last executing test programs:

5m3.770247318s ago: executing program 3 (id=18):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14)
syz_open_dev$sndctrl(0x0, 0xb06, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x5)
sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010)

5m0.770140756s ago: executing program 3 (id=21):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x5, 0x4e00, "ba4d93355e"}]})

4m56.225707663s ago: executing program 3 (id=27):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0xb, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x6, 0x1, 0x1000, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x2, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x8, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x0, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0x652b, 0x5, 0x9, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x6, 0x6, 0x8, 0x3ff, 0xffffffff, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0xfffffffb, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0xfffffffe, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000015"], 0x34}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000001c0)={0x0, 0x0, 0x41b, 0x3})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xf8}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4m52.680247664s ago: executing program 3 (id=31):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, 0x0, 0x1, 0x1000, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
ioctl$PIO_UNIMAP(r3, 0x4b67, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x186, 0x904)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r6}, 0x18)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f00000008c0)=0x6)
r7 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000280)={r2})

4m50.278922389s ago: executing program 3 (id=34):
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2041001}, 0x40000)

4m49.377714164s ago: executing program 3 (id=38):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffef7, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad4, 0x10, 0x1, 0x7}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000480)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x133d, 0x3e000000, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
epoll_create1(0x80000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

4m32.569049956s ago: executing program 32 (id=38):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffef7, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad4, 0x10, 0x1, 0x7}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000480)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x133d, 0x3e000000, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
epoll_create1(0x80000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

4m9.757679493s ago: executing program 1 (id=112):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100})
lseek(r1, 0x0, 0x3)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
socket$isdn(0x22, 0x3, 0x23)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19ffef06b6d1fff919327"], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x3, 0x12)
sendfile(r2, r0, &(0x7f0000000000)=0x9, 0x3fffff)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x8, 0x1, 0x7, 0x3, 0xccb, 0x8, 0xab, 0xd, 0x100, 0xffffffff, 0x1, 0x5, 0x1, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0x9, 0x20001e58, 0x9, 0x8, 0x3c, 0xa, 0xc, 0x4, 0xd]})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002200), 0x80002, 0x0)

4m3.007051084s ago: executing program 1 (id=122):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x6, 0x800)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0x0, 0x101, 0x1, 0x3, 0x1080, 0x7f, 0x4f7, 0x1, 0xfffeffff, 0x81, 0x1, 0x4, 0x800, 0xc, 0x2, 0x0, {0x9, 0xfff}, 0x7, 0xd5}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', <r2=>0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
socket$inet6(0xa, 0x1, 0x84)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4814)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)
syz_io_uring_setup(0x496, &(0x7f0000000f80)={0x0, 0x79b0, 0x3180, 0x7efb, 0x40024e}, 0x0, &(0x7f0000000080))
eventfd(0x401)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r2}}]}, {0xfe06, 0xa}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x68}}, 0x2000a804)

4m1.884157151s ago: executing program 1 (id=125):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5, 0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

4m0.705214268s ago: executing program 1 (id=128):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
io_setup(0x3, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
setrlimit(0x7, &(0x7f0000000180)={0xfffffffe, 0x6})
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_pgetevents(r1, 0x1c2a0633, 0x4, &(0x7f0000000540)=[{}, {}, {}, {}], 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={[0x89f]}, 0x8})
r5 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000009a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}}, {{&(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x4008010)
sendmmsg(r3, &(0x7f0000000d40)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000d80)="309a7c61a8a85b615f1b0c58962510dd345ba89c7b893ccee7c6a9e8d4dddaacc47f44ff3e523c124b61677009fb2bcd43b669cb418f70e25764594db4d7e1e43ab388c1942ccbd37d96d954c37986e7c9b1de50bd93fe0087c7d702584feba0b91639c2a3e79f38b3700a927bc029826ab93e20213dd80d719058dd9f548c1af24a50f82718e9ba42bac6f32926174da8d932fc77a87c0fd48d873eac2f4a0a3c02c19b231c51c1bb35", 0xaa}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000000400)="fd0632a806778fc8040ce5aa0857d09fc8abe262fcb344f038f4f68aa62c20a7c42d138238bc7b2b02b44dc2a1c1d81713ecf22930349326e6ecdc94715f4522142797", 0x43}, {&(0x7f0000000680)="67cb5af0f2c0154ae92950b4f079ceaab940f8101db8132260df087fc9bbadc4ead82dac6648bd979e728b42e4fc0b320947df6a291cf702e63b535f6cf48da5033d5e30204c05f4fcc06d1920c75f6d2615155d2d0f0566b7f59e50780b32afe4462f0ab1fea2eef2fa224f6282308e1ad39748789d0fc8d261563a3308451527e941630cd8557910c0a10839f831f8c2612edd1738cf136af8820a6a6a8fe57d941e033c240655ed7c33e05805966bd7fc63d2a11b492814e48fa173a53e7eb0e69733da012fb59bccfb44379b", 0xce}], 0x4}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="8a4e3eaf079882bb9814398356b69f17845bbab50753aa09ef2592d38342605b628342a73673e4ef2d4d85d7704c87471c28e0cc86c7a5dfb432a8e7e9fbfb6089dd5613e12995a0199d727f6cd9425e1454073d27c4f008c5fb8d0a881ee0e1489d20ecf4094f7f02846be5cb0b9a3fc42b71c1159d01fc366c67eece5c1e2344cbe916df5b7fc3f57da3a466f3bc8f5e8051f1127b2bb4c8b5326f6eeb47dc21bdd81dca450d88d734f0bc56459efb9e514dc5ee7305e757629874bad523caa6a0c445b193d9961ebd6f8ae011d94921af927fa1d1cff7cd203b17", 0xdc}, {&(0x7f0000000980)="0dcbab8659710a2b4cce4697507423e2ab4bd9561f63bfa33b329632c80357341c407f6e681161b10e0f516035921b9bf501123b918eed3b671cc5d2f38b574cb8c7ec06afc7c37e970c3d6fd966bb73131fb619f4631dbb8b413dd1ad24c98cf94ee62bc171ecf5e0a569e0aef6db8d0bf79ccde163b761cfcc044175af0155d873408177b80c3c6ba382097637ffe1fc79af361891cbb8e72eb0237194d63d34f2bf05d33248bf4edf398eb51267934bf8919f37e39c771175a381e131f99145e6628d9f0b9c1b529099b85b4aa80d290a930a3e389cc0", 0xd8}, {&(0x7f0000000100)="e84f8866871ef14ada2a7d058147f429f700193d1140c65990fb3aa12c0853a3eade0e6ab1ca5d16b391ee7d09a523b013870f4388a55f6e14727731c93f", 0x3e}, {&(0x7f0000000780)="df65cb2e1525056091f8b825acf1778c231abf6fbe38a4bd5e58deac2b961fb3566684bef55de6b95e35cadbfa50958c70f26c79200dc495a3933d1566e8d86af4a790b68f5e", 0x46}, {&(0x7f0000000340)="d650381956785428bef67c02", 0xc}, {&(0x7f0000000a80)="98d355fafa6d98ce27c5b1acaae4d12ac6340e88de53ff045691f0f75b7c1de82467edbd2d4320d8bc90a2963cfd346596041fa3bcdfd525caaabe08f5ea9a0ae2ef9728297dfc9a2db9a55054f88c2b8ffeef0943360033e665624e261a4a1665dcea3432f20e3a3cb9b17de0338ea91f99304a795ccd9d69a079780349a612905dec736d8ed14ab4d83607564d4e31c5ebf7f771a74f423b2bd35824cf456d15296338dfc8ed57b44b55f41c7ef58cd2e20111da1988eaf671e46d00e41dd380cc10a19da54f", 0xc7}, {&(0x7f0000000800)="383766cc035044b7cae9d77864654aa6daa7a0a1a9c00f7d99897e36822cbf38f6c4ae3c4e43040ba49ec775f72acb2a3aab51845f5bdf9e64", 0x39}, {&(0x7f0000000b80)="733e261b4a4ec9ba734bce489a1878917ad63d002b6c20be048844bb972b4369943cd504b5b98455ca0413e5d9d9b20ee98ab96b867d2348f5d0327868d6048babda67405ac05ece5ddb8c59a7a46595207ea4a3f1a43250723b62a790bbc12a64b05758f9388b5a0c091b390e33f481d248c9f1cc18112b2c2048567cccc1", 0x7f}, {&(0x7f0000000c40)="d1730a483008a03068898fbf1f6a031023de158058e23b032493b7e06243e274b4eca604c9ba697b003723d539bef151d009c0d020ec18b568a14e1901d7725cf9025e4abe4750854e57", 0x4a}], 0x9}}], 0x2, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mincore(&(0x7f0000001000/0x800000)=nil, 0x800000, &(0x7f0000000380)=""/4096)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000240)=0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001880))
r8 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000), &(0x7f0000000280))
io_uring_enter(r8, 0x48e9, 0x0, 0x2, 0x0, 0x0)

3m58.818648399s ago: executing program 1 (id=134):
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x4000, 0xfffffffd, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x3}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x5c}}, 0x0)

3m56.415802234s ago: executing program 1 (id=138):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x18, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x4, 0x0, 0x3, 0x9, 0x4, 0xc, 0xffffffffffffffff}, @generic={0x78, 0xd, 0x6, 0x87, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x400, 0xc, &(0x7f0000000080)=""/12, 0x41000, 0x30, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x8}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x0, 0x6a9, 0x9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000500)=[{0x0, 0x1, 0xf, 0x6}, {0x5, 0x4, 0xb, 0x5}, {0x5, 0x2, 0x9}, {0x5, 0x1, 0x10, 0x3}, {0x4, 0x3, 0xe, 0xc}, {0x5, 0x5, 0x7, 0x1}], 0x10, 0x8001}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex=r1, 0xf, 0x1, 0x80000001, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c)
listen(r3, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
socket$nl_route(0x10, 0x3, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)
timer_create(0x3, &(0x7f0000000280)={0x0, 0x3f, 0x1, @thr={0x0, &(0x7f0000000240)="181555"}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f00000292c0)=""/102400, 0x19000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r6, &(0x7f0000000240)='I', 0x1, 0x20048041, &(0x7f0000000200)={0xa, 0x4e23, 0x808001, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xfffffffb}, 0x1c)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400f2000000000009000000850000000f000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

3m40.747199068s ago: executing program 33 (id=138):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x18, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x4, 0x0, 0x3, 0x9, 0x4, 0xc, 0xffffffffffffffff}, @generic={0x78, 0xd, 0x6, 0x87, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x400, 0xc, &(0x7f0000000080)=""/12, 0x41000, 0x30, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x8}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x0, 0x6a9, 0x9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000500)=[{0x0, 0x1, 0xf, 0x6}, {0x5, 0x4, 0xb, 0x5}, {0x5, 0x2, 0x9}, {0x5, 0x1, 0x10, 0x3}, {0x4, 0x3, 0xe, 0xc}, {0x5, 0x5, 0x7, 0x1}], 0x10, 0x8001}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex=r1, 0xf, 0x1, 0x80000001, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c)
listen(r3, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
socket$nl_route(0x10, 0x3, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)
timer_create(0x3, &(0x7f0000000280)={0x0, 0x3f, 0x1, @thr={0x0, &(0x7f0000000240)="181555"}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f00000292c0)=""/102400, 0x19000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r6, &(0x7f0000000240)='I', 0x1, 0x20048041, &(0x7f0000000200)={0xa, 0x4e23, 0x808001, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xfffffffb}, 0x1c)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400f2000000000009000000850000000f000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2m34.682732977s ago: executing program 0 (id=273):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
open(0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10)
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)

2m31.443173097s ago: executing program 0 (id=278):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x1000)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r4)

2m27.891828518s ago: executing program 0 (id=283):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x7, {0x0, r1}}, 0xfffffd64)

2m26.613632586s ago: executing program 0 (id=288):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x101802, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000300)=0x20, 0x4)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000002c0)={{}, "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"})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000000000000b6000040"])
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x280, 0xdc2d74cc3fed45ee, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x2, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x4, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x8, 0xd413, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, 0x0, 0x9})
r4 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb7}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0)

2m22.341956302s ago: executing program 0 (id=291):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

2m20.92308491s ago: executing program 0 (id=294):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x80803, 0x84)
getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f00000003c0)=0x27)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/meminfo\x00', 0x0, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendfile(r6, r5, 0x0, 0xd0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f00000001c0))
ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x25)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
socket(0x22, 0x2, 0x3)

2m5.510319113s ago: executing program 34 (id=294):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x80803, 0x84)
getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f00000003c0)=0x27)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/meminfo\x00', 0x0, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendfile(r6, r5, 0x0, 0xd0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f00000001c0))
ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x25)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
socket(0x22, 0x2, 0x3)

1m4.836262519s ago: executing program 4 (id=442):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="000000000003284eb5636802a13eaf9e39623eac2100000014001280"], 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r5 = timerfd_create(0x9, 0x0)
timerfd_gettime(r5, 0x0)

1m4.70612399s ago: executing program 4 (id=443):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
open(0x0, 0x147842, 0x1ef)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000)

1m4.327142122s ago: executing program 4 (id=444):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x24, 0x40, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0xf0}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)

1m4.098656244s ago: executing program 4 (id=446):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000080000ac0000000007000010850000002700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x0, r5)
write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x3, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
read$snapshot(r6, 0x0, 0xffffffbf)
ioctl$SG_GET_PACK_ID(r6, 0x227c, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r7, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r10, @ANYBLOB="080003"], 0x80}}, 0x8000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m3.313859748s ago: executing program 4 (id=447):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0)

1m2.210076705s ago: executing program 4 (id=448):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100})
lseek(r1, 0x0, 0x3)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
socket$isdn(0x22, 0x3, 0x23)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x3, 0x12)
sendfile(r2, r0, &(0x7f0000000000)=0x9, 0x3fffff)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)

46.874052717s ago: executing program 35 (id=448):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100})
lseek(r1, 0x0, 0x3)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
socket$isdn(0x22, 0x3, 0x23)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x3, 0x12)
sendfile(r2, r0, &(0x7f0000000000)=0x9, 0x3fffff)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)

21.048597253s ago: executing program 2 (id=525):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x100102, 0x8)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x3a)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)

20.229204608s ago: executing program 2 (id=527):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80c0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB='\a\x00'/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000050000000700"/25], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$userio(0xffffffffffffff9c, 0x0, 0x2082, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1e1802, 0x0)
ioctl$PPPIOCSMAXCID(r6, 0x40047451, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

14.237309934s ago: executing program 2 (id=539):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)

13.912109926s ago: executing program 2 (id=540):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000200))
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = creat(0x0, 0xecf86c37d53049cc)
close(r2)
execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[0x0]}, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

12.753707123s ago: executing program 5 (id=543):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
mount(0x0, 0x0, 0x0, 0x1010401, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getuid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000017c0)=ANY=[@ANYBLOB="200000000514010028bd7000ffdb"], 0x20}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000010)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
getpeername(r6, 0x0, &(0x7f00000000c0))

11.039789394s ago: executing program 5 (id=545):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180)=0x4, 0x4)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x117, r3}, 0x10)

10.338850288s ago: executing program 6 (id=547):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000080000ac0000000007000010850000002700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r7 = fcntl$dupfd(r6, 0x0, r6)
write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x3, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
read$snapshot(r7, 0x0, 0xffffffbf)
ioctl$SG_GET_PACK_ID(r7, 0x227c, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r8 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r8, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r10, @ANYBLOB="080003"], 0x80}}, 0x8000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x8000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2060}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x20000804)

10.129867829s ago: executing program 5 (id=548):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xa6c})
syz_io_uring_setup(0x4a13, &(0x7f00000000c0)={0x0, 0x2, 0x800, 0xfff7fffd, 0x399}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})

9.412988374s ago: executing program 7 (id=549):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)

9.373435234s ago: executing program 7 (id=550):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x40000, 0x1})
io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

8.826283337s ago: executing program 6 (id=552):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x101882, 0x0)
ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0xff)
socket$packet(0x11, 0x3, 0x300)
msgctl$IPC_SET(0x0, 0x1, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$int_in(r5, 0x40000000af01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = dup(r6)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x9}, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x54}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100), 0x0, 0x0})
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x7, {0x0, r1}}, 0xfffffd64)

8.617675708s ago: executing program 5 (id=553):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d8", 0x8b}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x3}}], 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x4, 0x1a, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x39, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x10, "e80ee304ecb784ec4655260cecea14e4"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1b0, 0x29, 0x36, {0x5e, 0x32, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x370}}], 0x1, 0x810)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

7.316366866s ago: executing program 7 (id=554):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x6}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x101882, 0x0)
ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
dup(r3)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x9}, 0x0, 0x0)

7.282288686s ago: executing program 6 (id=555):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mprotect(&(0x7f00009eb000/0x2000)=nil, 0x2000, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1f, 0x0, 0x0)
close(0xffffffffffffffff)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r4)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f00000004c0)='\x7f\xb7\xc1\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x05\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01aA$\xf6j\x89\xd9_\xa0\x84\xeaT\x94\xaexuTW\xa7\x93\x8d\xbd\xe6~\xa8\x82\xe7LSw\x8b\x0f<\xe6\xbdh\x97\xd4\xb8\x97\xc0\xd2\x8e\x83#`yx\x96\x10M\xef\xab\xcaR*\xf8a\xdb?\xe0\xd5\xa8\xf1\x9f\\\x17I\x1b\xda$\n\x97\x1d\x8e\xad\xdc\x11\xce\x1e\xe4\xa9\xdb\xfc\xfa\xb5\xcb\xec=\xb2\xb7x\xf6\xa7H\r\xaf\xf4|\x9e\x96?%\x9a\xb0\x00V\xca\xf7b\xc1 \x7f\xb5\x87\x16\xe1?9\xb5\xb8sn\xc8\xa8\xbf7{\x80\x12\xfd\a\x00\xef}\x0484\nU\x14\xfc\xb0mV~\x9d\xa6\x01\f\xef\x8f(.[8\xbd\xdf\x1a\xa6\x80\xa2\x8b,\x11/\x02\"\x10\xf7\xd0l\xbd\xfa\xcd$?I\x82K\v\xcc\x19\xdc\xdb\x87\xbd\xe4\xac\xe2\xac\x06\xc5\x88_\x84K\x8dm\xac\x9b\xe7#\xcb\xa9}\x8f\xe0\x9dYb\x88Z\x9c\xb5\xcbj\n\x1b\xee\x1ev\x01\xaf']})
setrlimit(0x3, &(0x7f00000003c0)={0xd, 0xffffffffffffff87})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a000001090001005bbf0ff90000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
unshare(0x6a040200)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d000100000007000000250000000d0016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1)

7.233595387s ago: executing program 8 (id=556):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffb}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1ec)
close(r5)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f00000004c0)='\x7f\xb7\xc1\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x05\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01aA$\xf6j\x89\xd9_\xa0\x84\xeaT\x94\xaexuTW\xa7\x93\x8d\xbd\xe6~\xa8\x82\xe7LSw\x8b\x0f<\xe6\xbdh\x97\xd4\xb8\x97\xc0\xd2\x8e\x83#`yx\x96\x10M\xef\xab\xcaR*\xf8a\xdb?\xe0\xd5\xa8\xf1\x9f\\\x17I\x1b\xda$\n\x97\x1d\x8e\xad\xdc\x11\xce\x1e\xe4\xa9\xdb\xfc\xfa\xb5\xcb\xec=\xb2\xb7x\xf6\xa7H\r\xaf\xf4|\x9e\x96?%\x9a\xb0\x00V\xca\xf7b\xc1 \x7f\xb5\x87\x16\xe1?9\xb5\xb8sn\xc8\xa8\xbf7{\x80\x12\xfd\a\x00\xef}\x0484\nU\x14\xfc\xb0mV~\x9d\xa6\x01\f\xef\x8f(.[8\xbd\xdf\x1a\xa6\x80\xa2\x8b,\x11/\x02\"\x10\xf7\xd0l\xbd\xfa\xcd$?I\x82K\v\xcc\x19\xdc\xdb\x87\xbd\xe4\xac\xe2\xac\x06\xc5\x88_\x84K\x8dm\xac\x9b\xe7#\xcb\xa9}\x8f\xe0\x9dYb\x88Z\x9c\xb5\xcbj\n\x1b\xee\x1ev\x01\xaf']})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x208, 0xe8, 0x208, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x21}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000], 'syz_tun\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x2b, 0x0, 0x4, 0x24}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xc8b, 0x3, 0x6, 0xf0, 0x0, 0x4, 0x2, 0x8]}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0xff000000, 0xffffff00, 0x518c21d9ab3f4092], [0xffffffff, 0x0, 0x0, 0xffffffff], 'veth0_vlan\x00', 'caif0\x00', {0xff}, {}, 0x73, 0x0, 0x3}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0x4, "fe8e"}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

5.973874704s ago: executing program 8 (id=557):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)

5.814318135s ago: executing program 6 (id=558):
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, 0x0, 0xa000000)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r3, r1, &(0x7f0000002080)=0x64, 0x21c)

5.691754946s ago: executing program 5 (id=559):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da05000000000001090224000100"], 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.02195714s ago: executing program 7 (id=560):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x100102, 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r5, r4, 0x0, 0x3a)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)

4.081233886s ago: executing program 7 (id=561):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x1000)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000e, 0x3032, 0xffffffffffffffff, 0x3b40000)

3.730411668s ago: executing program 8 (id=562):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c484730", 0x46}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r0, 0x0, 0x0)

3.549621869s ago: executing program 6 (id=563):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x5}]})
close_range(r0, 0xffffffffffffffff, 0x0)

3.36793244s ago: executing program 8 (id=564):
socket(0x28, 0x1, 0x0)
r0 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0)
ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x40000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x8140}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x40}, 0x1, 0xba01}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x204}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x4850)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x47f6, 0xb277, 0x0, 0x0, 0x0)

2.757195864s ago: executing program 2 (id=565):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x101882, 0x0)
ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0xff)
socket$packet(0x11, 0x3, 0x300)
msgctl$IPC_SET(0x0, 0x1, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, 0x0, 0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = dup(r6)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x9}, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x54}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100), 0x0, 0x0})
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x7, {0x0, r1}}, 0xfffffd64)

2.412423295s ago: executing program 6 (id=566):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
r5 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000313}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f00000020c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000100)=0xfffffffe, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1})
io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48)
connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, 0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

2.411288935s ago: executing program 8 (id=567):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffb}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1ec)
close(r5)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f00000004c0)='\x7f\xb7\xc1\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x05\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01aA$\xf6j\x89\xd9_\xa0\x84\xeaT\x94\xaexuTW\xa7\x93\x8d\xbd\xe6~\xa8\x82\xe7LSw\x8b\x0f<\xe6\xbdh\x97\xd4\xb8\x97\xc0\xd2\x8e\x83#`yx\x96\x10M\xef\xab\xcaR*\xf8a\xdb?\xe0\xd5\xa8\xf1\x9f\\\x17I\x1b\xda$\n\x97\x1d\x8e\xad\xdc\x11\xce\x1e\xe4\xa9\xdb\xfc\xfa\xb5\xcb\xec=\xb2\xb7x\xf6\xa7H\r\xaf\xf4|\x9e\x96?%\x9a\xb0\x00V\xca\xf7b\xc1 \x7f\xb5\x87\x16\xe1?9\xb5\xb8sn\xc8\xa8\xbf7{\x80\x12\xfd\a\x00\xef}\x0484\nU\x14\xfc\xb0mV~\x9d\xa6\x01\f\xef\x8f(.[8\xbd\xdf\x1a\xa6\x80\xa2\x8b,\x11/\x02\"\x10\xf7\xd0l\xbd\xfa\xcd$?I\x82K\v\xcc\x19\xdc\xdb\x87\xbd\xe4\xac\xe2\xac\x06\xc5\x88_\x84K\x8dm\xac\x9b\xe7#\xcb\xa9}\x8f\xe0\x9dYb\x88Z\x9c\xb5\xcbj\n\x1b\xee\x1ev\x01\xaf']})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x208, 0xe8, 0x208, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x21}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000], 'syz_tun\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x2b, 0x0, 0x4, 0x24}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xc8b, 0x3, 0x6, 0xf0, 0x0, 0x4, 0x2, 0x8]}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0xff000000, 0xffffff00, 0x518c21d9ab3f4092], [0xffffffff, 0x0, 0x0, 0xffffffff], 'veth0_vlan\x00', 'caif0\x00', {0xff}, {}, 0x73, 0x0, 0x3}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0x4, "fe8e"}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

2.177483267s ago: executing program 7 (id=568):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x38, 0x16, 0x43, 0x10, 0xf3d, 0x68a3, 0xe4fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x83, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

753.925885ms ago: executing program 8 (id=569):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x8, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0xfffffffe], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x40, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r1, 0x5501)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

10.55444ms ago: executing program 2 (id=570):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x6}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x101882, 0x0)
ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
dup(r3)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x9}, 0x0, 0x0)

0s ago: executing program 5 (id=571):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r5, r4, 0x0, 0x3a)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts.
[   66.131041][ T4171] cgroup: Unknown subsys name 'net'
[   66.246148][ T4171] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   67.849859][ T4171] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   69.419017][ T4183] chnl_net:caif_netlink_parms(): no params data found
[   69.458937][ T4182] chnl_net:caif_netlink_parms(): no params data found
[   69.514789][ T4185] chnl_net:caif_netlink_parms(): no params data found
[   69.562518][ T4186] chnl_net:caif_netlink_parms(): no params data found
[   69.633228][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.640709][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.649550][ T4183] device bridge_slave_0 entered promiscuous mode
[   69.682206][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.690092][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.698122][ T4183] device bridge_slave_1 entered promiscuous mode
[   69.757413][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.764739][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.773444][ T4182] device bridge_slave_0 entered promiscuous mode
[   69.784708][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.792557][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.801355][ T4182] device bridge_slave_1 entered promiscuous mode
[   69.809962][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.817051][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.825359][ T4185] device bridge_slave_0 entered promiscuous mode
[   69.845567][ T4184] chnl_net:caif_netlink_parms(): no params data found
[   69.863370][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.870826][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.879183][ T4185] device bridge_slave_1 entered promiscuous mode
[   69.888315][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.931675][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.957888][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.985284][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.993254][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.001573][ T4186] device bridge_slave_0 entered promiscuous mode
[   70.016713][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.028278][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.046728][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.054734][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.062947][ T4186] device bridge_slave_1 entered promiscuous mode
[   70.095685][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.108967][ T4183] team0: Port device team_slave_0 added
[   70.151333][ T4183] team0: Port device team_slave_1 added
[   70.168449][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.189672][ T4182] team0: Port device team_slave_0 added
[   70.214319][ T4185] team0: Port device team_slave_0 added
[   70.222354][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.241285][ T4182] team0: Port device team_slave_1 added
[   70.247231][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.254449][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.262634][ T4184] device bridge_slave_0 entered promiscuous mode
[   70.278840][ T4185] team0: Port device team_slave_1 added
[   70.300011][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.307108][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.316676][ T4184] device bridge_slave_1 entered promiscuous mode
[   70.325363][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.332778][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.360991][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.383932][ T4186] team0: Port device team_slave_0 added
[   70.412451][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.419665][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.446231][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.466829][ T4186] team0: Port device team_slave_1 added
[   70.473262][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.480408][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.507157][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.519709][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.526905][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.553089][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.577953][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.585379][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.612027][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.637422][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.660968][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.668223][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.695078][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.727200][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.757538][ T4183] device hsr_slave_0 entered promiscuous mode
[   70.764658][ T4183] device hsr_slave_1 entered promiscuous mode
[   70.775785][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.782987][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.809882][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.839985][ T4184] team0: Port device team_slave_0 added
[   70.848083][ T4184] team0: Port device team_slave_1 added
[   70.854737][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.861820][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.888723][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.902515][ T4182] device hsr_slave_0 entered promiscuous mode
[   70.910180][ T4182] device hsr_slave_1 entered promiscuous mode
[   70.916844][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.925027][ T4182] Cannot create hsr debugfs directory
[   70.974871][ T4185] device hsr_slave_0 entered promiscuous mode
[   70.981970][ T4185] device hsr_slave_1 entered promiscuous mode
[   70.991336][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.999536][ T4185] Cannot create hsr debugfs directory
[   71.014585][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.021746][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.048465][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.079845][   T13] Bluetooth: hci2: command 0x0409 tx timeout
[   71.087111][   T13] Bluetooth: hci4: command 0x0409 tx timeout
[   71.088925][ T2239] Bluetooth: hci0: command 0x0409 tx timeout
[   71.094259][   T13] Bluetooth: hci3: command 0x0409 tx timeout
[   71.105650][   T13] Bluetooth: hci1: command 0x0409 tx timeout
[   71.106141][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.119333][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.146684][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.171905][ T4186] device hsr_slave_0 entered promiscuous mode
[   71.179438][ T4186] device hsr_slave_1 entered promiscuous mode
[   71.186020][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.194406][ T4186] Cannot create hsr debugfs directory
[   71.360735][ T4184] device hsr_slave_0 entered promiscuous mode
[   71.367857][ T4184] device hsr_slave_1 entered promiscuous mode
[   71.374807][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.382481][ T4184] Cannot create hsr debugfs directory
[   71.483669][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[   71.490430][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[   71.599906][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.619889][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.631367][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.640975][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.684830][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.695179][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.707175][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.718385][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.794513][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.809277][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   71.831040][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   71.852522][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   71.907583][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.947387][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.975486][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   72.015934][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.025816][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.035402][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   72.048031][ T4183] 8021q: adding VLAN 0 to HW filter on device team0
[   72.057671][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.066108][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.079772][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   72.091500][ T4182] 8021q: adding VLAN 0 to HW filter on device team0
[   72.117803][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   72.130140][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.141668][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.151321][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.158656][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.167860][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.177589][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.186600][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.193742][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.202918][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.243483][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.252687][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.262214][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.271910][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.280997][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.288230][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.296414][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.310265][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.319443][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.326523][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.334496][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.359406][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.382273][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.392268][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.400971][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.412311][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.422102][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.432344][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.442031][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.451686][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.461541][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.471079][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.480749][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.489557][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.498033][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.506755][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.515219][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.524669][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.534058][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.544515][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.555077][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.578456][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.590880][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.601662][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.610835][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.619795][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.628143][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.640629][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.648548][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.661904][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.733221][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   72.770772][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.786889][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.795957][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.803487][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.843958][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.858668][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.869317][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.877904][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.885087][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.940109][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.950051][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.962535][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.971761][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.986655][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.998407][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.008169][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.050899][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.063482][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.078181][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.088180][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.097237][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.106063][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.115163][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.123703][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.131971][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.141629][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.153900][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.159557][ T1108] Bluetooth: hci3: command 0x041b tx timeout
[   73.161803][ T4267] Bluetooth: hci1: command 0x041b tx timeout
[   73.167265][ T1108] Bluetooth: hci0: command 0x041b tx timeout
[   73.183496][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.190826][ T4267] Bluetooth: hci2: command 0x041b tx timeout
[   73.203101][ T1108] Bluetooth: hci4: command 0x041b tx timeout
[   73.216521][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.228340][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.262191][ T4185] 8021q: adding VLAN 0 to HW filter on device team0
[   73.272579][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.287960][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.303223][ T4182] device veth0_vlan entered promiscuous mode
[   73.337290][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.347475][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.358004][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.369259][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.378138][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.388973][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.397703][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.404857][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.413284][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.422467][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.432630][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.439946][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.448447][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.457757][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.467086][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.475402][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.484523][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.504129][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   73.513265][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.538247][ T4183] device veth0_vlan entered promiscuous mode
[   73.549928][ T4182] device veth1_vlan entered promiscuous mode
[   73.571963][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   73.587040][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.596724][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.608402][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.617171][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.631938][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.663050][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.675337][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.692649][ T4183] device veth1_vlan entered promiscuous mode
[   73.708408][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   73.716995][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.729286][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.738022][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.747163][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.756782][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.764692][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.772650][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.781535][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.790468][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.804731][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.828292][ T4182] device veth0_macvtap entered promiscuous mode
[   73.847052][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   73.860779][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.875986][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.886182][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.907121][ T4182] device veth1_macvtap entered promiscuous mode
[   73.935530][ T4183] device veth0_macvtap entered promiscuous mode
[   73.949643][ T4184] 8021q: adding VLAN 0 to HW filter on device team0
[   73.969219][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.988276][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.000125][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.009796][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.018295][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.027395][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.044538][ T4183] device veth1_macvtap entered promiscuous mode
[   74.074254][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.083709][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.093279][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.102440][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.109571][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.117398][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.126335][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.135347][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.142829][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.155982][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   74.164759][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.173781][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.187877][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.215677][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.223629][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.234334][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.245622][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.254928][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.273820][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.297854][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.310571][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.325507][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   74.336641][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   74.351897][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.362123][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.372150][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.383286][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.394961][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.408299][ T4186] device veth0_vlan entered promiscuous mode
[   74.417721][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   74.428165][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.437135][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.446868][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.456333][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.465752][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   74.475251][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   74.495611][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.506586][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.523287][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.534118][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.547226][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.557313][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.567938][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.578141][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.587416][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.603476][ T4186] device veth1_vlan entered promiscuous mode
[   74.611403][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.620186][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.628834][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.637174][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   74.647168][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.656850][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   74.666340][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.675103][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.684516][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.702049][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   74.718103][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.740930][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.773392][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.783696][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.871092][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.886500][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.910927][ T4186] device veth0_macvtap entered promiscuous mode
[   74.930953][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.953863][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.963166][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.991955][ T4186] device veth1_macvtap entered promiscuous mode
[   75.032711][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.046636][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.060860][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.084279][ T4185] device veth0_vlan entered promiscuous mode
[   75.106902][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.121043][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.140049][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   75.147778][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   75.168010][ T4185] device veth1_vlan entered promiscuous mode
[   75.193442][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.206473][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.217657][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.230777][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.244140][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.249718][ T4259] Bluetooth: hci4: command 0x040f tx timeout
[   75.259904][ T4259] Bluetooth: hci0: command 0x040f tx timeout
[   75.266733][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.266819][ T4259] Bluetooth: hci2: command 0x040f tx timeout
[   75.281331][ T4259] Bluetooth: hci1: command 0x040f tx timeout
[   75.287898][ T4259] Bluetooth: hci3: command 0x040f tx timeout
[   75.312344][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.315002][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   75.330815][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.343342][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   75.353303][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.364906][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.374559][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.386498][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.397929][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.408951][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.419686][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.431313][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.447826][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.460182][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.470159][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.480057][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.504320][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.504487][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.516095][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.529020][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.580053][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.589946][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.600198][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.610295][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   75.620468][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.645493][ T4185] device veth0_macvtap entered promiscuous mode
[   75.676591][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.679392][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.690304][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.708455][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.717555][ T4185] device veth1_macvtap entered promiscuous mode
[   75.740084][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.760606][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.770864][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.818453][ T4184] device veth0_vlan entered promiscuous mode
[   75.850216][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.869830][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.897649][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.925230][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.936915][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.948259][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.960007][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.971942][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.983627][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.003248][ T4184] device veth1_vlan entered promiscuous mode
[   76.010224][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.018102][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.026466][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   76.035943][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.046447][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.068418][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.083418][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.093967][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.105345][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.116388][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.135356][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.148494][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.187878][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   76.223051][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.268323][ T4298] ERROR: device name not specified.
[   76.275134][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.307359][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.328343][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.340399][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.348451][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.367286][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.523679][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.534899][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.564189][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.578656][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   76.589400][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   76.599378][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   76.608953][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   76.619541][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   76.646113][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   76.945535][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   76.956772][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   76.979167][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   76.991380][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   77.378473][ T4259] Bluetooth: hci3: command 0x0419 tx timeout
[   77.382687][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.435554][ T4259] Bluetooth: hci1: command 0x0419 tx timeout
[   77.447619][ T4184] device veth0_macvtap entered promiscuous mode
[   77.484133][ T4309] tipc: Started in network mode
[   77.488848][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.494685][ T4309] tipc: Node identity d28456522737, cluster identity 4711
[   77.498082][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.506679][ T4309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.532242][ T4259] Bluetooth: hci2: command 0x0419 tx timeout
[   77.537001][ T4184] device veth1_macvtap entered promiscuous mode
[   77.558505][ T4259] Bluetooth: hci0: command 0x0419 tx timeout
[   77.587076][ T4259] Bluetooth: hci4: command 0x0419 tx timeout
[   77.693201][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.213825][ T4306] tipc: Resetting bearer <eth:syzkaller0>
[   78.282878][ T4305] tipc: Disabling bearer <eth:syzkaller0>
[   78.396212][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.427872][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.473931][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.534331][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.583938][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.595439][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.605998][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.619208][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.778049][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.199718][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   80.239768][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.656303][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.856560][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.867769][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.891261][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.950016][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.026534][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.038740][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.050150][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.229894][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.262175][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   81.306845][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.327079][ T4339] fuse: Unknown parameter '0x0000000000000009'
[   81.681016][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.702297][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.709115][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.789247][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.799377][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.810147][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.918968][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   82.422592][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.502634][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.536447][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   82.650416][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.720309][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.808947][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.842742][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.949482][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.984628][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.867810][    T7] cfg80211: failed to load regulatory.db
[   91.848954][   T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   92.427556][   T23] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[   92.441629][   T23] usb 4-1: config 0 has no interface number 0
[   92.448856][   T23] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   94.061867][ T4411] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   94.098853][   T23] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[   94.108137][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.175082][   T23] usb 4-1: config 0 descriptor??
[   94.248438][   T23] usb 4-1: can't set config #0, error -71
[   94.278812][ T4345] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   94.396170][   T23] usb 4-1: USB disconnect, device number 2
[   94.618786][ T4345] usb 3-1: Using ep0 maxpacket: 16
[   94.739678][ T4345] usb 3-1: config 10 has an invalid interface number: 93 but max is 0
[   94.910453][ T4345] usb 3-1: config 10 has no interface number 0
[   95.099780][ T4345] usb 3-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=1e.08
[   95.185932][ T4345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.228538][ T4345] usb 3-1: Product: syz
[   95.236277][ T4345] usb 3-1: Manufacturer: syz
[   95.244491][ T4345] usb 3-1: SerialNumber: syz
[   95.432742][ T4345] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state.
[   95.445349][ T4345] dvb-usb: bulk message failed: -22 (2/0)
[   95.458792][ T4345] dvb-usb: will use the device's hardware PID filter (table count: 15).
[   95.504532][ T4345] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U))
[   95.519574][ T4345] usb 3-1: media controller created
[   95.598982][ T4345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   95.661552][ T4345] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)...
[   95.756636][ T4345] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[   98.308734][ T4345] rc_core: IR keymap rc-dtt200u not found
[   98.314865][ T4345] Registered IR keymap rc-empty
[   98.451169][ T4345] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[   99.978814][ T4345] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input5
[  100.124725][ T4439] sp0: Synchronizing with TNC
[  100.175537][ T4345] dvb-usb: schedule remote query interval to 300 msecs.
[  100.183807][ T4345] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected.
[  100.371856][ T4345] usb 3-1: USB disconnect, device number 2
[  104.863562][ T4345] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected.
[  109.645932][ T4511] sp0: Synchronizing with TNC
[  112.095099][ T4524] tmpfs: Unknown parameter 'usrquota'
[  115.690715][ T4544] sp0: Synchronizing with TNC
[  122.400399][ T4267] Bluetooth: hci5: command 0x0409 tx timeout
[  122.464778][ T4186] syz-executor (4186) used greatest stack depth: 20104 bytes left
[  123.918709][ T4251] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  123.938335][  T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.263379][  T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.315034][ T4566] chnl_net:caif_netlink_parms(): no params data found
[  124.362050][  T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.409589][ T4251] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  124.430318][ T4251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.458139][  T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.473687][ T4251] usb 2-1: config 0 descriptor??
[  124.482101][ T4253] Bluetooth: hci5: command 0x041b tx timeout
[  124.523774][ T4251] gspca_main: sunplus-2.14.0 probing 055f:c420
[  124.618398][ T4566] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.659710][ T4566] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.692797][ T4566] device bridge_slave_0 entered promiscuous mode
[  124.802950][ T4566] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.818856][ T4566] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.846990][ T4566] device bridge_slave_1 entered promiscuous mode
[  124.984451][ T4566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.051651][ T4566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.418803][ T4251] gspca_sunplus: reg_w_riv err -71
[  125.424534][ T4251] sunplus: probe of 2-1:0.0 failed with error -71
[  125.459729][ T4251] usb 2-1: USB disconnect, device number 2
[  125.660686][ T4566] team0: Port device team_slave_0 added
[  125.683381][ T4566] team0: Port device team_slave_1 added
[  125.845619][ T4566] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.857516][ T4566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.984422][ T4566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.064186][ T4566] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.892823][ T4253] Bluetooth: hci5: command 0x040f tx timeout
[  126.913661][ T4566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.101834][ T4566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.449842][ T4566] device hsr_slave_0 entered promiscuous mode
[  128.480213][ T4566] device hsr_slave_1 entered promiscuous mode
[  128.487695][ T4566] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  128.496406][ T4566] Cannot create hsr debugfs directory
[  129.450964][ T4253] Bluetooth: hci5: command 0x0419 tx timeout
[  130.619224][   T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  130.836345][ T4566] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  131.709625][   T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  131.756687][ T4566] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  131.784767][ T4566] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  131.839325][ T4566] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  131.882854][  T154] device hsr_slave_0 left promiscuous mode
[  131.904196][  T154] device hsr_slave_1 left promiscuous mode
[  131.926912][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.945735][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.960885][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.977435][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.988963][   T21] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  132.003655][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.019988][   T13] usb 5-1: Using ep0 maxpacket: 16
[  132.042327][   T21] usb 2-1: Product: syz
[  132.067361][   T21] usb 2-1: Manufacturer: syz
[  132.107210][   T21] usb 2-1: SerialNumber: syz
[  132.160369][  T154] device bridge_slave_1 left promiscuous mode
[  132.182736][   T21] usb 2-1: config 0 descriptor??
[  132.191748][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.264521][  T154] device bridge_slave_0 left promiscuous mode
[  132.312192][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.329002][   T13] usb 5-1: config 10 has an invalid interface number: 93 but max is 0
[  132.337707][   T13] usb 5-1: config 10 has no interface number 0
[  132.511499][   T21] cx82310_eth: probe of 2-1:0.0 failed with error -22
[  132.615094][  T154] device veth1_macvtap left promiscuous mode
[  132.628013][  T154] device veth0_macvtap left promiscuous mode
[  132.637493][  T154] device veth1_vlan left promiscuous mode
[  132.647273][  T154] device veth0_vlan left promiscuous mode
[  132.659842][   T21] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  132.685950][   T21] usb 2-1: USB disconnect, device number 3
[  132.738971][   T13] usb 5-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=1e.08
[  132.748315][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.757486][   T13] usb 5-1: Product: syz
[  132.762006][   T13] usb 5-1: Manufacturer: syz
[  132.767038][   T13] usb 5-1: SerialNumber: syz
[  132.814932][   T13] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state.
[  132.825298][   T13] dvb-usb: bulk message failed: -22 (2/0)
[  132.831844][   T13] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  132.869287][   T13] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U))
[  132.880431][   T13] usb 5-1: media controller created
[  132.887304][   T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  132.903031][   T13] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)...
[  132.911962][   T13] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  132.925525][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  132.925618][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  133.062502][  T154] team0 (unregistering): Port device team_slave_1 removed
[  133.086866][  T154] team0 (unregistering): Port device team_slave_0 removed
[  133.106220][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  133.115058][   T13] rc_core: IR keymap rc-dtt200u not found
[  133.121737][   T13] Registered IR keymap rc-empty
[  133.127433][   T13] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  133.141325][   T13] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6
[  133.729613][   T13] dvb-usb: schedule remote query interval to 300 msecs.
[  133.741903][   T13] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected.
[  133.766432][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.067946][  T154] bond0 (unregistering): Released all slaves
[  134.137230][ T4251] dvb-usb: bulk message failed: -22 (1/0)
[  134.146858][ T4240] usb 5-1: USB disconnect, device number 2
[  134.152890][ T4251] dvb-usb: error -22 while querying for an remote control event.
[  134.344246][ T4240] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected.
[  138.775298][ T4566] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.937292][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  138.970635][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  139.069772][ T4566] 8021q: adding VLAN 0 to HW filter on device team0
[  139.104811][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  140.038994][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  140.117590][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.124747][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.197151][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  140.314300][ T4753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.110'.
[  140.352667][ T4753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.110'.
[  140.407810][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  140.453372][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  140.529470][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.537198][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.608649][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  140.856154][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  140.980673][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  141.083613][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  141.151552][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  141.241313][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  141.305683][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  141.461017][ T4566] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  141.579017][ T4566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  141.703168][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  141.720993][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  141.759583][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  141.776968][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  141.821036][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  142.141418][ T4775] mmap: syz.4.113 (4775) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  142.498735][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  142.516760][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  142.566376][ T4566] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.236539][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  147.259532][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  147.357732][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  147.379546][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  148.191662][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  148.199814][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  148.221970][ T4566] device veth0_vlan entered promiscuous mode
[  148.313659][ T4837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.122'.
[  148.328045][ T4837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.122'.
[  148.580070][ T4566] device veth1_vlan entered promiscuous mode
[  149.680897][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  149.740458][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  149.769123][ T4566] device veth0_macvtap entered promiscuous mode
[  149.795206][ T4566] device veth1_macvtap entered promiscuous mode
[  149.924767][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.939541][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.953204][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.968322][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.149154][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.038727][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.208735][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.291932][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.338216][ T4566] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.427226][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  151.454225][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  152.425669][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  152.474903][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  152.508685][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.535864][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.588098][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.617618][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.630761][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.642557][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.652993][ T4566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.673957][ T4566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.700965][ T4566] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.729933][ T4566] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.742808][ T4566] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.815522][ T4566] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.824624][ T4566] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.852378][ T4887] device vlan0 entered promiscuous mode
[  153.717352][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  153.751369][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  153.825553][ T4898] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  154.260616][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.329674][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.361681][ T4912] device geneve2 entered promiscuous mode
[  154.470447][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.476987][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  155.014319][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.039317][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  156.216063][ T4927] netlink: 'syz.5.64': attribute type 11 has an invalid length.
[  160.515186][ T4962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.146'.
[  160.525441][ T4962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.146'.
[  162.715310][ T4977] device vlan0 entered promiscuous mode
[  169.748196][ T5036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.161'.
[  169.757387][ T5036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.161'.
[  172.062264][ T5048] device vlan0 entered promiscuous mode
[  173.718810][   T23] Bluetooth: hci3: command 0x0409 tx timeout
[  174.385979][ T5039] chnl_net:caif_netlink_parms(): no params data found
[  174.512767][ T5070] netlink: 56 bytes leftover after parsing attributes in process `syz.5.169'.
[  176.441897][ T4356] Bluetooth: hci3: command 0x041b tx timeout
[  176.585300][ T5039] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.679624][ T5039] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.830671][ T5039] device bridge_slave_0 entered promiscuous mode
[  177.021019][ T5039] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.665837][ T5039] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.674295][ T5039] device bridge_slave_1 entered promiscuous mode
[  177.703463][ T5039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.756701][ T5039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.334619][ T5039] team0: Port device team_slave_0 added
[  178.343039][ T5039] team0: Port device team_slave_1 added
[  178.529395][ T4345] Bluetooth: hci3: command 0x040f tx timeout
[  179.330880][ T5039] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.398925][ T5039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.929932][ T5039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.976049][ T5107] netlink: 28 bytes leftover after parsing attributes in process `syz.5.176'.
[  180.004731][ T5107] netlink: 28 bytes leftover after parsing attributes in process `syz.5.176'.
[  180.032997][ T5039] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.058648][ T5039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.126793][ T5039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.139463][ T5119] device vlan0 entered promiscuous mode
[  181.745311][ T2239] Bluetooth: hci3: command 0x0419 tx timeout
[  182.110557][ T5039] device hsr_slave_0 entered promiscuous mode
[  182.155830][ T5039] device hsr_slave_1 entered promiscuous mode
[  182.189861][ T5039] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  182.217191][ T5039] Cannot create hsr debugfs directory
[  182.265875][ T5135] netlink: 56 bytes leftover after parsing attributes in process `syz.2.183'.
[  182.792517][ T5039] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  182.817420][ T5039] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  182.842913][ T5039] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  182.869052][ T5039] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  184.319594][ T5159] sched: RT throttling activated
[  187.196043][ T5039] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.203318][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.379282][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.860405][ T5039] 8021q: adding VLAN 0 to HW filter on device team0
[  189.500193][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  189.543517][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  189.565857][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.573239][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.623966][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  189.646882][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  189.676204][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.683559][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.763952][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  189.784379][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  189.811928][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  189.918089][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  189.990421][ T5188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.191'.
[  191.250961][ T5188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.191'.
[  191.298801][ T5199] device vlan0 entered promiscuous mode
[  191.318768][ T4345] Bluetooth: hci4: command 0x0406 tx timeout
[  191.329074][ T4345] Bluetooth: hci2: command 0x0406 tx timeout
[  191.341832][ T4345] Bluetooth: hci1: command 0x0406 tx timeout
[  191.348370][ T4345] Bluetooth: hci0: command 0x0406 tx timeout
[  191.407041][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  191.423921][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  191.461914][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  191.480591][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  191.639863][ T5213] netlink: 56 bytes leftover after parsing attributes in process `syz.2.196'.
[  191.649280][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  191.650015][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  192.541721][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  192.581710][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  192.625476][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  194.374431][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  194.381208][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  194.845348][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  194.886856][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  195.215002][ T5039] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.043960][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  197.069685][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  198.131646][ T5039] device veth0_vlan entered promiscuous mode
[  198.139418][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  198.193903][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  198.252073][ T5267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.205'.
[  198.286238][ T5267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.205'.
[  198.343733][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  198.360206][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  198.389409][ T5039] device veth1_vlan entered promiscuous mode
[  198.632642][ T5039] device veth0_macvtap entered promiscuous mode
[  198.644345][ T5039] device veth1_macvtap entered promiscuous mode
[  198.670488][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  198.697987][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  198.792435][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  198.816387][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  199.567351][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.067605][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.317925][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.335560][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.345949][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.357436][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.378804][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.430960][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.441694][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.453534][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.472025][ T5039] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.500077][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  201.648225][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  201.991647][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.065596][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.178795][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.253308][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.332868][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.000444][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.250855][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.617016][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.657589][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.709627][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.776761][ T5039] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.867759][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  205.906769][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  205.972001][ T5039] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.012442][ T5039] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.033995][ T5039] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.050734][ T5039] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.098915][ T5335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'.
[  207.188803][ T5335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'.
[  208.299759][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.307842][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.457194][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.525822][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.545730][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  208.792279][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  216.665826][ T5407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.232'.
[  216.675288][ T5407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.232'.
[  216.903308][ T5410] ERROR: device name not specified.
[  217.377604][ T5426] ERROR: device name not specified.
[  223.557112][ T5452] netlink: 120 bytes leftover after parsing attributes in process `syz.5.247'.
[  224.701495][ T5470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.248'.
[  224.710598][ T5470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.248'.
[  232.486929][ T5534] netlink: 120 bytes leftover after parsing attributes in process `syz.2.263'.
[  233.591414][ T5547] ERROR: device name not specified.
[  233.831722][ T5555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.265'.
[  233.841865][ T5555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.265'.
[  242.518860][ T4189] Bluetooth: hci5: command 0x0406 tx timeout
[  243.940359][ T5645] netlink: 28 bytes leftover after parsing attributes in process `syz.6.284'.
[  243.949536][ T5645] netlink: 28 bytes leftover after parsing attributes in process `syz.6.284'.
[  254.213306][ T5719] overlayfs: missing 'lowerdir'
[  255.801579][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  255.808068][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  256.683130][ T5725] tipc: Started in network mode
[  256.744266][ T5725] tipc: Node identity ba7e2db9a34b, cluster identity 4711
[  256.822760][ T5725] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.887509][ T5723] tipc: Resetting bearer <eth:syzkaller0>
[  257.347706][ T5723] tipc: Disabling bearer <eth:syzkaller0>
[  260.949688][ T5771] ERROR: device name not specified.
[  268.042984][ T4251] Bluetooth: hci6: command 0x0409 tx timeout
[  270.929144][ T4240] Bluetooth: hci6: command 0x041b tx timeout
[  271.056434][ T5827] ERROR: device name not specified.
[  271.861898][ T4354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.532019][ T4354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.809598][ T5787] chnl_net:caif_netlink_parms(): no params data found
[  273.913284][ T4354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.945371][ T4354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.305329][ T4240] Bluetooth: hci6: command 0x040f tx timeout
[  276.368652][ T5174] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  276.434901][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.451510][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.469917][ T5787] device bridge_slave_0 entered promiscuous mode
[  276.481967][ T5873] ERROR: device name not specified.
[  276.510038][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.538077][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.547380][ T5787] device bridge_slave_1 entered promiscuous mode
[  277.573846][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.650095][   T13] Bluetooth: hci6: command 0x0419 tx timeout
[  277.656572][    T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  277.739364][ T5174] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  277.748444][ T5174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.841448][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  277.893351][ T5174] usb 3-1: Product: syz
[  277.924639][ T5174] usb 3-1: Manufacturer: syz
[  277.946251][ T5174] usb 3-1: SerialNumber: syz
[  277.974119][ T5174] usb 3-1: config 0 descriptor??
[  278.094729][ T5787] team0: Port device team_slave_0 added
[  278.117769][ T5787] team0: Port device team_slave_1 added
[  278.188734][    T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  278.227279][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.246247][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.251481][ T5174] peak_usb 3-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels)
[  278.331768][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.340'.
[  278.489217][ T5174] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  278.525977][ T5174] peak_usb 3-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71)
[  278.550144][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.574098][    T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  278.959634][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.966638][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.974410][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  279.003070][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.121549][    T7] usb 5-1: Product: syz
[  279.126172][    T7] usb 5-1: Manufacturer: syz
[  279.137787][    T7] usb 5-1: SerialNumber: syz
[  279.321637][ T5174] peak_usb: probe of 3-1:0.0 failed with error -71
[  280.088748][ T5174] usb 3-1: USB disconnect, device number 3
[  280.090282][ T4240] Bluetooth: hci6: command 0x0405 tx timeout
[  280.211199][    T7] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  280.439522][    T7] usb 5-1: USB disconnect, device number 3
[  280.467547][    T7] usblp0: removed
[  280.840756][ T5787] device hsr_slave_0 entered promiscuous mode
[  280.874410][ T5787] device hsr_slave_1 entered promiscuous mode
[  280.971548][ T5920] input: syz1 as /devices/virtual/input/input15
[  281.988075][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  281.995828][ T5787] Cannot create hsr debugfs directory
[  283.101440][ T5931] vivid-004: =================  START STATUS  =================
[  283.109515][ T5931] vivid-004: Radio HW Seek Mode: Bounded
[  283.115587][ T5931] vivid-004: Radio Programmable HW Seek: false
[  283.121837][ T5931] vivid-004: RDS Rx I/O Mode: Block I/O
[  283.127405][ T5931] vivid-004: Generate RBDS Instead of RDS: false
[  283.133909][ T5931] vivid-004: RDS Reception: true
[  283.138882][ T5931] vivid-004: RDS Program Type: 0 inactive
[  283.144618][ T5931] vivid-004: RDS PS Name:  inactive
[  283.149857][ T5931] vivid-004: RDS Radio Text:  inactive
[  283.155329][ T5931] vivid-004: RDS Traffic Announcement: false inactive
[  283.162191][ T5931] vivid-004: RDS Traffic Program: false inactive
[  283.168664][ T5931] vivid-004: RDS Music: false inactive
[  283.174173][ T5931] vivid-004: ==================  END STATUS  ==================
[  285.120952][ T4354] device hsr_slave_0 left promiscuous mode
[  285.150027][ T4354] device hsr_slave_1 left promiscuous mode
[  285.179970][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.187499][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0
[  285.204378][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.215538][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1
[  285.316292][   T26] audit: type=1326 audit(1762485977.055:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb557f9f6c9 code=0x7ffc0000
[  285.354439][ T4354] device bridge_slave_1 left promiscuous mode
[  285.370399][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.457674][ T4354] device bridge_slave_0 left promiscuous mode
[  285.472873][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.502809][ T4354] device veth1_macvtap left promiscuous mode
[  285.515234][ T4354] device veth0_macvtap left promiscuous mode
[  285.578724][ T4354] device veth1_vlan left promiscuous mode
[  285.596399][   T26] audit: type=1326 audit(1762485977.055:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb557f9f6c9 code=0x7ffc0000
[  286.482110][   T26] audit: type=1326 audit(1762485977.055:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb557f9f6c9 code=0x7ffc0000
[  286.685628][   T26] audit: type=1326 audit(1762485977.055:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb557f9f6c9 code=0x7ffc0000
[  286.708698][   T26] audit: type=1326 audit(1762485977.055:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb557f9f6c9 code=0x7ffc0000
[  287.774964][ T5988] tmpfs: Unknown parameter 'usrquota'
[  288.772801][ T4354] team0 (unregistering): Port device team_slave_1 removed
[  288.820965][ T4354] team0 (unregistering): Port device team_slave_0 removed
[  288.849814][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  288.890205][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.744064][ T4354] bond0 (unregistering): Released all slaves
[  290.981088][ T5787] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  291.190206][ T5787] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  291.251854][ T6006] process 'syz.5.367' launched './file0' with NULL argv: empty string added
[  292.181242][ T5787] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  292.700438][ T5787] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  293.053936][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.120908][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  293.143800][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  293.276848][ T4253] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  293.294441][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[  293.303941][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  293.315231][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  293.325305][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.332562][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.806620][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  293.836806][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  293.988698][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  294.455197][ T4259] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  294.772308][ T5369] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.779885][ T5369] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.829604][ T4253] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  294.848584][ T4253] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  294.860234][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  294.884460][ T4253] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255
[  294.914453][ T6056] device syzkaller0 entered promiscuous mode
[  294.936245][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  294.956053][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  294.968744][ T4259] usb 3-1: Using ep0 maxpacket: 16
[  294.981587][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  295.033151][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  295.088986][ T4259] usb 3-1: config 10 has an invalid interface number: 93 but max is 0
[  295.093433][ T4253] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  295.109339][ T4259] usb 3-1: config 10 has no interface number 0
[  295.124323][ T4253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  295.149117][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  295.164697][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  295.168788][ T4253] usb 5-1: can't set config #1, error -71
[  295.184149][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  295.190586][ T4253] usb 5-1: USB disconnect, device number 4
[  295.214388][ T6001] udevd[6001]: setting owner of /dev/bus/usb/005/004 to uid=0, gid=0 failed: No such file or directory
[  295.250967][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  295.278805][ T4259] usb 3-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=1e.08
[  295.293156][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  295.299699][ T4259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.310205][ T4259] usb 3-1: Product: syz
[  295.314409][ T4259] usb 3-1: Manufacturer: syz
[  295.321340][ T4259] usb 3-1: SerialNumber: syz
[  295.367690][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  295.432552][ T4259] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state.
[  295.526080][ T4259] dvb-usb: bulk message failed: -22 (2/0)
[  295.652816][ T5787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  295.674336][ T4259] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  295.771424][ T4259] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U))
[  296.119013][ T4259] usb 3-1: media controller created
[  296.188418][ T4259] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  296.382144][ T4259] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)...
[  296.410546][ T4259] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  297.338648][ T4259] rc_core: IR keymap rc-dtt200u not found
[  297.344466][ T4259] Registered IR keymap rc-empty
[  298.389079][ T4259] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  298.464022][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  298.477301][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  298.550853][ T4259] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input17
[  298.575356][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.770373][ T4259] dvb-usb: schedule remote query interval to 300 msecs.
[  298.898344][ T4259] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected.
[  299.110856][ T4259] usb 3-1: USB disconnect, device number 4
[  299.196691][ T5174] Bluetooth: hci3: command 0x0406 tx timeout
[  299.286735][ T4259] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected.
[  299.344249][ T6129] device syzkaller0 entered promiscuous mode
[  299.715668][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  299.729401][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  299.824884][ T6137] ERROR: device name not specified.
[  300.045261][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  300.819398][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  300.885329][ T5787] device veth0_vlan entered promiscuous mode
[  300.906844][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  300.968761][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  301.006589][ T5787] device veth1_vlan entered promiscuous mode
[  301.097154][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  301.114983][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  301.130246][ T5787] device veth0_macvtap entered promiscuous mode
[  302.065833][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  302.238617][ T4253] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  302.264259][ T5787] device veth1_macvtap entered promiscuous mode
[  302.501861][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.578885][ T4253] usb 3-1: Using ep0 maxpacket: 16
[  302.699061][ T4253] usb 3-1: config 10 has an invalid interface number: 93 but max is 0
[  303.271057][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.281207][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.291832][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.291910][ T4253] usb 3-1: config 10 has no interface number 0
[  303.337507][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.388654][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.498860][ T4253] usb 3-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=1e.08
[  303.569646][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.581113][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.591616][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.594895][ T4253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.602602][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.623501][ T4253] usb 3-1: Product: syz
[  303.635026][ T4253] usb 3-1: Manufacturer: syz
[  303.641208][ T4253] usb 3-1: SerialNumber: syz
[  303.725117][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.834020][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.471267][ T4253] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state.
[  304.471314][ T4253] dvb-usb: bulk message failed: -22 (2/0)
[  304.471340][ T4253] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  304.489779][ T4253] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U))
[  304.569416][ T4253] usb 3-1: media controller created
[  304.576420][ T4253] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  304.590006][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.602036][ T4253] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)...
[  304.610716][ T4253] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  304.620016][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.823960][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.025999][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.047029][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.074974][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.086659][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.928458][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.938999][ T4253] rc_core: IR keymap rc-dtt200u not found
[  306.132299][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.148006][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.154047][ T4253] Registered IR keymap rc-empty
[  306.165328][ T4253] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  306.328931][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  306.342018][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  306.347329][ T4253] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input18
[  306.352061][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  306.898846][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  306.917527][ T4253] dvb-usb: schedule remote query interval to 300 msecs.
[  306.967130][ T4253] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected.
[  306.981918][ T4253] usb 3-1: USB disconnect, device number 5
[  307.211204][ T4253] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected.
[  307.710373][ T5787] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.710402][ T5787] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.710424][ T5787] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.710444][ T5787] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.846637][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.846704][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.871271][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  307.914559][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.914628][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.917489][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  311.968804][ T2239] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  312.238739][ T2239] usb 7-1: Using ep0 maxpacket: 16
[  312.778902][ T2239] usb 7-1: config 10 has an invalid interface number: 93 but max is 0
[  312.789237][ T2239] usb 7-1: config 10 has no interface number 0
[  313.118368][ T2239] usb 7-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=1e.08
[  313.146077][ T2239] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.165407][ T2239] usb 7-1: Product: syz
[  313.174312][ T2239] usb 7-1: Manufacturer: syz
[  313.204299][ T2239] usb 7-1: SerialNumber: syz
[  313.658793][ T2239] usb 7-1: can't set config #10, error -71
[  313.679509][ T2239] usb 7-1: USB disconnect, device number 2
[  317.242039][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  317.248853][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  330.051370][ T6432] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  331.113071][ T6432] netlink: 48 bytes leftover after parsing attributes in process `syz.5.449'.
[  342.597209][   T26] audit: type=1326 audit(1762486034.335:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.7.467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcea77816c9 code=0x0
[  344.848675][ T4253] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  346.078727][ T4253] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  346.231856][ T4253] usb 6-1: config 0 has no interfaces?
[  346.249798][ T4253] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  346.311067][ T4253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.410285][ T4253] usb 6-1: config 0 descriptor??
[  347.148121][ T4253] usb 6-1: USB disconnect, device number 2
[  349.187972][ T4382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.325357][ T4382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.356601][ T6568] 9pnet: Insufficient options for proto=fd
[  349.437666][ T4382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.595160][ T4382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.878638][ T5174] Bluetooth: hci1: command 0x0409 tx timeout
[  351.645066][ T6549] chnl_net:caif_netlink_parms(): no params data found
[  351.702027][ T4382] tipc: Left network mode
[  352.061387][   T23] Bluetooth: hci1: command 0x041b tx timeout
[  352.144448][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.151900][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.164871][ T6549] device bridge_slave_0 entered promiscuous mode
[  352.236628][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.248950][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.268119][ T6549] device bridge_slave_1 entered promiscuous mode
[  352.335070][ T6549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.364053][ T6549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.460919][ T6549] team0: Port device team_slave_0 added
[  352.511987][ T6549] team0: Port device team_slave_1 added
[  352.621952][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.646188][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.823203][ T6549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.877383][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.894738][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.011106][ T6549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.342283][ T6620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.487'.
[  353.351602][ T6620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.487'.
[  354.023896][ T6549] device hsr_slave_0 entered promiscuous mode
[  354.176514][ T4356] Bluetooth: hci1: command 0x040f tx timeout
[  354.282646][ T6549] device hsr_slave_1 entered promiscuous mode
[  355.283515][ T4382] device hsr_slave_0 left promiscuous mode
[  355.423390][ T6653] vcan0: tx drop: invalid da for name 0x00000000000000f0
[  355.868113][ T4382] device hsr_slave_1 left promiscuous mode
[  356.228798][ T2239] Bluetooth: hci1: command 0x0419 tx timeout
[  356.278737][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  356.287656][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_0
[  356.304980][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  356.323912][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.341368][ T4382] device bridge_slave_1 left promiscuous mode
[  356.347568][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.356568][ T4382] device bridge_slave_0 left promiscuous mode
[  356.363389][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.395098][ T4382] device veth1_macvtap left promiscuous mode
[  356.401646][ T4382] device veth0_macvtap left promiscuous mode
[  356.411051][ T4382] device veth1_vlan left promiscuous mode
[  358.040339][ T4382] team0 (unregistering): Port device team_slave_1 removed
[  358.100418][ T4382] team0 (unregistering): Port device team_slave_0 removed
[  358.133036][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  358.158920][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  358.259342][ T4382] bond0 (unregistering): Released all slaves
[  358.336626][ T6659] device syzkaller0 entered promiscuous mode
[  359.054733][ T6549] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  359.064778][ T6549] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  359.077300][ T6549] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  359.090085][ T6549] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  360.402122][ T6549] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.466613][ T6549] 8021q: adding VLAN 0 to HW filter on device team0
[  360.506256][ T6549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  360.516885][ T6549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  360.776377][ T6724] Mount JFS Failure: -22
[  360.781035][ T6724] jfs_mount failed w/return code = -22
[  360.793152][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  361.889485][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  361.897932][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  361.907246][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  361.916142][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.923343][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.936306][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  361.945391][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  361.984552][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.991752][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.196388][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  362.278421][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  362.289688][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  362.335410][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  362.345540][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  362.369786][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  362.378691][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  362.396419][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  362.405749][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  362.426814][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  362.536367][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  362.609803][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  362.647737][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  362.746742][ T6745] device syzkaller0 entered promiscuous mode
[  362.977951][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  363.001865][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  363.015781][ T6763] Zero length message leads to an empty skb
[  363.906772][ T6549] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.969144][ T4253] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  368.228773][ T4253] usb 3-1: device descriptor read/all, error -71
[  368.234747][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  368.265151][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  368.394064][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  368.413980][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  368.449247][ T6549] device veth0_vlan entered promiscuous mode
[  368.469579][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  368.496618][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  368.525253][ T6549] device veth1_vlan entered promiscuous mode
[  368.697149][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  368.839305][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  369.100299][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  369.121901][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  369.182748][ T6549] device veth0_macvtap entered promiscuous mode
[  369.330127][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  369.371502][ T6549] device veth1_macvtap entered promiscuous mode
[  370.021912][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.036074][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.056566][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.079545][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.141375][ T6832] xt_hashlimit: max too large, truncated to 1048576
[  370.194176][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.206436][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.216489][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.226994][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.238582][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.249085][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.279896][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_0
[  370.289296][ T6832] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  370.330115][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  370.351969][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  370.399138][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.431908][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.589171][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.630660][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.641462][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.652491][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.662903][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.673505][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.683555][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  371.028521][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.676755][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_1
[  371.738803][ T6549] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  371.978172][ T6549] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.317545][ T6549] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.443797][ T6549] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.725687][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  372.778602][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  372.991827][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.128589][ T5174] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  373.138898][ T6857] bond0: (slave rose0): Enslaving as an active interface with an up link
[  373.279217][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  373.385176][ T6869] Device name cannot be null; rc = [-22]
[  373.744365][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.967091][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.209250][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.211686][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  374.217357][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.567082][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  376.529063][ T4272] Bluetooth: hci4: Frame reassembly failed (-84)
[  377.919962][ T6915] netlink: 16 bytes leftover after parsing attributes in process `syz.5.543'.
[  378.044779][ T6915] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  379.111141][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  379.117529][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  379.189259][ T5516] Bluetooth: hci0: command 0x0c20 tx timeout
[  379.195459][ T5516] Bluetooth: hci4: command 0x1003 tx timeout
[  379.269896][ T1235] Bluetooth: hci4: Frame reassembly failed (-84)
[  379.709964][ T1235] Bluetooth: hci4: Frame reassembly failed (-84)
[  381.238576][   T21] Bluetooth: hci4: command 0x1001 tx timeout
[  381.559471][ T4200] Bluetooth: hci4: sending frame failed (-49)
[  381.579607][ T6940] vivid-002: =================  START STATUS  =================
[  381.597320][ T6940] vivid-002: Radio HW Seek Mode: Bounded
[  381.605636][ T6940] vivid-002: Radio Programmable HW Seek: false
[  382.355644][ T6940] vivid-002: RDS Rx I/O Mode: Block I/O
[  382.361900][ T6940] vivid-002: Generate RBDS Instead of RDS: false
[  382.368509][ T6940] vivid-002: RDS Reception: true
[  382.373792][ T6940] vivid-002: RDS Program Type: 0 inactive
[  382.379936][ T6940] vivid-002: RDS PS Name:  inactive
[  382.385468][ T6940] vivid-002: RDS Radio Text:  inactive
[  382.391267][ T6940] vivid-002: RDS Traffic Announcement: false inactive
[  382.398559][ T6940] vivid-002: RDS Traffic Program: false inactive
[  382.405230][ T6940] vivid-002: RDS Music: false inactive
[  382.411044][ T6940] vivid-002: ==================  END STATUS  ==================
[  384.263812][   T21] Bluetooth: hci4: command 0x1009 tx timeout
[  386.218617][    T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  386.498530][    T7] usb 6-1: Using ep0 maxpacket: 16
[  386.522799][ T6982] syz.6.558 (6982): drop_caches: 2
[  386.618709][    T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  386.649015][    T7] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  386.680645][    T7] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  386.713202][   T26] audit: type=1326 audit(1762486078.455:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.6.563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb918216c9 code=0x0
[  386.728699][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.807023][    T7] usb 6-1: config 0 descriptor??
[  387.954196][ T4304] usb 6-1: USB disconnect, device number 3
[  389.810619][ T7043] input: syz0 as /devices/virtual/input/input19
[  391.293489][   T21] Bluetooth: hci6: command 0x0406 tx timeout
[  391.444399][    T7] 
[  391.446757][    T7] ======================================================
[  391.453769][    T7] WARNING: possible circular locking dependency detected
[  391.460821][    T7] syzkaller #0 Not tainted
[  391.465240][    T7] ------------------------------------------------------
[  391.472249][    T7] kworker/0:0/7 is trying to acquire lock:
[  391.478041][    T7] ffff888024c6cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0
[  391.489115][    T7] 
[  391.489115][    T7] but task is already holding lock:
[  391.496564][    T7] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  391.505619][    T7] 
[  391.505619][    T7] which lock already depends on the new lock.
[  391.505619][    T7] 
[  391.516018][    T7] 
[  391.516018][    T7] the existing dependency chain (in reverse order) is:
[  391.525227][    T7] 
[  391.525227][    T7] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  391.533228][    T7]        __mutex_lock_common+0x1eb/0x2390
[  391.538962][    T7]        mutex_lock_nested+0x17/0x20
[  391.544256][    T7]        rfkill_register+0x33/0x8a0
[  391.549634][    T7]        hci_register_dev+0x452/0x970
[  391.555014][    T7]        vhci_create_device+0x32c/0x5c0
[  391.560694][    T7]        vhci_write+0x391/0x450
[  391.565568][    T7]        vfs_write+0x712/0xd00
[  391.570333][    T7]        ksys_write+0x14d/0x250
[  391.575177][    T7]        do_syscall_64+0x4c/0xa0
[  391.580110][    T7]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  391.586522][    T7] 
[  391.586522][    T7] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  391.594355][    T7]        __mutex_lock_common+0x1eb/0x2390
[  391.600085][    T7]        mutex_lock_nested+0x17/0x20
[  391.605388][    T7]        vhci_send_frame+0x88/0x100
[  391.610605][    T7]        hci_send_frame+0x1a9/0x2e0
[  391.615811][    T7]        hci_tx_work+0x9f9/0x1710
[  391.620837][    T7]        process_one_work+0x863/0x1000
[  391.626296][    T7]        worker_thread+0xaa8/0x12a0
[  391.631498][    T7]        kthread+0x436/0x520
[  391.636103][    T7]        ret_from_fork+0x1f/0x30
[  391.641041][    T7] 
[  391.641041][    T7] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  391.650272][    T7]        __flush_work+0xdd/0x1b0
[  391.655209][    T7]        hci_dev_do_close+0x1e7/0x1030
[  391.660670][    T7]        hci_unregister_dev+0x2d7/0x580
[  391.666219][    T7]        vhci_release+0x73/0xc0
[  391.671079][    T7]        __fput+0x234/0x930
[  391.675577][    T7]        task_work_run+0x125/0x1a0
[  391.680684][    T7]        do_exit+0x61e/0x20a0
[  391.685358][    T7]        do_group_exit+0x12e/0x300
[  391.690464][    T7]        get_signal+0x6ca/0x12c0
[  391.695400][    T7]        arch_do_signal_or_restart+0xc1/0x1300
[  391.701554][    T7]        exit_to_user_mode_loop+0x9e/0x130
[  391.707358][    T7]        exit_to_user_mode_prepare+0xee/0x180
[  391.713423][    T7]        syscall_exit_to_user_mode+0x16/0x40
[  391.719431][    T7]        do_syscall_64+0x58/0xa0
[  391.724382][    T7]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  391.730796][    T7] 
[  391.730796][    T7] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  391.738439][    T7]        __mutex_lock_common+0x1eb/0x2390
[  391.744217][    T7]        mutex_lock_nested+0x17/0x20
[  391.749505][    T7]        bg_scan_update+0x44/0x3b0
[  391.754650][    T7]        process_one_work+0x863/0x1000
[  391.760112][    T7]        worker_thread+0xaa8/0x12a0
[  391.765349][    T7]        kthread+0x436/0x520
[  391.770045][    T7]        ret_from_fork+0x1f/0x30
[  391.774985][    T7] 
[  391.774985][    T7] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  391.784807][    T7]        __lock_acquire+0x2c33/0x7c60
[  391.790191][    T7]        lock_acquire+0x197/0x3f0
[  391.795214][    T7]        __flush_work+0xdd/0x1b0
[  391.800161][    T7]        __cancel_work_timer+0x3ac/0x520
[  391.805792][    T7]        hci_request_cancel_all+0xcc/0x300
[  391.811604][    T7]        hci_dev_do_close+0x4e/0x1030
[  391.817091][    T7]        hci_rfkill_set_block+0x10a/0x190
[  391.822825][    T7]        rfkill_set_block+0x1c6/0x420
[  391.828213][    T7]        rfkill_epo+0x75/0x170
[  391.832983][    T7]        rfkill_op_handler+0x76/0x220
[  391.838360][    T7]        process_one_work+0x863/0x1000
[  391.843859][    T7]        worker_thread+0xaa8/0x12a0
[  391.849071][    T7]        kthread+0x436/0x520
[  391.853765][    T7]        ret_from_fork+0x1f/0x30
[  391.858713][    T7] 
[  391.858713][    T7] other info that might help us debug this:
[  391.858713][    T7] 
[  391.868938][    T7] Chain exists of:
[  391.868938][    T7]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  391.868938][    T7] 
[  391.884752][    T7]  Possible unsafe locking scenario:
[  391.884752][    T7] 
[  391.892200][    T7]        CPU0                    CPU1
[  391.897570][    T7]        ----                    ----
[  391.902943][    T7]   lock(rfkill_global_mutex);
[  391.907716][    T7]                                lock(&data->open_mutex);
[  391.914830][    T7]                                lock(rfkill_global_mutex);
[  391.922116][    T7]   lock((work_completion)(&hdev->bg_scan_update));
[  391.928703][    T7] 
[  391.928703][    T7]  *** DEADLOCK ***
[  391.928703][    T7] 
[  391.936842][    T7] 3 locks held by kworker/0:0/7:
[  391.941773][    T7]  #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000
[  391.952151][    T7]  #1: ffffc90000cc7d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000
[  391.962508][    T7]  #2: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  391.971998][    T7] 
[  391.971998][    T7] stack backtrace:
[  391.977882][    T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0
[  391.985074][    T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  391.995132][    T7] Workqueue: events rfkill_op_handler
[  392.000524][    T7] Call Trace:
[  392.003804][    T7]  <TASK>
[  392.006736][    T7]  dump_stack_lvl+0x168/0x230
[  392.011420][    T7]  ? load_image+0x3b0/0x3b0
[  392.015924][    T7]  ? show_regs_print_info+0x20/0x20
[  392.021126][    T7]  ? print_circular_bug+0x12b/0x1a0
[  392.026326][    T7]  check_noncircular+0x274/0x310
[  392.031268][    T7]  ? add_chain_block+0x940/0x940
[  392.036201][    T7]  ? lockdep_lock+0xdc/0x1e0
[  392.040797][    T7]  ? __lock_acquire+0x12d9/0x7c60
[  392.045843][    T7]  ? lockdep_lock+0x1e0/0x1e0
[  392.050529][    T7]  ? mark_lock+0x94/0x320
[  392.054860][    T7]  __lock_acquire+0x2c33/0x7c60
[  392.059718][    T7]  ? add_lock_to_list+0x18d/0x280
[  392.064738][    T7]  ? __lock_acquire+0x289d/0x7c60
[  392.069762][    T7]  ? verify_lock_unused+0x140/0x140
[  392.074966][    T7]  lock_acquire+0x197/0x3f0
[  392.079467][    T7]  ? __flush_work+0xc1/0x1b0
[  392.084059][    T7]  ? __lock_acquire+0x7c60/0x7c60
[  392.089081][    T7]  ? read_lock_is_recursive+0x10/0x10
[  392.094449][    T7]  ? start_flush_work+0x776/0x820
[  392.099481][    T7]  __flush_work+0xdd/0x1b0
[  392.103900][    T7]  ? __flush_work+0xc1/0x1b0
[  392.108495][    T7]  ? flush_work+0x20/0x20
[  392.112829][    T7]  ? try_to_grab_pending+0xf3/0x7e0
[  392.118022][    T7]  ? lockdep_hardirqs_off+0x70/0x100
[  392.123358][    T7]  ? mark_lock+0x94/0x320
[  392.127730][    T7]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  392.133746][    T7]  ? lock_chain_count+0x20/0x20
[  392.138600][    T7]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  392.144587][    T7]  ? _raw_spin_unlock+0x40/0x40
[  392.149453][    T7]  ? __cancel_work_timer+0x331/0x520
[  392.154742][    T7]  __cancel_work_timer+0x3ac/0x520
[  392.159851][    T7]  ? cancel_work_sync+0x20/0x20
[  392.164694][    T7]  ? remove_wait_queue+0x120/0x120
[  392.169811][    T7]  ? __cancel_work+0x1f4/0x2d0
[  392.174607][    T7]  ? __cancel_work+0x26f/0x2d0
[  392.179413][    T7]  ? cancel_work+0x20/0x20
[  392.183829][    T7]  hci_request_cancel_all+0xcc/0x300
[  392.189120][    T7]  hci_dev_do_close+0x4e/0x1030
[  392.193966][    T7]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  392.199877][    T7]  ? _raw_spin_unlock+0x40/0x40
[  392.204738][    T7]  ? kobject_uevent_env+0x371/0x890
[  392.209931][    T7]  hci_rfkill_set_block+0x10a/0x190
[  392.215136][    T7]  ? rcu_lock_release+0x20/0x20
[  392.219994][    T7]  rfkill_set_block+0x1c6/0x420
[  392.224868][    T7]  rfkill_epo+0x75/0x170
[  392.229127][    T7]  rfkill_op_handler+0x76/0x220
[  392.233998][    T7]  process_one_work+0x863/0x1000
[  392.238938][    T7]  ? worker_detach_from_pool+0x240/0x240
[  392.244680][    T7]  ? lockdep_hardirqs_off+0x70/0x100
[  392.249975][    T7]  ? _raw_spin_lock_irq+0xab/0xe0
[  392.255000][    T7]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  392.260364][    T7]  ? wq_worker_running+0x97/0x170
[  392.265387][    T7]  worker_thread+0xaa8/0x12a0
[  392.270101][    T7]  kthread+0x436/0x520
[  392.274169][    T7]  ? rcu_lock_release+0x20/0x20
[  392.279019][    T7]  ? kthread_blkcg+0xd0/0xd0
[  392.283609][    T7]  ret_from_fork+0x1f/0x30
[  392.288028][    T7]  </TASK>