last executing test programs:

1m42.79727371s ago: executing program 3 (id=1121):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000100000000000000000000000000000000000000000000000051a705af44b745d25189a832722268548bd038716a3aa3a1545ea8d2772f33c000029f0f0829589c918b824ad7485f9b2a7cb229076381f544bf8e22076fd564adc30987c711f19e70e08517e465f9fbb8fde2e779ed9d391deb887050318efd0f6259ddcb68bd07da839922f0a65ffa6bdfdaca69ff6c3d0469a7bef3d3a6df30706cde36c1dfe7f1deee32b457f1d676a42d5d"], &(0x7f0000001f40)=""/4089, 0x32, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'tunl0\x00', @link_local})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0xa8)
close(r5)
syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000300)={0x4d, 0x2, 0x0, "0ba7dfad1cfbb5a12e6a2bdee19988d940d2c1aebd746fc04a0026d174932d46"})
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)

1m41.001744559s ago: executing program 3 (id=1123):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket(0x1, 0x80000, 0x2)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)
sendmsg$sock(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e021009430009003f00644c0a0000000d0085a168d0bf46d32345653600648d0a000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a2300040018000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, 0x0)
sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)='g', 0x1}], 0x1}}], 0x1, 0xf000000)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4)

1m6.774943541s ago: executing program 1 (id=1157):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r1=>0x0})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0)
ioctl$IOCTL_GET_NUM_DEVICES(r3, 0x40046104, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = socket$inet(0x2, 0x6, 0x0)
getsockopt$inet_pktinfo(r4, 0x10d, 0x9c, 0xfffffffffffffffe, &(0x7f0000000000)=0x300)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r8, 0x800448d4, &(0x7f0000000480)={0x0, 0x1, "00fa00"})
r9 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r9, 0x0, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r10, 0x5100)
ioctl$SNDCTL_SEQ_RESET(r10, 0x5100)
r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_SEQ_RESET(r11, 0x5100)
mremap(&(0x7f0000a6e000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00005b7000/0x4000)=nil)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x4e, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
bind$can_raw(r2, 0x0, 0x0)

1m5.960539748s ago: executing program 2 (id=1158):
socket$packet(0x11, 0x0, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x0)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = dup2(r4, r4)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0x0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/212, 0xd4, 0x1, 0x0, 0x0)
splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="15000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000c500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0xe, 0x0, &(0x7f00000005c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m4.825183201s ago: executing program 1 (id=1159):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000780)=0x5, 0x4)
setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000001100), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

1m4.705541785s ago: executing program 2 (id=1160):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket(0x1, 0x80000, 0x2)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)
sendmsg$sock(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e021009430009003f00644c0a0000000d0085a168d0bf46d32345653600648d0a000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a2300040018000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000002040)={0x0, [[], [0x0, 0xfffffffc]]})
sendmmsg$inet(r0, 0x0, 0x0, 0xf000000)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4)

1m3.164827533s ago: executing program 1 (id=1161):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x1c0, 0x3, 0xd0e7500, 0x0, 0x60, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd}, 0x0, 0x0, 'nr0\x00', 'vxcan1\x00', {}, {}, 0x11}, 0x0, 0x158, 0x1c0, 0x0, {0x60000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast2, [], @ipv6=@remote, [], @ipv4=@multicast2, [], @ipv4=@empty}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x36c, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f0000000240)={0x2, 0x6})
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000040000080005400000000005000100010000000a0002000018060006400007000008000440"], 0x7c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000013000100"/20, @ANYRES32=0x0, @ANYRES16=r7], 0x98}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000000), 0x82, 0x638182)
ioctl$BLKRAGET(r8, 0x1263, &(0x7f00000000c0))

1m1.369842636s ago: executing program 1 (id=1162):
socket$packet(0x11, 0x0, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x0)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = dup2(r4, r4)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0x0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/214, 0xd6, 0x1, 0x0, 0x0)
splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="15000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000c500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0xe, 0x0, &(0x7f00000005c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

54.368300086s ago: executing program 1 (id=1170):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040))
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000000c0)=0x40)
ppoll(&(0x7f0000000340)=[{r4}], 0x1, &(0x7f00000003c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x4000)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x1, 0x0, [@dev]}, 0x18)
sendto$l2tp6(r5, 0x0, 0x2, 0x4048814, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x20)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x5, r6, 0x0, 0x0)
request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0x0)
keyctl$get_security(0x11, r6, &(0x7f0000000100)=""/109, 0x6d)

54.364822823s ago: executing program 2 (id=1171):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x40}}, 0x6)
read$nci(r0, &(0x7f00000002c0)=""/100, 0x64)
write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14)
read$nci(r0, &(0x7f0000000380)=""/100, 0x64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x20000008b}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000000206010400000000000000000a00000005000100070000000900020073797a30000000000c0007800800124000010001050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x54}}, 0x0)
write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x44, r3, 0x1, 0x123, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xb2}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xbeff75b0beda36a4}, @NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x90}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x50}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5)
read$nci(0xffffffffffffffff, &(0x7f00000005c0)=""/100, 0x4)
write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5)
read$nci(r0, &(0x7f0000000680)=""/100, 0x64)
write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4)
write$nci(r0, &(0x7f0000000980)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @f={0x9, 0x5, 0x2, 0x1, {0xa, 0xf2, "4490a08ab9adf3d79e5552c6c48c5a46a0ce1ca22ea25cf0103139993469561ee361b2879f498d2f73aeedfb27ef44c0da6631f92bbb9fa8f3bfaf3b551f9684f4d8800095fb8295fa30ff60e5eca3117984630038cb0a36d3858ba375776b97c834adcf527e62b75017114ad6373c27f743f3963028f6ff4876e88a7490e34724fba63e7ab49eae583158f33ba764779424e22d8a4bcd93f8691ca50288da78da51b4bedceabcf3af31d2522a484c9a0642d4156b370f7da80fe1524a97e1b11ad93ef5cfc2c82eb752e5e4887f4a66e861b916f1684ed8fef0ef90ae73a68534bc999b66925203b8706e05a4eb5e3e6207"}, 0x1}}, 0xfc)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0)
read$nci(r0, &(0x7f0000000840)=""/100, 0x64)
write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7)

51.5596516s ago: executing program 3 (id=1133):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYRES32=0x0], 0x48)
r2 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000180), 0x4)
connect$inet6(r2, 0x0, 0x0)
madvise(&(0x7f0000ac2000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f000018e000/0x3000)=nil, 0x3000, 0x1)
r3 = io_uring_setup(0x344f, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r6, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x4000)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x0, 0x1000000})
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20)
socket(0x15, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

51.556334584s ago: executing program 1 (id=1174):
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xfffffffffffffffe)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1e, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {0x5}}}, &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$cgroup_ro(r0, 0x0, 0x275a, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008001c000000002018000180140002006e657464657673696d300000000000000800080000000000080009"], 0x44}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a800800"], 0x44}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x73, 0x0, '\x00', [@ra={0x5, 0x2f}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x209, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x14, &(0x7f0000000180)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0xffffffffffffff6a}}, 0x3c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x13, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800292be634de97f2494b6cf9000076000907000000000000000003000000", @ANYRES32=0x0], 0x18}, 0x1, 0x5502000000000000}, 0x0)
close(0xffffffffffffffff)

51.555362923s ago: executing program 2 (id=1175):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000002, 0x11, r4, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
read$FUSE(r5, &(0x7f0000000600)={0x2020}, 0x2020)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x14, r7, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4008040)

47.782412828s ago: executing program 3 (id=1163):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000007000000000076f053ea"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x40012000})
io_uring_enter(r3, 0x1066, 0x0, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r9=>0x0})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = eventfd(0x0)
close_range(r11, 0xffffffffffffffff, 0x0)
r12 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000040)=0x3)
io_setup(0x9, &(0x7f0000000100)=<r13=>0x0)
io_submit(r13, 0x1, &(0x7f00000015c0)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0}])
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r14, 0x0, <r15=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000480)={0x48, 0xa, r15, 0x0, r9})
socket$can_raw(0x1d, 0x3, 0x1)

45.340991527s ago: executing program 2 (id=1165):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040400"], 0x11)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0x7ffff024}, {0x6}]}, 0x10)
r9 = dup(r7)
sendmsg$nl_route_sched(r9, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000002480)=@newchain={0x438, 0x64, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x40c, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8000, 0xfffffffe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xffffffc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xcd59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}]}]}}]}, 0x438}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)

45.132043267s ago: executing program 3 (id=1166):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
capset(&(0x7f0000000080), 0x0)
clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x1e30, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x101, 0x4, 0x0, 0x0, 0x0, 0xf4b})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(0x0, 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00'}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={r3, 0x95e1, 0xb9, 0x2})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRESOCT=0x0], 0x0, 0x68, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000"], 0x398}}, 0x0)

43.558902588s ago: executing program 2 (id=1167):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000040), &(0x7f0000000000)=0x4)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x100}})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x220000, 0x0)
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f00000001c0)=0x2)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
gettid()
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000780)={0x9, 0x3, 0x6, 0x1, 0x7, [{0x0, 0x9, 0x0, '\x00', 0x1200}, {0x0, 0x0, 0x9}, {0x9, 0x0, 0x2}, {0x7ff, 0x0, 0xff, '\x00', 0x200}, {0x5, 0x0, 0x0, '\x00', 0x80a}, {0x0, 0x7700cfa4, 0x7ff, '\x00', 0x316}, {0x7d1, 0x6, 0x5}]})
socket$key(0xf, 0x3, 0x2)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000200))
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSBRK(r4, 0x5427)
ioctl$TCXONC(r4, 0x540a, 0x2)
r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0))
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'})

41.873310094s ago: executing program 3 (id=1169):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='jbd2_checkpoint_stats\x00'}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[])
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2f, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000280)={0x4376ea830d56d49d})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x200000, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$nl_route(0x10, 0x3, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
ioctl$KVM_NMI(r0, 0xae9a)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000071c0), 0x0, 0x0)

31.505711029s ago: executing program 0 (id=1186):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "947da4df84e42166"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, '\a\x00'}}, 0x48}}, 0x0)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}}, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r5, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000001c0))
sched_setaffinity(0x0, 0x0, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})

29.540106213s ago: executing program 0 (id=1187):
mkdir(0x0, 0x0)
fanotify_init(0x2, 0x0)
syz_io_uring_setup(0x4072, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f00000002c0)={'syzkaller0\x00', @random="018000"})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
syz_io_uring_submit(0x0, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
connect$ax25(r6, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10)

27.925094019s ago: executing program 0 (id=1189):
socket$packet(0x11, 0x0, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x0)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = dup2(r4, r4)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0x0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000c500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0xe, 0x0, &(0x7f00000005c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

26.743872238s ago: executing program 0 (id=1190):
ioprio_set$pid(0x1, 0x0, 0x600d)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xfffffff8, 0x10}, 0xc)
sendto$inet(r4, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000280)='p', 0xffe0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$phonet(0x23, 0x2, 0x1)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'team_slave_1\x00'})
socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_LIMIT_BURST={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x40}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x23, 0x0, 0x2, 0x0, 0x0, 0xed, 0x7}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'pim6reg0\x00', {}, {0xff}, 0x0, 0x2}, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x5}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x16a042, 0x0)
pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0xffffffff, 0x0, 0xfe)

25.708198291s ago: executing program 0 (id=1191):
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x40305829, &(0x7f00000002c0)={0xa, "3a820000001300000000"})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil)
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$sock(r3, &(0x7f0000000580)={&(0x7f0000000480)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x1}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="23855d8aaea07e8c3dea5c", 0xb}], 0x1}, 0x800)
sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x217c}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x10001, 0x4)
setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00'})

23.026079824s ago: executing program 0 (id=1192):
r0 = io_uring_setup(0x5ce2, &(0x7f0000000000)={0x0, 0x0, 0x40})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000180100002020692500000000002420207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000200051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', './file0', [{0x20, './cgroup.net/syz0\x00'}, {0x20, '^\''}, {0x20, '+[[^@)%,Q}%'}], 0xa, "49fa6cd76629564cb0ea3f15cd01a214073a9fbd4834ec9b2940f3dc76"}, 0x4a)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
r8 = socket$inet6(0x10, 0x3, 0x0)
read(r8, &(0x7f0000000340)=""/254, 0xfe)
sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r8, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x8001, 0x0)
r9 = openat$cgroup_procs(r4, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_pid(r9, &(0x7f00000000c0), 0x12)
open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x170)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_op], 0x1)

8.312969077s ago: executing program 4 (id=1200):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
eventfd(0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f00000001c0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000005000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r7}, 0x10)
r8 = io_uring_setup(0x2c4d, &(0x7f0000000380))
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r8, 0xd, &(0x7f0000000340)={0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20)

6.93318674s ago: executing program 4 (id=1201):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$inet(0x2, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
shmdt(0x0)
syz_emit_ethernet(0x76, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffb, 0xfeff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @hyper}, 0xfffffff4)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10)
getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)

5.80999552s ago: executing program 4 (id=1202):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000140)={0x200000000005, 0x8000000000200003}, 0x0)
setpriority(0x2, 0x0, 0xffffffffffffffcd)
r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00')
preadv(r8, &(0x7f0000000280)=[{&(0x7f0000000ac0)=""/100, 0x64}], 0x1, 0x0, 0x0)
r9 = dup(r7)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000006c0)="9a2bffffff17000f30c4e37d1d15d03c000000c4e3cd5f0636b9800000c00f3235008000000f3066baf80cb84f6a7e86ef66bafc0cec0f78ce0f01d166baf80cb890b23783ef66bafc0c66ed660f2a7900", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

4.109229695s ago: executing program 4 (id=1203):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000), 0x4)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x198, 0x4c, 0x1a, 0x198, 0x63, 0x2f8, 0x258, 0x258, 0x2f8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000240)=""/94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r6}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x2b, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x6f0, 0x2e0, 0x2e0, 0x2e0, 0x538, 0x2e0, 0x620, 0x620, 0x620, 0x620, 0x620, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'ip6gretap0\x00', 'syzkaller0\x00'}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@inet=@set4={{0x50}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18f7dd650015f83f00cfa57d0000", @ANYRESHEX=r2, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)

1.366381163s ago: executing program 4 (id=1204):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000050000000000000000000001", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000400)={0x200000})
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={0x1, 'bridge_slave_1\x00'}, 0x18)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='afs_silly_rename\x00', r0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0x0, 0x1}}}, 0x24}}, 0x0)

0s ago: executing program 4 (id=1205):
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf, &(0x7f00000002c0)=@string={0xf, 0x3, "c34ba128a28705c0ebd22baaf3"}}]})
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
listen(0xffffffffffffffff, 0x400000001ffffffd)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]})
r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x2c, 0x2, 0x0, "444900e1b0faa9b00600"})
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000300)=0xffffffffffffffff, 0x4)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r5=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="03000300000000000000ab5d71acedd7c9560385dcb188a8", 0x29, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, "73a30d4a0000a87c9db78c0e56e0437968035a7a", "ff7734156b726d230d88dc29f2689271b3ed008e"})
socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

kernel console output (not intermixed with test programs):

0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1900.119404][T13694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1900.129431][T13694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1900.142636][T13694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1900.953164][T12782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1900.982091][T12782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1902.523053][T14004] input: syz1 as /devices/virtual/input/input54
[ 1902.538612][ T5227] Bluetooth: hci1: link tx timeout
[ 1902.544498][ T5227] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1902.631472][ T9411] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1902.740190][T12805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1902.749543][T12805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1902.993706][T12805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1903.037883][T14004] bridge: RTM_NEWNEIGH with invalid state 0x0
[ 1903.196831][T12805] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1903.271035][T12805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1903.343043][ T8862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1903.372441][ T8862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1903.808924][T12483] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1903.821398][T12483] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1903.834746][T12483] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1903.844218][T14019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1903.867426][T12483] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1903.881231][T12483] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1904.016980][ T8863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1904.061652][   T29] audit: type=1400 audit(1903.829:588): avc:  denied  { listen } for  pid=14028 comm="syz.0.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1904.152852][ T8863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1904.192605][T12483] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1904.529085][T11982] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1904.702197][T12483] Bluetooth: hci1: command 0x0406 tx timeout
[ 1905.571628][ T5227] Bluetooth: hci0: command tx timeout
[ 1906.067305][T11982] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1907.072097][ T5227] Bluetooth: hci7: command tx timeout
[ 1907.257635][T11982] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1907.347377][T14008] chnl_net:caif_netlink_parms(): no params data found
[ 1907.378401][   T29] audit: type=1326 audit(1907.139:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10377dff9 code=0x7ffc0000
[ 1907.401272][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1907.408120][   T29] audit: type=1326 audit(1907.139:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fa10377dff9 code=0x7ffc0000
[ 1907.431871][   T29] audit: type=1326 audit(1907.139:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10377dff9 code=0x7ffc0000
[ 1907.456618][   T29] audit: type=1326 audit(1907.139:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10377dff9 code=0x7ffc0000
[ 1907.480195][   T29] audit: type=1326 audit(1907.139:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa10377dff9 code=0x7ffc0000
[ 1907.503014][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1907.510017][   T29] audit: type=1326 audit(1907.139:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10377dff9 code=0x7ffc0000
[ 1907.532907][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1907.540249][   T29] audit: type=1326 audit(1907.139:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10377dff9 code=0x7ffc0000
[ 1907.563491][   T29] audit: type=1326 audit(1907.139:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa10377dff9 code=0x7ffc0000
[ 1907.586300][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1907.593008][   T29] audit: type=1326 audit(1907.139:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10377dff9 code=0x7ffc0000
[ 1907.615844][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1907.662480][ T5227] Bluetooth: hci0: command tx timeout
[ 1907.673596][T14057] binder: 14054:14057 ioctl c0306201 0 returned -14
[ 1907.712874][T11982] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1907.770908][T14057] capability: warning: `syz.0.984' uses 32-bit capabilities (legacy support in use)
[ 1908.304973][T14056] netlink: 'syz.3.983': attribute type 10 has an invalid length.
[ 1909.102099][ T5227] Bluetooth: hci7: command tx timeout
[ 1909.732121][ T5227] Bluetooth: hci0: command tx timeout
[ 1909.866825][T14075] input: syz1 as /devices/virtual/input/input55
[ 1910.864160][T14008] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1910.871336][T14008] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1910.889870][T14008] bridge_slave_0: entered allmulticast mode
[ 1910.961630][T14008] bridge_slave_0: entered promiscuous mode
[ 1911.028925][T11982] bridge_slave_1: left allmulticast mode
[ 1911.052460][T11982] bridge_slave_1: left promiscuous mode
[ 1911.059212][T11982] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1911.081582][T11982] bridge_slave_0: left allmulticast mode
[ 1911.087533][T11982] bridge_slave_0: left promiscuous mode
[ 1911.097389][   T29] kauditd_printk_skb: 27 callbacks suppressed
[ 1911.097413][   T29] audit: type=1400 audit(1910.879:625): avc:  denied  { write } for  pid=14086 comm="syz.3.989" name="uhid" dev="devtmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1911.143039][T11982] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1911.151841][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'.
[ 1911.173459][ T5227] Bluetooth: hci7: command tx timeout
[ 1911.852433][T12483] Bluetooth: hci0: command tx timeout
[ 1913.502177][ T5227] Bluetooth: hci7: command tx timeout
[ 1914.986502][T11982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1915.036519][T11982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1915.058224][T11982] bond0 (unregistering): Released all slaves
[ 1915.109724][T14083] bridge: RTM_NEWNEIGH with invalid state 0x0
[ 1915.171918][T14008] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1915.233512][T14008] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1915.257103][T14008] bridge_slave_1: entered allmulticast mode
[ 1915.343567][T14008] bridge_slave_1: entered promiscuous mode
[ 1916.121045][T14008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1916.234906][T14008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1917.457178][T11982] hsr_slave_0: left promiscuous mode
[ 1917.485270][T14131] block nbd0: shutting down sockets
[ 1917.516904][T11982] hsr_slave_1: left promiscuous mode
[ 1917.522507][T14132] nbd0: detected capacity change from 0 to 12
[ 1917.528844][T14133] block nbd0: NBD_DISCONNECT
[ 1917.534019][T14133] block nbd0: Send disconnect failed -89
[ 1917.542825][T11982] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1917.551303][T11982] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1917.669572][T11982] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1917.681191][T11982] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1917.772233][T11982] veth1_macvtap: left promiscuous mode
[ 1917.777839][T11982] veth0_macvtap: left promiscuous mode
[ 1917.785002][T11982] veth1_vlan: left promiscuous mode
[ 1917.790734][T11982] veth0_vlan: left promiscuous mode
[ 1919.522161][T14154] qnx4: no qnx4 filesystem (no root dir).
[ 1919.677879][T14155] usb usb8: check_ctrlrecip: process 14155 (syz.0.999) requesting ep 01 but needs 81
[ 1919.687500][T14155] usb usb8: usbfs: process 14155 (syz.0.999) did not claim interface 0 before use
[ 1920.560272][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 1923.003539][T11982] team0 (unregistering): Port device team_slave_1 removed
[ 1923.239427][T11982] team0 (unregistering): Port device team_slave_0 removed
[ 1924.547513][T12483] Bluetooth: hci3: command 0x0406 tx timeout
[ 1925.219620][T14025] chnl_net:caif_netlink_parms(): no params data found
[ 1925.428835][T14008] team0: Port device team_slave_0 added
[ 1925.526770][T14008] team0: Port device team_slave_1 added
[ 1925.870158][T11817] IPVS: starting estimator thread 0...
[ 1926.013548][T14190] IPVS: using max 14 ests per chain, 33600 per kthread
[ 1926.577000][T14008] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1926.622267][T14008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1926.733452][T14008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1926.815693][ T5227] Bluetooth: hci1: ACL packet for unknown connection handle 201
[ 1927.057164][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'.
[ 1927.323468][T14008] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1927.349481][T14008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1927.438462][T14210] netlink: 'syz.3.1009': attribute type 16 has an invalid length.
[ 1927.446527][T14210] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1009'.
[ 1928.070189][T14008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1929.798302][T14192] syz.4.1007 (14192) used greatest stack depth: 20192 bytes left
[ 1930.163453][T14008] hsr_slave_0: entered promiscuous mode
[ 1930.170296][T14008] hsr_slave_1: entered promiscuous mode
[ 1930.847978][T12977] IPVS: starting estimator thread 0...
[ 1931.342598][T14221] IPVS: using max 13 ests per chain, 31200 per kthread
[ 1931.352181][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'.
[ 1931.630010][T14008] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1931.793240][T14008] Cannot create hsr debugfs directory
[ 1931.898095][T14025] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1931.937243][T14025] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1931.944761][T14025] bridge_slave_0: entered allmulticast mode
[ 1931.955735][T14025] bridge_slave_0: entered promiscuous mode
[ 1932.028736][T14025] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1932.072751][T14025] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1932.080080][T14025] bridge_slave_1: entered allmulticast mode
[ 1932.112683][T14025] bridge_slave_1: entered promiscuous mode
[ 1932.200426][T11982] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1932.543904][T11982] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1932.721521][T14025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1932.783829][T11982] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1932.832771][T14025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1933.084596][T11982] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1933.141374][T14025] team0: Port device team_slave_0 added
[ 1933.161578][T14025] team0: Port device team_slave_1 added
[ 1934.288593][T14025] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1934.323154][T14025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1934.409508][T14025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1934.471568][T14025] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1934.491414][T14025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1934.574188][T14025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1934.632794][T14255] netlink: 'syz.3.1015': attribute type 14 has an invalid length.
[ 1939.787279][T14025] hsr_slave_0: entered promiscuous mode
[ 1939.806185][T14025] hsr_slave_1: entered promiscuous mode
[ 1939.829497][T14025] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1939.885180][T14025] Cannot create hsr debugfs directory
[ 1940.362845][T12483] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1940.377036][T12483] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1940.395387][T12483] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1940.410199][T12483] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1940.419094][T12483] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1940.427643][T12483] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1940.544054][T11982] bridge_slave_1: left allmulticast mode
[ 1940.549727][T11982] bridge_slave_1: left promiscuous mode
[ 1940.609609][T11982] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1940.651500][T11982] bridge_slave_0: left allmulticast mode
[ 1940.675220][T11982] bridge_slave_0: left promiscuous mode
[ 1940.680949][T11982] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1940.935235][T14283] block nbd4: shutting down sockets
[ 1941.650621][T11982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1941.673571][T11982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1941.702952][T11982] bond0 (unregistering): Released all slaves
[ 1941.831742][T11982] IPVS: stopping master sync thread 13792 ...
[ 1942.199245][T14288] tipc: Invalid UDP bearer configuration
[ 1942.199405][T14288] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1942.285932][T11982] hsr_slave_0: left promiscuous mode
[ 1942.296959][T11982] hsr_slave_1: left promiscuous mode
[ 1942.324034][T11982] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1942.338723][T11982] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1942.363159][T11982] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1942.383379][T11982] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1942.469198][T11982] veth1_macvtap: left promiscuous mode
[ 1942.508320][T11982] veth0_macvtap: left promiscuous mode
[ 1942.534625][T12483] Bluetooth: hci2: command tx timeout
[ 1942.552310][T11982] veth1_vlan: left promiscuous mode
[ 1942.564740][T11982] veth0_vlan: left promiscuous mode
[ 1942.673521][T14298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1020'.
[ 1942.708433][T12483] Bluetooth: hci3: Malformed LE Event: 0x0d
[ 1944.615356][T12483] Bluetooth: hci2: command tx timeout
[ 1946.569246][T11982] team0 (unregistering): Port device team_slave_1 removed
[ 1946.732450][T12483] Bluetooth: hci2: command tx timeout
[ 1947.516875][T11982] team0 (unregistering): Port device team_slave_0 removed
[ 1948.775820][T12483] Bluetooth: hci2: command tx timeout
[ 1948.796984][   T29] audit: type=1400 audit(2177.575:626): avc:  denied  { accept } for  pid=14333 comm="syz.4.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1949.137162][T14008] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1949.320788][T14008] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1949.395574][T14343] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1949.586167][T14008] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1949.635184][T14008] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1950.119341][T14008] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1950.207931][T14278] chnl_net:caif_netlink_parms(): no params data found
[ 1950.517319][T14008] 8021q: adding VLAN 0 to HW filter on device team0
[ 1950.557271][T14359] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1950.654731][ T8863] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1950.661906][ T8863] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1951.105383][T14278] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1951.116341][T14278] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1952.100648][T14278] bridge_slave_0: entered allmulticast mode
[ 1952.108379][T14278] bridge_slave_0: entered promiscuous mode
[ 1952.609893][T14373] syz.3.1030: attempt to access beyond end of device
[ 1952.609893][T14373] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1952.625243][T14373] FAT-fs (loop7): unable to read boot sector
[ 1953.108451][T14008] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1953.119913][T14008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1954.204442][T14025] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1954.365361][T14025] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1954.418358][ T8863] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1954.425606][ T8863] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1954.662233][T14278] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1954.674372][T14278] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1954.681599][T14278] bridge_slave_1: entered allmulticast mode
[ 1954.698866][T14278] bridge_slave_1: entered promiscuous mode
[ 1955.162166][T14025] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1955.313591][T14025] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1955.525094][T14278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1955.538549][T14278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1955.714764][T14278] team0: Port device team_slave_0 added
[ 1955.753815][T14278] team0: Port device team_slave_1 added
[ 1955.875494][T14278] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1955.891127][T14278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1955.932061][T14278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1955.980964][T14278] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1956.010421][T14278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1956.047011][T14278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1956.073506][T14025] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1956.186646][T14008] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1956.247804][T14278] hsr_slave_0: entered promiscuous mode
[ 1956.255300][T14278] hsr_slave_1: entered promiscuous mode
[ 1956.270334][T14278] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1956.278643][T14278] Cannot create hsr debugfs directory
[ 1956.301481][T14025] 8021q: adding VLAN 0 to HW filter on device team0
[ 1956.419935][ T8863] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1956.427181][ T8863] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1956.468782][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1956.476033][ T8891] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1956.509152][T14008] veth0_vlan: entered promiscuous mode
[ 1956.521633][T14008] veth1_vlan: entered promiscuous mode
[ 1956.548207][T14008] veth0_macvtap: entered promiscuous mode
[ 1956.558065][T14008] veth1_macvtap: entered promiscuous mode
[ 1956.679485][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1956.691161][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1956.708548][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1956.733435][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1956.753543][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1956.772132][   T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1956.790848][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1956.800933][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1956.825419][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1956.837627][T14008] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1956.858937][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1956.884599][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1956.906023][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1956.924659][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1956.935488][   T25] usb 4-1: Using ep0 maxpacket: 16
[ 1956.952659][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[ 1956.972773][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1956.985424][   T25] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1957.002043][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1957.012651][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1957.036748][   T25] usb 4-1: config 0 descriptor??
[ 1957.044217][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1957.091886][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1957.117375][T14008] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1957.231755][T14395] netlink: 'syz.4.1035': attribute type 1 has an invalid length.
[ 1957.239779][T14395] netlink: 9348 bytes leftover after parsing attributes in process `syz.4.1035'.
[ 1957.249254][T14395] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1035'.
[ 1957.345829][T14388] PKCS7: Unknown OID: [4] (bad)
[ 1957.582784][T12483] Bluetooth: hci3: ACL packet for unknown connection handle 200
[ 1957.686125][T14388] PKCS7: Only support pkcs7_signedData type
[ 1957.733400][T14008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1957.766146][T14008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1957.806721][T14008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1957.832855][T14008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1957.939327][T14387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1957.968184][T14387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1958.034010][T14278] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1958.087274][T14025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1958.170858][T14278] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1958.520317][   T25] usbhid 4-1:0.0: can't add hid device: -71
[ 1958.526677][   T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1958.579697][   T25] usb 4-1: USB disconnect, device number 6
[ 1958.669178][T14278] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1958.821191][T14278] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1958.945458][ T5311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1958.967531][ T5311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1959.006432][T14025] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1959.033920][T12483] Bluetooth: hci1: ACL packet for unknown connection handle 5
[ 1959.803764][T11982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1959.819623][T11982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1960.196921][   T29] audit: type=1400 audit(2188.975:627): avc:  denied  { getopt } for  pid=14426 comm="syz.3.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1960.451333][T14427] bond0: entered promiscuous mode
[ 1960.458583][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'.
[ 1960.503829][T14427] bond_slave_0: entered promiscuous mode
[ 1960.509712][T14427] bond_slave_1: entered promiscuous mode
[ 1960.590551][T14025] veth0_vlan: entered promiscuous mode
[ 1960.617503][T14025] veth1_vlan: entered promiscuous mode
[ 1960.835162][   T29] audit: type=1400 audit(2189.585:628): avc:  denied  { create } for  pid=14443 comm="syz.2.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1960.888481][T14278] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1960.896734][   T29] audit: type=1400 audit(2189.605:629): avc:  denied  { getopt } for  pid=14443 comm="syz.2.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1960.957083][T14025] veth0_macvtap: entered promiscuous mode
[ 1960.985099][T14278] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1960.992201][   T29] audit: type=1400 audit(2189.765:630): avc:  denied  { setopt } for  pid=14443 comm="syz.2.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1961.044891][T14278] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1961.076216][T14025] veth1_macvtap: entered promiscuous mode
[ 1961.108829][T14278] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1961.221724][T14025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1961.250328][T14025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1961.265282][T14025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1961.286238][T14025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1961.298074][T14025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1961.313667][T12483] Bluetooth: hci3: SCO packet for unknown connection handle 0
[ 1961.316302][T14025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1961.336104][T14025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1961.359269][T14025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1961.382135][T14025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1961.399117][T14025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1961.426486][T14025] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1961.498625][T14449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1040'.
[ 1961.519776][T14025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1961.562687][T14025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1961.598119][T14025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1961.651816][T14025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1961.666572][T14025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1961.720277][T14025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1961.738029][T14025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1961.771323][T14025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1961.856995][T14025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1961.924367][T14025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1961.976591][T14025] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1962.043847][T14025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1962.098651][T14025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1962.118052][T14025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1962.137742][T14025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1962.525611][T14278] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1962.569932][ T8862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1962.619400][ T8862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1962.723155][T14278] 8021q: adding VLAN 0 to HW filter on device team0
[ 1962.782729][ T8863] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1962.789862][ T8863] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1962.855788][ T8863] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1962.862945][ T8863] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1962.878060][T11982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1962.899793][T11982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1964.882560][T14485] netlink: 'syz.1.1043': attribute type 1 has an invalid length.
[ 1964.890562][T14485] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.1043'.
[ 1964.899964][T14485] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1043'.
[ 1966.031554][T14278] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1966.179524][T14278] veth0_vlan: entered promiscuous mode
[ 1966.193818][T14278] veth1_vlan: entered promiscuous mode
[ 1966.227422][T14278] veth0_macvtap: entered promiscuous mode
[ 1966.237894][T14278] veth1_macvtap: entered promiscuous mode
[ 1966.255869][T14278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1966.269905][T14278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1966.280148][T14278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1966.290969][T14278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1966.305726][T14278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1966.316270][T14278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1966.327686][T14278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1966.339893][T14278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1966.350173][T14278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1966.362570][T14278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1966.373002][T14278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1966.385707][T14278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1966.407186][T14278] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1966.418007][T14278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1966.429435][T14278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1966.439724][T14278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1966.450659][T14278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1966.461033][T14278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1966.474432][T14278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1966.484376][T14278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1966.498136][T14278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1966.524184][T14278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1966.534780][T14278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1966.544842][T14278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1966.555490][T14278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1966.567179][T14278] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1966.577011][T14278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1966.585840][T14278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1966.594675][T14278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1966.603822][T14278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1966.767529][T14499] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1045'.
[ 1966.777281][   T29] audit: type=1400 audit(2195.525:631): avc:  denied  { create } for  pid=14497 comm="syz.1.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1966.932170][T11982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1966.940043][T11982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1966.967641][ T8862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1967.014486][ T8862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1967.099269][   T29] audit: type=1400 audit(2195.545:632): avc:  denied  { write } for  pid=14497 comm="syz.1.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1967.301877][   T29] audit: type=1400 audit(2195.545:633): avc:  denied  { nlmsg_write } for  pid=14497 comm="syz.1.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1967.419720][   T29] audit: type=1326 audit(2196.075:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14497 comm="syz.1.1045" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33eb37dff9 code=0x0
[ 1967.527653][   T29] audit: type=1400 audit(2196.165:635): avc:  granted  { setsecparam } for  pid=14497 comm="syz.1.1045" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[ 1969.002024][ T5227] Bluetooth: hci1: command 0x0406 tx timeout
[ 1969.082137][ T8888] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1969.250099][ T8888] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1969.305163][ T8888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1969.365606][ T8888] usb 5-1: config 0 descriptor??
[ 1970.542113][ T8888] [drm] vendor descriptor length:c3 data:3e 0f bd 00 00 00 00 00 00 00 80
[ 1970.550702][ T8888] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1970.633875][T14528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'.
[ 1970.814176][ T8888] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[ 1970.840877][ T8888] [drm] Initialized udl on minor 2
[ 1970.867343][T12483] Bluetooth: hci3: SCO packet for unknown connection handle 0
[ 1971.013340][T12483] Bluetooth: hci1: unexpected event for opcode 0x2012
[ 1971.138287][ T8888] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[ 1971.221782][ T8888] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1971.678173][T11817] usb 5-1: USB disconnect, device number 2
[ 1971.707427][   T25] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1971.716770][   T25] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1972.109068][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'.
[ 1972.132302][T14557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1054'.
[ 1972.158289][   T29] audit: type=1400 audit(2200.915:636): avc:  denied  { nlmsg_read } for  pid=14553 comm="syz.4.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1973.407810][T14555] xt_TCPMSS: Only works on TCP SYN packets
[ 1974.593032][   T29] audit: type=1326 audit(2203.375:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14566 comm="syz.4.1056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb27ab7dff9 code=0x0
[ 1975.023919][T12483] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1975.032926][T12483] Bluetooth: hci1: Injecting HCI hardware error event
[ 1975.051433][T12483] Bluetooth: hci1: hardware error 0x00
[ 1975.369493][T14579] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1057'.
[ 1976.722444][T14583] block device autoloading is deprecated and will be removed.
[ 1976.818330][   T29] audit: type=1400 audit(2205.125:638): avc:  denied  { read } for  pid=14572 comm="syz.1.1058" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1976.841054][   T29] audit: type=1400 audit(2205.195:639): avc:  denied  { open } for  pid=14572 comm="syz.1.1058" path="/5/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1977.097817][T12483] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1977.610431][   T29] audit: type=1400 audit(2206.381:640): avc:  denied  { read } for  pid=14597 comm="syz.1.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1978.062121][T12483] Bluetooth: hci7: command tx timeout
[ 1978.732074][   T29] audit: type=1400 audit(2207.501:641): avc:  denied  { create } for  pid=14607 comm="syz.1.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1978.927847][T14609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1062'.
[ 1979.022812][T14615] netlink: 199356 bytes leftover after parsing attributes in process `syz.0.1063'.
[ 1979.071210][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'.
[ 1979.318377][T14619] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 1979.632133][T11817] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1979.802205][T11817] usb 1-1: Using ep0 maxpacket: 8
[ 1979.818189][T11817] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1979.864452][T11817] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00
[ 1979.890681][T11817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1979.963116][T11817] usb 1-1: config 0 descriptor??
[ 1979.987737][T11817] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1980.210099][T14617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1980.652847][T14617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1980.701527][T12483] Bluetooth: hci2: Invalid handle: 0x656e > 0x0eff
[ 1980.972396][T12483] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1980.993614][T12483] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1981.026760][T12483] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1981.036864][T12483] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1981.046814][T12483] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1981.054385][T12483] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1981.585766][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 1981.885459][T14650] chnl_net:caif_netlink_parms(): no params data found
[ 1982.247921][ T5269] usb 1-1: USB disconnect, device number 6
[ 1982.409677][T12782] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1982.433111][T14650] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1982.442648][T14650] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1982.482357][T14650] bridge_slave_0: entered allmulticast mode
[ 1982.589728][T14650] bridge_slave_0: entered promiscuous mode
[ 1982.897526][T14665] netlink: 'syz.4.1069': attribute type 12 has an invalid length.
[ 1983.103919][T12483] Bluetooth: hci4: command tx timeout
[ 1983.271503][T12782] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1983.346752][T14650] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1983.354250][T14650] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1983.363028][T14650] bridge_slave_1: entered allmulticast mode
[ 1983.370493][T14650] bridge_slave_1: entered promiscuous mode
[ 1983.418104][T12782] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1983.483653][T14650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1983.505756][T14650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1983.550667][T12782] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1983.603819][T14650] team0: Port device team_slave_0 added
[ 1983.619264][T14650] team0: Port device team_slave_1 added
[ 1983.669795][T14650] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1983.681479][T14650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1983.721052][T14650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1983.766631][T14650] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1983.776086][T14650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1983.805989][T14650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1983.950842][T12782] bridge_slave_1: left allmulticast mode
[ 1983.957748][T12782] bridge_slave_1: left promiscuous mode
[ 1983.972583][T12782] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1983.992557][T12782] bridge_slave_0: left allmulticast mode
[ 1983.998301][T12782] bridge_slave_0: left promiscuous mode
[ 1984.015987][T12782] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1985.700922][T12483] Bluetooth: hci4: command tx timeout
[ 1987.883570][T12483] Bluetooth: hci4: command tx timeout
[ 1988.779489][T14706] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1989.320746][T12782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1989.349000][T12782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1989.389144][T12782] bond0 (unregistering): Released all slaves
[ 1989.463994][T14650] hsr_slave_0: entered promiscuous mode
[ 1989.491079][T14650] hsr_slave_1: entered promiscuous mode
[ 1989.539109][T14650] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1989.592234][T14650] Cannot create hsr debugfs directory
[ 1989.758212][T14707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1074'.
[ 1990.013746][T12483] Bluetooth: hci4: command tx timeout
[ 1990.366987][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1990.381177][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1990.393272][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1990.502383][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1990.510078][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1990.517536][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1990.762426][T14729] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14729 comm=syz.0.1078
[ 1990.862277][   T29] audit: type=1400 audit(2219.621:642): avc:  denied  { getopt } for  pid=14728 comm="syz.0.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1991.125323][T12782] hsr_slave_0: left promiscuous mode
[ 1991.136588][T12782] hsr_slave_1: left promiscuous mode
[ 1991.397440][T12782] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1991.405507][T12782] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1992.030397][T14741] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[ 1992.105330][T12782] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1992.422417][T12782] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1992.558627][T14749] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1082'.
[ 1992.614445][ T5227] Bluetooth: hci0: command tx timeout
[ 1992.722235][T12782] veth1_macvtap: left promiscuous mode
[ 1992.797485][T12782] veth0_macvtap: left promiscuous mode
[ 1992.828805][T12782] veth1_vlan: left promiscuous mode
[ 1993.362323][T12782] veth0_vlan: left promiscuous mode
[ 1993.559560][T14756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1993.705258][   T29] audit: type=1400 audit(2222.371:643): avc:  denied  { create } for  pid=14750 comm="syz.0.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[ 1993.781460][   T29] audit: type=1400 audit(2222.471:644): avc:  denied  { bind } for  pid=14750 comm="syz.0.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1994.692116][ T5227] Bluetooth: hci0: command tx timeout
[ 1996.772924][ T5227] Bluetooth: hci0: command tx timeout
[ 1997.806005][ T5227] Bluetooth: hci3: ACL packet for unknown connection handle 200
[ 1998.763701][T12782] team0 (unregistering): Port device team_slave_1 removed
[ 1998.866966][T12782] team0 (unregistering): Port device team_slave_0 removed
[ 1998.875329][ T5227] Bluetooth: hci0: command tx timeout
[ 2000.661308][T14784] input: syz1 as /devices/virtual/input/input57
[ 2001.099400][T14784] bridge: RTM_NEWNEIGH with invalid state 0x0
[ 2001.703202][T14725] chnl_net:caif_netlink_parms(): no params data found
[ 2002.070904][T14799] netlink: 'syz.4.1091': attribute type 2 has an invalid length.
[ 2002.078978][T14799] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1091'.
[ 2002.812662][   T29] audit: type=1400 audit(2230.831:645): avc:  denied  { ioctl } for  pid=14795 comm="syz.4.1091" path="socket:[93425]" dev="sockfs" ino=93425 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 2003.032367][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 2003.204950][    T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2003.310792][    T9] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2003.361019][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2004.157975][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2004.191343][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 2004.202421][    T9] usb 4-1: invalid MIDI out EP 0
[ 2004.552382][    T9] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 2004.641755][    T9] usb 4-1: USB disconnect, device number 7
[ 2004.741513][T14818] netlink: 'syz.4.1093': attribute type 1 has an invalid length.
[ 2004.749635][T14818] netlink: 9348 bytes leftover after parsing attributes in process `syz.4.1093'.
[ 2004.758946][T14818] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1093'.
[ 2005.634837][T14725] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2005.652325][T14725] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2005.671315][T14725] bridge_slave_0: entered allmulticast mode
[ 2005.697703][T14725] bridge_slave_0: entered promiscuous mode
[ 2005.706211][T14725] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2005.713449][T14725] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2005.721682][T14725] bridge_slave_1: entered allmulticast mode
[ 2005.729175][T14725] bridge_slave_1: entered promiscuous mode
[ 2005.788525][T14831] input: syz1 as /devices/virtual/input/input58
[ 2005.943743][T14725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2006.022712][T14835] netlink: 'syz.4.1095': attribute type 11 has an invalid length.
[ 2006.083739][T14831] bridge: RTM_NEWNEIGH with invalid state 0x0
[ 2006.093971][T14725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2006.327118][T14725] team0: Port device team_slave_0 added
[ 2006.374572][T14725] team0: Port device team_slave_1 added
[ 2006.555449][T14725] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2006.565470][T14725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2007.503223][T14725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2007.544293][T14725] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2007.582196][T14725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2007.663275][T14725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2008.308088][T14650] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2008.939938][T14650] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2008.976123][T14849] input: syz1 as /devices/virtual/input/input59
[ 2009.042722][T14650] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2009.073971][T14650] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2009.160068][T14849] bridge: RTM_NEWNEIGH with invalid state 0x0
[ 2009.195583][T14725] hsr_slave_0: entered promiscuous mode
[ 2009.235731][T14725] hsr_slave_1: entered promiscuous mode
[ 2009.258392][T14725] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2009.282406][T14725] Cannot create hsr debugfs directory
[ 2010.161277][T14868] syz.3.1101: attempt to access beyond end of device
[ 2010.161277][T14868] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[ 2010.176775][T14868] syz.3.1101: attempt to access beyond end of device
[ 2010.176775][T14868] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0
[ 2010.192631][T14868] Mount JFS Failure: -5
[ 2010.196912][T14868] jfs_mount failed w/return code = -5
[ 2010.609205][T14725] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2010.779877][   T29] audit: type=1400 audit(2239.551:646): avc:  denied  { ioctl } for  pid=14851 comm="syz.0.1100" path="socket:[93647]" dev="sockfs" ino=93647 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 2011.053610][T14725] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2011.166462][T14650] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2011.218050][T14650] 8021q: adding VLAN 0 to HW filter on device team0
[ 2011.580141][T14884] netlink: 'syz.4.1103': attribute type 1 has an invalid length.
[ 2011.588101][T14884] netlink: 9348 bytes leftover after parsing attributes in process `syz.4.1103'.
[ 2011.597760][T14884] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1103'.
[ 2012.477797][T14725] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2013.466707][T12782] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2013.473955][T12782] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2013.518135][T12782] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2013.525393][T12782] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2013.724130][T14725] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2014.675816][T14725] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2014.710148][T14725] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2014.762051][T14725] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2014.794661][T14725] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2015.144001][T14916] netlink: 'syz.0.1108': attribute type 1 has an invalid length.
[ 2015.161226][T14916] netlink: 9348 bytes leftover after parsing attributes in process `syz.0.1108'.
[ 2015.190206][T14916] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1108'.
[ 2015.970633][   T29] audit: type=1400 audit(2244.741:647): avc:  denied  { ioctl } for  pid=14905 comm="syz.3.1107" path="socket:[92847]" dev="sockfs" ino=92847 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 2016.049487][T14650] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2016.476139][T14725] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2017.570631][T14650] veth0_vlan: entered promiscuous mode
[ 2017.599025][T14925] input: syz1 as /devices/virtual/input/input60
[ 2017.797188][T14725] 8021q: adding VLAN 0 to HW filter on device team0
[ 2017.826018][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2017.833266][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2018.110450][T14935] bridge: RTM_NEWNEIGH with invalid state 0x0
[ 2018.132000][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2018.139172][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2018.214905][T14940] netlink: 'syz.4.1112': attribute type 1 has an invalid length.
[ 2018.222959][T14940] netlink: 9348 bytes leftover after parsing attributes in process `syz.4.1112'.
[ 2018.232260][T14940] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1112'.
[ 2019.237295][T14650] veth1_vlan: entered promiscuous mode
[ 2019.443148][T14944] input: syz1 as /devices/virtual/input/input61
[ 2020.514914][T14650] veth0_macvtap: entered promiscuous mode
[ 2020.565677][T14947] bridge: RTM_NEWNEIGH with invalid state 0x0
[ 2020.713145][   T29] audit: type=1400 audit(2249.451:648): avc:  denied  { map } for  pid=14948 comm="syz.3.1115" path="socket:[93936]" dev="sockfs" ino=93936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 2020.917031][T14650] veth1_macvtap: entered promiscuous mode
[ 2021.144120][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2021.195199][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2021.235910][T14962] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2021.242091][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2021.292429][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2021.432096][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2021.512605][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2021.627171][T14975] netlink: 'syz.4.1117': attribute type 1 has an invalid length.
[ 2021.635390][T14975] netlink: 9348 bytes leftover after parsing attributes in process `syz.4.1117'.
[ 2021.645058][T14975] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1117'.
[ 2022.377526][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2022.402292][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2022.421771][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2022.443797][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2022.466562][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2022.527164][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2022.666398][T14650] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2022.749323][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2022.795215][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2022.832010][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2022.908395][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2022.982253][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2023.025914][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2023.085145][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2023.128007][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2023.163898][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2023.221759][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2023.268695][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2023.310978][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2023.334597][T14650] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2023.418133][T14650] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2023.468759][T14650] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2023.501645][T14650] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2023.535540][T14650] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2023.621427][T14725] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2024.260838][T14725] veth0_vlan: entered promiscuous mode
[ 2024.275404][T14725] veth1_vlan: entered promiscuous mode
[ 2024.713318][ T6354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2024.938640][ T6354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2025.114196][ T6354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2025.155655][T14725] veth0_macvtap: entered promiscuous mode
[ 2025.182056][ T6354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2025.283511][T14725] veth1_macvtap: entered promiscuous mode
[ 2025.576339][T15003] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2026.590897][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2027.134149][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2027.201306][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2027.229035][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2027.439845][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2027.450985][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2027.461442][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2027.472664][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2027.483897][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2027.500603][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2027.512125][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2027.524948][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2027.853256][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2027.869386][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2027.972217][T14725] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2028.192592][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2028.205567][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.216502][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2028.227898][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.237875][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2028.248983][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.332117][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2028.342770][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.353264][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2028.364462][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.374503][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2028.385063][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.395560][T14725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2028.406384][T14725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.420673][T14725] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2028.431809][T14725] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2028.440629][T14725] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2028.449900][T14725] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2028.459399][T14725] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2029.913742][T12483] Bluetooth: hci7: command 0x0406 tx timeout
[ 2030.762165][ T8891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2030.779545][T11982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2030.787599][ T8891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2030.798416][T11982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2035.704412][T15046] ebt_limit: overflow, try lower: 12058624/0
[ 2035.713021][T15046] loop0: detected capacity change from 0 to 7
[ 2036.133269][T15046] Dev loop0: unable to read RDB block 7
[ 2036.139422][T15046]  loop0: AHDI p4
[ 2036.144497][T15046] loop0: partition table partially beyond EOD, truncated
[ 2036.236536][T12483] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 2036.248987][T12483] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 2036.260351][T12483] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 2036.269950][T12483] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 2036.278328][T12483] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 2036.299281][T12483] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 2038.112022][T15049] chnl_net:caif_netlink_parms(): no params data found
[ 2039.530316][T15077] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1135'.
[ 2039.598314][T12483] Bluetooth: hci8: command tx timeout
[ 2039.758401][ T5227] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 2039.853688][T15077] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1135'.
[ 2039.875899][ T5227] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 2039.885819][ T5227] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 2039.894405][ T5227] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 2039.903300][ T5227] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 2039.911060][ T5227] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 2040.290744][T15049] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2040.312074][T15049] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2040.322942][T15049] bridge_slave_0: entered allmulticast mode
[ 2040.331322][T15049] bridge_slave_0: entered promiscuous mode
[ 2040.354668][T15049] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2040.361850][T15049] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2040.369239][T15049] bridge_slave_1: entered allmulticast mode
[ 2040.373947][T15088] netlink: 920 bytes leftover after parsing attributes in process `syz.2.1136'.
[ 2040.377464][T15049] bridge_slave_1: entered promiscuous mode
[ 2040.415849][T15088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'.
[ 2040.548123][T15049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2040.619444][T15049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2041.714395][ T5227] Bluetooth: hci8: command tx timeout
[ 2042.170428][ T5227] Bluetooth: hci9: command tx timeout
[ 2043.025449][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 2043.190546][T15049] team0: Port device team_slave_0 added
[ 2043.326503][T15049] team0: Port device team_slave_1 added
[ 2043.619857][ T8891] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2043.754503][ T5227] Bluetooth: hci8: command tx timeout
[ 2043.878447][T15049] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2044.272298][ T5227] Bluetooth: hci9: command tx timeout
[ 2044.842308][T15049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2044.937432][T15049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2045.028150][T15049] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2045.045286][T15049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2045.079161][T15049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2045.187176][ T8891] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2045.318159][T15049] hsr_slave_0: entered promiscuous mode
[ 2045.351220][T15049] hsr_slave_1: entered promiscuous mode
[ 2045.373653][T15049] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2045.424441][T15049] Cannot create hsr debugfs directory
[ 2045.560121][ T8891] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2045.591605][T15115] netlink: 'syz.1.1142': attribute type 11 has an invalid length.
[ 2045.816843][ T5227] Bluetooth: hci8: command tx timeout
[ 2045.888526][ T8891] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2046.372427][ T5227] Bluetooth: hci9: command tx timeout
[ 2047.597558][T15079] chnl_net:caif_netlink_parms(): no params data found
[ 2047.875149][T15129] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.1144'.
[ 2048.004134][   T29] audit: type=1400 audit(2276.751:649): avc:  denied  { ioctl } for  pid=15125 comm="syz.1.1144" path="/dev/nullb0" dev="devtmpfs" ino=680 ioctlcmd=0x1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 2048.187862][ T8891] bridge_slave_1: left allmulticast mode
[ 2048.258038][ T8891] bridge_slave_1: left promiscuous mode
[ 2048.304323][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2048.398126][ T8891] bridge_slave_0: left allmulticast mode
[ 2048.452338][ T5227] Bluetooth: hci9: command tx timeout
[ 2048.547609][ T8891] bridge_slave_0: left promiscuous mode
[ 2048.582339][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2051.253775][T15157] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1146'.
[ 2051.719117][   T29] audit: type=1400 audit(2280.491:650): avc:  denied  { read } for  pid=15158 comm="syz.2.1148" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 2051.769338][   T29] audit: type=1400 audit(2280.491:651): avc:  denied  { open } for  pid=15158 comm="syz.2.1148" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 2052.263221][ T8891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2052.281252][ T8891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2052.324953][ T8891] bond0 (unregistering): Released all slaves
[ 2052.347881][ T8891] bond1 (unregistering): Released all slaves
[ 2052.505261][T15079] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2052.524389][T15079] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2052.531748][T15079] bridge_slave_0: entered allmulticast mode
[ 2052.543661][T15079] bridge_slave_0: entered promiscuous mode
[ 2052.553208][T15079] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2052.569249][T15079] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2052.577265][T15079] bridge_slave_1: entered allmulticast mode
[ 2052.587470][T15079] bridge_slave_1: entered promiscuous mode
[ 2052.611334][T15161] ip6gretap0 speed is unknown, defaulting to 1000
[ 2052.657596][T15157] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2052.667763][T15157] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 2052.675913][T15157] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 2052.697230][T15157] Bluetooth: hci7: Opcode 0x0406 failed: -4
[ 2052.719184][T15157] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2052.739693][T15157] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 2052.774516][T15157] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 2052.791191][T15157] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2052.808456][T15157] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2052.818607][T15157] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2052.843592][T15161] ip6gretap0 speed is unknown, defaulting to 1000
[ 2052.859751][T15161] ip6gretap0 speed is unknown, defaulting to 1000
[ 2052.879026][T15157] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[ 2052.898673][T15157] Bluetooth: hci8: Opcode 0x0406 failed: -4
[ 2052.916739][T15157] Bluetooth: hci8: Opcode 0x0406 failed: -4
[ 2052.931612][T15161] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 2052.941291][T15157] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[ 2052.950168][T15157] Bluetooth: hci9: Opcode 0x0406 failed: -4
[ 2052.983537][T15079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2052.993139][T15161] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 2053.007856][T15157] Bluetooth: hci9: Opcode 0x0406 failed: -4
[ 2053.037897][T15079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2053.073757][T12483] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2053.085587][T12483] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2053.095864][T12483] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2053.128789][T12483] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2053.149365][T12483] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2053.163499][T12483] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2053.527313][T15161] ip6gretap0 speed is unknown, defaulting to 1000
[ 2053.604428][T15079] team0: Port device team_slave_0 added
[ 2053.628314][T15161] ip6gretap0 speed is unknown, defaulting to 1000
[ 2053.632771][T15079] team0: Port device team_slave_1 added
[ 2053.981739][T15161] ip6gretap0 speed is unknown, defaulting to 1000
[ 2054.289959][T15079] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2054.320296][T15079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2054.405889][T15079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2054.448145][T15161] ip6gretap0 speed is unknown, defaulting to 1000
[ 2054.456841][T15161] ip6gretap0 speed is unknown, defaulting to 1000
[ 2054.502132][T15079] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2054.509376][T15079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2054.582188][T15079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2054.692418][ T5227] Bluetooth: hci6: command 0x0406 tx timeout
[ 2054.772104][ T5227] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2054.772413][T12483] Bluetooth: hci7: command 0x0406 tx timeout
[ 2054.793938][T15161] ip6gretap0 speed is unknown, defaulting to 1000
[ 2054.834551][T15161] ip6gretap0 speed is unknown, defaulting to 1000
[ 2054.852136][T12483] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2054.932164][T12483] Bluetooth: hci8: command 0x0c1a tx timeout
[ 2054.932588][T15079] hsr_slave_0: entered promiscuous mode
[ 2054.991576][T15079] hsr_slave_1: entered promiscuous mode
[ 2055.013992][T15079] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2055.022413][T15079] Cannot create hsr debugfs directory
[ 2055.026935][T12483] Bluetooth: hci9: command 0x0c1a tx timeout
[ 2055.266454][T12483] Bluetooth: hci2: command tx timeout
[ 2055.335690][T15186] netlink: 'syz.1.1151': attribute type 11 has an invalid length.
[ 2055.357163][T15161] ip6gretap0 speed is unknown, defaulting to 1000
[ 2055.376927][T15049] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2055.421171][T15049] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2055.495251][T15161] ip6gretap0 speed is unknown, defaulting to 1000
[ 2055.512376][T15049] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2055.534113][T15049] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2055.557777][T15161] ip6gretap0 speed is unknown, defaulting to 1000
[ 2055.634409][T15161] ip6gretap0 speed is unknown, defaulting to 1000
[ 2055.745744][ T8891] hsr_slave_0: left promiscuous mode
[ 2055.776378][ T8891] hsr_slave_1: left promiscuous mode
[ 2055.827577][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2055.852111][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2055.883057][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2055.890516][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2056.012732][ T8891] veth1_macvtap: left promiscuous mode
[ 2056.020376][ T8891] veth0_macvtap: left promiscuous mode
[ 2056.038620][ T8891] veth1_vlan: left promiscuous mode
[ 2056.052254][ T8891] veth0_vlan: left promiscuous mode
[ 2056.828747][T12483] Bluetooth: hci6: command 0x0406 tx timeout
[ 2056.852078][T12483] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2056.858490][ T5227] Bluetooth: hci7: command 0x0406 tx timeout
[ 2056.932883][T12483] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2057.014899][T12483] Bluetooth: hci8: command 0x0c1a tx timeout
[ 2057.112062][T12483] Bluetooth: hci9: command 0x0c1a tx timeout
[ 2057.332998][T12483] Bluetooth: hci2: command tx timeout
[ 2057.826802][ T8891] team0 (unregistering): Port device team_slave_1 removed
[ 2057.957093][ T8891] team0 (unregistering): Port device team_slave_0 removed
[ 2058.723052][T15209] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2058.940267][T12483] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2059.022330][T12483] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2059.125424][T12483] Bluetooth: hci8: command 0x0c1a tx timeout
[ 2059.176189][ T5227] Bluetooth: hci9: command 0x0c1a tx timeout
[ 2059.412287][ T5227] Bluetooth: hci2: command tx timeout
[ 2060.115983][T15079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2061.479493][T15049] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2061.500685][T15049] 8021q: adding VLAN 0 to HW filter on device team0
[ 2061.502634][ T5227] Bluetooth: hci2: command tx timeout
[ 2061.518400][T12782] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2061.525634][T12782] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2061.862289][T15079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2061.992283][T12782] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2061.999454][T12782] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2062.017192][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'.
[ 2062.131658][T15079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2062.305784][T15079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2062.408245][T15049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2062.453599][T15049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2063.216671][T15166] chnl_net:caif_netlink_parms(): no params data found
[ 2065.036274][T15049] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2065.469623][T15273] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1161'.
[ 2066.373841][ T8891] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2066.483914][T15166] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2066.503339][T15166] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2066.542637][T15166] bridge_slave_0: entered allmulticast mode
[ 2066.552683][T15166] bridge_slave_0: entered promiscuous mode
[ 2066.582736][T15079] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2066.601659][T15079] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2066.646360][T15266] netlink: 'syz.2.1160': attribute type 11 has an invalid length.
[ 2066.659304][T15273] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1161'.
[ 2066.884104][ T8891] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2066.931284][T15166] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2066.944363][T15166] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2067.142480][T15166] bridge_slave_1: entered allmulticast mode
[ 2067.149801][T15166] bridge_slave_1: entered promiscuous mode
[ 2067.961248][T15079] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2067.971364][T15079] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2068.058821][ T8891] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2068.196226][T15166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2068.279897][T15049] veth0_vlan: entered promiscuous mode
[ 2068.357428][ T8891] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2068.420644][T15166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2068.600996][T15049] veth1_vlan: entered promiscuous mode
[ 2068.669579][T15166] team0: Port device team_slave_0 added
[ 2068.711638][T15166] team0: Port device team_slave_1 added
[ 2068.907987][T15166] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2068.932552][T15166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2068.964319][T15166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2068.988690][T15166] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2068.995747][T15166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2069.026000][T15166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2069.326565][T15166] hsr_slave_0: entered promiscuous mode
[ 2069.342971][T15166] hsr_slave_1: entered promiscuous mode
[ 2069.361141][T15166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2069.369913][T15166] Cannot create hsr debugfs directory
[ 2069.425499][ T8891] bridge_slave_1: left allmulticast mode
[ 2069.431220][ T8891] bridge_slave_1: left promiscuous mode
[ 2069.438302][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2069.466840][ T8891] bridge_slave_0: left allmulticast mode
[ 2069.479361][ T8891] bridge_slave_0: left promiscuous mode
[ 2069.492141][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2070.258549][ T8891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2070.277636][ T8891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2070.289953][ T8891] bond0 (unregistering): Released all slaves
[ 2070.445276][T15049] veth0_macvtap: entered promiscuous mode
[ 2070.559297][T15049] veth1_macvtap: entered promiscuous mode
[ 2070.635277][T15079] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2070.791364][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2070.821981][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2070.831850][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2070.844032][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2070.863812][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2070.875431][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2070.890423][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2070.901363][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2070.923131][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2070.940343][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2070.957592][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2070.974786][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2070.991962][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2071.012403][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2071.039405][T15049] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2071.063129][T15079] 8021q: adding VLAN 0 to HW filter on device team0
[ 2071.149512][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2071.181994][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2071.203139][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2071.213697][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2071.224792][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2071.235699][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2071.245686][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2071.256989][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2071.267284][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2071.278217][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2071.289425][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2071.300376][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2071.310678][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2071.321728][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2071.343523][T15049] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2071.373969][ T8891] hsr_slave_0: left promiscuous mode
[ 2071.380176][ T8891] hsr_slave_1: left promiscuous mode
[ 2071.387220][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2071.395163][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2071.405048][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2071.415194][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2071.438875][ T8891] veth1_macvtap: left promiscuous mode
[ 2071.444809][ T8891] veth0_macvtap: left promiscuous mode
[ 2071.450404][ T8891] veth1_vlan: left promiscuous mode
[ 2071.456718][ T8891] veth0_vlan: left promiscuous mode
[ 2072.149205][ T8891] team0 (unregistering): Port device team_slave_1 removed
[ 2072.218946][ T8891] team0 (unregistering): Port device team_slave_0 removed
[ 2072.984407][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2072.991570][ T5815] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2073.013318][T15049] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2073.023187][T15049] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2073.038758][T15049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2073.054180][T15049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2073.217161][ T5311] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2073.224379][ T5311] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2073.436350][ T8862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2073.452805][ T8862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2073.630285][ T6354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2073.663418][ T6354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2073.671371][ T8891] IPVS: stop unused estimator thread 0...
[ 2073.855346][T15166] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2073.900435][T15166] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2074.236672][T15166] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2074.939847][T15166] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2075.007153][T15079] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2075.109595][T15079] veth0_vlan: entered promiscuous mode
[ 2075.161568][T15079] veth1_vlan: entered promiscuous mode
[ 2075.247228][T15079] veth0_macvtap: entered promiscuous mode
[ 2075.260101][T15079] veth1_macvtap: entered promiscuous mode
[ 2075.301259][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2075.326129][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2075.342118][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2075.362508][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2075.385072][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2075.405125][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2075.419536][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2075.430977][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2075.441499][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2075.453572][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2075.466013][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2075.477283][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2075.487716][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2075.500948][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2075.516982][T15079] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2075.546399][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2075.558257][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2075.573459][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2075.584110][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2075.588253][T15344] netlink: 'syz.0.1126': attribute type 1 has an invalid length.
[ 2075.602280][T15344] netlink: 9348 bytes leftover after parsing attributes in process `syz.0.1126'.
[ 2075.611845][T15344] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1126'.
[ 2075.612236][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2075.771628][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2075.781935][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2075.792603][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2075.814358][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2075.836620][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2075.851978][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2075.863405][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2075.873360][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2075.885052][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2075.897425][T15079] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2075.917993][T15079] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2075.942479][T15079] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2075.951260][T15079] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2075.985490][T15079] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2076.199863][T15166] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2076.234666][T15166] 8021q: adding VLAN 0 to HW filter on device team0
[ 2076.307363][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2076.340355][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2076.384678][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2076.391846][ T5815] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2076.416401][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2076.423736][ T5815] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2076.457966][T11982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2076.482588][T11982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2076.869572][   T29] audit: type=1400 audit(2305.621:652): avc:  denied  { map } for  pid=15387 comm="syz.2.1175" path="socket:[96943]" dev="sockfs" ino=96943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 2077.017904][T15398] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1173'.
[ 2077.102476][   T29] audit: type=1400 audit(2305.621:653): avc:  denied  { read write } for  pid=15387 comm="syz.2.1175" path="socket:[96943]" dev="sockfs" ino=96943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 2077.212625][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'.
[ 2077.314356][   T29] audit: type=1400 audit(2306.091:654): avc:  denied  { execute } for  pid=15384 comm="syz.0.1173" path="/dev/audio1" dev="devtmpfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[ 2077.657958][T15166] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2078.705961][T15166] veth0_vlan: entered promiscuous mode
[ 2078.780537][T15166] veth1_vlan: entered promiscuous mode
[ 2078.953881][T15166] veth0_macvtap: entered promiscuous mode
[ 2078.996676][T15166] veth1_macvtap: entered promiscuous mode
[ 2079.193537][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2079.323019][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2079.551716][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2079.602162][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2079.637311][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2079.658561][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2079.680804][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2079.701775][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2079.717540][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2079.733590][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2079.752141][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2079.772512][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2079.791492][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2079.810996][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2079.824197][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2079.844886][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2079.867797][T15166] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2079.890128][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2079.909438][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2079.921840][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2079.943507][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2079.961749][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2079.974806][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2080.001458][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2080.034044][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2080.051409][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2080.093896][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2080.149837][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2080.199915][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2080.214363][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2080.236368][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2080.256651][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2080.302192][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2080.364981][T15166] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2080.637302][T15166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2080.650445][T15166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2080.661104][T15166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2080.670175][T15166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2080.749201][T15432] binder: 15427:15432 ioctl 4018620d 0 returned -22
[ 2081.432178][ T5311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2081.462567][ T5311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2081.567830][ T5311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2081.587861][ T5311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2082.003526][T15431] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2083.496586][T15447] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2084.208612][ T5227] Bluetooth: hci4: unexpected event 0x04 length: 14 > 10
[ 2086.155816][T15442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1166'.
[ 2086.192195][   T29] audit: type=1400 audit(2543.968:655): avc:  denied  { getopt } for  pid=15452 comm="syz.2.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 2086.216891][ T5227] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2089.926559][   T29] audit: type=1400 audit(2546.798:656): avc:  denied  { setopt } for  pid=15470 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 2089.978971][T12483] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2089.997286][T12483] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2090.006771][T12483] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2090.020039][T12483] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2090.031581][T12483] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2090.042391][T12483] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2090.496052][T15478] ip6gretap0 speed is unknown, defaulting to 1000
[ 2091.224104][T15486] binder: 15482:15486 ioctl 4018620d 0 returned -22
[ 2092.357346][T15496] ISOFS: Unable to identify CD-ROM format.
[ 2093.150366][T12483] Bluetooth: hci1: command tx timeout
[ 2093.184073][T15478] chnl_net:caif_netlink_parms(): no params data found
[ 2093.243874][   T29] audit: type=1400 audit(2550.128:657): avc:  denied  { create } for  pid=15491 comm="syz.4.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 2093.688944][T15478] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2093.696269][T15478] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2093.728128][T15478] bridge_slave_0: entered allmulticast mode
[ 2093.762985][T15478] bridge_slave_0: entered promiscuous mode
[ 2093.981254][T15478] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2094.017482][T15478] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2094.047042][T15478] bridge_slave_1: entered allmulticast mode
[ 2094.074887][T15478] bridge_slave_1: entered promiscuous mode
[ 2094.232051][T15505] ip6gretap0 speed is unknown, defaulting to 1000
[ 2094.251758][T15478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2094.586010][ T6354] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2094.744394][T15478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2094.871307][ T6354] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2095.196323][T12483] Bluetooth: hci1: command tx timeout
[ 2095.380146][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2095.393648][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2095.422442][ T6354] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2095.444662][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2095.460464][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2095.469161][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2095.476654][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2095.823543][T15478] team0: Port device team_slave_0 added
[ 2095.839737][T15478] team0: Port device team_slave_1 added
[ 2095.902322][ T6354] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2096.043209][T15508] ip6gretap0 speed is unknown, defaulting to 1000
[ 2096.050903][T15478] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2096.082365][T15478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2096.129054][T15478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2096.187819][T15478] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2096.200551][T15478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2096.249223][T15478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2096.690896][T15478] hsr_slave_0: entered promiscuous mode
[ 2096.741047][T15478] hsr_slave_1: entered promiscuous mode
[ 2097.048094][ T6354] bridge_slave_1: left allmulticast mode
[ 2097.072476][   T29] audit: type=1400 audit(2554.848:658): avc:  denied  { listen } for  pid=15512 comm="syz.0.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 2097.112118][ T6354] bridge_slave_1: left promiscuous mode
[ 2097.117848][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2097.270596][ T5227] Bluetooth: hci1: command tx timeout
[ 2097.362929][ T6354] bridge_slave_0: left allmulticast mode
[ 2097.402087][ T6354] bridge_slave_0: left promiscuous mode
[ 2097.435010][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2097.502079][ T5227] Bluetooth: hci0: command tx timeout
[ 2097.748746][T15512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2097.869676][T12483] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2097.893096][T12483] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2097.912194][T12483] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2097.921019][T12483] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2097.930228][T12483] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2097.939376][T12483] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2098.829806][ T6354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2098.844697][ T6354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2098.864273][ T6354] bond0 (unregistering): Released all slaves
[ 2099.350087][T15546] ax25_connect(): syz.0.1187 uses autobind, please contact jreuter@yaina.de
[ 2099.368732][T12483] Bluetooth: hci1: command tx timeout
[ 2099.572027][T12483] Bluetooth: hci0: command tx timeout
[ 2099.973004][T12483] Bluetooth: hci3: command tx timeout
[ 2100.038801][T15522] ip6gretap0 speed is unknown, defaulting to 1000
[ 2100.259871][T15549] tipc: Started in network mode
[ 2100.271333][T15549] tipc: Node identity 2007ff, cluster identity 4711
[ 2100.291585][T15549] tipc: Node number set to 2099199
[ 2100.508195][ T6354] hsr_slave_0: left promiscuous mode
[ 2100.522872][ T6354] hsr_slave_1: left promiscuous mode
[ 2100.529366][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2100.807435][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2101.133246][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2101.162484][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2101.220945][ T6354] veth1_macvtap: left promiscuous mode
[ 2101.251775][ T6354] veth0_macvtap: left promiscuous mode
[ 2101.282342][ T6354] veth1_vlan: left promiscuous mode
[ 2101.287761][ T6354] veth0_vlan: left promiscuous mode
[ 2101.382322][T12977] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 2101.614583][T15569] xt_hashlimit: overflow, rate too high: 0
[ 2101.654490][T12483] Bluetooth: hci0: command tx timeout
[ 2102.052476][T12483] Bluetooth: hci3: command tx timeout
[ 2102.442122][T12977] usb 5-1: Using ep0 maxpacket: 32
[ 2102.459006][T12977] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 2102.467800][T12977] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 2102.476911][T12977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2102.507904][T12977] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 2102.550022][T12977] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2102.592087][T12977] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[ 2102.741973][T12977] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 2102.756592][T12977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2102.829180][T15579] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.1191'.
[ 2102.843467][T15579] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.1191'.
[ 2103.603262][T12977] usb 5-1: config 0 descriptor??
[ 2103.740538][T12483] Bluetooth: hci0: command tx timeout
[ 2104.125290][ T6354] team0 (unregistering): Port device team_slave_1 removed
[ 2104.142511][T12483] Bluetooth: hci3: command tx timeout
[ 2104.205266][ T6354] team0 (unregistering): Port device team_slave_0 removed
[ 2104.459063][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 2105.001742][T15508] chnl_net:caif_netlink_parms(): no params data found
[ 2105.135442][T12977] usb 5-1: can't set config #0, error -71
[ 2105.156409][T12977] usb 5-1: USB disconnect, device number 3
[ 2105.757576][T15593] netlink: 'syz.4.1193': attribute type 1 has an invalid length.
[ 2105.765813][T15593] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1193'.
[ 2106.382965][T12483] Bluetooth: hci3: command tx timeout
[ 2106.982700][T15508] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2107.000266][T15508] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2107.020570][T15508] bridge_slave_0: entered allmulticast mode
[ 2107.033400][T15508] bridge_slave_0: entered promiscuous mode
[ 2107.083982][T15587] netlink: 1212 bytes leftover after parsing attributes in process `syz.0.1192'.
[ 2107.141358][T15508] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2107.160078][T15508] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2107.194387][T15508] bridge_slave_1: entered allmulticast mode
[ 2107.204948][T15508] bridge_slave_1: entered promiscuous mode
[ 2107.307532][T15508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2107.364921][T15508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2107.465346][T15508] team0: Port device team_slave_0 added
[ 2107.524104][T15508] team0: Port device team_slave_1 added
[ 2108.214713][T15508] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2108.242010][T15508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2108.299620][T15508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2108.371696][T15508] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2108.392097][T15508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2108.418434][T15508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2108.482193][T15522] chnl_net:caif_netlink_parms(): no params data found
[ 2109.045440][T15478] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2109.229342][T15478] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2109.264224][T15478] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2109.298814][T15478] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2109.424459][T15508] hsr_slave_0: entered promiscuous mode
[ 2109.476045][T15508] hsr_slave_1: entered promiscuous mode
[ 2109.492284][T15508] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2109.502007][T15508] Cannot create hsr debugfs directory
[ 2109.697313][ T6354] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2110.058178][ T6354] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2110.340574][T15522] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2110.361038][T15522] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2110.381238][T15522] bridge_slave_0: entered allmulticast mode
[ 2110.784790][T15522] bridge_slave_0: entered promiscuous mode
[ 2110.968158][T15522] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2110.984702][T15522] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2111.022180][T15522] bridge_slave_1: entered allmulticast mode
[ 2111.038552][T15522] bridge_slave_1: entered promiscuous mode
[ 2111.354970][ T6354] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2111.622314][ T6354] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2111.641880][T15522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2111.657449][T15478] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2111.678313][T15522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2111.835486][T15522] team0: Port device team_slave_0 added
[ 2111.846606][T15522] team0: Port device team_slave_1 added
[ 2111.918636][T15522] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2111.927636][T15522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2111.957208][T15522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2111.970860][T15522] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2111.978472][T15522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2112.006681][T15522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2112.026405][T15478] 8021q: adding VLAN 0 to HW filter on device team0
[ 2112.071497][ T8862] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2112.078724][ T8862] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2112.228713][ T8862] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2112.235948][ T8862] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2112.288946][T15522] hsr_slave_0: entered promiscuous mode
[ 2112.311652][T15522] hsr_slave_1: entered promiscuous mode
[ 2112.333378][T15522] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2112.341013][T15522] Cannot create hsr debugfs directory
[ 2112.465246][ T6354] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2112.634613][ T6354] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2112.790513][ T6354] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2112.954007][ T6354] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2112.988710][T15478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2113.008533][T15478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2113.491804][ T6354] bridge_slave_1: left allmulticast mode
[ 2113.522190][ T6354] bridge_slave_1: left promiscuous mode
[ 2113.528019][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2113.552424][ T6354] bridge_slave_0: left allmulticast mode
[ 2113.558156][ T6354] bridge_slave_0: left promiscuous mode
[ 2113.582607][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2113.605974][ T6354] bridge_slave_1: left allmulticast mode
[ 2113.611705][ T6354] bridge_slave_1: left promiscuous mode
[ 2113.622838][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2113.640875][ T6354] bridge_slave_0: left allmulticast mode
[ 2113.653002][ T6354] bridge_slave_0: left promiscuous mode
[ 2113.658798][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2113.687218][ T6354] bridge_slave_1: left allmulticast mode
[ 2113.702967][ T6354] bridge_slave_1: left promiscuous mode
[ 2113.708947][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2113.740857][ T6354] bridge_slave_0: left allmulticast mode
[ 2113.752211][ T6354] bridge_slave_0: left promiscuous mode
[ 2113.758989][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2115.495144][ T6354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2115.517884][ T6354] bond_slave_0: left promiscuous mode
[ 2115.528772][ T6354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2115.548395][ T6354] bond_slave_1: left promiscuous mode
[ 2115.564433][ T6354] bond0 (unregistering): Released all slaves
[ 2115.887336][ T5227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2115.900816][ T5227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2115.915240][ T6354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2115.926283][ T5227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2115.937901][ T6354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2115.947554][ T5227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2115.959676][ T6354] bond0 (unregistering): Released all slaves
[ 2115.967206][ T5227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2116.003275][ T5227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2116.220051][ T6354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2116.233907][ T6354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2116.245481][ T6354] bond0 (unregistering): Released all slaves
[ 2116.265006][T15508] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2116.312740][T12779] ip6gretap0 speed is unknown, defaulting to 1000
[ 2116.401754][T15478] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2116.409343][T15508] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2116.438372][T15508] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2116.483063][T15508] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2116.924563][T15478] veth0_vlan: entered promiscuous mode
[ 2117.117073][T15478] veth1_vlan: entered promiscuous mode
[ 2117.494676][T15704] chnl_net:caif_netlink_parms(): no params data found
[ 2117.529667][T15522] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2117.617570][T15478] veth0_macvtap: entered promiscuous mode
[ 2117.633266][T15522] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2117.702697][ T6354] hsr_slave_0: left promiscuous mode
[ 2117.709605][ T6354] hsr_slave_1: left promiscuous mode
[ 2117.718682][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2117.726603][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2117.736749][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2117.744907][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2117.760978][ T6354] hsr_slave_0: left promiscuous mode
[ 2117.769219][ T6354] hsr_slave_1: left promiscuous mode
[ 2117.779008][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2117.789976][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2117.799869][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2117.807658][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2117.828824][ T6354] hsr_slave_0: left promiscuous mode
[ 2117.838408][ T6354] hsr_slave_1: left promiscuous mode
[ 2117.845502][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2117.853274][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2117.861200][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2117.868811][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2117.935196][ T6354] veth1_macvtap: left promiscuous mode
[ 2117.940794][ T6354] veth0_macvtap: left promiscuous mode
[ 2117.946524][ T6354] veth1_vlan: left promiscuous mode
[ 2117.953099][ T6354] veth0_vlan: left promiscuous mode
[ 2117.959842][ T6354] veth1_macvtap: left promiscuous mode
[ 2117.965539][ T6354] veth0_macvtap: left promiscuous mode
[ 2117.971239][ T6354] veth1_vlan: left promiscuous mode
[ 2117.977516][ T6354] veth0_vlan: left promiscuous mode
[ 2117.984224][ T6354] veth1_macvtap: left promiscuous mode
[ 2117.989801][ T6354] veth0_macvtap: left promiscuous mode
[ 2117.995541][ T6354] veth1_vlan: left promiscuous mode
[ 2118.000862][ T6354] veth0_vlan: left promiscuous mode
[ 2118.132153][T12483] Bluetooth: hci4: command tx timeout
[ 2119.009222][ T6354] team0 (unregistering): Port device team_slave_1 removed
[ 2119.100335][ T6354] team0 (unregistering): Port device team_slave_0 removed
[ 2120.212498][T12483] Bluetooth: hci4: command tx timeout
[ 2121.678087][   T29] audit: type=1400 audit(2579.458:659): avc:  denied  { setopt } for  pid=15730 comm="syz.4.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2122.183553][ T6354] team0 (unregistering): Port device team_slave_1 removed
[ 2122.293132][T12483] Bluetooth: hci4: command tx timeout
[ 2122.360949][ T6354] team0 (unregistering): Port device team_slave_0 removed
[ 2124.279228][T15746] xt_l2tp: v2 doesn't support IP mode
[ 2124.378675][T12483] Bluetooth: hci4: command tx timeout
[ 2125.770498][ T6354] team0 (unregistering): Port device team_slave_1 removed
[ 2125.838160][ T6354] team0 (unregistering): Port device team_slave_0 removed
[ 2126.563960][T15522] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2126.583649][T15522] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2126.608347][T15508] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2126.649976][T15478] veth1_macvtap: entered promiscuous mode
[ 2126.691075][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2126.703140][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2126.713160][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2126.725225][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2126.735208][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2126.746771][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2126.757050][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2126.767726][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2126.777986][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2126.788852][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2126.801443][T15478] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2126.933829][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2126.954746][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2126.977031][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2127.001188][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2127.021477][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2127.050177][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2127.070964][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2127.092363][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2127.112384][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2127.141587][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2127.174507][T15478] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2127.642030][T15704] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2127.892181][T15704] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2127.909766][T15704] bridge_slave_0: entered allmulticast mode
[ 2127.921117][T15704] bridge_slave_0: entered promiscuous mode
[ 2127.960938][T15508] 8021q: adding VLAN 0 to HW filter on device team0
[ 2128.134229][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2128.141375][ T8891] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2128.183325][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2128.190528][ T8891] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2128.313333][T15704] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2128.320501][T15704] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2128.338272][T15704] bridge_slave_1: entered allmulticast mode
[ 2128.360628][T15704] bridge_slave_1: entered promiscuous mode
[ 2128.468468][T15478] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2128.488312][T15478] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2128.518697][T15478] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2128.534839][T15478] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2128.654564][   T29] audit: type=1400 audit(2586.428:660): avc:  denied  { ioctl } for  pid=15757 comm="syz.4.1205" path="socket:[100627]" dev="sockfs" ino=100627 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 2128.920303][T15704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2129.355687][T15704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2129.412966][   T30] INFO: task syz.1.1064:14618 blocked for more than 143 seconds.
[ 2129.421291][   T30]       Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0
[ 2129.429896][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2129.445229][   T30] task:syz.1.1064      state:D stack:25824 pid:14618 tgid:14618 ppid:14025  flags:0x00000004
[ 2129.457110][   T30] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2129.461018][   T30]  <TASK>
[ 2129.466128][   T30]  __schedule+0xef5/0x5750
[ 2129.470707][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 2129.476587][   T30]  ? __pfx___schedule+0x10/0x10
[ 2129.481590][   T30]  ? schedule+0x298/0x350
[ 2129.498483][   T30]  ? __pfx_lock_release+0x10/0x10
[ 2129.552591][   T30]  ? trace_lock_acquire+0x14a/0x1d0
[ 2129.579824][   T30]  ? lock_acquire+0x2f/0xb0
[ 2129.588736][   T30]  ? schedule+0x1fd/0x350
[ 2129.605208][   T30]  schedule+0xe7/0x350
[ 2129.609375][   T30]  schedule_preempt_disabled+0x13/0x30
[ 2129.630968][   T30]  __mutex_lock+0x5b8/0x9c0
[ 2129.645710][   T30]  ? hugetlb_wp+0x1b4a/0x3320
[ 2129.651162][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 2129.656729][   T30]  ? hugetlb_wp+0x1b4a/0x3320
[ 2129.661480][   T30]  hugetlb_wp+0x1b4a/0x3320
[ 2129.667191][   T30]  ? __pfx_hugetlb_wp+0x10/0x10
[ 2129.672464][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2129.677905][   T30]  ? lock_acquire+0x2f/0xb0
[ 2129.683771][   T30]  ? hugetlb_fault+0x1141/0x2fa0
[ 2129.688788][   T30]  hugetlb_fault+0x2248/0x2fa0
[ 2129.709885][   T30]  ? __pfx_hugetlb_fault+0x10/0x10
[ 2129.715441][   T30]  handle_mm_fault+0x930/0xaa0
[ 2129.720289][   T30]  do_user_addr_fault+0x60d/0x13f0
[ 2129.726322][   T30]  exc_page_fault+0x5c/0xc0
[ 2129.730908][   T30]  asm_exc_page_fault+0x26/0x30
[ 2129.736397][   T30] RIP: 0033:0x7f33eb345a98
[ 2129.740880][   T30] RSP: 002b:00007fff73f218d8 EFLAGS: 00010246
[ 2129.747599][   T30] RAX: 0000000020000640 RBX: 0000000000000004 RCX: 006b6e696c766564
[ 2129.759213][   T30] RDX: 0000000000000008 RSI: 006b6e696c766564 RDI: 0000000020000640
[ 2129.768466][   T30] RBP: 00007f33eb537a80 R08: 00007f33eb200000 R09: 0000000000000001
[ 2129.778174][   T30] R10: 0000000000000001 R11: 0000000000000009 R12: 00000000001e388d
[ 2129.810265][   T30] R13: 00007fff73f219e0 R14: 0000000000000032 R15: fffffffffffffffe
[ 2129.831993][   T30]  </TASK>
[ 2129.835194][   T30] INFO: task syz.1.1064:14623 blocked for more than 143 seconds.
[ 2129.852020][   T30]       Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0
[ 2129.859720][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2129.869760][   T30] task:syz.1.1064      state:D stack:27408 pid:14623 tgid:14618 ppid:14025  flags:0x00004006
[ 2129.880224][   T30] Call Trace:
[ 2129.883643][   T30]  <TASK>
[ 2129.886621][   T30]  __schedule+0xef5/0x5750
[ 2129.891087][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 2129.898070][   T30]  ? __pfx___schedule+0x10/0x10
[ 2129.903935][   T30]  ? schedule+0x298/0x350
[ 2129.908335][   T30]  ? __pfx_lock_release+0x10/0x10
[ 2129.913565][   T30]  ? trace_lock_acquire+0x14a/0x1d0
[ 2129.918845][   T30]  ? lock_acquire+0x2f/0xb0
[ 2129.923560][   T30]  ? schedule+0x1fd/0x350
[ 2129.928183][   T30]  schedule+0xe7/0x350
[ 2129.933043][   T30]  io_schedule+0xbf/0x130
[ 2129.937455][   T30]  folio_wait_bit_common+0x3d8/0x9b0
[ 2129.942853][   T30]  ? folio_wait_bit_common+0x13c/0x9b0
[ 2129.948388][   T30]  ? __pfx_folio_wait_bit_common+0x10/0x10
[ 2129.954414][   T30]  ? __pfx_wake_page_function+0x10/0x10
[ 2129.960016][   T30]  ? __pfx___might_resched+0x10/0x10
[ 2129.965383][   T30]  ? _raw_spin_unlock+0x28/0x50
[ 2129.970685][   T30]  ? __vma_reservation_common+0x270/0x740
[ 2129.976742][   T30]  __filemap_get_folio+0x6a4/0xaf0
[ 2129.981966][   T30]  ? huge_pte_alloc+0x22e/0x3a0
[ 2129.986903][   T30]  hugetlb_fault+0x16ff/0x2fa0
[ 2129.991729][   T30]  ? __pfx_hugetlb_fault+0x10/0x10
[ 2129.998171][   T30]  ? find_vma+0xc0/0x140
[ 2130.002606][   T30]  ? __pfx_find_vma+0x10/0x10
[ 2130.007349][   T30]  handle_mm_fault+0x930/0xaa0
[ 2130.013277][   T30]  do_user_addr_fault+0x7a3/0x13f0
[ 2130.018471][   T30]  exc_page_fault+0x5c/0xc0
[ 2130.023116][   T30]  asm_exc_page_fault+0x26/0x30
[ 2130.028029][   T30] RIP: 0010:__put_user_8+0x11/0x20
[ 2130.033618][   T30] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90
[ 2130.056367][   T30] RSP: 0018:ffffc90009a37cf8 EFLAGS: 00050202
[ 2130.065185][   T30] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020
[ 2130.076542][   T30] RDX: 0000000000040000 RSI: ffffffff8218c53f RDI: ffffffff8bd19d40
[ 2130.084754][   T30] RBP: ffffc90009a37ed0 R08: 0000000000000000 R09: fffffbfff20be559
[ 2130.092993][   T30] R10: ffffffff905f2acf R11: 0000000000000000 R12: 0000000000800000
[ 2130.101189][   T30] R13: 0000000000000003 R14: 0000000000000000 R15: ffff888028435600
[ 2130.109407][   T30]  ? userfaultfd_ioctl+0x1e8f/0x3830
[ 2130.114814][   T30]  userfaultfd_ioctl+0x1e9b/0x3830
[ 2130.119980][   T30]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 2130.125619][   T30]  ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460
[ 2130.133086][   T30]  ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460
[ 2130.139675][   T30]  ? trace_lock_acquire+0x14a/0x1d0
[ 2130.145623][   T30]  ? selinux_file_ioctl+0x180/0x270
[ 2130.150891][   T30]  ? selinux_file_ioctl+0xb4/0x270
[ 2130.156589][   T30]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 2130.162659][   T30]  ? __x64_sys_ioctl+0x18f/0x220
[ 2130.167673][   T30]  __x64_sys_ioctl+0x18f/0x220
[ 2130.172859][   T30]  do_syscall_64+0xcd/0x250
[ 2130.177903][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2130.188224][   T30] RIP: 0033:0x7f33eb37dff9
[ 2130.193053][   T30] RSP: 002b:00007f33eadde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2130.201535][   T30] RAX: ffffffffffffffda RBX: 00007f33eb536058 RCX: 00007f33eb37dff9
[ 2130.210148][   T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000007
[ 2130.218568][   T30] RBP: 00007f33eb3f0296 R08: 0000000000000000 R09: 0000000000000000
[ 2130.227324][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2130.235971][   T30] R13: 0000000000000000 R14: 00007f33eb536058 R15: 00007fff73f21778
[ 2130.244487][   T30]  </TASK>
[ 2130.389742][   T30] 
[ 2130.389742][   T30] Showing all locks held in the system:
[ 2130.422318][   T30] 1 lock held by khungtaskd/30:
[ 2130.427251][   T30]  #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390
[ 2130.463499][   T30] 4 locks held by kworker/u8:3/52:
[ 2130.468719][   T30]  #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[ 2130.501987][   T30]  #1: ffffc90000bd7d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[ 2130.532178][   T30]  #2: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0
[ 2130.541488][   T30]  #3: ffffffff8e1c3cb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0
[ 2130.571976][   T30] 2 locks held by dhcpcd/4888:
[ 2130.576817][   T30]  #0: ffff888027bd66c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x154/0x970
[ 2130.612395][   T30]  #1: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x18f/0x1f0
[ 2130.621526][   T30] 2 locks held by getty/4979:
[ 2130.628176][   T30]  #0: ffff8880326ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 2130.638191][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480
[ 2130.648762][   T30] 4 locks held by kworker/u8:12/6354:
[ 2130.654279][   T30]  #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[ 2130.664930][   T30]  #1: ffffc90003447d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[ 2130.675110][   T30]  #2: ffffffff8fecb110 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40
[ 2130.684623][   T30]  #3: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x22/0x3d0
[ 2130.693726][   T30] 3 locks held by kworker/1:9/8888:
[ 2130.698977][   T30]  #0: ffff88801b080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[ 2130.709964][   T30]  #1: ffffc9000411fd80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[ 2130.723636][   T30]  #2: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[ 2130.734330][   T30] 3 locks held by kworker/u8:9/11977:
[ 2130.739738][   T30]  #0: ffff8880b863ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[ 2130.750029][   T30]  #1: ffffc90004e9fd80 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[ 2130.762893][   T30]  #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: batadv_nc_purge_paths+0xca/0x390
[ 2130.773051][   T30] 2 locks held by syz.1.1064/14618:
[ 2130.778293][   T30]  #0: ffff88801eb68808 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x13e/0x980
[ 2130.788812][   T30]  #1: ffff8881416ec8d8 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x1b4a/0x3320
[ 2130.799609][   T30] 3 locks held by syz.1.1064/14623:
[ 2130.804986][   T30]  #0: ffff88807e6a0b18 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x35/0x6a0
[ 2130.815260][   T30]  #1: ffff8881416ec8d8 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x307/0x2fa0
[ 2130.827244][   T30]  #2: ffff8880257c8ce8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_vma_lock_read+0x105/0x140
[ 2130.840494][   T30] 1 lock held by syz-executor/15478:
[ 2130.846064][   T30]  #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 2130.858572][   T30] 1 lock held by syz-executor/15508:
[ 2130.864008][   T30]  #0: ffffffff8e1c3cb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0
[ 2130.874307][   T30] 1 lock held by syz-executor/15522:
[ 2130.879642][   T30]  #0: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 2130.889471][   T30] 3 locks held by syz-executor/15704:
[ 2130.894978][   T30]  #0: ffff8880298ecd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90
[ 2130.904783][   T30]  #1: ffff8880298ec078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110
[ 2130.914658][   T30]  #2: ffffffff90148ce8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260
[ 2130.924939][   T30] 3 locks held by kworker/u8:0/15729:
[ 2130.930367][   T30]  #0: ffff88814c299148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[ 2130.945490][   T30]  #1: ffffc900039ffd80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[ 2130.958517][   T30]  #2: ffffffff8fee0aa8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcf/0x14d0
[ 2130.968185][   T30] 2 locks held by syz.4.1205/15762:
[ 2130.973528][   T30]  #0: ffff88805e018d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90
[ 2130.983315][   T30]  #1: ffff88805e018078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110
[ 2130.993251][   T30] 
[ 2131.013249][   T30] =============================================
[ 2131.013249][   T30] 
[ 2131.022489][   T30] NMI backtrace for cpu 1
[ 2131.026881][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0
[ 2131.037446][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2131.047561][   T30] Call Trace:
[ 2131.050881][   T30]  <TASK>
[ 2131.053850][   T30]  dump_stack_lvl+0x116/0x1f0
[ 2131.058586][   T30]  nmi_cpu_backtrace+0x27b/0x390
[ 2131.063562][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2131.070028][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 2131.076061][   T30]  watchdog+0xf0c/0x1240
[ 2131.080336][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2131.085042][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2131.090561][   T30]  ? __kthread_parkme+0x148/0x220
[ 2131.095645][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2131.100366][   T30]  kthread+0x2c1/0x3a0
[ 2131.104490][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2131.109752][   T30]  ? __pfx_kthread+0x10/0x10
[ 2131.114396][   T30]  ret_from_fork+0x45/0x80
[ 2131.118851][   T30]  ? __pfx_kthread+0x10/0x10
[ 2131.123492][   T30]  ret_from_fork_asm+0x1a/0x30
[ 2131.128321][   T30]  </TASK>
[ 2131.132045][   T30] Sending NMI from CPU 1 to CPUs 0:
[ 2131.137404][    C0] NMI backtrace for cpu 0
[ 2131.137434][    C0] CPU: 0 UID: 0 PID: 15508 Comm: syz-executor Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0
[ 2131.137469][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2131.137485][    C0] RIP: 0010:vfree+0x199/0x890
[ 2131.137518][    C0] Code: 4c 89 e7 83 c5 01 e8 b6 73 02 00 31 d2 be 22 0d 00 00 48 c7 c7 e0 b3 7a 8b e8 c3 ab 7c ff 2e 2e 2e 31 c0 48 8b 04 24 0f b6 10 <4c> 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 24 06 00 00 44
[ 2131.137545][    C0] RSP: 0018:ffffc9000399fa50 EFLAGS: 00000246
[ 2131.137567][    C0] RAX: ffffed100f044005 RBX: ffff888078220000 RCX: 0000000000000001
[ 2131.137586][    C0] RDX: 0000000000000000 RSI: ffffffff8b6cd340 RDI: ffff88802c02c670
[ 2131.137604][    C0] RBP: 00000000000001f7 R08: 0000000000000000 R09: ffffed10170c89d8
[ 2131.137622][    C0] R10: ffff8880b8644ec3 R11: 0000000000000000 R12: ffffea0000c49f00
[ 2131.137641][    C0] R13: dffffc0000000000 R14: ffffed100f044004 R15: ffff88807822002c
[ 2131.137660][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 2131.137686][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2131.137714][    C0] CR2: 0000556f521a3a50 CR3: 000000007bf06000 CR4: 00000000003526f0
[ 2131.137732][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2131.137749][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2131.137767][    C0] Call Trace:
[ 2131.137775][    C0]  <NMI>
[ 2131.137785][    C0]  ? nmi_cpu_backtrace+0x1d8/0x390
[ 2131.137817][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 2131.137860][    C0]  ? nmi_handle+0x1a9/0x5c0
[ 2131.137890][    C0]  ? vfree+0x199/0x890
[ 2131.137916][    C0]  ? default_do_nmi+0x6a/0x160
[ 2131.137960][    C0]  ? exc_nmi+0x170/0x1e0
[ 2131.137983][    C0]  ? end_repeat_nmi+0xf/0x53
[ 2131.138023][    C0]  ? vfree+0x199/0x890
[ 2131.138049][    C0]  ? vfree+0x199/0x890
[ 2131.138077][    C0]  ? vfree+0x199/0x890
[ 2131.138103][    C0]  </NMI>
[ 2131.138111][    C0]  <TASK>
[ 2131.138123][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 2131.138156][    C0]  ? __pfx_kcov_close+0x10/0x10
[ 2131.138197][    C0]  kcov_put+0x2a/0x40
[ 2131.138239][    C0]  kcov_close+0xd/0x20
[ 2131.138278][    C0]  __fput+0x3f6/0xb60
[ 2131.138309][    C0]  ? cleanup_mnt+0x266/0x450
[ 2131.138345][    C0]  task_work_run+0x14e/0x250
[ 2131.138371][    C0]  ? __pfx_task_work_run+0x10/0x10
[ 2131.138403][    C0]  do_exit+0xadd/0x2d70
[ 2131.138443][    C0]  ? get_signal+0x8f2/0x2770
[ 2131.138476][    C0]  ? __pfx_do_exit+0x10/0x10
[ 2131.138513][    C0]  ? do_raw_spin_lock+0x12d/0x2c0
[ 2131.138545][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2131.138580][    C0]  do_group_exit+0xd3/0x2a0
[ 2131.138620][    C0]  get_signal+0x25fb/0x2770
[ 2131.138654][    C0]  ? __pfx___schedule+0x10/0x10
[ 2131.138685][    C0]  ? __pfx_get_signal+0x10/0x10
[ 2131.138727][    C0]  arch_do_signal_or_restart+0x90/0x7e0
[ 2131.138765][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 2131.138815][    C0]  syscall_exit_to_user_mode+0x150/0x2a0
[ 2131.138850][    C0]  do_syscall_64+0xda/0x250
[ 2131.138886][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2131.138918][    C0] RIP: 0033:0x7f61d5b7fe8c
[ 2131.138938][    C0] Code: Unable to access opcode bytes at 0x7f61d5b7fe62.
[ 2131.138951][    C0] RSP: 002b:00007ffd2e6e7470 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2131.138976][    C0] RAX: 000000000000002c RBX: 00007f61d6864620 RCX: 00007f61d5b7fe8c
[ 2131.138994][    C0] RDX: 000000000000002c RSI: 00007f61d6864670 RDI: 0000000000000003
[ 2131.139012][    C0] RBP: 0000000000000000 R08: 00007ffd2e6e74c4 R09: 000000000000000c
[ 2131.139029][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 2131.139047][    C0] R13: 0000000000000000 R14: 00007f61d6864670 R15: 0000000000000000
[ 2131.139073][    C0]  </TASK>
[ 2131.532081][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 2131.539099][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0
[ 2131.549667][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2131.559776][   T30] Call Trace:
[ 2131.563123][   T30]  <TASK>
[ 2131.566090][   T30]  dump_stack_lvl+0x3d/0x1f0
[ 2131.570837][   T30]  panic+0x71d/0x800
[ 2131.574816][   T30]  ? __pfx_panic+0x10/0x10
[ 2131.579303][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 2131.584733][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2131.590784][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 2131.596219][   T30]  ? watchdog+0xd76/0x1240
[ 2131.600694][   T30]  ? watchdog+0xd69/0x1240
[ 2131.605173][   T30]  watchdog+0xd87/0x1240
[ 2131.609477][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2131.614203][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2131.619465][   T30]  ? __kthread_parkme+0x148/0x220
[ 2131.624644][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2131.629470][   T30]  kthread+0x2c1/0x3a0
[ 2131.633598][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2131.638836][   T30]  ? __pfx_kthread+0x10/0x10
[ 2131.643471][   T30]  ret_from_fork+0x45/0x80
[ 2131.647919][   T30]  ? __pfx_kthread+0x10/0x10
[ 2131.652548][   T30]  ret_from_fork_asm+0x1a/0x30
[ 2131.657370][   T30]  </TASK>
[ 2131.660680][   T30] Kernel Offset: disabled
[ 2131.665020][   T30] Rebooting in 86400 seconds..