335][T17147] team0: Port device team_slave_0 added
[ 2124.413042][T17147] team0: Port device team_slave_1 added
[ 2124.434472][ T9033] Bluetooth: hci7: command tx timeout
[ 2124.473554][T17147] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2124.473568][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2124.473588][T17147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2124.480565][T17147] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2124.480577][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2124.480597][T17147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2124.521337][ T9033] Bluetooth: hci4: command tx timeout
[ 2124.587703][T17147] hsr_slave_0: entered promiscuous mode
[ 2124.591782][T17147] hsr_slave_1: entered promiscuous mode
[ 2124.594067][T17147] debugfs: 'hsr0' already exists in 'hsr'
[ 2124.594087][T17147] Cannot create hsr debugfs directory
[ 2125.417840][ T5248] 8021q: adding VLAN 0 to HW filter on device eth13
[ 2125.474904][ T9033] Bluetooth: hci6: command tx timeout
[ 2126.018214][ T5248] 8021q: adding VLAN 0 to HW filter on device eth14
[ 2126.458903][T15268] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 2126.501654][T15268] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 2126.503107][T15268] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 2126.511461][T15268] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 2126.514502][T15268] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 2126.690371][ T9033] Bluetooth: hci7: command tx timeout
[ 2126.811019][T17239] rxe_eth0 speed is unknown, defaulting to 1000
[ 2127.269123][ T5248] 8021q: adding VLAN 0 to HW filter on device eth15
[ 2127.729150][ T9033] Bluetooth: hci6: command tx timeout
[ 2127.863471][T17239] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2127.863558][T17239] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2127.863684][T17239] bridge_slave_0: entered allmulticast mode
[ 2127.865719][T17239] bridge_slave_0: entered promiscuous mode
[ 2127.886955][T17239] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2127.888880][T17239] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2127.889010][T17239] bridge_slave_1: entered allmulticast mode
[ 2127.892635][T17239] bridge_slave_1: entered promiscuous mode
[ 2127.993759][T17239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2128.006902][T17239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2128.073590][T17239] team0: Port device team_slave_0 added
[ 2128.079848][T17239] team0: Port device team_slave_1 added
[ 2128.151552][T17239] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2128.151566][T17239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2128.151585][T17239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2128.165782][T17239] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2128.165795][T17239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2128.165815][T17239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2128.268113][T17239] hsr_slave_0: entered promiscuous mode
[ 2128.268966][T17239] hsr_slave_1: entered promiscuous mode
[ 2128.269574][T17239] debugfs: 'hsr0' already exists in 'hsr'
[ 2128.269592][T17239] Cannot create hsr debugfs directory
[ 2128.418171][ T5248] 8021q: adding VLAN 0 to HW filter on device eth24
[ 2128.856317][ T9033] Bluetooth: hci8: command tx timeout
[ 2128.943322][ T9033] Bluetooth: hci7: command tx timeout
[ 2129.983448][ T9033] Bluetooth: hci6: command tx timeout
[ 2131.110531][ T9033] Bluetooth: hci8: command tx timeout
[ 2131.197314][ T9033] Bluetooth: hci7: command tx timeout
[ 2133.364886][ T9033] Bluetooth: hci8: command tx timeout
[ 2134.002713][T15268] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 2134.016698][T15268] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 2134.107930][T15268] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 2134.121307][T15268] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 2134.121991][T15268] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 2134.306804][T17333] rxe_eth0 speed is unknown, defaulting to 1000
[ 2134.779968][T17333] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2134.781756][T17333] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2134.782095][T17333] bridge_slave_0: entered allmulticast mode
[ 2134.786068][T17333] bridge_slave_0: entered promiscuous mode
[ 2134.788658][T17333] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2134.788789][T17333] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2134.788910][T17333] bridge_slave_1: entered allmulticast mode
[ 2134.790886][T17333] bridge_slave_1: entered promiscuous mode
[ 2134.836770][T17333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2134.852087][T17333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2134.897141][T17333] team0: Port device team_slave_0 added
[ 2134.899856][T17333] team0: Port device team_slave_1 added
[ 2134.940470][T17333] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2134.940483][T17333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2134.940503][T17333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2134.942317][T17333] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2134.942327][T17333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2134.942357][T17333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2135.001600][T17333] hsr_slave_0: entered promiscuous mode
[ 2135.002426][T17333] hsr_slave_1: entered promiscuous mode
[ 2135.003139][T17333] debugfs: 'hsr0' already exists in 'hsr'
[ 2135.003157][T17333] Cannot create hsr debugfs directory
[ 2135.619052][T15268] Bluetooth: hci8: command tx timeout
[ 2136.312738][T15268] Bluetooth: hci9: command tx timeout
[ 2138.566936][T15268] Bluetooth: hci9: command tx timeout
[ 2140.821222][T15268] Bluetooth: hci9: command tx timeout
[ 2143.075436][T15268] Bluetooth: hci9: command tx timeout
[ 2162.238770][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 2180.678312][ T9033] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 2180.723684][ T9033] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 2180.752760][ T9033] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 2180.757677][ T9033] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 2180.761935][ T9033] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 2180.911466][T17519] rxe_eth0 speed is unknown, defaulting to 1000
[ 2181.395786][T17519] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2181.395956][T17519] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2181.396336][T17519] bridge_slave_0: entered allmulticast mode
[ 2181.399199][T17519] bridge_slave_0: entered promiscuous mode
[ 2181.401842][T17519] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2181.402016][T17519] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2181.402150][T17519] bridge_slave_1: entered allmulticast mode
[ 2181.404058][T17519] bridge_slave_1: entered promiscuous mode
[ 2181.449226][T17519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2181.454563][T17519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2181.493619][T17519] team0: Port device team_slave_0 added
[ 2181.496939][T17519] team0: Port device team_slave_1 added
[ 2181.526537][T17519] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2181.526551][T17519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2181.526571][T17519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2181.530031][T17519] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2181.530043][T17519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2181.530063][T17519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2181.589734][T17519] hsr_slave_0: entered promiscuous mode
[ 2181.591910][T17519] hsr_slave_1: entered promiscuous mode
[ 2181.594810][T17519] debugfs: 'hsr0' already exists in 'hsr'
[ 2181.594838][T17519] Cannot create hsr debugfs directory
[ 2182.958385][T15268] Bluetooth: hci10: command tx timeout
[ 2185.212696][T15268] Bluetooth: hci10: command tx timeout
[ 2187.409850][ T9033] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 2187.456533][ T9033] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 2187.462846][ T9033] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 2187.466835][ T9033] Bluetooth: hci10: command tx timeout
[ 2187.467060][ T9033] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 2187.496480][ T9033] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 2187.670224][T17540] rxe_eth0 speed is unknown, defaulting to 1000
[ 2188.147818][T17540] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2188.147993][T17540] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2188.148158][T17540] bridge_slave_0: entered allmulticast mode
[ 2188.150775][T17540] bridge_slave_0: entered promiscuous mode
[ 2188.153112][T17540] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2188.153277][T17540] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2188.153655][T17540] bridge_slave_1: entered allmulticast mode
[ 2188.155598][T17540] bridge_slave_1: entered promiscuous mode
[ 2188.197164][T17540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2188.205650][T17540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2188.248542][T17540] team0: Port device team_slave_0 added
[ 2188.251119][T17540] team0: Port device team_slave_1 added
[ 2188.279958][T17540] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2188.279972][T17540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2188.279992][T17540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2188.281862][T17540] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2188.281874][T17540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2188.281892][T17540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2188.333549][T17540] hsr_slave_0: entered promiscuous mode
[ 2188.351396][T17540] hsr_slave_1: entered promiscuous mode
[ 2188.353633][T17540] debugfs: 'hsr0' already exists in 'hsr'
[ 2188.353653][T17540] Cannot create hsr debugfs directory
[ 2188.694933][T15268] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 2188.741576][T15268] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 2188.770485][T15268] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 2188.773191][T15268] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 2188.773641][T15268] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 2188.939408][T17561] rxe_eth0 speed is unknown, defaulting to 1000
[ 2189.407099][T17561] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2189.407253][T17561] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2189.407425][T17561] bridge_slave_0: entered allmulticast mode
[ 2189.409339][T17561] bridge_slave_0: entered promiscuous mode
[ 2189.411987][T17561] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2189.412126][T17561] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2189.412548][T17561] bridge_slave_1: entered allmulticast mode
[ 2189.414355][T17561] bridge_slave_1: entered promiscuous mode
[ 2189.452440][T17561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2189.463354][T17561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2189.507849][T17561] team0: Port device team_slave_0 added
[ 2189.511277][T17561] team0: Port device team_slave_1 added
[ 2189.538994][T17561] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2189.539007][T17561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2189.539026][T17561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2189.540954][T17561] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2189.540966][T17561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2189.540986][T17561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2189.597102][T17561] hsr_slave_0: entered promiscuous mode
[ 2189.598099][T17561] hsr_slave_1: entered promiscuous mode
[ 2189.598808][T17561] debugfs: 'hsr0' already exists in 'hsr'
[ 2189.598826][T17561] Cannot create hsr debugfs directory
[ 2189.721161][T15268] Bluetooth: hci10: command tx timeout
[ 2189.808130][T15268] Bluetooth: hci11: command tx timeout
[ 2191.022069][T10868] Bluetooth: hci12: command tx timeout
[ 2191.820211][T17578] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 2191.875232][T17578] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 2191.903535][T17578] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 2191.907896][T17578] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 2191.908935][T17578] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 2192.058061][T17580] rxe_eth0 speed is unknown, defaulting to 1000
[ 2192.062158][T10868] Bluetooth: hci11: command tx timeout
[ 2192.250994][T10868] Bluetooth: hci0: command 0x0406 tx timeout
[ 2192.251026][T10868] Bluetooth: hci2: command 0x0406 tx timeout
[ 2192.739633][T17580] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2192.739799][T17580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2192.740225][T17580] bridge_slave_0: entered allmulticast mode
[ 2192.742229][T17580] bridge_slave_0: entered promiscuous mode
[ 2192.746586][T17580] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2192.746732][T17580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2192.746874][T17580] bridge_slave_1: entered allmulticast mode
[ 2192.748827][T17580] bridge_slave_1: entered promiscuous mode
[ 2192.791436][T17580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2192.801770][T17580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2192.839000][T17580] team0: Port device team_slave_0 added
[ 2192.841810][T17580] team0: Port device team_slave_1 added
[ 2192.874104][T17580] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2192.874118][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2192.874138][T17580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2192.881851][T17580] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2192.881862][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2192.881881][T17580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2192.931934][T17580] hsr_slave_0: entered promiscuous mode
[ 2192.932985][T17580] hsr_slave_1: entered promiscuous mode
[ 2192.933685][T17580] debugfs: 'hsr0' already exists in 'hsr'
[ 2192.933704][T17580] Cannot create hsr debugfs directory
[ 2193.276291][T15268] Bluetooth: hci12: command tx timeout
[ 2194.229686][T15268] Bluetooth: hci13: command tx timeout
[ 2194.316520][T15268] Bluetooth: hci11: command tx timeout
[ 2195.536136][T13401] Bluetooth: hci12: command tx timeout
[ 2196.484061][T15268] Bluetooth: hci13: command tx timeout
[ 2196.570643][T15268] Bluetooth: hci11: command tx timeout
[ 2197.789999][T17578] Bluetooth: hci12: command tx timeout
[ 2197.790041][T15268] Bluetooth: hci1: command 0x0406 tx timeout
[ 2198.738249][T13401] Bluetooth: hci13: command tx timeout
[ 2200.735773][T15268] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 2200.783299][T15268] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 2200.811637][T15268] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 2200.814227][T15268] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 2200.817183][T15268] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 2200.992396][T13401] Bluetooth: hci13: command tx timeout
[ 2201.030596][T17603] rxe_eth0 speed is unknown, defaulting to 1000
[ 2201.507879][T17603] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2201.508032][T17603] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2201.508403][T17603] bridge_slave_0: entered allmulticast mode
[ 2201.510285][T17603] bridge_slave_0: entered promiscuous mode
[ 2201.514755][T17603] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2201.514900][T17603] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2201.515038][T17603] bridge_slave_1: entered allmulticast mode
[ 2201.516852][T17603] bridge_slave_1: entered promiscuous mode
[ 2201.560208][T17603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2201.564433][T17603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2201.605916][T17603] team0: Port device team_slave_0 added
[ 2201.608626][T17603] team0: Port device team_slave_1 added
[ 2201.638230][T17603] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2201.638243][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2201.638263][T17603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2201.640146][T17603] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2201.640157][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2201.640177][T17603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2201.693895][T17603] hsr_slave_0: entered promiscuous mode
[ 2201.695010][T17603] hsr_slave_1: entered promiscuous mode
[ 2201.695767][T17603] debugfs: 'hsr0' already exists in 'hsr'
[ 2201.695787][T17603] Cannot create hsr debugfs directory
[ 2203.160179][T13401] Bluetooth: hci14: command tx timeout
[ 2203.346423][T13401] Bluetooth: hci5: command 0x0406 tx timeout
[ 2205.414210][T15268] Bluetooth: hci14: command tx timeout
[ 2207.668481][T15268] Bluetooth: hci14: command tx timeout
[ 2209.922723][T15268] Bluetooth: hci14: command tx timeout
[ 2228.828178][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 2246.538694][T13401] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 2246.586947][T13401] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 2246.591921][T13401] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 2246.619658][T13401] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 2246.650771][T13401] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 2246.880777][T17622] rxe_eth0 speed is unknown, defaulting to 1000
[ 2247.382273][T17622] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2247.382446][T17622] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2247.382833][T17622] bridge_slave_0: entered allmulticast mode
[ 2247.384876][T17622] bridge_slave_0: entered promiscuous mode
[ 2247.387429][T17622] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2247.387635][T17622] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2247.387772][T17622] bridge_slave_1: entered allmulticast mode
[ 2247.390702][T17622] bridge_slave_1: entered promiscuous mode
[ 2247.433528][T17622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2247.448737][T17622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2247.482792][T17622] team0: Port device team_slave_0 added
[ 2247.485724][T17622] team0: Port device team_slave_1 added
[ 2247.517002][T17622] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2247.517016][T17622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2247.517037][T17622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2247.519855][T17622] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2247.519867][T17622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2247.519888][T17622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2247.578735][T17622] hsr_slave_0: entered promiscuous mode
[ 2247.579777][T17622] hsr_slave_1: entered promiscuous mode
[ 2247.580523][T17622] debugfs: 'hsr0' already exists in 'hsr'
[ 2247.580543][T17622] Cannot create hsr debugfs directory
[ 2249.025404][T15268] Bluetooth: hci15: command tx timeout
[ 2251.279625][T15268] Bluetooth: hci15: command tx timeout
[ 2253.100642][   T38] INFO: task syz-executor:16554 blocked for more than 143 seconds.
[ 2253.100668][   T38]       Tainted: G             L      syzkaller #0
[ 2253.100678][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2253.100687][   T38] task:syz-executor    state:D stack:22392 pid:16554 tgid:16554 ppid:1      task_flags:0x400140 flags:0x00080002
[ 2253.100735][   T38] Call Trace:
[ 2253.100742][   T38]  <TASK>
[ 2253.100755][   T38]  __schedule+0x16d9/0x5700
[ 2253.100806][   T38]  ? __pfx___schedule+0x10/0x10
[ 2253.100841][   T38]  rt_mutex_schedule+0x76/0xf0
[ 2253.100864][   T38]  rt_mutex_slowlock_block+0x55e/0x690
[ 2253.100896][   T38]  rt_mutex_slowlock+0x2d4/0x780
[ 2253.100917][   T38]  ? rt_mutex_slowlock+0x1f2/0x780
[ 2253.100937][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 2253.100971][   T38]  ? new_device_store+0x13c/0x6d0
[ 2253.100998][   T38]  ? new_device_store+0x13c/0x6d0
[ 2253.101014][   T38]  mutex_lock_nested+0x168/0x1d0
[ 2253.101032][   T38]  ? lock_acquire+0x115/0x350
[ 2253.101059][   T38]  new_device_store+0x13c/0x6d0
[ 2253.101079][   T38]  ? __pfx_new_device_store+0x10/0x10
[ 2253.101099][   T38]  ? sysfs_file_kobj+0x1a/0x230
[ 2253.101121][   T38]  ? sysfs_file_kobj+0x1e4/0x230
[ 2253.101142][   T38]  ? sysfs_kf_write+0x166/0x260
[ 2253.101166][   T38]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2253.101186][   T38]  kernfs_fop_write_iter+0x3a5/0x540
[ 2253.101209][   T38]  vfs_write+0x61e/0xbb0
[ 2253.101239][   T38]  ? __pfx_vfs_write+0x10/0x10
[ 2253.101263][   T38]  ? do_sys_openat2+0x14e/0x200
[ 2253.101279][   T38]  ? kmem_cache_free+0x187/0x6d0
[ 2253.101308][   T38]  ksys_write+0x156/0x270
[ 2253.101333][   T38]  ? __pfx_ksys_write+0x10/0x10
[ 2253.101364][   T38]  do_syscall_64+0x166/0x520
[ 2253.101389][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2253.101406][   T38]  ? clear_bhb_loop+0x70/0xc0
[ 2253.101427][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2253.101444][   T38] RIP: 0033:0x7fb9e8a5ed8e
[ 2253.101459][   T38] RSP: 002b:00007ffc70f29c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2253.101476][   T38] RAX: ffffffffffffffda RBX: 000055558bc38500 RCX: 00007fb9e8a5ed8e
[ 2253.101497][   T38] RDX: 0000000000000003 RSI: 00007ffc70f29ca0 RDI: 0000000000000005
[ 2253.101508][   T38] RBP: 00007fb9e8b363a0 R08: 0000000000000000 R09: 0000000000000000
[ 2253.101519][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 2253.101530][   T38] R13: 00007ffc70f29ca0 R14: 00007ffc70f2a4e0 R15: 0000000000000003
[ 2253.101556][   T38]  </TASK>
[ 2253.101564][   T38] INFO: task syz-executor:16626 blocked for more than 143 seconds.
[ 2253.101578][   T38]       Tainted: G             L      syzkaller #0
[ 2253.101587][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2253.101594][   T38] task:syz-executor    state:D stack:22736 pid:16626 tgid:16626 ppid:1      task_flags:0x400140 flags:0x00080002
[ 2253.101640][   T38] Call Trace:
[ 2253.101645][   T38]  <TASK>
[ 2253.101656][   T38]  __schedule+0x16d9/0x5700
[ 2253.101684][   T38]  ? is_bpf_text_address+0x26/0x2b0
[ 2253.101716][   T38]  ? __pfx___schedule+0x10/0x10
[ 2253.101750][   T38]  rt_mutex_schedule+0x76/0xf0
[ 2253.101772][   T38]  rt_mutex_slowlock_block+0x55e/0x690
[ 2253.101803][   T38]  rt_mutex_slowlock+0x2d4/0x780
[ 2253.101824][   T38]  ? rt_mutex_slowlock+0x1f2/0x780
[ 2253.101844][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 2253.101878][   T38]  ? del_device_store+0xd6/0x370
[ 2253.101901][   T38]  ? del_device_store+0xd6/0x370
[ 2253.101918][   T38]  mutex_lock_nested+0x168/0x1d0
[ 2253.101936][   T38]  ? sysfs_file_kobj+0x1a/0x230
[ 2253.101973][   T38]  del_device_store+0xd6/0x370
[ 2253.101994][   T38]  ? sysfs_file_kobj+0x1a/0x230
[ 2253.102018][   T38]  ? __pfx_del_device_store+0x10/0x10
[ 2253.102037][   T38]  ? sysfs_file_kobj+0x1e4/0x230
[ 2253.102082][   T38]  ? sysfs_kf_write+0x166/0x260
[ 2253.102107][   T38]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2253.102127][   T38]  kernfs_fop_write_iter+0x3a5/0x540
[ 2253.102150][   T38]  vfs_write+0x61e/0xbb0
[ 2253.102178][   T38]  ? __pfx_vfs_write+0x10/0x10
[ 2253.102202][   T38]  ? do_sys_openat2+0x14e/0x200
[ 2253.102219][   T38]  ? kmem_cache_free+0x187/0x6d0
[ 2253.102247][   T38]  ksys_write+0x156/0x270
[ 2253.102271][   T38]  ? __pfx_ksys_write+0x10/0x10
[ 2253.102303][   T38]  do_syscall_64+0x166/0x520
[ 2253.102327][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2253.102344][   T38]  ? clear_bhb_loop+0x70/0xc0
[ 2253.102364][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2253.102381][   T38] RIP: 0033:0x7efe98f7ed8e
[ 2253.102395][   T38] RSP: 002b:00007ffee92146e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2253.102411][   T38] RAX: ffffffffffffffda RBX: 000055558b54e500 RCX: 00007efe98f7ed8e
[ 2253.102424][   T38] RDX: 0000000000000001 RSI: 00007ffee9214770 RDI: 0000000000000005
[ 2253.102435][   T38] RBP: 00007efe9905637c R08: 0000000000000000 R09: 0000000000000000
[ 2253.102446][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2253.102456][   T38] R13: 00007ffee9214770 R14: 00007ffee9214fb0 R15: 0000000000000003
[ 2253.102487][   T38]  </TASK>
[ 2253.102496][   T38] INFO: task syz-executor:16673 blocked for more than 143 seconds.
[ 2253.102510][   T38]       Tainted: G             L      syzkaller #0
[ 2253.102519][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2253.102526][   T38] task:syz-executor    state:D stack:22128 pid:16673 tgid:16673 ppid:1      task_flags:0x400140 flags:0x00080002
[ 2253.102571][   T38] Call Trace:
[ 2253.102576][   T38]  <TASK>
[ 2253.102586][   T38]  __schedule+0x16d9/0x5700
[ 2253.102621][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2253.102653][   T38]  ? __pfx___schedule+0x10/0x10
[ 2253.102687][   T38]  rt_mutex_schedule+0x76/0xf0
[ 2253.102708][   T38]  rt_mutex_slowlock_block+0x55e/0x690
[ 2253.102750][   T38]  rt_mutex_slowlock+0x2d4/0x780
[ 2253.102771][   T38]  ? rt_mutex_slowlock+0x1f2/0x780
[ 2253.102791][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 2253.102825][   T38]  ? del_device_store+0xd6/0x370
[ 2253.102850][   T38]  ? del_device_store+0xd6/0x370
[ 2253.102869][   T38]  mutex_lock_nested+0x168/0x1d0
[ 2253.102886][   T38]  ? sysfs_file_kobj+0x1a/0x230
[ 2253.102919][   T38]  del_device_store+0xd6/0x370
[ 2253.102937][   T38]  ? sysfs_file_kobj+0x1a/0x230
[ 2253.102958][   T38]  ? __pfx_del_device_store+0x10/0x10
[ 2253.102977][   T38]  ? sysfs_file_kobj+0x1e4/0x230
[ 2253.103000][   T38]  ? sysfs_kf_write+0x166/0x260
[ 2253.103024][   T38]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2253.103044][   T38]  kernfs_fop_write_iter+0x3a5/0x540
[ 2253.103067][   T38]  vfs_write+0x61e/0xbb0
[ 2253.103096][   T38]  ? __pfx_vfs_write+0x10/0x10
[ 2253.103120][   T38]  ? do_sys_openat2+0x14e/0x200
[ 2253.103136][   T38]  ? kmem_cache_free+0x187/0x6d0
[ 2253.103165][   T38]  ksys_write+0x156/0x270
[ 2253.103189][   T38]  ? __pfx_ksys_write+0x10/0x10
[ 2253.103220][   T38]  do_syscall_64+0x166/0x520
[ 2253.103244][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2253.103261][   T38]  ? clear_bhb_loop+0x70/0xc0
[ 2253.103282][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2253.103298][   T38] RIP: 0033:0x7f7a6ad3ed8e
[ 2253.103312][   T38] RSP: 002b:00007ffff594ded8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2253.103333][   T38] RAX: ffffffffffffffda RBX: 000055558960e500 RCX: 00007f7a6ad3ed8e
[ 2253.103346][   T38] RDX: 0000000000000001 RSI: 00007ffff594df60 RDI: 0000000000000005
[ 2253.103356][   T38] RBP: 00007f7a6ae1637c R08: 0000000000000000 R09: 0000000000000000
[ 2253.103368][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2253.103378][   T38] R13: 00007ffff594df60 R14: 00007ffff594e7a0 R15: 0000000000000003
[ 2253.103403][   T38]  </TASK>
[ 2253.103458][   T38] 
[ 2253.103458][   T38] Showing all locks held in the system:
[ 2253.103470][   T38] locks held by khungtaskd/38: 1, last CPU#0:
[ 2253.103487][   T38]  #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2253.103555][   T38] locks held by getty/5340: 2, on CPU#1:
[ 2253.103571][   T38]  #0: ffff8880370000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2253.103616][   T38]  #1: ffffc900044d32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[ 2253.103660][   T38] locks held by kworker/u9:1/13401: 3, on CPU#0:
[ 2253.103671][   T38]  #0: ffff88806382f138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 2253.103715][   T38]  #1: ffffc900055efc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 2253.103758][   T38]  #2: ffff8880633bcf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430
[ 2253.103798][   T38] locks held by syz-executor/16554: 4, on CPU#0:
[ 2253.103810][   T38]  #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.103855][   T38]  #1: ffff88802ae6e478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2253.103894][   T38]  #2: ffff88802a1373c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2253.103936][   T38]  #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0
[ 2253.103974][   T38] locks held by syz-executor/16558: 7, on CPU#0:
[ 2253.103988][   T38]  #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.104034][   T38]  #1: ffff888050456c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2253.104073][   T38]  #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2253.104116][   T38]  #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2253.104156][   T38]  #4: ffff88803d7a4160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 2253.104200][   T38]  #5: ffff888026296310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[ 2253.104246][   T38]  #6: ffff88806184c890 (&sb->s_type->i_mutex_key#8/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x19a/0x520
[ 2253.104297][   T38] locks held by syz-executor/16626: 4, on CPU#0:
[ 2253.104308][   T38]  #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.104354][   T38]  #1: ffff888023739078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2253.104395][   T38]  #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2253.104438][   T38]  #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2253.104479][   T38] locks held by syz-executor/16673: 4, on CPU#0:
[ 2253.104496][   T38]  #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.104542][   T38]  #1: ffff888062688c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2253.104581][   T38]  #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2253.104627][   T38]  #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2253.104679][   T38] locks held by syz.4.2196/16796: 3, on CPU#0:
[ 2253.104691][   T38]  #0: ffff888025c57128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[ 2253.104732][   T38]  #1: ffff88801fad6510 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.104779][   T38]  #2: ffff888026296310 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_health_report+0x305/0xb20
[ 2253.104825][   T38] locks held by syz-executor/16981: 4, on CPU#0:
[ 2253.104837][   T38]  #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.104883][   T38]  #1: ffff888062570878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2253.104922][   T38]  #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2253.104965][   T38]  #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2253.105007][   T38] locks held by syz-executor/17118: 4, on CPU#0:
[ 2253.105019][   T38]  #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.105065][   T38]  #1: ffff88803bf3a478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2253.105104][   T38]  #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2253.105147][   T38]  #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2253.105187][   T38] locks held by syz-executor/17147: 4, on CPU#0:
[ 2253.105199][   T38]  #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.105245][   T38]  #1: ffff88804c662878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2253.105296][   T38]  #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2253.105339][   T38]  #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2253.105380][   T38] locks held by syz-executor/17239: 4, on CPU#0:
[ 2253.105392][   T38]  #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.105437][   T38]  #1: ffff88802e8eb078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2253.105477][   T38]  #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2253.105525][   T38]  #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2253.105567][   T38] locks held by syz-executor/17333: 4, on CPU#0:
[ 2253.105578][   T38]  #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.105624][   T38]  #1: ffff8880342a7c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2253.105664][   T38]  #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2253.105707][   T38]  #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2253.105749][   T38] locks held by syz-executor/17519: 4, on CPU#0:
[ 2253.105761][   T38]  #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.105807][   T38]  #1: ffff8880373c0c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2253.105846][   T38]  #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2253.105890][   T38]  #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2253.105930][   T38] locks held by syz-executor/17540: 4, on CPU#0:
[ 2253.105942][   T38]  #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.105990][   T38]  #1: ffff888026b0f078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2253.106029][   T38]  #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2253.106072][   T38]  #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2253.106112][   T38] locks held by syz-executor/17561: 4, on CPU#0:
[ 2253.106124][   T38]  #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.106170][   T38]  #1: ffff888060e49878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2253.106209][   T38]  #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2253.106252][   T38]  #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2253.106293][   T38] locks held by syz-executor/17580: 4, on CPU#0:
[ 2253.106304][   T38]  #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.106351][   T38]  #1: ffff888085f0e478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2253.106390][   T38]  #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2253.106433][   T38]  #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2253.106474][   T38] locks held by syz-executor/17603: 4, on CPU#0:
[ 2253.106491][   T38]  #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.106537][   T38]  #1: ffff888085c92078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2253.106576][   T38]  #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2253.106619][   T38]  #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2253.106660][   T38] locks held by syz-executor/17622: 4, on CPU#0:
[ 2253.106671][   T38]  #0: ffff888036572510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2253.106717][   T38]  #1: ffff88801b708078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2253.106756][   T38]  #2: ffff88802a1372d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2253.106801][   T38]  #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2253.106841][   T38] 
[ 2253.106846][   T38] =============================================
[ 2253.106846][   T38] 
[ 2253.106854][   T38] NMI backtrace for cpu 0
[ 2253.106867][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2253.106889][   T38] Tainted: [L]=SOFTLOCKUP
[ 2253.106896][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 2253.106905][   T38] Call Trace:
[ 2253.106912][   T38]  <TASK>
[ 2253.106919][   T38]  dump_stack_lvl+0xe8/0x150
[ 2253.106945][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[ 2253.106965][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2253.106986][   T38]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[ 2253.107009][   T38]  sys_info+0x135/0x170
[ 2253.107026][   T38]  watchdog+0xfd7/0x1030
[ 2253.107055][   T38]  ? watchdog+0x1c7/0x1030
[ 2253.107091][   T38]  kthread+0x38b/0x470
[ 2253.107110][   T38]  ? __pfx_watchdog+0x10/0x10
[ 2253.107130][   T38]  ? __pfx_kthread+0x10/0x10
[ 2253.107149][   T38]  ret_from_fork+0x514/0xb70
[ 2253.107168][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 2253.107185][   T38]  ? __switch_to+0xc89/0x1420
[ 2253.107212][   T38]  ? __pfx_kthread+0x10/0x10
[ 2253.107230][   T38]  ret_from_fork_asm+0x1a/0x30
[ 2253.107258][   T38]  </TASK>
[ 2253.107272][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 2279.500918][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2279.512114][   T38] Tainted: [L]=SOFTLOCKUP
[ 2279.516521][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 2279.526578][   T38] Call Trace:
[ 2279.529855][   T38]  <TASK>
[ 2279.532796][   T38]  vpanic+0x56d/0xa60
[ 2279.536787][   T38]  ? __pfx_vpanic+0x10/0x10
[ 2279.541310][   T38]  ? console_srcu_read_unlock+0x3a/0x60
[ 2279.546869][   T38]  panic+0xc5/0xd0
[ 2279.550595][   T38]  ? __pfx_panic+0x10/0x10
[ 2279.555013][   T38]  ? nmi_cpu_backtrace+0x2b0/0x2d0
[ 2279.560131][   T38]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[ 2279.566291][   T38]  watchdog+0x1030/0x1030
[ 2279.570631][   T38]  ? watchdog+0x1c7/0x1030
[ 2279.575062][   T38]  kthread+0x38b/0x470
[ 2279.579137][   T38]  ? __pfx_watchdog+0x10/0x10
[ 2279.583828][   T38]  ? __pfx_kthread+0x10/0x10
[ 2279.588426][   T38]  ret_from_fork+0x514/0xb70
[ 2279.593021][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 2279.598141][   T38]  ? __switch_to+0xc89/0x1420
[ 2279.602829][   T38]  ? __pfx_kthread+0x10/0x10
[ 2279.607427][   T38]  ret_from_fork_asm+0x1a/0x30
[ 2279.612206][   T38]  </TASK>
[ 2279.615287][   T38] Kernel Offset: disabled
[ 2279.619629][   T38] Rebooting in 86400 seconds..