last executing test programs:

10m12.278907472s ago: executing program 3 (id=4):
eventfd2(0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
unshare(0x20000400)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002)
recvmsg$unix(r2, &(0x7f0000002200)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000300)=""/128, 0x80}, {&(0x7f0000000500)=""/237, 0xed}, {0x0}, {&(0x7f0000000900)=""/211, 0xd3}, {&(0x7f0000000a00)=""/136, 0x88}, {&(0x7f0000000ac0)=""/127, 0x7f}, {&(0x7f0000000b40)=""/253, 0xfd}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x9, &(0x7f0000002180)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x0)

10m8.293897805s ago: executing program 3 (id=9):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000400)={@initdev, @remote}, &(0x7f0000000440)=0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

10m0.25714316s ago: executing program 0 (id=18):
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x23)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xab7f)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
epoll_create(0x9)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000340)="0a000300010000", 0x7)
recvmmsg(r2, &(0x7f0000000840), 0x36, 0x12022, 0x0)
r3 = syz_open_dev$loop(0x0, 0x7, 0x20000)
ioctl$BLKFRASET(r3, 0x1264, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c)

9m58.32602931s ago: executing program 3 (id=19):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xeeee0000, 0x2000, &(0x7f0000f8d000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000f4e000/0x3000)=nil})
ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}], 0x1, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x1c, 0x12, 0x0, 0x101, 0x70bd27, 0x25dfdbfa, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, 0x1c}}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
close(0x3)
syz_open_dev$loop(&(0x7f0000000380), 0x5, 0x20000)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2})
close(0x3)
close(0x4)
syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2)

9m54.673363497s ago: executing program 0 (id=21):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f00000004c0), 0x48, 0x820b, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r2, &(0x7f0000000e80)="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", 0x550, 0x6d91fb6102d8910c, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
write(r0, &(0x7f00000006c0)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a1070000004000000800"/96, 0x60)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x406, r5)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000040))
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000090, 0x0, 0x10}]})
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @sint}]})
ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, 0x0)

9m49.017607507s ago: executing program 3 (id=27):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/185, 0xb9)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random='\x00\x00\x00#\x00'})
socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r5]}, 0x90)
pipe2(&(0x7f00000000c0), 0x81080)

9m47.034214946s ago: executing program 3 (id=29):
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', 0x0, 0x0, 0x0, 0x1)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0)
io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x20, 0x2d, 0x107, 0xfffffffe, 0x1, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488d1}, 0x400c000)

9m46.800428107s ago: executing program 0 (id=30):
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00007a0000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000964000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r2}, 0x68)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$MSR(&(0x7f0000000200), 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', <r4=>0x0, 0x1, 0x7, 0x9, 0x7fffffff, {{0x1c, 0x4, 0x0, 0x4, 0x70, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x33, 0x3, 0x4, [{@broadcast, 0x1}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @rr={0x7, 0xf, 0xfe, [@multicast2, @local, @rand_addr=0x64010102]}, @noop, @noop, @noop, @rr={0x7, 0x1b, 0x85, [@local, @rand_addr=0x64010101, @private=0xa010102, @loopback, @multicast1, @multicast1]}, @rr={0x7, 0x7, 0x97, [@loopback]}, @generic={0x86, 0x3, "e3"}]}}}}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f0000000100)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0xe}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x208080)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
r7 = syz_open_pts(r6, 0x141601)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
close_range(r5, 0xffffffffffffffff, 0x0)

9m44.79658956s ago: executing program 0 (id=33):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdir(0x0, 0x1ff)
mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x8000)
write(r2, &(0x7f0000000000)="5a000300010003", 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)

9m34.27476775s ago: executing program 0 (id=42):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x183, r2)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x2, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd700003dcdf250400000014000600000000000000000000000000000000011400050000000000000000000000000000000000080004000300304508000200"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

9m31.076933426s ago: executing program 32 (id=29):
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', 0x0, 0x0, 0x0, 0x1)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0)
io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x20, 0x2d, 0x107, 0xfffffffe, 0x1, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488d1}, 0x400c000)

9m30.998382632s ago: executing program 0 (id=44):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
close(r3)
listen(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
write(0xffffffffffffffff, &(0x7f0000000680)='dummy_', 0x6)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9m15.127363236s ago: executing program 33 (id=44):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
close(r3)
listen(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
write(0xffffffffffffffff, &(0x7f0000000680)='dummy_', 0x6)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m8.742405764s ago: executing program 4 (id=574):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='map_files\x00')
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
syz_usb_connect(0x0, 0x32, 0x0, 0x0)
setgroups(0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0])
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x20, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x1a, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x3, 0x1, 0x2, 0x7, 0x8, 0x30}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0xb4, &(0x7f0000000240)=""/180, 0x40e00, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x3, 0xa, 0x5}, {0x1, 0x5, 0xe, 0x3}, {0x4, 0x4, 0xc, 0x7}], 0x10, 0x10}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50)

1m4.5688835s ago: executing program 4 (id=579):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
unshare(0x2c020400)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x42, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x8})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r4, 0x0)
socket(0x9, 0x3, 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'})
socket(0x11, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, 0x0, 0x2}, 0x94)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r6], 0x94}}, 0x0)

1m2.453316712s ago: executing program 4 (id=581):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, 0x0, 0x0)
ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
lseek(r6, 0x1000000, 0x0)
write(r5, &(0x7f0000000800)='0', 0x1)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000140)="1f", 0x1, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f00000001c0)="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", 0x1d8, 0xfffffffffffffffd)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
add_key$user(&(0x7f0000006400), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000400)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be83d8ebbbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e39fea3859296659bf4c2467159227ee717f4e959ac989e03926c4e20c2cda4efd37be90f502fd03e4748564d9694e12c10e5e09a6f74d38cf912a8675e4278b61daeede1cb2379ae16ed2e6", 0xcb, 0xfffffffffffffffe)

58.354404105s ago: executing program 4 (id=586):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
truncate(0x0, 0x6)
r0 = socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1a8)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
openat$cgroup_type(r4, 0x0, 0x2, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
syslog(0x4, &(0x7f0000000140)=""/179, 0xb3)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)

56.586428796s ago: executing program 4 (id=588):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
fcntl$dupfd(r1, 0x0, r0)
r2 = syz_open_dev$media(&(0x7f00000000c0), 0x8000007fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70)
mknod$loop(&(0x7f00000002c0)='./file4\x00', 0x20, 0x1)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/usbcore/parameters/quirks\x00', 0x42, 0x1b6)
pwrite64(r3, &(0x7f0000000100)="0000010042", 0x5, 0x1be)
pwrite64(r3, &(0x7f0000000100)="55aa", 0x2, 0x1fe)
pwrite64(r3, &(0x7f0000000340)="4350e70f601a8d149e0b9c475ecae7772ad36f4f21223b7ff314545e0a3ddee6bcea4d4d77392c70554fc3de91ecfa2cc74f395fc2d4cf36cd16e9664e7af56eb0665624d7fd6526f99a70f46bbcf9b036a6824a23296726c78afd5f4123ea5a5dcfde8c4d2d9e5fe8b4df488c1f45e0b1c0c758d4d0250156e395dcbce26fc8f5dec8b4060c90bd79d6da4ef00bd1cc382c082314f46d17415f9ee4869b13a3af5227130085592865f3c5c7addc52fd52f9bb29fdfc2dd6323cc907d4380a54f0ab466f05c1c68ae37e1333867ce02b8236690a3afd3f5dbedf772d5bb4ee2656cfe8b846dbccfe5fda16910dff392129916f9c36586be71a", 0xf9, 0x1e8133)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000100)={0x48})
r5 = syz_open_dev$loop(&(0x7f0000000040), 0x4000000000000, 0x2)
ioctl$LOOP_SET_FD(r5, 0x4c00, r3)
ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$kcm(0x2, 0x3, 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)

50.937262634s ago: executing program 4 (id=594):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000b000000000000000000000009"], 0x0, 0x3e}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r4, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

35.553886858s ago: executing program 34 (id=594):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000b000000000000000000000009"], 0x0, 0x3e}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r4, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

22.07085401s ago: executing program 5 (id=624):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
r3 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000200)={'pcmda12\x00', [0x80000005, 0xe00, 0xffff, 0x4, 0x3, 0x4, 0x3ff, 0x3, 0x2, 0x21, 0x0, 0x2, 0x36683148, 0x3800000, 0x5, 0x100, 0x102, 0x401, 0x1, 0x81, 0x1, 0x6, 0xc, 0x9, 0x40, 0x7, 0x6, 0xa4, 0x7, 0x6, 0xbc, 0x1]})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0)
r4 = syz_clone(0x20000000, &(0x7f00000009c0)="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", 0x2bf, 0x0, &(0x7f0000000040), &(0x7f0000000640)="87f86ad54ee0261301c23b3c8746c90026a82e48e738afbf01f000474531bc881eb05a34e6ddfb6b9a44be6c94ab176e64797e02eb61203b8e89efc641304045fc2cfef3fb56b318d331d08a196c150a9f4f508cc6b8f30008cc377ba5fe42a36b0be39cc1736a26f4130b9615fa058e95a600ad94253d2187c33875128327fda7d26723f9404e0c3f6f612437e0dcdbea61d05cb8bebeb5b2733b6392f0af")
write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
syz_open_procfs(r4, 0x0)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, 0x0)
unshare(0x26020480)
fsmount(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff)
rmdir(&(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.0\x00')

20.256823656s ago: executing program 5 (id=625):
openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
setrlimit(0xa, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(&(0x7f000000cffc)=0x4, 0xd, 0x0, 0x0, 0x0, 0x2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x1, 0x4}, 0x6)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
write(r3, &(0x7f0000000000)="5a0003", 0x3)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, 0x0, 0x20000040)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000440)="315218cb0b0032201f28dd5fc940737070e4d90dfd5b0c61b017d631a0e431f909046ce19cd63fc6473d0307ee68fb29f798047501668f3fb51e66db58b8e730d17a869c744e876873fc41a9c9376ab992d1b078d24a4b91e9786047f4400c24c0c29228479ebf61cca9a1dc73a9edc0d8e75c91be939eb02609aff92732c9bbd28fe400c18bf1de0180", 0x8a)

19.566414013s ago: executing program 5 (id=627):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xf, 0x119000)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
personality(0x619641b6fb4b8591)
syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000300)={0x666666666666799})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x9, 0xffffffff})
r6 = getpid()
syz_clone3(&(0x7f0000000540)={0x81000000, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r6], 0x1}, 0x58)
sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x7, 0x3, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200))

17.706007923s ago: executing program 2 (id=628):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)
ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xb, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
syz_emit_ethernet(0x30, &(0x7f00000002c0)=ANY=[], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x1018042, 0x0)
mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, 0x0, 0x0)
mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff)
symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00')
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r3, &(0x7f0000000340)="0a000300010000", 0x7)

17.471807907s ago: executing program 1 (id=629):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = dup(0xffffffffffffffff)
write$binfmt_elf32(r3, &(0x7f0000000bc0)=ANY=[], 0x58)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0xa, 0x5, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x1, &(0x7f00000020c0)=""/4052, &(0x7f0000000000)=0xfd4)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024})
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}})
openat$null(0xffffffffffffff9c, &(0x7f0000002840), 0x101101, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, &(0x7f0000000080)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(0x0, 0x0, &(0x7f0000000000)='romfs\x00', 0x200000, 0x0)

17.462692861s ago: executing program 6 (id=630):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
write$P9_RREAD(r1, &(0x7f0000004fc0)=ANY=[@ANYBLOB="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"], 0x6bf)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = getpgid(0x0)
r6 = syz_pidfd_open(r5, 0x0)
bind$can_j1939(r1, &(0x7f0000000280)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x3}, 0x1}, 0x18)
r7 = pidfd_getfd(r6, r6, 0x0)
setns(r7, 0x66020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0)

14.059423061s ago: executing program 1 (id=631):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0xe)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40})
r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2)
ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000380)={0x1, 0x1, @start={0x775b4acb, 0x1}})
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r1, 0x12)
close_range(r4, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x10, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

14.050970442s ago: executing program 2 (id=632):
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000500000000000000800000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

12.629430106s ago: executing program 2 (id=633):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0)
open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0)
prlimit64(0x0, 0xc, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
socket$packet(0x11, 0x3, 0x300)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, 0x0)

10.788424544s ago: executing program 6 (id=634):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setitimer(0x1, 0x0, &(0x7f0000000840))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102020000402505a1a440000102030109025c0002010080050904000001020d0000052406000105240022fe0d240f0104000000030002000306241200000c0905810320000101000904010000020d00000904010102020d000009058202100037070509050302ff03050009"], 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000200))
r4 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000009b80)={0x40000012})
r5 = io_uring_setup(0x4129, &(0x7f00000007c0)={0x0, 0x0, 0x1000, 0x0, 0x1000000, 0x0, r3})
r6 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "41fad9231f9605db7317a505c9c6e3c54139a42fc3bb2674bd7c89e8d48b86b308fab237d6231b302b7421a260396f8c81ecc6c21d1ac02a49db9a9a20d2250d", 0x2f}, 0x48, 0x0)
keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f00000004c0)='\'@%\\\x00', &(0x7f0000000500))
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xdc80ea85af82a79c, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x7, r8, 0x0, &(0x7f0000000340)='~', 0x1, 0x80002})
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00000002c0)='\n', 0xfffffff8, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r2, 0x0, &(0x7f000000c000/0x2000)=nil, 0x2000, 0xd})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x80108907, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffe29, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYRES64=r8], 0x114}], 0x1, 0x0, 0x0, 0x24002000}, 0x0)

9.001999368s ago: executing program 2 (id=635):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
r3 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000200)={'pcmda12\x00', [0x80000005, 0xe00, 0xffff, 0x4, 0x3, 0x4, 0x3ff, 0x3, 0x2, 0x21, 0x0, 0x2, 0x36683148, 0x3800000, 0x5, 0x100, 0x102, 0x401, 0x1, 0x81, 0x1, 0x6, 0xc, 0x9, 0x40, 0x7, 0x6, 0xa4, 0x7, 0x6, 0xbc, 0x1]})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0)
r4 = syz_clone(0x20000000, &(0x7f00000009c0)="31c56fb6278b2d04c74f608b1bb0c74c57e4a4d3831c2abd7282ff493ba6bd5524cc38928036d0b8f9788ecd586b41cd47b346b147d5c2af131122a7e0ac4aab6445e7f882244c44625dbcb28d9bbaedae06c30088fda4404eef7df4f60c4e9d8b19a818b457b46db8e0fe136b96723b7cbe4f882d6d93c4d4ce942de085a0864db1a45e1e533d78fddead05801eea6d92d5783b77c3d699a9caa3fbfbb204c301ef29ac62524ad0fd33e51eefa2df57d991fb113ea6b93930f7dfae47be369766d15e7a6cef6ce12953b3ee5f5a7b923ab7d3f9eabbe0c33eb9ed3517f81b0f29c83a920a1a8d39a8a4102e2c38e5d725232855fceda8122fdc8dfe3b364ef594c8fc850b1b0d576762c777defd05f2db32c985724735b67018198a36a1a183a7b054ee0c92a3630c94a27f68f5cb7dc1fa24ef0fd770369c226771cce066508c8da28050475f0f356d6117b0bdde88d715b880e2ba539cfe8a6803eaa842cdab5dc35460dcfd0c152755cba154fd86b91a5206936770d4279cebcd4f683444be52d08159cae87f036a9cf98b4282953db18da0fd0e257721f3160e75b08a0cc83a4d8af79e2b32244346ac39d56006fdd0ee5a928bf15a8502153ed965d66d328f46964234e241c5ecc2a3e0f22f4e7f32aa8696b2631a1ea4550f0000000000000068bcf844c84e883bc1b530935a413b35f06cc66f17efd951b1d6fd678551d3c5b4c71b7e8fa77f7ab0bc823c544147a18c4f948403521e73051a1ace9cd2f86fdad6e37d5c0aaf50d9c81336f5c749c4bb2299d167bec5e3cfe63e945809a0e2abfba592a6486bb834c4b8425fab7fa4230839d1978872f5710c8a8fb7bc100f1f57d221a0267da37ebbe67c2998f8103020f4d48b1c004a6b732529a0400f19a6f8d51210bd71eaa7594970ffa3a746ef5656417d9cf158a2cf8394569814f46936fb4b401139759d40325a4f61053869be04000000000000000000", 0x2bf, 0x0, &(0x7f0000000040), &(0x7f0000000640)="87f86ad54ee0261301c23b3c8746c90026a82e48e738afbf01f000474531bc881eb05a34e6ddfb6b9a44be6c94ab176e64797e02eb61203b8e89efc641304045fc2cfef3fb56b318d331d08a196c150a9f4f508cc6b8f30008cc377ba5fe42a36b0be39cc1736a26f4130b9615fa058e95a600ad94253d2187c33875128327fda7d26723f9404e0c3f6f612437e0dcdbea61d05cb8bebeb5b2733b6392f0af")
write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
syz_open_procfs(r4, 0x0)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, 0x0)
unshare(0x26020480)
fsmount(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff)
rmdir(&(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.0\x00')

8.996394603s ago: executing program 5 (id=636):
r0 = socket$unix(0x1, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e)

8.990666211s ago: executing program 1 (id=644):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_audit(0x10, 0x3, 0x9)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x800, 0x0)
fanotify_init(0x200, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffff}, 0x28)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r0], 0x20)

8.49782958s ago: executing program 1 (id=637):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b05003034313230300603551f030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2", 0x4ae, r2)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x2, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100))
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd700003dcdf250400000014000600000000000000000000000000000000011400050000000000000000000000000000000000080004000300304508000200"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

6.639957491s ago: executing program 5 (id=638):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
read(r4, &(0x7f0000000180), 0x1000)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000280)={0x3, 'veth1_virt_wifi\x00', {0x49789c29}, 0x5})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, 0x0, 0x0)

6.433450684s ago: executing program 6 (id=639):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000440))
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@can={{0x3}, 0x3, 0x2, 0x0, 0x0, "6a000200"}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0xd209f6d83486bb56)
recvmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x3f, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0)
ioctl(r4, 0x40946400, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_emit_vhci(&(0x7f0000001040)=ANY=[@ANYBLOB="040e05070f2086"], 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$mouse(&(0x7f00000002c0), 0xffffffffffffffff, 0x511440)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000480)={0x1f, 0xe, 0x328d, 0x7, 0x5c, 0x4, &(0x7f00000003c0)="83e1c22e081a32a1e62f73731c4b55d340b2f6cf16c93288738151fcdc54383c8f2df7d2ad1fcd3dd984a33382621185abda7735f25369807d47920720521c4ac6e802c9ebfc1e4c85e38176ea768b3579e05fef717c075221563806"})
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x2)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8})
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r10, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r8, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60046, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x80)

6.426870242s ago: executing program 1 (id=640):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x67c, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r7, 0x2285, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xff}, {}, @raw32={[0x0, 0x100]}}], 0x1c)
write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x20}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0x8c)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0x6}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x0, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x1, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93695, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x0, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000003, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x5, 0xbb, 0xce9, 0x201ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0x8e7d, 0x1, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000"], 0x104}}, 0x0)

6.081295362s ago: executing program 2 (id=641):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000040010000500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e861f2618703f1fd5be0e47a029ab29b616b527ccf316f6ae5b5eb"], 0x50)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb9397280017fb8f44cf8b3f170100180000000000000000000000000028359a85b88d4c9614c4f76b8d3c84b7642f2a927aea51285853d20d272b2da1adbc0c11e8b0107c43891e28561c6aaf0b80c2cad2d83e50a80577799799a79f15614276701e1e80a8d064fe7c2ed528307ae47f20054570672e5c2e36799bf3e2b8d142b7af9aa17d6feb3f"], 0x0, 0x1e}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000280)='./myconfig\x00', 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000400)='./myconfig\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x3)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
accept4$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80800)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}})
syz_emit_ethernet(0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000021001122334455000a42"], 0x0)
r5 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f000000ef80), 0x2, 0x0)
write$smackfs_change_rule(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="7d262d2920242061626c20786174626c009b9625a470dcbd9ade01aedc321d203a0e949d43c35af8674a56429f078b96804fa95d1da27844014c6d7aba9fd95ec2194acee0752af042d17cdf5d8a1e71b760e7174173142c770ed16a27a407f48377f21f681ecd4bcb05f102000000efc103e9d6331dfb363cd6415c"], 0x11)

5.00907952s ago: executing program 6 (id=642):
syz_io_uring_setup(0x8ce, 0x0, 0x0, 0x0, &(0x7f0000000280))
openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)="1dfd71d864192bb2e01c945aae35f1bd51ad8c64b9071fa0a870d49a6e01c42b5028df27c3af10b4ba540b149238d64aaca12eacdd5f6d824920e5f9f7adba3df8c68bd4ebac87aebc176fc3322970cc769cb6e9402c692bb1ae6d526f9a40d5", 0x60}, {0x0}, {0x0}], 0x3)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
signalfd(r2, &(0x7f0000000340)={[0xabed2e56]}, 0x8)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
recvmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4, 0x4}, 0x1}], 0x1, 0x60010160, 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000})
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

3.582964358s ago: executing program 2 (id=643):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi4\x00', 0x80, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xed\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
fremovexattr(r2, &(0x7f0000000080)=@random={'system.', 'user.incfs.id\x00'})
sendmmsg$inet6(r2, &(0x7f0000006980)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x55a, @private1, 0x7}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}], 0x1, 0xc010)
sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{&(0x7f0000000600)={0xa, 0x4e24, 0xfdff, @private2, 0xffffffff}, 0x1c, &(0x7f0000000680)}}], 0x1, 0x20044040)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000000), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000))
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r7, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff", @ANYRES16=r7, @ANYBLOB], 0x40c}}, 0x4000000)
ioctl$COMEDI_RANGEINFO(r0, 0x80106408, 0x0)

2.835763347s ago: executing program 6 (id=645):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x84}, 0x48)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000380)=r1, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000710300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x5)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28)
keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0xc, 0x0, 0x5, 0x7fff7ffc}, {0x0, 0xfd, 0x11, 0x7fffffff}]})
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1)

2.757688946s ago: executing program 5 (id=646):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, 0x0)
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00')
symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0)
symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00')
symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00')
symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')
write(0xffffffffffffffff, &(0x7f0000000780)='pcspkr\x00', 0x6)
r2 = syz_open_dev$video(&(0x7f0000000800), 0x11, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})
ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559})

2.649635985s ago: executing program 1 (id=647):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r0, 0x6, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x5, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000640)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000440)='trusted\x00', &(0x7f0000000480)=@keyring={'key_or_keyring:', r5})
r6 = syz_open_dev$vbi(&(0x7f00000002c0), 0x2, 0x2)
ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58)
rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8)

0s ago: executing program 6 (id=648):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e)

kernel console output (not intermixed with test programs):

521][ T5591] bridge_slave_0: entered allmulticast mode
[   82.702750][ T5591] bridge_slave_0: entered promiscuous mode
[   82.716017][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.716239][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.716367][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.716524][ T5590] bridge_slave_1: entered allmulticast mode
[   82.726668][ T5590] bridge_slave_1: entered promiscuous mode
[   82.729007][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.729213][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.729365][ T5592] bridge_slave_1: entered allmulticast mode
[   82.732434][ T5592] bridge_slave_1: entered promiscuous mode
[   82.800196][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.800350][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.800595][ T5591] bridge_slave_1: entered allmulticast mode
[   82.803219][ T5591] bridge_slave_1: entered promiscuous mode
[   82.813773][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.849274][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.904398][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.936134][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.944371][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.967194][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.977353][ T5593] team0: Port device team_slave_0 added
[   82.982751][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.986131][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.007593][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.012796][ T5593] team0: Port device team_slave_1 added
[   83.042747][ T5589] team0: Port device team_slave_0 added
[   83.096259][ T5589] team0: Port device team_slave_1 added
[   83.124163][ T5590] team0: Port device team_slave_0 added
[   83.127696][ T5592] team0: Port device team_slave_0 added
[   83.144311][ T5591] team0: Port device team_slave_0 added
[   83.147451][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.147474][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.147499][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.162066][ T5590] team0: Port device team_slave_1 added
[   83.164856][ T5592] team0: Port device team_slave_1 added
[   83.190095][ T5591] team0: Port device team_slave_1 added
[   83.190955][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.190969][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.190995][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.231717][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.231736][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.231761][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.336265][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.336500][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.336528][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.366022][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.366041][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.366066][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.368750][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.368765][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.368790][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.385945][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.385963][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.385988][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.394656][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.394673][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.394699][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.396128][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.396141][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.396170][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.398530][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.398544][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.398569][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.529838][ T5593] hsr_slave_0: entered promiscuous mode
[   83.532636][ T5593] hsr_slave_1: entered promiscuous mode
[   83.627153][ T5589] hsr_slave_0: entered promiscuous mode
[   83.628451][ T5589] hsr_slave_1: entered promiscuous mode
[   83.629426][ T5589] debugfs: 'hsr0' already exists in 'hsr'
[   83.633422][ T5589] Cannot create hsr debugfs directory
[   83.721767][ T5590] hsr_slave_0: entered promiscuous mode
[   83.723407][ T5590] hsr_slave_1: entered promiscuous mode
[   83.724268][ T5590] debugfs: 'hsr0' already exists in 'hsr'
[   83.724292][ T5590] Cannot create hsr debugfs directory
[   83.735899][ T5592] hsr_slave_0: entered promiscuous mode
[   83.737117][ T5592] hsr_slave_1: entered promiscuous mode
[   83.737980][ T5592] debugfs: 'hsr0' already exists in 'hsr'
[   83.738003][ T5592] Cannot create hsr debugfs directory
[   83.752185][ T5591] hsr_slave_0: entered promiscuous mode
[   83.753919][ T5591] hsr_slave_1: entered promiscuous mode
[   83.754806][ T5591] debugfs: 'hsr0' already exists in 'hsr'
[   83.754835][ T5591] Cannot create hsr debugfs directory
[   84.059710][ T5604] Bluetooth: hci3: command tx timeout
[   84.059785][ T5597] Bluetooth: hci4: command tx timeout
[   84.139830][ T5604] Bluetooth: hci0: command tx timeout
[   84.139897][ T5604] Bluetooth: hci1: command tx timeout
[   84.219652][ T5597] Bluetooth: hci2: command tx timeout
[   85.107892][ T5593] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.174449][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.188054][ T5593] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.218407][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.226628][ T5593] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.253704][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.273921][ T5593] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.312976][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.395003][ T5592] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.441249][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.452751][ T5592] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.492271][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.496519][ T5592] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.532950][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.554339][ T5592] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.591984][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.741474][ T5591] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.785698][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.802538][ T5591] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.844304][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.849085][ T5591] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.863408][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.894327][ T5591] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.922412][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.059257][ T5590] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   86.092321][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.098769][ T5590] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   86.132152][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.139768][ T5597] Bluetooth: hci4: command tx timeout
[   86.139834][ T5597] Bluetooth: hci3: command tx timeout
[   86.146090][ T5590] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   86.163339][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.201110][ T5590] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   86.219791][ T5597] Bluetooth: hci1: command tx timeout
[   86.219860][ T5604] Bluetooth: hci0: command tx timeout
[   86.235000][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.300425][ T5597] Bluetooth: hci2: command tx timeout
[   86.326237][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.372343][ T5589] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   86.406471][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.422079][ T5589] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   86.480487][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.493666][ T5589] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   86.532315][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.552808][ T5589] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   86.592375][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.623014][ T5593] 8021q: adding VLAN 0 to HW filter on device team0
[   86.654811][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.663615][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.664641][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.718061][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.718281][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.802096][   T10] cfg80211: failed to load regulatory.db
[   86.831288][ T5592] 8021q: adding VLAN 0 to HW filter on device team0
[   86.876089][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.883582][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.883818][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.943662][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.943828][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.998829][ T5591] 8021q: adding VLAN 0 to HW filter on device team0
[   87.043627][  T821] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.043842][  T821] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.096681][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.106959][ T4034] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.133402][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.310150][ T5590] 8021q: adding VLAN 0 to HW filter on device team0
[   87.386294][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.403431][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.415452][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.473672][  T821] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.481503][  T821] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.558311][ T5589] 8021q: adding VLAN 0 to HW filter on device team0
[   87.652793][ T3039] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.660172][ T3039] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.705810][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.716382][ T4034] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.219594][ T5604] Bluetooth: hci4: command tx timeout
[   88.222657][ T5597] Bluetooth: hci3: command tx timeout
[   88.245247][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.301741][ T5604] Bluetooth: hci0: command tx timeout
[   88.303320][ T5597] Bluetooth: hci1: command tx timeout
[   88.379605][ T5597] Bluetooth: hci2: command tx timeout
[   88.497132][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.766317][ T5593] veth0_vlan: entered promiscuous mode
[   88.950214][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.979350][ T5593] veth1_vlan: entered promiscuous mode
[   88.993489][ T5592] veth0_vlan: entered promiscuous mode
[   89.029151][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.083326][ T5592] veth1_vlan: entered promiscuous mode
[   89.228952][ T5593] veth0_macvtap: entered promiscuous mode
[   89.297724][ T5593] veth1_macvtap: entered promiscuous mode
[   89.324801][ T5591] veth0_vlan: entered promiscuous mode
[   89.329597][ T5592] veth0_macvtap: entered promiscuous mode
[   89.349075][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.361206][ T5592] veth1_macvtap: entered promiscuous mode
[   89.388142][ T5591] veth1_vlan: entered promiscuous mode
[   89.427006][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.454156][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.473897][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.513354][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.646609][ T5591] veth0_macvtap: entered promiscuous mode
[   89.827372][ T5591] veth1_macvtap: entered promiscuous mode
[   89.955569][ T5589] veth0_vlan: entered promiscuous mode
[   90.221347][ T5589] veth1_vlan: entered promiscuous mode
[   90.244153][ T5590] veth0_vlan: entered promiscuous mode
[   90.271296][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.327458][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.349178][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.354399][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.415415][ T5590] veth1_vlan: entered promiscuous mode
[   90.440896][ T4034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.440968][ T4034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.594779][  T821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.595204][  T821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.692692][ T5589] veth0_macvtap: entered promiscuous mode
[   90.703404][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.703470][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.014111][ T5589] veth1_macvtap: entered promiscuous mode
[   91.171020][ T5590] veth0_macvtap: entered promiscuous mode
[   91.179414][  T821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.180231][  T821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.209155][ T5590] veth1_macvtap: entered promiscuous mode
[   91.281378][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.345788][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.391119][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.392670][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.405098][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.473502][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.897551][  T821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.898071][  T821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.109853][ T3039] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.548699][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.548768][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.695830][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.695885][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.759985][ T1128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.901198][ T1118] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.901414][ T1118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.901600][ T1118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.978189][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.978243][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.063426][ T1118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.063677][ T1118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.297502][ T4034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.298901][ T3039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.299230][ T3039] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.599492][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   97.609499][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   97.619503][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   97.629488][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   98.199643][ T1128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.268642][ T1128] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.274011][ T4034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.485750][ T4035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.718362][ T5825] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   98.870215][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.870467][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.870627][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.870806][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.895998][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.915141][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.930197][ T5825] syz.2.3: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[   98.930474][ T5825] CPU: 1 UID: 0 PID: 5825 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[   98.930498][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   98.930517][ T5825] Call Trace:
[   98.930525][ T5825]  <TASK>
[   98.930533][ T5825]  dump_stack_lvl+0xe8/0x150
[   98.930574][ T5825]  warn_alloc+0x24d/0x270
[   98.930605][ T5825]  ? __pfx_warn_alloc+0x10/0x10
[   98.930631][ T5825]  ? stack_trace_save+0xa9/0x100
[   98.930664][ T5825]  ? check_path+0x21/0x40
[   98.930697][ T5825]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[   98.930728][ T5825]  __vmalloc_node_range_noprof+0x130/0x1560
[   98.930750][ T5825]  ? lockdep_unlock+0x5c/0xd0
[   98.930769][ T5825]  ? __lock_acquire+0x13e8/0x2ce0
[   98.930828][ T5825]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   98.930859][ T5825]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[   98.930887][ T5825]  vmalloc_noprof+0xb2/0xe0
[   98.930910][ T5825]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[   98.930939][ T5825]  dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[   98.930963][ T5825]  ? dvb_demux_do_ioctl+0x323/0x540
[   98.930989][ T5825]  dvb_demux_do_ioctl+0x460/0x540
[   98.931018][ T5825]  dvb_usercopy+0x199/0x2e0
[   98.931044][ T5825]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[   98.931071][ T5825]  ? __pfx_dvb_usercopy+0x10/0x10
[   98.931108][ T5825]  ? __fget_files+0x3a8/0x420
[   98.931136][ T5825]  ? __fget_files+0x2a/0x420
[   98.931171][ T5825]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[   98.931199][ T5825]  dvb_demux_ioctl+0x29/0x40
[   98.931226][ T5825]  __se_sys_ioctl+0xff/0x170
[   98.931254][ T5825]  do_syscall_64+0x166/0x520
[   98.931280][ T5825]  ? trace_irq_disable+0x3b/0x140
[   98.931304][ T5825]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.931325][ T5825]  ? clear_bhb_loop+0x70/0xc0
[   98.931350][ T5825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.931371][ T5825] RIP: 0033:0x7f4d1ecfe0d9
[   98.931399][ T5825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.931416][ T5825] RSP: 002b:00007f4d1cf56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   98.931437][ T5825] RAX: ffffffffffffffda RBX: 00007f4d1ef85fa0 RCX: 00007f4d1ecfe0d9
[   98.931450][ T5825] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008
[   98.931462][ T5825] RBP: 00007f4d1ed95024 R08: 0000000000000000 R09: 0000000000000000
[   98.931473][ T5825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.931483][ T5825] R13: 00007f4d1ef86038 R14: 00007f4d1ef85fa0 R15: 00007ffdcc51a088
[   98.931512][ T5825]  </TASK>
[   98.955929][ T5825] Mem-Info:
[   98.977654][ T5825] active_anon:181 inactive_anon:8541 isolated_anon:0
[   98.977654][ T5825]  active_file:5444 inactive_file:46229 isolated_file:0
[   98.977654][ T5825]  unevictable:0 dirty:637 writeback:0
[   98.977654][ T5825]  slab_reclaimable:11412 slab_unreclaimable:98226
[   98.977654][ T5825]  mapped:32251 shmem:3365 pagetables:1105
[   98.977654][ T5825]  sec_pagetables:0 bounce:0
[   98.977654][ T5825]  kernel_misc_reclaimable:0
[   98.977654][ T5825]  free:1321539 free_pcp:5582 free_cma:0
[   98.977732][ T5825] Node 0 active_anon:724kB inactive_anon:34164kB active_file:21568kB inactive_file:184916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129004kB dirty:2532kB writeback:0kB shmem:13460kB kernel_stack:13000kB pagetables:4284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   98.977784][ T5825] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   98.977833][ T5825] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   98.977901][ T5825] lowmem_reserve[]: 0 2499 2500 2500 2500
[   98.977939][ T5825] Node 0 DMA32 free:1325604kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:724kB inactive_anon:34164kB active_file:21568kB inactive_file:184916kB unevictable:0kB writepending:2532kB zspages:0kB present:3129332kB managed:2559020kB mlocked:0kB bounce:0kB free_pcp:22320kB local_pcp:5548kB free_cma:0kB
[   98.978001][ T5825] lowmem_reserve[]: 0 0 1 1 1
[   98.978037][ T5825] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1820kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB
[   98.978094][ T5825] lowmem_reserve[]: 0 0 0 0 0
[   98.978130][ T5825] Node 1 Normal free:3945192kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB writepending:16kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   98.978950][ T5825] lowmem_reserve[]: 0 0 0 0 0
[   98.978992][ T5825] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   98.986588][ T5825] Node 0 DMA32: 933*4kB (UME) 596*8kB (UE) 79*16kB (UM) 4*32kB (U) 3*64kB (UME) 1*128kB (U) 76*256kB (UME) 13*512kB (UM) 7*1024kB (UM) 6*2048kB (ME) 310*4096kB (M) = 1325540kB
[   99.097921][ T5825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[   99.098030][ T5825] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 7*16kB (UM) 6*32kB (UM) 4*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 962*4096kB (M) = 3945192kB
[   99.098209][ T5825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   99.098227][ T5825] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   99.098244][ T5825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   99.098261][ T5825] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   99.098277][ T5825] 53584 total pagecache pages
[   99.098291][ T5825] 0 pages in swap cache
[   99.098298][ T5825] Free swap  = 124996kB
[   99.098320][ T5825] Total swap = 124996kB
[   99.098328][ T5825] 2097051 pages RAM
[   99.098336][ T5825] 0 pages HighMem/MovableOnly
[   99.098343][ T5825] 425225 pages reserved
[   99.098351][ T5825] 0 pages cma reserved
[  107.588518][ T5874] Bluetooth: MGMT ver 1.23
[  113.012891][ T5895] xfrm0: entered allmulticast mode
[  115.559507][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  115.569511][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  115.579506][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  115.589506][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  115.599504][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  115.609505][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  117.489664][ T5911] Bluetooth: MGMT ver 1.23
[  117.546777][ T5911] Bluetooth: hci0: invalid length 0, exp 2 for type 19
[  119.624424][ T5910] syz.4.24 (5910) used greatest stack depth: 18528 bytes left
[  127.497030][   T37] audit: type=1326 audit(1787704637.468:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.2.37" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d1ecfe0d9 code=0x0
[  128.286851][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'.
[  132.811510][ T5985] Zero length message leads to an empty skb
[  133.359928][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  133.480521][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  137.678737][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  137.733612][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  137.848661][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  138.028306][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  138.086036][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  140.796797][ T5597] Bluetooth: hci5: command tx timeout
[  142.277249][ T6033] netlink: 44 bytes leftover after parsing attributes in process `syz.4.51'.
[  143.054616][ T5597] Bluetooth: hci5: command tx timeout
[  144.694083][ T6050] CIFS mount error: No usable UNC path provided in device string!
[  144.694083][ T6050] 
[  144.694374][ T6050] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  145.138966][ T5597] Bluetooth: hci5: command tx timeout
[  147.897619][ T5597] Bluetooth: hci5: command tx timeout
[  149.648143][ T6070] PKCS7: Unknown OID: [4] 0.0
[  149.648894][ T6070] PKCS7: Only support pkcs7_signedData type
[  154.546083][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  154.565784][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  154.568425][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  154.573860][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  154.576236][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  154.715211][ T1137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.412338][ T6096] mmap: syz.2.57 (6096) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  156.724289][ T5597] Bluetooth: hci0: command tx timeout
[  158.780033][ T5597] Bluetooth: hci0: command tx timeout
[  160.288167][ T1137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.873764][ T5597] Bluetooth: hci0: command tx timeout
[  162.940188][ T5597] Bluetooth: hci0: command tx timeout
[  163.125551][ T1137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.484504][ T6129] comedi comedi3: pcmmio: I/O base address not correctly aligned
[  166.407804][ T1137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.890248][   T37] audit: type=1800 audit(1787704680.338:3): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.77" name="file0" dev="overlay" ino=126 res=0 errno=0
[  173.392562][ T5721] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  173.713592][ T5721] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  173.881818][ T5721] usb 5-1: config 150 has an invalid interface number: 204 but max is 2
[  173.892255][ T5721] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  173.892271][ T5721] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3
[  173.892282][ T5721] usb 5-1: config 150 has no interface number 0
[  173.892304][ T5721] usb 5-1: config 150 interface 204 has no altsetting 0
[  173.935683][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.935701][ T5721] usb 5-1: Product: syz
[  173.935708][ T5721] usb 5-1: Manufacturer: syz
[  173.935716][ T5721] usb 5-1: SerialNumber: syz
[  174.761553][ T5721] usb 5-1: USB disconnect, device number 2
[  175.134265][ T6200] binder: 6196:6200 ioctl 4018620d 0 returned -22
[  175.731659][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.742428][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.742984][ T6007] bridge_slave_0: entered allmulticast mode
[  175.779801][ T6007] bridge_slave_0: entered promiscuous mode
[  176.316174][ T6211] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  176.323568][ T6211] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  180.133440][ T1137] bridge_slave_1: left allmulticast mode
[  180.150548][ T1137] bridge_slave_1: left promiscuous mode
[  180.177948][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.253692][ T1137] bridge_slave_0: left allmulticast mode
[  185.272829][ T1137] bridge_slave_0: left promiscuous mode
[  185.273100][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.827406][ T6254] fuse: Unknown parameter '00000000000000000000003000000000000000000000030x0000000000000003'
[  189.150533][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.249710][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.697807][ T1137] bond0 (unregistering): Released all slaves
[  193.139708][ T6241] tipc: Started in network mode
[  193.139744][ T6241] tipc: Node identity 7f000001, cluster identity 4711
[  193.141898][ T6241] tipc: New replicast peer: 127.0.0.2
[  193.142598][ T6241] tipc: Enabled bearer <udp:syz0>, priority 10
[  193.357495][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.357656][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.357858][ T6007] bridge_slave_1: entered allmulticast mode
[  193.367721][ T6007] bridge_slave_1: entered promiscuous mode
[  193.562592][ T5252] 8021q: adding VLAN 0 to HW filter on device eth1
[  194.657277][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  194.658023][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  195.349254][   T31] tipc: Node number set to 2130706433
[  195.375883][ T6007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.608129][ T6007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.106543][ T6312] xfrm0: entered allmulticast mode
[  200.160683][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  200.212340][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  200.217465][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  200.221971][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  200.228738][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  201.829889][ T6342] PKCS7: Unknown OID: [4] 0.0
[  201.829924][ T6342] PKCS7: Only support pkcs7_signedData type
[  202.299544][ T5597] Bluetooth: hci4: command tx timeout
[  204.763847][ T6360] overlayfs: failed lookup in lower (newroot/31, name='file0', err=-40): overlapping layers
[  205.275001][ T5597] Bluetooth: hci4: command tx timeout
[  206.942027][ T5252] 8021q: adding VLAN 0 to HW filter on device eth2
[  207.813375][ T5597] Bluetooth: hci4: command tx timeout
[  207.817039][ T5597] Bluetooth: hci2: command 0x0406 tx timeout
[  207.817079][ T5597] Bluetooth: hci1: command 0x0406 tx timeout
[  207.817104][ T5597] Bluetooth: hci3: command 0x0406 tx timeout
[  209.191726][   T37] audit: type=1800 audit(1787704719.218:4): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.119" name="file0" dev="overlay" ino=183 res=0 errno=0
[  209.844040][ T5604] Bluetooth: hci4: command tx timeout
[  211.344337][ T6397] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2)
[  213.265578][ T6083] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR
[  214.199318][ T6409] netlink: 76 bytes leftover after parsing attributes in process `syz.1.123'.
[  215.130487][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  215.166747][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  215.177657][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  215.183714][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  215.187854][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  217.507414][ T5604] Bluetooth: hci5: command tx timeout
[  220.357739][ T6426] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  220.360248][ T5252] 8021q: adding VLAN 0 to HW filter on device eth3
[  220.465099][ T5604] Bluetooth: hci5: command tx timeout
[  221.516811][ T6468] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size.
[  221.954604][   T36] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  222.157214][ T6474] netlink: 112 bytes leftover after parsing attributes in process `syz.4.131'.
[  222.730640][ T5604] Bluetooth: hci5: command tx timeout
[  222.970939][   T36] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  223.294884][   T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.303674][   T36] usb 2-1: Product: syz
[  223.303695][   T36] usb 2-1: Manufacturer: syz
[  223.303709][   T36] usb 2-1: SerialNumber: syz
[  225.032596][ T5604] Bluetooth: hci5: command tx timeout
[  225.616674][   T36] usb 2-1: USB2VGA dongle found at address 2
[  225.947139][   T36] usb 2-1: Allocated 8 output buffers
[  226.025840][   T36] usb 2-1: Failed to early initialize device
[  226.097517][   T36] usb 2-1: USB disconnect, device number 2
[  226.222195][ T6498] =======================================================
[  226.222195][ T6498] WARNING: The mand mount option has been deprecated and
[  226.222195][ T6498]          and is ignored by this kernel. Remove the mand
[  226.222195][ T6498]          option from the mount to silence this warning.
[  226.222195][ T6498] =======================================================
[  226.320026][ T1137] hsr_slave_0: left promiscuous mode
[  226.360179][ T1137] hsr_slave_1: left promiscuous mode
[  226.361802][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.361933][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.398535][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.399594][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.542031][ T1137] veth1_macvtap: left promiscuous mode
[  226.543642][ T1137] veth0_macvtap: left promiscuous mode
[  226.543861][ T1137] veth1_vlan: left promiscuous mode
[  226.544157][ T1137] veth0_vlan: left promiscuous mode
[  233.236619][ T6521] LUN: removable file: (no medium)
[  233.673770][   T37] audit: type=1326 audit(1787704743.678:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.1.140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ba362e0d9 code=0x0
[  235.795929][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.144'.
[  236.700602][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  237.552121][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  240.917043][ T5252] 8021q: adding VLAN 0 to HW filter on device eth4
[  241.367026][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.367106][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.367248][ T6322] bridge_slave_0: entered allmulticast mode
[  241.374132][ T6322] bridge_slave_0: entered promiscuous mode
[  241.455783][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.466171][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.466392][ T6322] bridge_slave_1: entered allmulticast mode
[  241.471962][ T6322] bridge_slave_1: entered promiscuous mode
[  241.647938][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.648321][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.648510][ T6421] bridge_slave_0: entered allmulticast mode
[  241.656455][ T6421] bridge_slave_0: entered promiscuous mode
[  241.678381][ T6322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.683899][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.684018][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.684210][ T6421] bridge_slave_1: entered allmulticast mode
[  241.687874][ T6421] bridge_slave_1: entered promiscuous mode
[  241.693972][ T6322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.858845][ T6421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.891199][ T6322] team0: Port device team_slave_0 added
[  241.905722][ T6421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.922303][ T6322] team0: Port device team_slave_1 added
[  247.032398][ T1137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.289825][ T6421] team0: Port device team_slave_0 added
[  248.297345][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.304437][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.304468][ T6322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.315012][ T6421] team0: Port device team_slave_1 added
[  248.380161][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.387239][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.387272][ T6322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.869843][ T1137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.114801][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.114857][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.114878][ T6421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.141887][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.141906][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.141933][ T6421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.729029][ T6634] input: syz0 as /devices/virtual/input/input5
[  250.657125][ T1137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.126128][ T6322] hsr_slave_0: entered promiscuous mode
[  251.154779][ T6322] hsr_slave_1: entered promiscuous mode
[  251.158569][ T6322] debugfs: 'hsr0' already exists in 'hsr'
[  251.158637][ T6322] Cannot create hsr debugfs directory
[  252.315791][ T6421] hsr_slave_0: entered promiscuous mode
[  252.330581][ T6421] hsr_slave_1: entered promiscuous mode
[  252.372137][ T6421] debugfs: 'hsr0' already exists in 'hsr'
[  252.378019][ T6421] Cannot create hsr debugfs directory
[  253.155474][   T37] audit: type=1326 audit(1787704763.428:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.4.163" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d887e0d9 code=0x7ffc0000
[  253.155550][   T37] audit: type=1326 audit(1787704763.428:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.4.163" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d887e0d9 code=0x7ffc0000
[  253.155590][   T37] audit: type=1326 audit(1787704763.448:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.4.163" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f88d883e90e code=0x7ffc0000
[  253.155629][   T37] audit: type=1326 audit(1787704763.448:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.4.163" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d887e0d9 code=0x7ffc0000
[  253.155667][   T37] audit: type=1326 audit(1787704763.458:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.4.163" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d887e0d9 code=0x7ffc0000
[  253.155706][   T37] audit: type=1326 audit(1787704763.468:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.4.163" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88d887e0d9 code=0x7ffc0000
[  253.155745][   T37] audit: type=1326 audit(1787704763.468:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.4.163" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d887e0d9 code=0x7ffc0000
[  253.155784][   T37] audit: type=1326 audit(1787704763.468:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.4.163" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d887e0d9 code=0x7ffc0000
[  253.155822][   T37] audit: type=1326 audit(1787704763.478:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.4.163" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88d887e0d9 code=0x7ffc0000
[  253.155862][   T37] audit: type=1326 audit(1787704763.488:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.4.163" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d887e0d9 code=0x7ffc0000
[  256.254651][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  256.254720][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  256.398283][ T1137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.661812][ T5786] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  257.156775][ T6668] Set syz1 is full, maxelem 256 reached
[  257.791369][ T5786] usb 5-1: Using ep0 maxpacket: 32
[  257.792214][ T5786] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  257.811012][ T5786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.811096][ T5786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.811134][ T5786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.852677][ T5786] usb 5-1: config 0 descriptor??
[  258.213599][ T5786] hub 5-1:0.0: USB hub found
[  258.878682][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.957791][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.247073][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  259.304883][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  259.325455][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  259.357552][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  259.382094][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  261.535263][ T5786] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  261.581180][ T5786] usbhid 5-1:0.0: can't add hid device: -71
[  261.581318][ T5786] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  261.899622][ T5612] Bluetooth: hci0: command tx timeout
[  261.955848][ T5786] usb 5-1: USB disconnect, device number 3
[  263.355730][ T6711] lo speed is unknown, defaulting to 1000
[  263.368731][ T6711] lo speed is unknown, defaulting to 1000
[  263.382479][ T6711] lo speed is unknown, defaulting to 1000
[  263.561257][ T6711] infiniband syz1: set active
[  263.561281][ T6711] infiniband syz1: added lo
[  263.568824][ T6711] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  263.574369][ T6711] infiniband syz1: Couldn't open port 1
[  263.574658][ T6711] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  263.574678][ T6711] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  263.574699][ T6711] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  263.587073][   T31] lo speed is unknown, defaulting to 1000
[  263.738374][ T6711] RDS/IB: syz1: added
[  263.738900][ T6711] smc: adding ib device syz1 with port count 1
[  263.739075][ T6711] smc:    ib device syz1 port 1 has no pnetid
[  263.744223][ T6711] lo speed is unknown, defaulting to 1000
[  263.914939][ T6711] lo speed is unknown, defaulting to 1000
[  263.979619][ T5612] Bluetooth: hci0: command tx timeout
[  264.074324][ T6711] lo speed is unknown, defaulting to 1000
[  264.231597][ T6711] lo speed is unknown, defaulting to 1000
[  264.389880][ T6711] lo speed is unknown, defaulting to 1000
[  264.546360][ T6711] lo speed is unknown, defaulting to 1000
[  264.687863][   T31] lo speed is unknown, defaulting to 1000
[  264.770861][ T6711] lo speed is unknown, defaulting to 1000
[  264.938371][ T6711] lo speed is unknown, defaulting to 1000
[  266.059515][ T5612] Bluetooth: hci0: command tx timeout
[  267.087125][ T1137] bridge_slave_1: left allmulticast mode
[  267.098396][ T1137] bridge_slave_1: left promiscuous mode
[  267.098664][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.367301][ T1137] bridge_slave_0: left allmulticast mode
[  267.367392][ T1137] bridge_slave_0: left promiscuous mode
[  267.367676][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.491586][ T6738] process 'syz.4.176' launched './file0' with NULL argv: empty string added
[  268.139811][ T5612] Bluetooth: hci0: command tx timeout
[  269.549923][ T1137] bridge_slave_1: left allmulticast mode
[  269.566148][ T1137] bridge_slave_1: left promiscuous mode
[  269.566396][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.992545][ T1137] bridge_slave_0: left allmulticast mode
[  269.994134][ T1137] bridge_slave_0: left promiscuous mode
[  269.994381][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.678429][ T1137] bond0 (unregistering): Released all slaves
[  274.809102][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  274.866133][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  274.876780][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  274.887205][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  274.888289][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  275.421541][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  275.521239][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  275.603258][ T1137] bond0 (unregistering): Released all slaves
[  277.019571][ T5604] Bluetooth: hci4: command tx timeout
[  277.311186][ T6790] kvm [6789]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffc900000000
[  277.325525][ T6790] kvm [6789]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfefd00000000
[  277.325669][ T6790] kvm [6789]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  277.450340][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  277.570477][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  277.616615][ T1137] bond0 (unregistering): Released all slaves
[  277.896615][ T6773] warning: `syz.1.185' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  279.344490][ T5604] Bluetooth: hci4: command tx timeout
[  281.436724][ T5604] Bluetooth: hci4: command tx timeout
[  283.516140][ T5604] Bluetooth: hci4: command tx timeout
[  283.574110][ T6683] lo speed is unknown, defaulting to 1000
[  286.289313][ T6779] lo speed is unknown, defaulting to 1000
[  288.832788][ T6870] netlink: 'syz.4.198': attribute type 2 has an invalid length.
[  291.351696][ T6892] capability: warning: `syz.2.202' uses 32-bit capabilities (legacy support in use)
[  293.985734][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.993180][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.993369][ T6683] bridge_slave_0: entered allmulticast mode
[  294.022126][ T6683] bridge_slave_0: entered promiscuous mode
[  294.029613][ T5786] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  294.079777][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.079932][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.080134][ T6683] bridge_slave_1: entered allmulticast mode
[  294.125004][ T6683] bridge_slave_1: entered promiscuous mode
[  294.219479][ T5786] usb 2-1: Using ep0 maxpacket: 32
[  294.225658][ T5786] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  294.240664][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.576380][ T5786] gspca_main: nw80x-2.14.0 probing 055f:d001
[  294.707313][ T6683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.833688][ T6683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.698639][ T5786] usb 2-1: USB disconnect, device number 3
[  295.931852][ T6683] team0: Port device team_slave_0 added
[  296.028179][ T6683] team0: Port device team_slave_1 added
[  298.076789][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.087382][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  298.088957][ T6683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.586209][ T1137] hsr_slave_0: left promiscuous mode
[  298.621318][ T1137] hsr_slave_1: left promiscuous mode
[  298.631611][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  298.641047][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  298.690782][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  298.699911][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  298.906238][ T1137] veth1_macvtap: left promiscuous mode
[  298.918740][ T1137] veth0_macvtap: left promiscuous mode
[  298.918927][ T1137] veth1_vlan: left promiscuous mode
[  298.919146][ T1137] veth0_vlan: left promiscuous mode
[  301.347238][ T6967] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800
[  303.503290][ T6981] trusted_key: syz.1.215 sent an empty control message without MSG_MORE.
[  304.640686][ T6988] input: syz0 as /devices/virtual/input/input6
[  307.278929][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  307.312522][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  307.520001][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.530288][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  307.530320][ T6683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.542147][ T5252] 8021q: adding VLAN 0 to HW filter on device eth5
[  308.259871][ T7015] kAFS: Can only specify source 'none' with -o dyn
[  308.324690][ T6683] hsr_slave_0: entered promiscuous mode
[  308.357155][ T6683] hsr_slave_1: entered promiscuous mode
[  308.371017][ T6683] debugfs: 'hsr0' already exists in 'hsr'
[  308.376974][ T6683] Cannot create hsr debugfs directory
[  309.323547][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.324179][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.324385][ T6779] bridge_slave_0: entered allmulticast mode
[  309.330541][ T6779] bridge_slave_0: entered promiscuous mode
[  309.501058][ T7036] syz.4.223 (7036): attempted to duplicate a private mapping with mremap.  This is not supported.
[  310.044150][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.045797][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.062895][ T6779] bridge_slave_1: entered allmulticast mode
[  310.208987][ T6779] bridge_slave_1: entered promiscuous mode
[  313.047199][ T6779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  313.735556][ T6779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.012898][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  318.020200][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  318.107829][ T6779] team0: Port device team_slave_0 added
[  318.210543][ T6779] team0: Port device team_slave_1 added
[  318.508184][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.508259][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  318.508286][ T6779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.515807][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.515867][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  318.517437][ T6779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  319.831971][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  319.874993][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  319.882712][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  319.895839][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  319.897830][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  319.951793][ T6779] hsr_slave_0: entered promiscuous mode
[  319.961718][ T6779] hsr_slave_1: entered promiscuous mode
[  319.966184][ T6779] debugfs: 'hsr0' already exists in 'hsr'
[  319.966214][ T6779] Cannot create hsr debugfs directory
[  321.101555][ T5252] 8021q: adding VLAN 0 to HW filter on device eth6
[  322.101516][ T5612] Bluetooth: hci5: command tx timeout
[  322.519446][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  323.934761][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  324.661841][ T5612] Bluetooth: hci5: command tx timeout
[  324.737456][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.748470][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.748499][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  324.748546][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.796207][    T9] usb 5-1: config 0 descriptor??
[  326.040970][ T7076] lo speed is unknown, defaulting to 1000
[  326.731186][ T5612] Bluetooth: hci5: command tx timeout
[  328.526008][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  328.526171][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  328.559219][    T9] usb 5-1: USB disconnect, device number 4
[  328.779497][ T5612] Bluetooth: hci5: command tx timeout
[  330.148844][ T5252] 8021q: adding VLAN 0 to HW filter on device eth7
[  335.949495][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  336.109585][    T9] usb 5-1: Using ep0 maxpacket: 16
[  336.121842][    T9] usb 5-1: New USB device found, idVendor=2c7c, idProduct=6009, bcdDevice=19.2a
[  336.123478][    T9] usb 5-1: config 3 has an invalid interface number: 225 but max is 0
[  336.123503][    T9] usb 5-1: config 3 has no interface number 0
[  336.123533][    T9] usb 5-1: config 3 interface 225 has no altsetting 0
[  336.128647][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.128671][    T9] usb 5-1: Product: syz
[  336.128686][    T9] usb 5-1: Manufacturer: syz
[  336.128700][    T9] usb 5-1: SerialNumber: syz
[  336.242890][ T5252] 8021q: adding VLAN 0 to HW filter on device eth8
[  336.370687][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  336.413535][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  336.428689][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  336.436920][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  336.438053][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  338.485477][ T7213] 9p: Bad value for 'wfdno'
[  338.534315][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.539517][ T5612] Bluetooth: hci0: command tx timeout
[  338.554439][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.554752][ T7076] bridge_slave_0: entered allmulticast mode
[  338.573121][ T7076] bridge_slave_0: entered promiscuous mode
[  338.603984][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.612299][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.613411][ T7076] bridge_slave_1: entered allmulticast mode
[  339.008022][ T7076] bridge_slave_1: entered promiscuous mode
[  340.619701][ T5612] Bluetooth: hci0: command tx timeout
[  340.802700][    T9] option 5-1:3.225: GSM modem (1-port) converter detected
[  340.840008][    T9] usb 5-1: USB disconnect, device number 5
[  340.858564][    T9] option 5-1:3.225: device disconnected
[  341.346018][ T7223] loop5: detected capacity change from 0 to 7
[  341.906813][ T7223] Dev loop5: unable to read RDB block 7
[  341.906857][ T7223]  loop5: AHDI p1
[  341.906876][ T7223] loop5: partition table partially beyond EOD, truncated
[  342.034490][ T1137] bridge_slave_1: left allmulticast mode
[  342.034585][ T1137] bridge_slave_1: left promiscuous mode
[  342.034840][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.207853][ T1137] bridge_slave_0: left allmulticast mode
[  342.211404][ T1137] bridge_slave_0: left promiscuous mode
[  342.211623][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.259526][   T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  342.462335][ T7230] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  342.462578][ T7230] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  342.470537][   T31] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  342.526483][   T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  342.526558][   T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  342.544899][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  342.544926][   T31] usb 5-1: SerialNumber: syz
[  342.733054][ T5612] Bluetooth: hci0: command tx timeout
[  343.551742][ T1137] bridge_slave_1: left allmulticast mode
[  343.558112][ T1137] bridge_slave_1: left promiscuous mode
[  343.601937][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.878507][   T31] usb 5-1: can't set config #1, error -71
[  344.101834][   T31] usb 5-1: USB disconnect, device number 6
[  346.076688][ T5612] Bluetooth: hci0: command tx timeout
[  346.399241][ T1137] bridge_slave_0: left allmulticast mode
[  346.399277][ T1137] bridge_slave_0: left promiscuous mode
[  346.412383][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.043432][ T1137] bridge_slave_1: left allmulticast mode
[  348.043511][ T1137] bridge_slave_1: left promiscuous mode
[  348.044061][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.160333][ T1137] bridge_slave_0: left allmulticast mode
[  348.160365][ T1137] bridge_slave_0: left promiscuous mode
[  348.160517][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.713043][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  349.530360][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  349.570795][ T1137] bond0 (unregistering): Released all slaves
[  349.790393][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  349.849972][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  349.890862][ T1137] bond0 (unregistering): Released all slaves
[  350.069936][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  350.079491][ T5785] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  350.150037][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  350.211835][ T1137] bond0 (unregistering): Released all slaves
[  350.239444][ T5785] usb 2-1: Using ep0 maxpacket: 16
[  350.242443][ T5785] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  350.254692][ T5785] usb 2-1: config index 0 descriptor too short (expected 19183, got 202)
[  350.254759][ T5785] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  350.254780][ T5785] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  350.254798][ T5785] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95
[  350.292906][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.292970][ T5785] usb 2-1: Product: syz
[  350.292986][ T5785] usb 2-1: Manufacturer: syz
[  350.292998][ T5785] usb 2-1: SerialNumber: syz
[  350.678003][ T5785] usb 2-1: 0:2 : does not exist
[  351.019124][ T7076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.080466][ T5721] usb 2-1: USB disconnect, device number 4
[  351.432860][ T7076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.664083][ T7076] team0: Port device team_slave_0 added
[  351.747938][ T7076] team0: Port device team_slave_1 added
[  351.748757][ T7194] lo speed is unknown, defaulting to 1000
[  353.243575][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_0
[  353.250768][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  353.250800][ T7076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  353.298671][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.307619][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  353.307653][ T7076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.777332][ T7076] hsr_slave_0: entered promiscuous mode
[  353.791233][ T7076] hsr_slave_1: entered promiscuous mode
[  353.802551][ T7076] debugfs: 'hsr0' already exists in 'hsr'
[  353.807233][ T7076] Cannot create hsr debugfs directory
[  365.931304][ T7339] netlink: 104 bytes leftover after parsing attributes in process `syz.2.276'.
[  366.665105][ T7348] device-mapper: ioctl: only supply one of name or uuid, cmd(14)
[  368.139590][ T1137] hsr_slave_0: left promiscuous mode
[  368.179555][ T1137] hsr_slave_1: left promiscuous mode
[  368.197254][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  368.306723][ T7359] LUN: removable file: (no medium)
[  368.481817][   T37] kauditd_printk_skb: 25 callbacks suppressed
[  368.482319][   T37] audit: type=1800 audit(1787704878.928:41): pid=7360 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.280" name="file" dev="configfs" ino=15311 res=0 errno=0
[  369.302985][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.479718][ T1137] hsr_slave_0: left promiscuous mode
[  369.522734][ T1137] hsr_slave_1: left promiscuous mode
[  369.523863][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.580384][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  371.135074][ T1137] hsr_slave_0: left promiscuous mode
[  372.659691][ T1137] hsr_slave_1: left promiscuous mode
[  372.882314][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.934036][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  374.201838][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  374.229977][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  374.577776][ T7384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.287'.
[  374.954497][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  375.760213][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  376.389781][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  376.610276][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  377.033311][ T7400] Bluetooth: MGMT ver 1.23
[  377.039016][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'.
[  377.138162][ T7402] input: syz0 as /devices/virtual/input/input7
[  381.530023][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  382.610828][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  382.653160][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  382.657461][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  382.662720][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  382.677495][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  384.779477][ T5604] Bluetooth: hci4: command tx timeout
[  386.939652][ T5604] Bluetooth: hci4: command tx timeout
[  387.649988][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.658080][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.658649][ T7194] bridge_slave_0: entered allmulticast mode
[  387.687768][ T7194] bridge_slave_0: entered promiscuous mode
[  387.800485][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.810281][ T7194] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.810483][ T7194] bridge_slave_1: entered allmulticast mode
[  387.847271][ T7194] bridge_slave_1: entered promiscuous mode
[  387.952709][ T7194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.956473][ T7194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.019397][ T5604] Bluetooth: hci4: command tx timeout
[  390.402935][ T7194] team0: Port device team_slave_0 added
[  390.416566][ T7194] team0: Port device team_slave_1 added
[  390.794877][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.794977][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  390.795005][ T7194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.852216][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.859524][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  390.859556][ T7194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.125562][ T5604] Bluetooth: hci4: command tx timeout
[  392.182008][ T7194] hsr_slave_0: entered promiscuous mode
[  392.183415][ T7194] hsr_slave_1: entered promiscuous mode
[  392.184253][ T7194] debugfs: 'hsr0' already exists in 'hsr'
[  392.184276][ T7194] Cannot create hsr debugfs directory
[  392.234463][ T7454] lo speed is unknown, defaulting to 1000
[  394.705872][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'.
[  394.898242][ T7544] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request
[  397.963894][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  397.975067][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  397.978138][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  398.051583][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  398.064704][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  400.224249][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.224434][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.224596][ T7454] bridge_slave_0: entered allmulticast mode
[  400.233675][ T7454] bridge_slave_0: entered promiscuous mode
[  400.238230][ T7569] lo speed is unknown, defaulting to 1000
[  400.240298][ T7454] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.240534][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.240697][ T7454] bridge_slave_1: entered allmulticast mode
[  400.248415][ T7454] bridge_slave_1: entered promiscuous mode
[  400.357205][ T7454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  400.390461][ T7454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.503080][ T7454] team0: Port device team_slave_0 added
[  400.511938][ T7454] team0: Port device team_slave_1 added
[  400.614478][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_0
[  400.614536][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  400.614563][ T7454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  400.618464][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_1
[  400.618479][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  400.618505][ T7454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  400.791228][ T7454] hsr_slave_0: entered promiscuous mode
[  400.794107][ T7454] hsr_slave_1: entered promiscuous mode
[  400.820185][ T7454] debugfs: 'hsr0' already exists in 'hsr'
[  400.820312][ T7454] Cannot create hsr debugfs directory
[  401.229413][ T5612] Bluetooth: hci5: command tx timeout
[  403.391041][ T5612] Bluetooth: hci5: command tx timeout
[  405.419655][ T5612] Bluetooth: hci5: command tx timeout
[  407.753987][ T5612] Bluetooth: hci5: command tx timeout
[  418.979879][ T7569] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.982392][ T7569] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.982587][ T7569] bridge_slave_0: entered allmulticast mode
[  418.990963][ T7569] bridge_slave_0: entered promiscuous mode
[  418.998273][ T7569] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.003263][ T7569] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.003470][ T7569] bridge_slave_1: entered allmulticast mode
[  419.006109][ T7569] bridge_slave_1: entered promiscuous mode
[  420.876018][ T1137] bridge_slave_1: left allmulticast mode
[  420.883190][ T1137] bridge_slave_1: left promiscuous mode
[  420.883378][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.320927][ T1137] bridge_slave_0: left allmulticast mode
[  422.320961][ T1137] bridge_slave_0: left promiscuous mode
[  422.321154][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.439716][ T1137] bridge_slave_1: left allmulticast mode
[  424.439762][ T1137] bridge_slave_1: left promiscuous mode
[  424.440014][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.882779][ T1137] bridge_slave_0: left allmulticast mode
[  424.882810][ T1137] bridge_slave_0: left promiscuous mode
[  424.882969][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.249560][ T1137] bridge_slave_1: left allmulticast mode
[  425.249606][ T1137] bridge_slave_1: left promiscuous mode
[  425.249770][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.396022][ T7727] CIFS: enabling forceuid mount option implicitly because uid= option is specified
[  425.396097][ T7727] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  425.396142][ T7727] CIFS mount error: No usable UNC path provided in device string!
[  425.396142][ T7727] 
[  425.396204][ T7727] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  426.230470][ T1137] bridge_slave_0: left allmulticast mode
[  426.230504][ T1137] bridge_slave_0: left promiscuous mode
[  426.230677][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.212215][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  427.394231][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  427.525701][ T1137] bond0 (unregistering): Released all slaves
[  427.821755][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.190517][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  429.871487][ T1137] bond0 (unregistering): Released all slaves
[  430.098113][ T7737] tmpfs: Bad value for 'nr_inodes'
[  430.139935][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  430.210124][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  430.254168][ T1137] bond0 (unregistering): Released all slaves
[  430.523668][ T7569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.545312][ T7569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  434.810323][ T5612] Bluetooth: hci2: unexpected subevent 0x1a length: 30 > 6
[  435.150118][ T7569] team0: Port device team_slave_0 added
[  435.153352][ T7569] team0: Port device team_slave_1 added
[  435.988574][ T7569] batman_adv: batadv0: Adding interface: batadv_slave_0
[  435.996578][ T7569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  435.996610][ T7569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.115203][ T5612] Bluetooth: hci1: unexpected event for opcode 0x204e
[  436.400327][ T7569] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.407420][ T7569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  436.407462][ T7569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.954692][ T7569] hsr_slave_0: entered promiscuous mode
[  436.970292][ T7569] hsr_slave_1: entered promiscuous mode
[  436.984317][ T7569] debugfs: 'hsr0' already exists in 'hsr'
[  437.015481][ T7569] Cannot create hsr debugfs directory
[  437.063768][ T7799] netlink: 'syz.2.361': attribute type 2 has an invalid length.
[  437.119853][ T5252] 8021q: adding VLAN 0 to HW filter on device eth9
[  437.122704][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'.
[  437.122726][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'.
[  437.122784][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'.
[  445.717847][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  445.804748][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  445.816033][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  445.819813][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  445.882037][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  445.889025][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  449.004380][ T5604] Bluetooth: hci0: command tx timeout
[  451.765865][ T5604] Bluetooth: hci0: command tx timeout
[  452.262595][ T1137] hsr_slave_0: left promiscuous mode
[  452.299390][ T1137] hsr_slave_1: left promiscuous mode
[  452.306637][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  452.471707][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  453.833314][ T1137] hsr_slave_0: left promiscuous mode
[  454.019696][ T5612] Bluetooth: hci0: command tx timeout
[  454.249387][ T1137] hsr_slave_1: left promiscuous mode
[  454.250603][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.714184][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.060049][ T5612] Bluetooth: hci0: command tx timeout
[  457.449597][ T1137] hsr_slave_0: left promiscuous mode
[  457.489462][ T1137] hsr_slave_1: left promiscuous mode
[  457.491687][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  457.530464][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  457.799906][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  457.851446][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  458.937018][ T5604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  459.077676][ T5604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  459.109502][ T5604] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  459.114288][ T5604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  459.116656][ T5604] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  460.953912][ T7920] Bluetooth: MGMT ver 1.23
[  460.958517][ T7920] Bluetooth: hci0: invalid length 0, exp 2 for type 20
[  461.119896][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  461.169937][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  461.259397][ T5612] Bluetooth: hci6: command tx timeout
[  461.624963][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  461.677338][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  464.712934][ T5612] Bluetooth: hci6: command tx timeout
[  464.914189][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'.
[  464.914247][ T7960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.394'.
[  465.795348][ T7841] lo speed is unknown, defaulting to 1000
[  466.667787][ T7903] lo speed is unknown, defaulting to 1000
[  466.749607][ T7971] ALSA: mixer_oss: invalid OSS volume 'LI'
[  466.779699][ T5612] Bluetooth: hci6: command tx timeout
[  468.859441][ T5612] Bluetooth: hci6: command tx timeout
[  474.905852][ T7841] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.906093][ T7841] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.906277][ T7841] bridge_slave_0: entered allmulticast mode
[  474.916247][ T7841] bridge_slave_0: entered promiscuous mode
[  474.923652][ T7841] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.927288][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.927466][ T7841] bridge_slave_1: entered allmulticast mode
[  474.934235][ T7841] bridge_slave_1: entered promiscuous mode
[  475.189560][ T7841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.193825][ T7841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  475.387320][ T7841] team0: Port device team_slave_0 added
[  475.395787][ T7841] team0: Port device team_slave_1 added
[  475.588066][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  475.588140][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  475.588164][ T7841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  475.595801][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  475.595817][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  475.595842][ T7841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.015145][ T7841] hsr_slave_0: entered promiscuous mode
[  476.039612][ T7841] hsr_slave_1: entered promiscuous mode
[  476.041848][ T7841] debugfs: 'hsr0' already exists in 'hsr'
[  476.041873][ T7841] Cannot create hsr debugfs directory
[  479.832048][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.414'.
[  484.940742][ T1137] bridge_slave_1: left allmulticast mode
[  484.940898][ T1137] bridge_slave_1: left promiscuous mode
[  484.941399][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.274593][ T1137] bridge_slave_0: left allmulticast mode
[  485.274682][ T1137] bridge_slave_0: left promiscuous mode
[  485.274919][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.713606][ T8091] ceph: No mds server is up or the cluster is laggy
[  486.746432][ T5786] libceph: connect (1)[c::]:6789 error -101
[  486.791727][ T5786] libceph: mon0 (1)[c::]:6789 connect error
[  487.047507][ T1137] bridge_slave_1: left allmulticast mode
[  487.047595][ T1137] bridge_slave_1: left promiscuous mode
[  487.047809][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.254985][ T1137] bridge_slave_0: left allmulticast mode
[  487.255102][ T1137] bridge_slave_0: left promiscuous mode
[  487.255344][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.384208][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'.
[  491.404549][ T8121] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request
[  492.237357][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  493.020264][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  493.745681][ T1137] bond0 (unregistering): Released all slaves
[  494.051668][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  494.130201][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  494.191790][ T1137] bond0 (unregistering): Released all slaves
[  494.222132][ T7903] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.229639][ T7903] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.229840][ T7903] bridge_slave_0: entered allmulticast mode
[  494.234790][ T7903] bridge_slave_0: entered promiscuous mode
[  494.366239][ T7903] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.375704][ T7903] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.375907][ T7903] bridge_slave_1: entered allmulticast mode
[  494.422260][ T7903] bridge_slave_1: entered promiscuous mode
[  494.987932][ T8140] device-mapper: ioctl: only supply one of name or uuid, cmd(14)
[  495.039694][ T7903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.062745][ T7903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  495.487021][ T7903] team0: Port device team_slave_0 added
[  496.643051][ T7903] team0: Port device team_slave_1 added
[  496.963960][ T7903] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.965575][ T7903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  496.965603][ T7903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  496.977735][ T7903] batman_adv: batadv0: Adding interface: batadv_slave_1
[  496.977753][ T7903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  496.977779][ T7903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.106653][ T7841] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  497.244756][ T7841] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  497.253539][ T7841] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  500.593931][ T7841] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  502.297899][ T7841] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  502.374872][ T7841] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  502.502698][ T7841] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  502.679513][ T5721] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  502.846571][ T5721] usb 5-1: Using ep0 maxpacket: 32
[  502.861052][ T5721] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  502.950602][ T5721] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  502.955407][ T5721] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  502.955433][ T5721] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  502.955454][ T5721] usb 5-1: config 1 has no interface number 0
[  502.955504][ T5721] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  502.955529][ T5721] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  502.955551][ T5721] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  502.955596][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.194858][ T7841] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  503.313775][ T7903] hsr_slave_0: entered promiscuous mode
[  503.374530][ T5721] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  503.385056][ T7903] hsr_slave_1: entered promiscuous mode
[  503.385833][ T7903] debugfs: 'hsr0' already exists in 'hsr'
[  503.385854][ T7903] Cannot create hsr debugfs directory
[  503.492178][ T5721] snd_usb_pod 5-1:1.1: cannot start listening: -90
[  506.499833][ T5721] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  506.507688][ T5721] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -90
[  506.539904][ T5721] usb 5-1: USB disconnect, device number 7
[  506.621715][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  506.704733][ T1137] hsr_slave_0: left promiscuous mode
[  506.741985][ T1137] hsr_slave_1: left promiscuous mode
[  506.743209][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  507.166399][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  507.223812][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  507.231701][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  507.245724][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  507.341153][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  507.354805][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  509.766962][ T5604] Bluetooth: hci4: command tx timeout
[  509.919661][ T1137] hsr_slave_0: left promiscuous mode
[  509.959493][ T1137] hsr_slave_1: left promiscuous mode
[  509.961374][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  510.003029][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  510.261317][   T36] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  510.409547][   T36] usb 3-1: Using ep0 maxpacket: 8
[  510.433298][   T36] usb 3-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00
[  510.573628][   T36] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  510.573738][   T36] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  510.573776][   T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.819640][ T5612] Bluetooth: hci4: command tx timeout
[  511.904497][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  511.951828][   T36] usb 3-1: config 0 descriptor??
[  512.250698][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  513.123263][ T8219] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request
[  513.500232][   T36] lg-g15 0003:046D:C22D.0001: unknown main item tag 0x7
[  513.522589][   T36] lg-g15 0003:046D:C22D.0001: ignoring exceeding usage max
[  513.524019][   T36] lg-g15 0003:046D:C22D.0001: unknown main item tag 0x7
[  513.524067][   T36] lg-g15 0003:046D:C22D.0001: item fetching failed at offset 39/40
[  513.525003][   T36] lg-g15 0003:046D:C22D.0001: probe with driver lg-g15 failed with error -22
[  513.531909][   T36] usb 3-1: USB disconnect, device number 2
[  513.534572][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  513.650475][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  513.899531][ T5612] Bluetooth: hci4: command tx timeout
[  515.989514][ T5612] Bluetooth: hci4: command tx timeout
[  516.375545][ T8234] netlink: 'syz.1.452': attribute type 16 has an invalid length.
[  516.383430][ T8234] netlink: 'syz.1.452': attribute type 17 has an invalid length.
[  518.974095][ T8234] xfrm0: left allmulticast mode
[  519.804879][ T8196] lo speed is unknown, defaulting to 1000
[  520.315587][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  520.364360][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  520.374589][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  520.384506][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  520.395945][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  522.564396][ T5604] Bluetooth: hci0: command tx timeout
[  524.619446][ T5604] Bluetooth: hci0: command tx timeout
[  524.879418][   T36] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  524.991106][ T8292] ubi0: attaching mtd0
[  525.078012][ T8292] ubi0: scanning is finished
[  525.078059][ T8292] ubi0: empty MTD device detected
[  525.631550][   T36] usb 2-1: device descriptor read/64, error -71
[  527.122064][ T5604] Bluetooth: hci0: command tx timeout
[  527.352996][ T8292] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  527.519169][   T36] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  527.941283][ T8308] binder: 8306:8308 ioctl c0306201 0 returned -14
[  527.963342][    T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0)
[  528.029855][ T8259] lo speed is unknown, defaulting to 1000
[  528.061433][ T8196] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.061613][ T8196] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.061809][ T8196] bridge_slave_0: entered allmulticast mode
[  528.065928][ T8196] bridge_slave_0: entered promiscuous mode
[  528.090559][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.090677][ T8196] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.090851][ T8196] bridge_slave_1: entered allmulticast mode
[  528.097821][ T8196] bridge_slave_1: entered promiscuous mode
[  528.722094][ T8314] 9p: Bad value for 'rfdno'
[  529.179745][ T5604] Bluetooth: hci0: command tx timeout
[  529.395514][ T8196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  529.414925][ T8196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.261724][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'.
[  530.460270][ T8326] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request
[  532.158687][ T8196] team0: Port device team_slave_0 added
[  532.304101][ T8196] team0: Port device team_slave_1 added
[  532.400480][ T8196] batman_adv: batadv0: Adding interface: batadv_slave_0
[  532.408452][ T8196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  532.408483][ T8196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  532.451501][ T8196] batman_adv: batadv0: Adding interface: batadv_slave_1
[  532.458596][ T8196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  532.504988][ T8196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  537.024266][ T8196] hsr_slave_0: entered promiscuous mode
[  537.037524][ T8196] hsr_slave_1: entered promiscuous mode
[  537.044146][ T8196] debugfs: 'hsr0' already exists in 'hsr'
[  537.044171][ T8196] Cannot create hsr debugfs directory
[  541.019102][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.478'.
[  541.020640][ T5604] Bluetooth: hci2: Malformed LE Event: 0x1d
[  554.894643][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.894892][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.895183][ T8259] bridge_slave_0: entered allmulticast mode
[  554.897778][ T8259] bridge_slave_0: entered promiscuous mode
[  554.905260][ T8259] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.905501][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.905654][ T8259] bridge_slave_1: entered allmulticast mode
[  554.913223][ T8259] bridge_slave_1: entered promiscuous mode
[  555.025770][ T8259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  555.051297][ T8259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  558.562883][ T8259] team0: Port device team_slave_0 added
[  558.571961][ T8259] team0: Port device team_slave_1 added
[  558.727112][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_0
[  558.727185][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  558.727210][ T8259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  558.733383][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_1
[  558.733398][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  558.733423][ T8259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  559.126971][ T8259] hsr_slave_0: entered promiscuous mode
[  559.134617][ T8259] hsr_slave_1: entered promiscuous mode
[  559.135690][ T8259] debugfs: 'hsr0' already exists in 'hsr'
[  559.135715][ T8259] Cannot create hsr debugfs directory
[  560.824521][ T8470] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.828346][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.329386][ T5786] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  564.274558][ T8477] LUN: removable file: (no medium)
[  565.627775][ T8484] ntfs3(nullb0): Primary boot signature is not NTFS.
[  565.763079][ T8484] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  566.535547][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'.
[  566.687876][ T8491] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request
[  569.218090][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  569.259499][ T1137] bridge_slave_1: left allmulticast mode
[  569.259533][ T1137] bridge_slave_1: left promiscuous mode
[  569.259693][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.371497][ T1137] bridge_slave_0: left allmulticast mode
[  569.371578][ T1137] bridge_slave_0: left promiscuous mode
[  569.371852][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.913783][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  569.962454][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  569.985357][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  569.993818][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  569.997499][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  570.629957][ T1137] bridge_slave_1: left allmulticast mode
[  570.630003][ T1137] bridge_slave_1: left promiscuous mode
[  570.630233][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.781046][ T1137] bridge_slave_0: left allmulticast mode
[  570.781095][ T1137] bridge_slave_0: left promiscuous mode
[  570.781353][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.250186][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  571.321758][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  571.371899][ T1137] bond0 (unregistering): Released all slaves
[  571.750049][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  571.999892][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  572.223499][ T5604] Bluetooth: hci5: command tx timeout
[  572.358851][ T8512] input: syz1 as /devices/virtual/input/input8
[  572.359133][ T8512] input: failed to attach handler leds to device input8, error: -6
[  572.910284][ T1137] bond0 (unregistering): Released all slaves
[  574.539704][ T5604] Bluetooth: hci5: command tx timeout
[  574.715347][ T8526] netlink: 'syz.4.516': attribute type 12 has an invalid length.
[  574.715425][ T8526] netlink: 'syz.4.516': attribute type 29 has an invalid length.
[  574.715472][ T8526] netlink: 132 bytes leftover after parsing attributes in process `syz.4.516'.
[  577.353976][ T5604] Bluetooth: hci5: command tx timeout
[  578.267264][ T8541] syz.2.513 (8541) used greatest stack depth: 18184 bytes left
[  579.419945][ T5604] Bluetooth: hci5: command tx timeout
[  579.631553][ T8499] lo speed is unknown, defaulting to 1000
[  580.177419][ T8566] Bluetooth: MGMT ver 1.23
[  581.955201][ T5612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  582.066734][ T5612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  582.073914][ T5612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  582.079756][ T5612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  582.081524][ T5612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  582.841031][ T1137] hsr_slave_0: left promiscuous mode
[  582.879639][ T1137] hsr_slave_1: left promiscuous mode
[  582.880779][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  582.920272][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  583.149478][ T1137] hsr_slave_0: left promiscuous mode
[  583.209447][ T1137] hsr_slave_1: left promiscuous mode
[  583.211922][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  583.249931][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  583.509931][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  583.549828][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  583.989796][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  584.039949][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  584.139465][ T5604] Bluetooth: hci6: command tx timeout
[  584.686026][ T8576] lo speed is unknown, defaulting to 1000
[  585.157014][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.157262][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.157427][ T8499] bridge_slave_0: entered allmulticast mode
[  585.160420][ T8499] bridge_slave_0: entered promiscuous mode
[  585.165120][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.165346][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.165496][ T8499] bridge_slave_1: entered allmulticast mode
[  585.167917][ T8499] bridge_slave_1: entered promiscuous mode
[  585.247172][ T8499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  585.259597][ T8499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  585.360545][ T8499] team0: Port device team_slave_0 added
[  585.365916][ T8499] team0: Port device team_slave_1 added
[  585.406026][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_0
[  585.406044][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  585.406061][ T8499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  585.428637][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_1
[  585.428655][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  585.428680][ T8499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.570984][ T8499] hsr_slave_0: entered promiscuous mode
[  585.577975][ T8499] hsr_slave_1: entered promiscuous mode
[  585.578936][ T8499] debugfs: 'hsr0' already exists in 'hsr'
[  585.578960][ T8499] Cannot create hsr debugfs directory
[  586.089717][ T8576] bridge0: port 1(bridge_slave_0) entered blocking state
[  586.089960][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.090116][ T8576] bridge_slave_0: entered allmulticast mode
[  586.092558][ T8576] bridge_slave_0: entered promiscuous mode
[  586.095617][ T8576] bridge0: port 2(bridge_slave_1) entered blocking state
[  586.095811][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.095981][ T8576] bridge_slave_1: entered allmulticast mode
[  586.098534][ T8576] bridge_slave_1: entered promiscuous mode
[  586.161316][ T8576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  586.186768][ T8576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  586.219361][ T5604] Bluetooth: hci6: command tx timeout
[  586.277753][ T8576] team0: Port device team_slave_0 added
[  586.338532][ T8576] team0: Port device team_slave_1 added
[  586.380957][ T8576] batman_adv: batadv0: Adding interface: batadv_slave_0
[  586.382534][ T8576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  586.382561][ T8576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  586.435224][ T8576] batman_adv: batadv0: Adding interface: batadv_slave_1
[  586.435342][ T8576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  586.435369][ T8576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  586.591964][ T8576] hsr_slave_0: entered promiscuous mode
[  586.593273][ T8576] hsr_slave_1: entered promiscuous mode
[  586.594248][ T8576] debugfs: 'hsr0' already exists in 'hsr'
[  586.594286][ T8576] Cannot create hsr debugfs directory
[  586.987468][ T8499] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  587.033718][ T8499] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  587.044356][ T8499] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  587.071876][ T8499] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  587.085332][ T8499] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  587.117034][ T8499] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  587.129924][ T8499] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  587.171763][ T8499] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  587.249452][ T1137] bridge_slave_1: left allmulticast mode
[  587.249521][ T1137] bridge_slave_1: left promiscuous mode
[  587.249792][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.350481][ T1137] bridge_slave_0: left allmulticast mode
[  587.350553][ T1137] bridge_slave_0: left promiscuous mode
[  587.355448][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.549443][ T1137] bridge_slave_1: left allmulticast mode
[  587.550727][ T1137] bridge_slave_1: left promiscuous mode
[  587.550958][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.651535][ T1137] bridge_slave_0: left allmulticast mode
[  587.651615][ T1137] bridge_slave_0: left promiscuous mode
[  587.651837][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.060151][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  588.159867][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  588.221287][ T1137] bond0 (unregistering): Released all slaves
[  588.299383][ T5604] Bluetooth: hci6: command tx timeout
[  588.479834][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  588.599835][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  588.663218][ T1137] bond0 (unregistering): Released all slaves
[  588.984977][ T8499] 8021q: adding VLAN 0 to HW filter on device bond0
[  589.171621][ T8499] 8021q: adding VLAN 0 to HW filter on device team0
[  589.251744][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.264617][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[  589.420524][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.420762][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[  589.536586][ T8576] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  589.579475][ T8576] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  589.589774][ T8576] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  589.637858][ T8576] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  589.655149][ T8576] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  589.714459][ T8576] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  589.727037][ T8576] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  589.752286][ T8576] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  589.900497][ T1137] hsr_slave_0: left promiscuous mode
[  589.940089][ T1137] hsr_slave_1: left promiscuous mode
[  589.942810][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  589.980408][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  590.142561][ T1137] hsr_slave_0: left promiscuous mode
[  590.179495][ T1137] hsr_slave_1: left promiscuous mode
[  590.180672][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  590.200026][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  590.389475][ T5604] Bluetooth: hci6: command tx timeout
[  590.600630][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  590.639877][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  591.089790][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  591.140067][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  591.662274][ T8576] 8021q: adding VLAN 0 to HW filter on device bond0
[  591.782849][ T8576] 8021q: adding VLAN 0 to HW filter on device team0
[  591.805508][ T6942] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.812878][ T6942] bridge0: port 1(bridge_slave_0) entered forwarding state
[  591.828867][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.829087][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[  592.445371][ T8499] 8021q: adding VLAN 0 to HW filter on device batadv0
[  592.957613][ T8576] 8021q: adding VLAN 0 to HW filter on device batadv0
[  593.105222][ T8499] veth0_vlan: entered promiscuous mode
[  593.148517][ T8499] veth1_vlan: entered promiscuous mode
[  593.248906][ T8499] veth0_macvtap: entered promiscuous mode
[  593.261971][ T8499] veth1_macvtap: entered promiscuous mode
[  593.413686][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_0
[  593.437256][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_1
[  593.641369][ T8576] veth0_vlan: entered promiscuous mode
[  593.973134][ T8576] veth1_vlan: entered promiscuous mode
[  594.378707][ T6937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.390911][ T6937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.392520][ T8576] veth0_macvtap: entered promiscuous mode
[  594.436333][ T8576] veth1_macvtap: entered promiscuous mode
[  594.501807][ T6928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.501889][ T6928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.538683][ T8576] batman_adv: batadv0: Interface activated: batadv_slave_0
[  594.571833][ T8576] batman_adv: batadv0: Interface activated: batadv_slave_1
[  594.610200][ T6937] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  594.984943][ T8670] ieee802154 phy0 wpan0: encryption failed: -22
[  595.012411][ T1137] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  595.015466][ T1137] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  595.015881][ T1137] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  595.016222][ T1137] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  596.881515][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.523'.
[  596.920644][ T8692] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request
[  597.643749][ T8681] random: crng reseeded on system resumption
[  598.240894][ T6929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.249116][ T6929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.334088][ T4032] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  598.352656][ T1137] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  598.372421][ T3001] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  600.245284][ T6929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  600.258442][ T6929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  604.367877][ T8726] netlink: 128 bytes leftover after parsing attributes in process `syz.1.529'.
[  604.669838][ T8735] futex_wake_op: syz.4.534 tries to shift op by 144; fix this program
[  605.382461][ T8713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  606.871754][ T8745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  606.899057][ T8745] IPv6: NLM_F_CREATE should be set when creating new route
[  607.183799][ T8748] pim6reg: entered allmulticast mode
[  616.264119][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.548'.
[  619.237110][ T5785] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  619.948047][ T8807] ohci-platform QEMU0001:00: error -ENXIO: IRQ index 0 not found
[  622.056038][ T8802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  625.505527][ T8824] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  625.749652][ T8828] random: crng reseeded on system resumption
[  630.004240][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  634.677432][   T37] audit: type=1326 audit(1787705145.108:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8873 comm="syz.6.567" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f340ee0d9 code=0x0
[  641.364467][ T8912] netlink: 'syz.1.575': attribute type 1 has an invalid length.
[  641.377809][ T8912] netlink: 208 bytes leftover after parsing attributes in process `syz.1.575'.
[  641.377854][ T8912] netlink: 'syz.1.575': attribute type 1 has an invalid length.
[  641.377869][ T8912] netlink: 22 bytes leftover after parsing attributes in process `syz.1.575'.
[  642.588721][ T8919] netlink: 'syz.4.579': attribute type 4 has an invalid length.
[  643.277896][   T31] lo speed is unknown, defaulting to 1000
[  648.071578][ T8941] binder: BINDER_SET_CONTEXT_MGR already set
[  648.130042][ T8941] binder: 8940:8941 ioctl 4018620d 200000004a80 returned -16
[  648.221055][ T8941] binder: 8940:8941 ioctl 4008550d 200000000000 returned -22
[  648.597663][ T8951] qnx6: unable to read the first superblock
[  648.599028][ T8951] qnx6: unable to read the first superblock
[  648.599040][ T8951] qnx6: unable to read the first superblock
[  649.841481][ T8950] syz.5.585 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  649.942339][ T8956] netlink: 156 bytes leftover after parsing attributes in process `syz.1.584'.
[  649.973942][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'.
[  650.839332][ T5596] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  651.096552][   T37] audit: type=1326 audit(1787705161.578:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8946 comm="syz.5.585" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd53c62e0d9 code=0x0
[  651.739441][ T8967] usbcore.quirks: string doesn't fit in 127 chars.
[  652.991739][ T8962] loop4: detected capacity change from 0 to 8
[  655.458087][ T8967] Dev loop4: unable to read RDB block 8
[  655.508219][ T8967]  loop4: unable to read partition table
[  655.508438][ T8967] loop4: partition table beyond EOD, truncated
[  655.508485][ T8967] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[  656.071125][ T8985] ntfs3(nullb0): Primary boot signature is not NTFS.
[  656.094706][ T8985] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  659.954278][ T9005] fuse: Unknown parameter 'group_id00000000000000000000'
[  662.705357][ T5785] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  663.863573][ T5785] usb 3-1: device descriptor read/all, error -71
[  669.929341][ T5785] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  670.229446][   T37] audit: type=1326 audit(1787705180.678:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9024 comm="syz.2.603" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d1ecfe0d9 code=0x0
[  671.303050][ T5785] usb 3-1: unable to get BOS descriptor or descriptor too short
[  671.303156][ T5785] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  671.304148][ T5785] usb 3-1: unable to read config index 0 descriptor/start: -71
[  671.304182][ T5785] usb 3-1: can't read configurations, error -71
[  671.670383][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  671.708607][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  671.723987][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  671.785689][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  671.875468][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  674.067510][ T5604] Bluetooth: hci0: command tx timeout
[  675.111055][ T9051] lo speed is unknown, defaulting to 1000
[  676.139528][ T5604] Bluetooth: hci0: command tx timeout
[  677.283539][ T9073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.611'.
[  678.598725][ T5604] Bluetooth: hci0: command tx timeout
[  680.249762][ T9092] netlink: 64 bytes leftover after parsing attributes in process `syz.5.617'.
[  680.952725][ T5604] Bluetooth: hci0: command tx timeout
[  684.294039][ T9114] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  684.294086][ T9114] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  684.804190][ T9123] comedi comedi0: comedi_config --init_data is deprecated
[  686.598685][ T9133] futex_wake_op: syz.5.625 tries to shift op by 144; fix this program
[  687.284521][ T9051] bridge0: port 1(bridge_slave_0) entered blocking state
[  687.286240][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.286493][ T9051] bridge_slave_0: entered allmulticast mode
[  687.293406][ T9051] bridge_slave_0: entered promiscuous mode
[  687.347882][ T9051] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.355225][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.362948][ T9051] bridge_slave_1: entered allmulticast mode
[  687.371741][ T9051] bridge_slave_1: entered promiscuous mode
[  687.436749][ T9051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  687.459046][ T9051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  687.518076][ T9051] team0: Port device team_slave_0 added
[  687.540809][ T9051] team0: Port device team_slave_1 added
[  687.592132][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_0
[  687.599231][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  687.599262][ T9051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  687.601755][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_1
[  687.601770][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  687.601796][ T9051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  687.772274][ T9051] hsr_slave_0: entered promiscuous mode
[  687.779933][ T9051] hsr_slave_1: entered promiscuous mode
[  687.786675][ T9051] debugfs: 'hsr0' already exists in 'hsr'
[  687.786718][ T9051] Cannot create hsr debugfs directory
[  691.409834][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  695.625760][ T5604] Bluetooth: hci5: command 0x0406 tx timeout
[  697.425686][   T37] audit: type=1326 audit(1787705207.898:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9174 comm="syz.6.634" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f340ee0d9 code=0x0
[  697.740344][ T5612] Bluetooth: hci0: command 0x0405 tx timeout
[  699.594150][ T9051] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  699.709594][ T9194] comedi comedi0: comedi_config --init_data is deprecated
[  700.387040][ T9051] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  700.698165][ T9051] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  700.730833][ T9051] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  700.732012][ T9051] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  700.782707][ T9051] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  700.785969][ T9051] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  700.837700][ T9051] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  700.893304][ T8664] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  701.052368][ T8664] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  701.055464][ T8664] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  701.055514][ T8664] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  701.055555][ T8664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.090133][ T8664] usb 3-1: config 0 descriptor??
[  701.236659][ T8664] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  702.466357][ T8664] usb 3-1: USB disconnect, device number 7
[  702.760701][ T9051] 8021q: adding VLAN 0 to HW filter on device bond0
[  703.081508][ T9223] netlink: 52 bytes leftover after parsing attributes in process `syz.1.640'.
[  703.822798][ T9051] 8021q: adding VLAN 0 to HW filter on device team0
[  703.992968][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.005301][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  704.212048][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state
[  704.213201][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state
[  705.177230][ T9235] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  706.635996][ T9239] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000016: 0000 [#1] SMP KASAN PTI
[  706.655928][ T9239] KASAN: null-ptr-deref in range [0x00000000000000b0-0x00000000000000b7]
[  706.664372][ T9239] CPU: 0 UID: 0 PID: 9239 Comm: syz.5.646 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  706.675663][ T9239] Tainted: [L]=SOFTLOCKUP
[  706.680022][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  706.690096][ T9239] RIP: 0010:configfs_symlink+0x5fc/0x1030
[  706.695945][ T9239] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 fe ac c1 ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 d6 ac c1 ff 4d 8b 2c 24 4c 89 ef e8
[  706.715555][ T9239] RSP: 0018:ffffc90004a1fc80 EFLAGS: 00010202
[  706.721704][ T9239] RAX: 0000000000000016 RBX: ffff88802ca9ac48 RCX: dffffc0000000000
[  706.729680][ T9239] RDX: 0000000000000001 RSI: ffffffff8d8c903a RDI: 00000000ffffffff
[  706.737651][ T9239] RBP: ffffc90004a1fd88 R08: ffffffff8fb1da7f R09: 1ffffffff1f63b4f
[  706.745625][ T9239] R10: dffffc0000000000 R11: fffffbfff1f63b50 R12: 00000000000000b0
[  706.753598][ T9239] R13: 0000000000000000 R14: ffffffff8c23e728 R15: 1ffff92000943fa0
[  706.761569][ T9239] FS:  00007fd53a8656c0(0000) GS:ffff888125bde000(0000) knlGS:0000000000000000
[  706.770497][ T9239] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  706.777078][ T9239] CR2: 00007f6f34ea56c8 CR3: 000000003e92e000 CR4: 00000000003526f0
[  706.785051][ T9239] Call Trace:
[  706.788399][ T9239]  <TASK>
[  706.791373][ T9239]  ? __pfx_configfs_symlink+0x10/0x10
[  706.796785][ T9239]  ? bpf_lsm_inode_symlink+0x9/0x20
[  706.802004][ T9239]  vfs_symlink+0x18b/0x330
[  706.806431][ T9239]  ? security_path_symlink+0xfd/0x360
[  706.811823][ T9239]  filename_symlinkat+0x1cd/0x420
[  706.816845][ T9239]  ? __pfx_filename_symlinkat+0x10/0x10
[  706.822384][ T9239]  ? do_getname+0x151/0x250
[  706.826884][ T9239]  __se_sys_symlinkat+0x4e/0x2b0
[  706.831813][ T9239]  do_syscall_64+0x166/0x520
[  706.836503][ T9239]  ? trace_irq_disable+0x3b/0x140
[  706.841533][ T9239]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.847647][ T9239]  ? clear_bhb_loop+0x70/0xc0
[  706.852312][ T9239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.858193][ T9239] RIP: 0033:0x7fd53c62e0d9
[  706.862612][ T9239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  706.882204][ T9239] RSP: 002b:00007fd53a865028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[  706.890618][ T9239] RAX: ffffffffffffffda RBX: 00007fd53c8b6090 RCX: 00007fd53c62e0d9
[  706.898575][ T9239] RDX: 0000200000000680 RSI: ffffffffffffff9c RDI: 0000200000000640
[  706.906532][ T9239] RBP: 00007fd53c6c5024 R08: 0000000000000000 R09: 0000000000000000
[  706.914488][ T9239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  706.922443][ T9239] R13: 00007fd53c8b6128 R14: 00007fd53c8b6090 R15: 00007ffe81d2ed38
[  706.930410][ T9239]  </TASK>
[  706.933427][ T9239] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  706.937408][ T9239] ---[ end trace 0000000000000000 ]---
[  707.446872][ T9239] RIP: 0010:configfs_symlink+0x5fc/0x1030
[  707.446948][ T9239] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 fe ac c1 ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 d6 ac c1 ff 4d 8b 2c 24 4c 89 ef e8
[  707.446968][ T9239] RSP: 0018:ffffc90004a1fc80 EFLAGS: 00010202
[  707.446989][ T9239] RAX: 0000000000000016 RBX: ffff88802ca9ac48 RCX: dffffc0000000000
[  707.447004][ T9239] RDX: 0000000000000001 RSI: ffffffff8d8c903a RDI: 00000000ffffffff
[  707.447018][ T9239] RBP: ffffc90004a1fd88 R08: ffffffff8fb1da7f R09: 1ffffffff1f63b4f
[  707.447034][ T9239] R10: dffffc0000000000 R11: fffffbfff1f63b50 R12: 00000000000000b0
[  707.447048][ T9239] R13: 0000000000000000 R14: ffffffff8c23e728 R15: 1ffff92000943fa0
[  707.447063][ T9239] FS:  00007fd53a8656c0(0000) GS:ffff888125bde000(0000) knlGS:0000000000000000
[  707.447080][ T9239] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  707.447095][ T9239] CR2: 00002000000002c0 CR3: 000000003e92e000 CR4: 00000000003526f0
[  707.447143][ T9239] Kernel panic - not syncing: Fatal exception
[  707.548068][ T9239] Kernel Offset: disabled
[  707.552385][ T9239] Rebooting in 86400 seconds..