last executing test programs:

7m33.893023765s ago: executing program 32 (id=69):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000121401003318182100000000080003000400000008004b00130000000800030001000000080015000000000008004b00"], 0x38}}, 0x90)

7m25.623208273s ago: executing program 2 (id=101):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x8, &(0x7f00000000c0)={[{@autodefrag}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@autodefrag}, {@space_cache_v2}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0xfecc)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x4020940d, &(0x7f0000000440)={0x4})
r2 = open(&(0x7f0000000040)='./file1\x00', 0x125142, 0x10)
r3 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0xa2)
copy_file_range(r3, 0x0, r2, &(0x7f00000000c0)=0x8010000, 0x400000, 0x0)

7m21.584761395s ago: executing program 2 (id=109):
r0 = socket$inet6(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)

7m21.004093344s ago: executing program 2 (id=111):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
llistxattr(&(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)=""/241, 0xf1)
mkdirat(0xffffffffffffffff, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x7d, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x58c, 0xf4b})
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0)

7m19.089152413s ago: executing program 2 (id=116):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000005d0000005d000000020000009e45d13617ee707f00000000000000000100000007001c000204000004000000020000000000000005000000020000000000001205000000060000000200000f010000000200000037dd00000200000001"], 0x0, 0x7a, 0x0, 0x0, 0x0, 0x10000}, 0x28)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x14008004)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x5})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2)
syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0)
write$snapshot(r5, &(0x7f0000000040)='\a\x00', 0x2)
ioctl$SNAPSHOT_FREE(r5, 0x3305)

7m17.535560187s ago: executing program 2 (id=119):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', <r2=>0x0, 0x0, 0x9, 0x0, 0xfffffffa, 0x4, @private1, @mcast1, 0x8000, 0x701, 0xffff8001, 0x7121}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x20, 0x10, 0x200, 0xfff, {{0x12, 0x4, 0x1, 0x14, 0x48, 0x66, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xfe, [@private=0xa010100]}, @timestamp_addr={0x44, 0x14, 0x7e, 0x1, 0x4, [{@private=0xa010102, 0x14000000}, {@loopback, 0xfbc}]}, @ssrr={0x89, 0xb, 0x5d, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x73, 0x0, 0xd, [0x130]}]}}}}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56a7}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "89"}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x2, &(0x7f00000001c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x76, &(0x7f0000003300)=""/118, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94)

7m10.968311739s ago: executing program 2 (id=143):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB="050000"])
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

6m55.206910512s ago: executing program 33 (id=143):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB="050000"])
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

6m16.550777548s ago: executing program 4 (id=306):
r0 = socket$nl_route(0x10, 0x3, 0x0)
dup(r0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)

6m15.440023126s ago: executing program 4 (id=308):
r0 = syz_open_dev$vim2m(0x0, 0xa57b, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001040)={0x1, @sliced={0x101, [0xe6, 0x254a, 0xa, 0x9, 0x4, 0xb, 0x401, 0xffff, 0x4, 0x8, 0x6, 0x1, 0x2, 0x7, 0xffff, 0x5, 0x7, 0x9, 0x200, 0x5, 0x9d, 0x1, 0x6, 0x7, 0x800, 0x1, 0x6, 0xfffb, 0x7, 0x7fff, 0x3, 0x8, 0x1, 0x4, 0x80, 0x2, 0xa, 0xfffb, 0x8, 0x9, 0x8, 0x5, 0x1, 0x8, 0x5, 0x1, 0x7, 0x2], 0x6}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x50000, 0x18}, 0x18)
unlinkat(r7, 0x0, 0x0)
sendto$inet(r6, &(0x7f0000000000)="7c4b5c5192d7f86c288bbc0e0f3fbd55ad93c27ad06ae7cde71fab5512e7f23751ce611f53fbfb66", 0x28, 0x2000c080, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(0xffffffffffffffff, r8, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
unshare(0x6a040000)

6m14.138187585s ago: executing program 4 (id=311):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
llistxattr(&(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)=""/241, 0xf1)
mkdirat(r0, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x7d, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x58c, 0xf4b})
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0)

6m12.670224728s ago: executing program 4 (id=315):
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unshare(0x20000400)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})

6m10.736488368s ago: executing program 4 (id=320):
socket(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
mq_open(0x0, 0x42, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000200)="717269b29b3533815b27bf55e0b8bbf6", 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendto$inet6(r1, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x3f7, 0x4)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/43, 0x2b}}], 0x1, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000240))
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'pim6reg\x00'})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x200}, "d8"}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054)

6m3.777637096s ago: executing program 4 (id=333):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000440)={r0, 0x58, &(0x7f0000000100)}, 0x10)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3ffe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x19, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
fanotify_init(0x1, 0x2)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
syz_emit_vhci(0x0, 0x4)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0)
open$dir(0x0, 0x700, 0x0)

5m48.473121942s ago: executing program 34 (id=333):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000440)={r0, 0x58, &(0x7f0000000100)}, 0x10)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3ffe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x19, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
fanotify_init(0x1, 0x2)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
syz_emit_vhci(0x0, 0x4)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0)
open$dir(0x0, 0x700, 0x0)

4m38.958746024s ago: executing program 7 (id=549):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff0500140002000000"], 0x6c}}, 0x2008800)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4044810}, 0x0)

4m38.775866917s ago: executing program 7 (id=551):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
listen(r2, 0x1)
shutdown(r2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)

4m37.324021519s ago: executing program 7 (id=555):
socket$kcm(0x29, 0x2, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x80400)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f00000000c0)={0x6, 0x6, 0x4, 0xffffffff, 'syz1\x00', 0x4})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xce)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
bind$ax25(r2, &(0x7f0000000380)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

4m35.203302462s ago: executing program 7 (id=562):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r4=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)

4m30.995845928s ago: executing program 7 (id=582):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
listen(r2, 0x1)
shutdown(r2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)

4m29.789424276s ago: executing program 7 (id=589):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
unshare(0x42000000)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)

4m14.674936529s ago: executing program 35 (id=589):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
unshare(0x42000000)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)

3m28.60994412s ago: executing program 0 (id=777):
r0 = socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000000000000080000006a"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
accept4(r2, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$vsock_stream(0x28, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000041000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

3m27.144078663s ago: executing program 0 (id=782):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet(0x2b, 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
capset(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000040)={0x0, 0x1, 0x6, 0x0, 0xffffffff})
sendmsg$nl_crypto(r3, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
get_mempolicy(0x0, &(0x7f0000000300), 0x400, &(0x7f0000ffb000/0x4000)=nil, 0x3)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x80800, 0x12d)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0)
landlock_restrict_self(r4, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, &(0x7f00000002c0))

3m26.179865388s ago: executing program 0 (id=786):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000080))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)

3m25.015190716s ago: executing program 0 (id=791):
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$9p_unix(&(0x7f0000000440)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x121f408, 0x0)
mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)

3m24.71743399s ago: executing program 0 (id=793):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

3m21.778711486s ago: executing program 0 (id=801):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000000002900000a0000000000000034ff02000000000000100000000000000100000000000000040000000000000000000000000000000000000000000000000000000000000000000000000008000000000000020000000000000000000000000000000000c90000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190)

3m21.601112309s ago: executing program 36 (id=801):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000000002900000a0000000000000034ff02000000000000100000000000000100000000000000040000000000000000000000000000000000000000000000000000000000000000000000000008000000000000020000000000000000000000000000000000c90000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190)

3m7.404619277s ago: executing program 8 (id=841):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)

3m7.300127459s ago: executing program 8 (id=845):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0)
write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b000000", 0x22)

3m7.067469403s ago: executing program 8 (id=847):
io_uring_setup(0x756c, &(0x7f0000000140)={0x0, 0x49fd, 0x2, 0x20000001, 0x185})
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8d}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x80, 0x4)

3m3.516884028s ago: executing program 8 (id=859):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

3m3.443389289s ago: executing program 8 (id=860):
syz_emit_ethernet(0x95, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x5f, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xfc, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a80300378927fc503b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x3}]}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010000104000000004000000000000000", @ANYRES32=0x0, @ANYBLOB="038000000000000004009a64080004003a010000140003006272696467655f736c6176655f31"], 0x40}}, 0x0)
r6 = dup(r1)
write$UHID_INPUT(r6, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18)
getpriority(0x1, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000001a40)}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001b00)=""/88, 0x58}, {&(0x7f0000001b80)=""/68, 0x44}, {&(0x7f0000001c00)=""/124, 0x7c}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)=""/146, 0x92}, {&(0x7f0000001d80)=""/37, 0x25}, {&(0x7f0000001dc0)=""/84, 0x54}], 0x7, &(0x7f0000001ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000002000), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000002080)=""/211, 0xd3}, {&(0x7f00000021c0)=""/151, 0x97}, {&(0x7f0000002280)=""/63, 0x3f}], 0x3}}], 0x3, 0x2001, 0x0)

3m2.263046907s ago: executing program 8 (id=863):
mmap$IORING_OFF_SQ_RING(&(0x7f0000ec4000/0x2000)=nil, 0x2000, 0xa, 0x10, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0)
write$binfmt_script(r4, &(0x7f0000000600), 0xfec8)
recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/27, 0x1b}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000280)={0x0, 0x4})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

3m2.142284359s ago: executing program 37 (id=863):
mmap$IORING_OFF_SQ_RING(&(0x7f0000ec4000/0x2000)=nil, 0x2000, 0xa, 0x10, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0)
write$binfmt_script(r4, &(0x7f0000000600), 0xfec8)
recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/27, 0x1b}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000280)={0x0, 0x4})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

18.15145502s ago: executing program 6 (id=1213):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

17.255725783s ago: executing program 6 (id=1218):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_notify(r2, 0x0)
listen(r1, 0x4)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0)

16.228421289s ago: executing program 6 (id=1221):
socket$packet(0x11, 0x3, 0x300)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b)
write(r1, 0x0, 0x0)

11.056222349s ago: executing program 6 (id=1233):
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0)
pwritev2(r0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000001c0)="de8a", 0x2}], 0x2, 0x6, 0x5, 0x11)

10.839104023s ago: executing program 6 (id=1238):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x1, 0x7}}}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(r1, &(0x7f0000000080)='net/ip_mr_cache\x00')
ioctl$TCGETS2(r4, 0x802c542a, &(0x7f00000001c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(0xffffffffffffffff, 0x1, 0x0)
openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086)

10.740579774s ago: executing program 1 (id=1240):
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000001040)={0x1, @sliced={0x101, [0xe6, 0x254a, 0xa, 0x9, 0x4, 0xb, 0x401, 0xffff, 0x4, 0x8, 0x6, 0x1, 0x2, 0x7, 0xffff, 0x5, 0x7, 0x9, 0x200, 0x5, 0x9d, 0x1, 0x6, 0x7, 0x800, 0x1, 0x6, 0xfffb, 0x7, 0x7fff, 0x3, 0x8, 0x1, 0x4, 0x80, 0x2, 0xa, 0xfffb, 0x8, 0x9, 0x8, 0x5, 0x1, 0x8, 0x5, 0x1, 0x7, 0x2], 0x6}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="7c4b5c5192d7f86c288bbc0e0f3fbd55ad93c27ad06ae7cde71fab5512e7f23751ce611f53fbfb66a39edc70a0314159b85e6e7509de602862f22abae25177ce", 0x40, 0x2000c080, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0xfff, "711cf65998d09ba01233c4601b021d06f376bcdc75d21971706498fad99a57b9"})

9.459661764s ago: executing program 9 (id=1241):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast2, 0x800}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000000000001"], 0x18}, 0x40c0)

9.391435285s ago: executing program 5 (id=1242):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r3, 0x29, 0xce, 0x0, 0x0)

9.242326487s ago: executing program 6 (id=1243):
r0 = syz_open_dev$vim2m(0x0, 0xa57b, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001040)={0x1, @sliced={0x101, [0xe6, 0x254a, 0xa, 0x9, 0x4, 0xb, 0x401, 0xffff, 0x4, 0x8, 0x6, 0x1, 0x2, 0x7, 0xffff, 0x5, 0x7, 0x9, 0x200, 0x5, 0x9d, 0x1, 0x6, 0x7, 0x800, 0x1, 0x6, 0xfffb, 0x7, 0x7fff, 0x3, 0x8, 0x1, 0x4, 0x80, 0x2, 0xa, 0xfffb, 0x8, 0x9, 0x8, 0x5, 0x1, 0x8, 0x5, 0x1, 0x7, 0x2], 0x6}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x50000, 0x18}, 0x18)
unlinkat(r6, 0x0, 0x0)
sendto$inet(r5, &(0x7f0000000000)="7c4b5c5192d7f86c288bbc0e0f3fbd55ad93c27ad06ae7cde71fab5512e7f23751ce611f53fbfb66", 0x28, 0x2000c080, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(0xffffffffffffffff, r7, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
unshare(0x6a040000)

8.456454499s ago: executing program 9 (id=1244):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_notify(r2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0)

8.300780201s ago: executing program 1 (id=1245):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$amidi(&(0x7f0000000180), 0xc752, 0x20000)
read$midi(r4, &(0x7f0000019200)=""/77, 0x4d)
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00')
pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)

8.138921454s ago: executing program 9 (id=1246):
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x4}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x20000000ec071, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r1, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000000900), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

7.289855718s ago: executing program 1 (id=1247):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc2}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "6198"}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000040), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x1})
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000020c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe}, 0x9, 0x5, 0x2, 0x1, 0x0, 0x0, 0x3ff})
socket(0x2, 0x3, 0x5)
r3 = syz_open_procfs(0x0, &(0x7f0000000380)='wchan\x00')
read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020)

7.232877088s ago: executing program 9 (id=1248):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x10000c00)

7.232154198s ago: executing program 3 (id=1249):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x9d, 0xa8, 0x6f, 0x10, 0x22b7, 0x150d, 0xf195, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x90, 0x6, [{{0x9, 0x4, 0x1, 0x81, 0x0, 0x93, 0xb, 0xde, 0x3}}]}}]}}, 0x0)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

6.819594685s ago: executing program 1 (id=1250):
mmap$IORING_OFF_SQ_RING(&(0x7f0000ec4000/0x2000)=nil, 0x2000, 0xa, 0x10, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000600), 0xfec8)
recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x5, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

6.4988671s ago: executing program 5 (id=1251):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x1)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
read$midi(0xffffffffffffffff, &(0x7f0000019200)=""/77, 0x4d)
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0)

6.443680421s ago: executing program 3 (id=1252):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x3501, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400000000000077, 0x7600)

4.590508619s ago: executing program 1 (id=1253):
socket$kcm(0x10, 0x2, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00')
syz_emit_ethernet(0x8d, &(0x7f0000000580)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x2, 0x0, 0x0, 0x1000, {[@md5sig={0x13, 0x12, "2313a3101166d6c856214c013c019043"}]}}, {"28003e64a9d240e0f4403499a02ed7825eac4510f0a31d3d4ed9d44b953f498d3fac0a1c99d50000ac90218b6a4cabaa0a229a52ad886d7a623692c15df8ba0c49984c"}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0)

4.589937759s ago: executing program 5 (id=1254):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, &(0x7f0000000080))
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x228, 0x240, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21, 0x0, 0xfd}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x12, "d551"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x0, 0xfffffffffffffffe}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0xfffffffe, @mcast1, 0x80000000}, 0x1c, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000390d000000000000480000000000000029000000390000003a0601010000000020010000000000000000000000000000fe8000000000000000000000000000aafc02000000000000000000"], 0x10e0}}], 0x2, 0x0)
getpeername$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080))
socket$packet(0x11, 0x2, 0x300)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040), 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde44"], 0x14}], 0x1}, 0x0)
syz_io_uring_setup(0x6b4d, 0x0, &(0x7f0000000400), &(0x7f0000000280))

4.589360229s ago: executing program 3 (id=1255):
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000001040)={0x1, @sliced={0x101, [0xe6, 0x254a, 0xa, 0x9, 0x4, 0xb, 0x401, 0xffff, 0x4, 0x8, 0x6, 0x1, 0x2, 0x7, 0xffff, 0x5, 0x7, 0x9, 0x200, 0x5, 0x9d, 0x1, 0x6, 0x7, 0x800, 0x1, 0x6, 0xfffb, 0x7, 0x7fff, 0x3, 0x8, 0x1, 0x4, 0x80, 0x2, 0xa, 0xfffb, 0x8, 0x9, 0x8, 0x5, 0x1, 0x8, 0x5, 0x1, 0x7, 0x2], 0x6}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="7c4b5c5192d7f86c288bbc0e0f3fbd55ad93c27ad06ae7cde71fab5512e7f23751ce611f53fbfb66a39edc70a0314159b85e6e7509de602862f22abae25177ce", 0x40, 0x2000c080, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0xfff, "711cf65998d09ba01233c4601b021d06f376bcdc75d21971706498fad99a57b9"})

2.124260137s ago: executing program 5 (id=1256):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_notify(r2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0)

2.002606829s ago: executing program 3 (id=1257):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$amidi(&(0x7f0000000180), 0xc752, 0x20000)
read$midi(r4, &(0x7f0000019200)=""/77, 0x4d)
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00')
pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)

1.96646075s ago: executing program 5 (id=1258):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

1.747606863s ago: executing program 9 (id=1259):
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca\xae\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce*\xa4\x8aJ$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\xfe\x1e\xb6\xf47u\xa7\x1c\xf5\"K\f\x03i\xba', 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000000c0)="ec", 0x1})
syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000})

1.062963354s ago: executing program 1 (id=1260):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc2}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "6198"}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000040), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x1})
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000020c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe}, 0x9, 0x5, 0x2, 0x1, 0x0, 0x0, 0x3ff})
socket(0x2, 0x3, 0x5)
r3 = syz_open_procfs(0x0, &(0x7f0000000380)='wchan\x00')
read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020)

929.752086ms ago: executing program 3 (id=1261):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
r1 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0x20000, 0x0, 0x803, 0x257}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)

867.718997ms ago: executing program 5 (id=1262):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r3, 0x29, 0xce, 0x0, 0x0)

496.36µs ago: executing program 9 (id=1263):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x6)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000000c0)=@rose={'rose', 0x0}, 0x10)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=1264):
mmap$IORING_OFF_SQ_RING(&(0x7f0000ec4000/0x2000)=nil, 0x2000, 0xa, 0x10, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000600), 0xfec8)
recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x5, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

kernel console output (not intermixed with test programs):

ort 6081 - 0
[   46.629046][ T4043] device veth1_macvtap entered promiscuous mode
[   46.644588][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.649096][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.653089][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.659314][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   46.662213][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   46.665054][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   46.694086][ T4035] device veth1_vlan entered promiscuous mode
[   46.697745][ T4038] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.700164][ T4038] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.702678][ T4038] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.705128][ T4038] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.722458][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   46.725469][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   46.730191][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   46.798685][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   46.801515][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   46.804390][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   46.808522][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   46.811400][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   46.819782][ T4034] device veth0_vlan entered promiscuous mode
[   46.823970][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.828300][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.831348][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.834473][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.839716][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.855984][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   46.858911][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.862841][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   46.867499][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   46.886710][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.889736][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.892509][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.895304][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.900869][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.902956][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   46.905724][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   46.912510][ T4035] device veth0_macvtap entered promiscuous mode
[   46.919980][ T4034] device veth1_vlan entered promiscuous mode
[   46.949371][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.956677][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.959840][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   46.963040][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   46.965712][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   46.975192][ T4043] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.979897][ T4043] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.982425][ T4043] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.984733][ T4043] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.999399][ T4035] device veth1_macvtap entered promiscuous mode
[   47.015632][ T1718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.019435][ T1718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.044492][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   47.048014][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   47.050633][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   47.060578][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.063565][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.070301][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.073270][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.076936][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.079799][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.084403][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.105325][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   47.110067][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   47.127590][  T570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.130770][  T570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.152432][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.155267][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.158505][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.161844][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.164939][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.170449][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.174321][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.179054][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   47.181798][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   47.184745][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   47.188949][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   47.193148][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   47.202989][ T4034] device veth0_macvtap entered promiscuous mode
[   47.238818][ T4035] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.241258][ T4035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.243531][ T4035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.263564][ T4035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.275609][ T4145] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   47.295089][ T4034] device veth1_macvtap entered promiscuous mode
[   47.303336][  T570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.320820][  T570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.342333][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   47.349702][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   47.352425][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   47.377254][ T1614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.379513][ T1614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.402399][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.406310][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.409103][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.411956][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.414555][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.418945][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.421580][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.424386][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.434223][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.442071][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   47.444989][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   47.450128][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   47.548951][ T4149] netlink: 'syz.3.4': attribute type 4 has an invalid length.
[   47.551173][ T4149] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4'.
[   47.607591][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.610513][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.613208][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.644969][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.652228][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.655070][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.660668][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.663684][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.685582][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.730491][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   47.742062][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   48.414853][   T25] Bluetooth: hci4: command 0x040f tx timeout
[   48.422516][   T25] Bluetooth: hci0: command 0x040f tx timeout
[   48.424413][   T25] Bluetooth: hci1: command 0x040f tx timeout
[   48.430001][   T25] Bluetooth: hci2: command 0x040f tx timeout
[   48.436078][   T25] Bluetooth: hci3: command 0x040f tx timeout
[   49.332516][   T26] audit: type=1326 audit(49.300:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4153 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7476c28 code=0x7ffc0000
[   49.344702][ T4156] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8' sets config #1
[   49.360462][ T4034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.365030][   T26] audit: type=1326 audit(49.300:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4153 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7476c28 code=0x7ffc0000
[   49.369266][ T4034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.386128][ T4034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.388615][ T4034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.394084][   T26] audit: type=1326 audit(49.310:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4153 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa7476c28 code=0x7ffc0000
[   49.402936][  T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.410061][  T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.415206][   T26] audit: type=1326 audit(49.310:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4153 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7476c28 code=0x7ffc0000
[   49.418011][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   49.440430][   T26] audit: type=1326 audit(49.310:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4153 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7476c28 code=0x7ffc0000
[   49.447452][   T26] audit: type=1326 audit(49.310:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4153 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa7476c28 code=0x7ffc0000
[   49.453596][   T26] audit: type=1326 audit(49.310:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4153 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7476c28 code=0x7ffc0000
[   49.459941][   T26] audit: type=1326 audit(49.310:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4153 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7476c28 code=0x7ffc0000
[   49.466276][   T26] audit: type=1326 audit(49.310:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4153 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7476c28 code=0x7ffc0000
[   49.555310][   T26] audit: type=1326 audit(49.310:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4153 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7476c28 code=0x7ffc0000
[   49.666084][  T570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.668302][  T570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.692762][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   50.428418][ T4103] Bluetooth: hci0: command 0x0419 tx timeout
[   50.430592][ T4103] Bluetooth: hci4: command 0x0419 tx timeout
[   50.432911][ T4163] fuse: root generation should be zero
[   50.473441][ T1614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.499607][ T1614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.507381][ T4089] Bluetooth: hci3: command 0x0419 tx timeout
[   50.509146][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   50.510215][ T4089] Bluetooth: hci2: command 0x0419 tx timeout
[   50.513943][ T4089] Bluetooth: hci1: command 0x0419 tx timeout
[   50.762146][ T1614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.764489][ T1614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.771595][  T570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.775210][  T570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.779004][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   50.783074][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   51.800032][ T4174] device syzkaller0 entered promiscuous mode
[   51.925328][ T4191] loop0: detected capacity change from 0 to 64
[   54.008799][ T4208] cgroup: Unknown subsys name 'defcontext'
[   54.306124][ T4207] Restarting kernel threads ... done.
[   54.525789][    C1] sched: RT throttling activated
[   55.981921][ T4225] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET)
[   59.428214][ T4244] device netdevsim0 entered promiscuous mode
[   61.207958][ T4265] netlink: 'syz.4.30': attribute type 10 has an invalid length.
[   61.210660][ T4265] device hsr0 entered promiscuous mode
[   61.281260][ T4265] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   61.301077][ T4254] loop3: detected capacity change from 0 to 4096
[   61.307614][ T4265] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   61.310712][ T4265] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   61.314217][ T4265] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   62.119833][ T4254] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   62.142621][ T4275] loop2: detected capacity change from 0 to 256
[   62.205580][ T4254] ntfs3: loop3: Failed to load $Extend.
[   62.229799][ T4275] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   62.319921][ T4246] loop0: detected capacity change from 0 to 32768
[   62.360929][ T4246] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.24 (4246)
[   62.451102][ T4246] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   62.453953][ T4246] BTRFS info (device loop0): force zlib compression, level 3
[   62.484083][ T4246] BTRFS info (device loop0): force clearing of disk cache
[   62.487005][ T4246] BTRFS info (device loop0): setting nodatasum
[   62.488776][ T4246] BTRFS info (device loop0): doing ref verification
[   62.491495][ T4246] BTRFS info (device loop0): allowing degraded mounts
[   62.493341][ T4246] BTRFS info (device loop0): enabling disk space caching
[   62.495369][ T4246] BTRFS info (device loop0): disk space caching is enabled
[   62.523367][ T4246] BTRFS info (device loop0): has skinny extents
[   62.627919][ T4281] loop2: detected capacity change from 0 to 2048
[   62.687636][ T4281] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   62.722735][ T4249] loop1: detected capacity change from 0 to 32768
[   62.737927][ T4281] NILFS (loop2): mounting unchecked fs
[   62.771253][ T4277] loop4: detected capacity change from 0 to 32768
[   62.849339][ T4246] BTRFS error (device loop0): open_ctree failed: -12
[   62.860434][ T4281] NILFS (loop2): recovery complete
[   62.880828][ T4308] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   62.938536][ T4277] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.32 (4277)
[   62.975976][ T4277] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[   62.978507][ T4277] BTRFS info (device loop4): enabling auto defrag
[   62.980525][ T4277] BTRFS info (device loop4): doing ref verification
[   62.986535][ T4277] BTRFS info (device loop4): max_inline at 0
[   62.988285][ T4277] BTRFS info (device loop4): force clearing of disk cache
[   62.990279][ T4277] BTRFS info (device loop4): turning on sync discard
[   62.992252][ T4277] BTRFS info (device loop4): using free space tree
[   63.015990][ T4277] BTRFS info (device loop4): has skinny extents
[   63.145188][ T4028] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by udevd (4028)
[   63.425432][ T4277] BTRFS info (device loop4): enabling ssd optimizations
[   63.447291][ T4277] BTRFS info (device loop4): clearing free space tree
[   63.449639][ T4277] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   63.452549][ T4277] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   63.614598][ T4277] BTRFS info (device loop4): creating free space tree
[   63.625234][ T4277] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   63.642960][ T4277] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   63.991886][ T4310] loop3: detected capacity change from 0 to 40427
[   64.044599][ T4310] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x1ffff
[   64.108650][ T4307] loop1: detected capacity change from 0 to 32768
[   64.194280][ T4307] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.36 (4307)
[   64.311642][ T4307] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[   64.314389][ T4307] BTRFS info (device loop1): setting nodatacow, compression disabled
[   64.325985][ T4307] BTRFS info (device loop1): max_inline at 0
[   64.327912][ T4307] BTRFS info (device loop1): enabling disk space caching
[   64.329938][ T4307] BTRFS info (device loop1): turning off barriers
[   64.331749][ T4307] BTRFS info (device loop1): turning on flush-on-commit
[   64.365907][ T4307] BTRFS info (device loop1): doing ref verification
[   64.367793][ T4307] BTRFS info (device loop1): force clearing of disk cache
[   64.369899][ T4307] BTRFS info (device loop1): enabling ssd optimizations
[   64.395502][ T4307] BTRFS info (device loop1): max_inline at 4096
[   64.406912][ T4307] BTRFS info (device loop1): disk space caching is enabled
[   64.409029][ T4307] BTRFS info (device loop1): has skinny extents
[   64.717249][ T4360] udc-core: couldn't find an available UDC or it's busy
[   64.725534][ T4360] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   64.933619][ T4370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.43'.
[   65.618535][ T4307] BTRFS info (device loop1): clearing free space tree
[   65.622075][ T4307] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   65.636247][ T4307] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   66.051153][ T4385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'.
[   68.165522][ T4415] loop3: detected capacity change from 0 to 1024
[   68.294351][ T4414] loop2: detected capacity change from 0 to 4096
[   68.375016][ T4415] =======================================================
[   68.375016][ T4415] WARNING: The mand mount option has been deprecated and
[   68.375016][ T4415]          and is ignored by this kernel. Remove the mand
[   68.375016][ T4415]          option from the mount to silence this warning.
[   68.375016][ T4415] =======================================================
[   68.450140][ T4422] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.590529][ T4038] hfsplus: bad catalog entry type
[   69.470366][ T4394] loop0: detected capacity change from 0 to 40427
[   69.481142][ T4430] netlink: 32 bytes leftover after parsing attributes in process `syz.1.58'.
[   69.629316][ T2056] ieee802154 phy0 wpan0: encryption failed: -22
[   69.632848][ T2056] ieee802154 phy1 wpan1: encryption failed: -22
[   70.391041][ T4440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.64'.
[   70.393958][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'.
[   70.463424][ T4236] hfsplus: b-tree write err: -5, ino 4
[   72.544824][ T4472] udc-core: couldn't find an available UDC or it's busy
[   72.547020][ T4472] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   73.013877][ T4459] chnl_net:caif_netlink_parms(): no params data found
[   73.289060][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.303000][ T4459] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.316752][ T4459] device bridge_slave_0 entered promiscuous mode
[   73.358803][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.377511][ T4459] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.396187][ T4081] Bluetooth: hci2: command 0x0409 tx timeout
[   73.398393][ T4459] device bridge_slave_1 entered promiscuous mode
[   74.614903][ T4459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.670005][ T4459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.749643][ T1533] cfg80211: failed to load regulatory.db
[   74.821766][ T4459] team0: Port device team_slave_0 added
[   74.872561][ T4459] team0: Port device team_slave_1 added
[   75.032955][ T4459] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.035192][ T4459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.078489][ T4459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.119184][ T4459] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.121238][ T4459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.226935][ T4459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.995760][ T4081] Bluetooth: hci2: command 0x041b tx timeout
[   76.268775][ T4459] device hsr_slave_0 entered promiscuous mode
[   77.047072][ T4459] device hsr_slave_1 entered promiscuous mode
[   77.050073][ T4526] loop2: detected capacity change from 0 to 1024
[   77.096863][ T4459] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.101978][ T4459] Cannot create hsr debugfs directory
[   77.643477][ T4459] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   77.688056][ T4459] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   77.723692][ T4459] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   77.760000][ T4459] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   77.846741][ T4541] netlink: 'syz.2.97': attribute type 4 has an invalid length.
[   77.849198][ T4541] netlink: 17 bytes leftover after parsing attributes in process `syz.2.97'.
[   78.026127][ T4342] Bluetooth: hci2: command 0x040f tx timeout
[   79.043718][ T4459] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.145738][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   79.153745][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.178324][ T4459] 8021q: adding VLAN 0 to HW filter on device team0
[   79.946334][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.949994][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.960857][ T4236] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.962929][ T4236] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.988157][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   79.999293][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.046002][ T4236] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.047974][ T4236] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.050458][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.053519][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.066798][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.100713][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.106970][ T4340] Bluetooth: hci2: command 0x0419 tx timeout
[   80.118303][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.146902][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   80.157835][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.160999][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.177224][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   80.196706][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.203506][ T4459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.216676][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   80.221322][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   80.224227][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.319052][ T1533] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   80.541154][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.237592][ T1533] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   81.240470][ T1533] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   81.244103][ T1533] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   81.422533][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.425082][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.466029][ T4459] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.864530][ T4555] loop2: detected capacity change from 0 to 32768
[   81.895760][ T4555] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.101 (4555)
[   81.972925][ T4555] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[   81.991130][ T4555] BTRFS info (device loop2): enabling auto defrag
[   82.008986][ T1533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.017375][ T4555] BTRFS info (device loop2): doing ref verification
[   82.019187][ T4555] BTRFS info (device loop2): max_inline at 0
[   82.033886][ T4555] BTRFS info (device loop2): force clearing of disk cache
[   82.036175][ T4555] BTRFS info (device loop2): turning on sync discard
[   82.038145][ T4555] BTRFS info (device loop2): using free space tree
[   82.039956][ T4555] BTRFS info (device loop2): has skinny extents
[   82.237861][ T1533] usb 1-1: usb_control_msg returned -71
[   82.239592][ T1533] usbtmc 1-1:16.0: can't read capabilities
[   82.245640][ T4555] BTRFS error (device loop2): open_ctree failed: -12
[   82.429975][ T1533] usb 1-1: USB disconnect, device number 2
[   83.385537][ T4182] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.620063][ T4182] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.740676][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.743759][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.760605][ T4182] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.578930][ T4182] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.662688][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.666894][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.671197][ T4459] device veth0_vlan entered promiscuous mode
[   86.358927][ T4642] Restarting kernel threads ... done.
[   87.076329][ T4633] netlink: 'syz.0.114': attribute type 10 has an invalid length.
[   87.082861][ T4633] device hsr0 entered promiscuous mode
[   87.163314][ T4633] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   87.178800][ T4633] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   87.183278][ T4633] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   87.213707][ T4633] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   87.391921][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   87.394661][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   87.412455][ T4459] device veth1_vlan entered promiscuous mode
[   87.671122][ T4459] device veth0_macvtap entered promiscuous mode
[   87.677168][ T4459] device veth1_macvtap entered promiscuous mode
[   87.683058][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.690371][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.697553][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   88.288006][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.291045][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.293865][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.341149][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.344018][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.385115][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.407494][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.420822][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.423570][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.513468][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.521644][ T4459] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.549212][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   88.553188][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.592216][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.622935][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.628347][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.631162][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.634205][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.715676][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.730553][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.733412][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.786433][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.806525][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.844527][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.866010][ T4459] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.900821][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   88.910401][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   89.099183][ T4459] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.101714][ T4459] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.104122][ T4459] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.115006][ T4459] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.331453][ T4553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.348482][ T4553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.362054][ T4197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.384158][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.394037][ T4197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.607534][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   90.963973][ T4690] Restarting kernel threads ... done.
[   91.215283][ T4705] loop2: detected capacity change from 0 to 7
[   92.038861][ T4705]  loop2:
[   92.039910][ T4705] loop2: partition table partially beyond EOD, truncated
[   93.360235][ T4728] netlink: 276 bytes leftover after parsing attributes in process `syz.0.139'.
[   93.649963][ T4735] Restarting kernel threads ... done.
[   93.958505][ T4732] device veth0_to_bridge entered promiscuous mode
[   93.969418][ T4729] device veth0_to_bridge left promiscuous mode
[   94.020203][   T26] kauditd_printk_skb: 9 callbacks suppressed
[   94.020214][   T26] audit: type=1326 audit(1467.985:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb51c28 code=0x7ffc0000
[   94.076911][   T26] audit: type=1326 audit(1468.045:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb51c28 code=0x7ffc0000
[   95.536608][ T4772] CUSE: unknown device info "ÿ
"
[   95.538115][ T4772] CUSE: unknown device info "@"
[   95.539482][ T4772] CUSE: unknown device info "€"
[   95.540850][ T4772] CUSE: DEVNAME unspecified
[   95.718778][ T4779] Restarting kernel threads ... done.
[   98.915183][ T4805] Zero length message leads to an empty skb
[  100.399034][ T4829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  105.203453][ T1533] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  105.546374][ T1533] usb 1-1: Using ep0 maxpacket: 8
[  105.769388][ T1533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  105.780135][ T1533] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  105.837756][ T1533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.082538][ T1533] usb 1-1: config 0 descriptor??
[  106.212166][ T4182] device hsr_slave_0 left promiscuous mode
[  106.246061][ T4182] device hsr_slave_1 left promiscuous mode
[  106.341412][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.343608][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.348662][ T1533] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  106.513731][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.516033][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.523071][ T4182] device bridge_slave_1 left promiscuous mode
[  106.526153][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.298382][ T4182] device bridge_slave_0 left promiscuous mode
[  107.300163][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.436540][ T4182] device veth1_macvtap left promiscuous mode
[  107.439396][ T4182] device veth0_macvtap left promiscuous mode
[  107.441256][ T4182] device veth1_vlan left promiscuous mode
[  107.443129][ T4182] device veth0_vlan left promiscuous mode
[  107.589630][ T4342] usb 1-1: USB disconnect, device number 3
[  108.637926][ T4182] team0 (unregistering): Port device team_slave_1 removed
[  108.648891][ T4182] team0 (unregistering): Port device team_slave_0 removed
[  108.683524][ T4182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.726625][ T4182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  109.853613][ T4182] bond0 (unregistering): Released all slaves
[  111.857495][ T4103] Bluetooth: hci5: command 0x0409 tx timeout
[  112.206159][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  112.988565][   T26] audit: type=1326 audit(1944.954:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c78fc28 code=0x7ffc0000
[  113.012614][   T26] audit: type=1326 audit(1944.974:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c78fc28 code=0x7ffc0000
[  113.159404][   T26] audit: type=1326 audit(1945.064:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c78fc28 code=0x7ffc0000
[  113.533052][   T26] audit: type=1326 audit(1945.064:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c78fc28 code=0x7ffc0000
[  113.582974][   T26] audit: type=1326 audit(1945.114:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c78fc28 code=0x7ffc0000
[  113.646205][   T26] audit: type=1326 audit(1945.114:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c78fc28 code=0x7ffc0000
[  113.853141][   T26] audit: type=1326 audit(1945.114:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=291 compat=0 ip=0xffff8c78fc28 code=0x7ffc0000
[  113.886019][   T26] audit: type=1326 audit(1945.114:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c78fc28 code=0x7ffc0000
[  114.161235][ T4103] Bluetooth: hci5: command 0x041b tx timeout
[  115.882455][ T4910] chnl_net:caif_netlink_parms(): no params data found
[  115.896472][   T26] audit: type=1326 audit(1945.114:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c78fc28 code=0x7ffc0000
[  116.185996][ T4103] Bluetooth: hci5: command 0x040f tx timeout
[  118.044032][ T4910] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.052325][ T4910] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.065466][ T4910] device bridge_slave_0 entered promiscuous mode
[  118.113922][ T4910] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.139342][ T4910] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.171494][ T4910] device bridge_slave_1 entered promiscuous mode
[  118.266540][ T4082] Bluetooth: hci5: command 0x0419 tx timeout
[  118.276795][ T4910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.292673][ T4910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.332922][ T4910] team0: Port device team_slave_0 added
[  118.336954][ T4910] team0: Port device team_slave_1 added
[  119.687448][ T4910] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.710511][ T4910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.761222][ T4910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.781568][ T4910] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.783509][ T4910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.827078][ T4910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.534650][   T26] audit: type=1326 audit(1953.494:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.5.223" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff854ebc28 code=0x7ffc0000
[  121.545751][   T26] audit: type=1326 audit(1953.514:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.5.223" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff854ebc28 code=0x7ffc0000
[  121.693766][ T4910] device hsr_slave_0 entered promiscuous mode
[  121.877247][ T4910] device hsr_slave_1 entered promiscuous mode
[  124.201922][ T4082] Bluetooth: hci5: command 0x0405 tx timeout
[  124.290607][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.293804][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.217755][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.274135][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.802297][ T5069] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.805162][ T5069] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.809602][ T5069] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.812177][ T5069] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.580386][ T4081] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  129.512986][ T4081] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  129.521133][ T4910] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  129.618977][ T4910] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  129.658964][ T4910] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  129.702428][ T4910] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  130.766070][ T4910] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.875462][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  130.878500][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  130.913932][ T4910] 8021q: adding VLAN 0 to HW filter on device team0
[  130.960253][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  130.971214][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  130.974007][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.976007][ T4260] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.020078][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  131.026679][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  131.067785][ T2056] ieee802154 phy0 wpan0: encryption failed: -22
[  131.069598][ T2056] ieee802154 phy1 wpan1: encryption failed: -22
[  131.091084][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.093109][ T4260] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.951147][ T5175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'.
[  132.064803][ T4182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.103691][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  132.107878][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  132.124169][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  132.251286][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  132.271842][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  132.319009][ T4182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.334354][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  132.353214][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  132.360140][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  132.373378][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  132.383579][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  132.393570][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  132.402557][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  132.497741][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  132.545317][ T4182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.639065][ T4182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.748519][ T5203] udc-core: couldn't find an available UDC or it's busy
[  132.767341][ T5203] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  132.956911][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  132.959288][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  133.383911][ T4910] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.996215][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  134.999323][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  135.684164][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  135.689567][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  135.692801][ T4910] device veth0_vlan entered promiscuous mode
[  135.916823][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  135.919575][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  135.925070][ T4910] device veth1_vlan entered promiscuous mode
[  136.322084][ T4910] device veth0_macvtap entered promiscuous mode
[  136.341499][ T4217] wlan1: Trigger new scan to find an IBSS to join
[  136.386237][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  136.389221][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  136.393495][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  136.823952][ T5267] ip6t_rpfilter: unknown options
[  136.865258][ T4910] device veth1_macvtap entered promiscuous mode
[  136.868946][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  137.553415][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.626313][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.646619][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.836563][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.839421][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.065687][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.068740][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.071569][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.075711][ T4910] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.080119][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.083149][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.486557][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.516566][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.519448][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.522481][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.525296][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.588051][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.640976][ T4910] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.650186][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  138.656703][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  138.664189][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  138.677899][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  140.061978][ T4910] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.064454][ T4910] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.068484][ T4910] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.070874][ T4910] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.308573][ T4240] wlan1: Trigger new scan to find an IBSS to join
[  141.310704][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.312951][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.076642][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  142.153511][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.161183][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.331166][  T148] wlan1: Creating new IBSS network, BSSID 4e:8a:8b:99:e3:a2
[  142.373021][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  143.640689][ T4182] device hsr_slave_0 left promiscuous mode
[  144.586228][ T4182] device hsr_slave_1 left promiscuous mode
[  144.889731][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.895341][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.582414][ T5375] Restarting kernel threads ... done.
[  145.623511][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.626227][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.640053][ T4182] device bridge_slave_1 left promiscuous mode
[  145.649335][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.921175][ T4182] device bridge_slave_0 left promiscuous mode
[  145.923059][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.141419][   T26] audit: type=1326 audit(2208.107:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.6.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ac47c28 code=0x7ffc0000
[  147.155801][ T5385] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.302' sets config #1
[  147.170918][   T26] audit: type=1326 audit(2208.107:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.6.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ac47c28 code=0x7ffc0000
[  147.196689][ T4182] device veth1_macvtap left promiscuous mode
[  147.199392][ T4182] device veth0_macvtap left promiscuous mode
[  147.216196][ T4182] device veth1_vlan left promiscuous mode
[  147.217977][ T4182] device veth0_vlan left promiscuous mode
[  147.265849][   T26] audit: type=1326 audit(2208.117:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.6.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ac47c28 code=0x7ffc0000
[  147.280209][   T26] audit: type=1326 audit(2208.117:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.6.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ac47c28 code=0x7ffc0000
[  147.322100][   T26] audit: type=1326 audit(2208.117:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.6.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ac47c28 code=0x7ffc0000
[  147.355677][   T26] audit: type=1326 audit(2208.117:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.6.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8ac47c28 code=0x7ffc0000
[  147.410087][   T26] audit: type=1326 audit(2208.117:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.6.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ac47c28 code=0x7ffc0000
[  147.456800][   T26] audit: type=1326 audit(2208.117:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.6.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ac47c28 code=0x7ffc0000
[  147.500675][   T26] audit: type=1326 audit(2208.117:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.6.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ac47c28 code=0x7ffc0000
[  147.543048][   T26] audit: type=1326 audit(2208.117:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.6.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ac47c28 code=0x7ffc0000
[  148.065434][ T5393] netlink: 40 bytes leftover after parsing attributes in process `syz.0.305'.
[  148.177208][ T4182] team0 (unregistering): Port device team_slave_1 removed
[  148.194730][ T4182] team0 (unregistering): Port device team_slave_0 removed
[  148.213434][ T4182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.413702][ T5399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.306'.
[  149.224994][ T4182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.233952][ T4182] bond0 (unregistering): Released all slaves
[  152.986885][ T5437] Restarting kernel threads ... done.
[  153.697469][ T5435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.317'.
[  160.648671][ T5510] Restarting kernel threads ... done.
[  167.094748][ T5597] Restarting kernel threads ... done.
[  170.227998][ T4342] Bluetooth: hci1: command 0x0406 tx timeout
[  170.229788][ T4342] Bluetooth: hci0: command 0x0406 tx timeout
[  170.231620][ T4342] Bluetooth: hci4: command 0x0406 tx timeout
[  170.786499][ T5646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'.
[  171.688244][ T5658] overlayfs: failed to resolve './file2': -2
[  172.407546][ T4517] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  172.693724][ T5664] Restarting kernel threads ... done.
[  177.053277][ T5698] loop2: detected capacity change from 0 to 7
[  177.128147][ T5698] Dev loop2: unable to read RDB block 7
[  177.129885][ T5698]  loop2: unable to read partition table
[  177.131612][ T5698] loop2: partition table beyond EOD, truncated
[  177.143793][ T5698] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  178.697508][ T5711] overlayfs: failed to resolve './file2': -2
[  179.047347][ T1533] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  180.206478][ T1533] usb 1-1: unable to read config index 0 descriptor/all
[  180.208981][ T1533] usb 1-1: can't read configurations, error -71
[  181.065918][ T4081] Bluetooth: hci3: command 0x0409 tx timeout
[  182.526442][ T5768] netlink: 12 bytes leftover after parsing attributes in process `syz.6.384'.
[  183.013431][ T5714] chnl_net:caif_netlink_parms(): no params data found
[  183.250723][ T4081] Bluetooth: hci3: command 0x041b tx timeout
[  185.550121][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  185.567178][ T4339] Bluetooth: hci3: command 0x040f tx timeout
[  185.826771][ T5714] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.835877][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.647803][ T5714] device bridge_slave_0 entered promiscuous mode
[  186.657181][ T5714] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.659199][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.720354][ T5714] device bridge_slave_1 entered promiscuous mode
[  187.203993][ T5816] Restarting kernel threads ... done.
[  187.689831][ T4339] Bluetooth: hci3: command 0x0419 tx timeout
[  187.719843][ T5714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.740445][ T5714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.860361][ T5714] team0: Port device team_slave_0 added
[  187.901745][ T5714] team0: Port device team_slave_1 added
[  187.992479][ T5714] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.994485][ T5714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.011760][ T5714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.036703][ T5826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.397'.
[  188.040184][ T5714] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.042063][ T5714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.069170][ T5714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.110109][ T5714] device hsr_slave_0 entered promiscuous mode
[  189.166883][ T5714] device hsr_slave_1 entered promiscuous mode
[  189.225936][ T5714] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  189.228098][ T5714] Cannot create hsr debugfs directory
[  190.756417][ T5714] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  192.775504][ T2056] ieee802154 phy0 wpan0: encryption failed: -22
[  192.777650][ T2056] ieee802154 phy1 wpan1: encryption failed: -22
[  192.856581][ T5863] udc-core: couldn't find an available UDC or it's busy
[  192.858881][ T5863] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  193.038888][ T5867] udc-core: couldn't find an available UDC or it's busy
[  193.040970][ T5867] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  193.046649][ T5714] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  193.099261][ T5714] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  193.138206][ T5714] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  197.400834][ T4110] Bluetooth: hci2: command 0x0406 tx timeout
[  198.783288][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.416'.
[  200.266248][ T5714] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.559990][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  200.566329][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  202.755066][ T5714] 8021q: adding VLAN 0 to HW filter on device team0
[  202.977941][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  202.981039][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  202.983772][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.985875][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.100336][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  203.217685][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  203.220905][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  203.223481][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.225489][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.245696][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  203.262268][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  203.799303][ T5714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  203.822395][ T5714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  203.862485][ T5961] udc-core: couldn't find an available UDC or it's busy
[  203.910977][ T5961] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  203.927605][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  203.932463][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  203.935546][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  203.967636][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  203.994947][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  204.034152][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  204.063459][ T5961] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  204.065488][ T5961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  204.078276][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  204.085979][ T5961] vhci_hcd vhci_hcd.0: Device attached
[  204.274198][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  204.288026][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  204.487091][   T21] usb 4-1: new low-speed USB device number 2 using vhci_hcd
[  204.869513][  T148] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  205.202165][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  205.419206][ T5966] bridge0: port 3(netdevsim0) entered blocking state
[  205.539912][ T5966] bridge0: port 3(netdevsim0) entered disabled state
[  206.804141][ T5964] vhci_hcd: connection reset by peer
[  206.813671][  T136] vhci_hcd: stop threads
[  206.815505][  T136] vhci_hcd: release socket
[  206.822399][  T136] vhci_hcd: disconnect device
[  208.675079][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  208.677707][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  208.755037][ T5714] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.696366][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.443'.
[  209.745980][   T21] vhci_hcd: vhci_device speed not set
[  211.188777][ T6057] udc-core: couldn't find an available UDC or it's busy
[  211.190845][ T6057] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  212.853419][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  212.857877][ T1718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  212.989931][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  212.993102][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  212.996692][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  213.021428][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  213.076270][ T5714] device veth0_vlan entered promiscuous mode
[  213.094349][ T5714] device veth1_vlan entered promiscuous mode
[  214.483145][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  214.486399][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  214.571804][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  214.574782][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  214.611427][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'.
[  214.614610][ T5714] device veth0_macvtap entered promiscuous mode
[  214.732593][ T5714] device veth1_macvtap entered promiscuous mode
[  214.770457][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.773660][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.786203][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.789302][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.792192][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.795097][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.814869][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.826121][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.845725][ T5714] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.864012][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  214.868645][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  214.889885][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  214.905756][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  214.920608][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.923987][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.936424][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.946645][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.949480][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.985911][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.994060][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.089661][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.096097][ T5714] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.171934][ T5714] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.175026][ T5714] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.189171][ T5714] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.203263][ T5714] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.218407][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  215.246649][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  217.757812][ T6091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.760243][ T6091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.860427][  T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.862860][  T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.028830][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  218.031864][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  222.233099][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.473'.
[  222.905271][ T6180] netlink: 52 bytes leftover after parsing attributes in process `syz.7.474'.
[  222.936849][ T6180] netlink: 52 bytes leftover after parsing attributes in process `syz.7.474'.
[  225.662537][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.478'.
[  225.913511][ T6195] device dummy0 entered promiscuous mode
[  225.926764][ T6195] device macvtap1 entered promiscuous mode
[  225.945325][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.478'.
[  226.769695][ T6200] device dummy0 left promiscuous mode
[  228.480144][ T6241] netlink: 20 bytes leftover after parsing attributes in process `syz.1.491'.
[  228.482756][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'.
[  228.516079][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'.
[  229.671974][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.496'.
[  231.692708][ T6271] udc-core: couldn't find an available UDC or it's busy
[  231.715985][ T6271] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  233.023815][ T6282] capability: warning: `syz.6.501' uses deprecated v2 capabilities in a way that may be insecure
[  233.932763][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.510'.
[  234.144237][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.510'.
[  234.941729][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.509'.
[  235.558714][ T6339] process 'syz.0.514' launched './file0' with NULL argv: empty string added
[  236.760222][ T4217] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  236.946082][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz.6.522'.
[  236.969224][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'.
[  236.973130][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz.6.522'.
[  237.006341][ T6361] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  239.087142][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.525'.
[  239.949889][ T6396] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  241.535046][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.534'.
[  243.067084][ T6430] fuse: Bad value for 'fd'
[  243.716785][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.7.544'.
[  245.717633][ T6468] netlink: 16 bytes leftover after parsing attributes in process `syz.7.549'.
[  245.751273][ T6468] netlink: 16 bytes leftover after parsing attributes in process `syz.7.549'.
[  245.888225][ T6471] Illegal XDP return value 1049320568, expect packet loss!
[  247.157735][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'.
[  247.366757][ T6479] team0: Port device team_slave_0 removed
[  247.508596][ T6491] device bpq0 entered promiscuous mode
[  247.510913][ T6491] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  248.300084][ T6491] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.114222][ T6491] bond0: (slave rose0): Enslaving as an active interface with an up link
[  249.152010][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  249.415757][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.560'.
[  249.424245][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.561'.
[  249.442256][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.561'.
[  252.362704][ T4182] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.128017][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.7.562'.
[  253.172638][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.576'.
[  253.181032][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.574'.
[  253.186959][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.576'.
[  253.359586][ T4182] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.682755][ T4182] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.882205][ T6574] Restarting kernel threads ... done.
[  254.082242][ T2056] ieee802154 phy0 wpan0: encryption failed: -22
[  254.084374][ T2056] ieee802154 phy1 wpan1: encryption failed: -22
[  254.648461][ T4182] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.085932][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.587'.
[  256.126641][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.587'.
[  256.355950][ T4103] Bluetooth: hci3: command 0x0405 tx timeout
[  257.283638][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'.
[  257.351030][ T6633] Restarting kernel threads ... done.
[  262.499141][ T6700] Restarting kernel threads ... done.
[  265.717567][ T6756] udc-core: couldn't find an available UDC or it's busy
[  265.719496][ T6756] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  265.976664][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  265.976678][   T26] audit: type=1326 audit(5532.881:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff854ebc28 code=0x7ffc0000
[  266.007818][   T26] audit: type=1326 audit(5532.881:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=35 compat=0 ip=0xffff854ebc28 code=0x7ffc0000
[  266.013973][   T26] audit: type=1326 audit(5532.891:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff854ebc28 code=0x7ffc0000
[  266.028587][   T26] audit: type=1326 audit(5532.891:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff854ebc28 code=0x7ffc0000
[  266.038509][   T26] audit: type=1326 audit(5532.891:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff854ebc28 code=0x7ffc0000
[  266.044740][   T26] audit: type=1326 audit(5532.891:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff854ebc28 code=0x7ffc0000
[  269.274183][ T4217] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  269.849839][ T6805] netlink: 'syz.6.634': attribute type 4 has an invalid length.
[  269.852081][ T6805] netlink: 17 bytes leftover after parsing attributes in process `syz.6.634'.
[  271.385895][ T4342] Bluetooth: hci5: command 0x0406 tx timeout
[  271.741731][ T6827] device hsr0 left promiscuous mode
[  275.068771][ T4404] Bluetooth: hci0: command 0x0409 tx timeout
[  275.697070][ T6896] hsr0: VLAN not yet supported
[  275.764453][ T6895] netlink: 'syz.0.654': attribute type 4 has an invalid length.
[  275.772482][ T6895] netlink: 17 bytes leftover after parsing attributes in process `syz.0.654'.
[  275.831902][ T6835] chnl_net:caif_netlink_parms(): no params data found
[  277.648570][   T21] Bluetooth: hci0: command 0x041b tx timeout
[  277.769289][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.771480][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.774502][ T6835] device bridge_slave_0 entered promiscuous mode
[  277.778667][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.780856][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.783685][ T6835] device bridge_slave_1 entered promiscuous mode
[  277.942912][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.965955][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.122665][ T6835] team0: Port device team_slave_0 added
[  278.133647][ T6835] team0: Port device team_slave_1 added
[  278.168420][ T6944] netlink: 'syz.1.662': attribute type 5 has an invalid length.
[  278.230870][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.233144][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.265583][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.281807][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.307199][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.321606][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.332189][ T6950] device bpq0 left promiscuous mode
[  278.334072][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  278.428078][ T6950] mkiss: ax0: crc mode is auto.
[  278.549101][ T6835] device hsr_slave_0 entered promiscuous mode
[  278.588145][ T6835] device hsr_slave_1 entered promiscuous mode
[  278.626143][ T6835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  278.628375][ T6835] Cannot create hsr debugfs directory
[  279.571353][ T6835] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  279.693625][ T6994] udc-core: couldn't find an available UDC or it's busy
[  279.695551][ T6994] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  279.762072][ T4082] Bluetooth: hci0: command 0x040f tx timeout
[  279.808462][ T6835] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  281.342076][ T6835] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  281.380691][ T6835] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  281.442844][ T4182] device hsr_slave_0 left promiscuous mode
[  281.519249][ T4182] device hsr_slave_1 left promiscuous mode
[  281.607315][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  281.609539][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_0
[  281.612460][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  281.617059][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_1
[  281.622583][ T4182] device bridge_slave_1 left promiscuous mode
[  281.627942][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.667664][ T4182] device bridge_slave_0 left promiscuous mode
[  281.669621][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.806122][ T4182] device veth1_macvtap left promiscuous mode
[  281.807900][ T4182] device veth0_macvtap left promiscuous mode
[  281.809705][ T4182] device veth1_vlan left promiscuous mode
[  281.811418][ T4182] device veth0_vlan left promiscuous mode
[  281.866186][ T4082] Bluetooth: hci0: command 0x0419 tx timeout
[  282.173364][ T4182] team0 (unregistering): Port device team_slave_1 removed
[  282.192007][ T4182] team0 (unregistering): Port device team_slave_0 removed
[  282.201731][ T4182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  282.235475][ T4182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  282.394254][ T4182] bond0 (unregistering): Released all slaves
[  282.482847][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'.
[  282.491707][ T7017] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.495695][ T7017] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.567252][ T7019] netlink: 'syz.6.678': attribute type 4 has an invalid length.
[  282.569369][ T7019] netlink: 17 bytes leftover after parsing attributes in process `syz.6.678'.
[  283.946147][ T4299] Bluetooth: hci0: command 0x0405 tx timeout
[  284.689264][ T6835] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.728650][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  284.731465][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  284.773215][ T6835] 8021q: adding VLAN 0 to HW filter on device team0
[  284.838701][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  284.841963][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  284.844701][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.846939][ T6440] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.019389][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  285.045451][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  285.100180][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  285.103269][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.105335][ T6440] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.109033][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  285.118616][ T7090] netlink: 'syz.1.691': attribute type 4 has an invalid length.
[  285.121037][ T7090] netlink: 17 bytes leftover after parsing attributes in process `syz.1.691'.
[  285.135670][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  285.148013][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  285.185510][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  285.201573][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  285.221279][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  285.228811][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  285.257772][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  285.260582][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  285.281516][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  285.284457][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  285.327322][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  286.343701][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  286.346915][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  286.363249][ T6835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.297275][ T7137] udc-core: couldn't find an available UDC or it's busy
[  288.299272][ T7137] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  288.391063][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  288.394121][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  288.473178][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  288.477189][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  288.480434][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  288.495433][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  288.512836][ T6835] device veth0_vlan entered promiscuous mode
[  288.556537][ T6835] device veth1_vlan entered promiscuous mode
[  288.625118][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  288.628305][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  288.630995][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  288.644581][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  288.663566][ T6835] device veth0_macvtap entered promiscuous mode
[  288.677541][ T6835] device veth1_macvtap entered promiscuous mode
[  288.726615][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.740365][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.766617][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.770458][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.793785][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.800024][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.802782][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.836097][ T7149] netlink: 224 bytes leftover after parsing attributes in process `syz.0.700'.
[  288.836845][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.843149][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.845309][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  288.848989][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  288.869198][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  288.876671][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  288.897440][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.905855][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.908643][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.936623][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.939526][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.962975][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.965696][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.983457][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.994782][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.017332][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  289.020504][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  289.045266][ T6835] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.054027][ T6835] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.072340][ T6835] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.082478][ T6835] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.101082][ T7158] udc-core: couldn't find an available UDC or it's busy
[  289.103553][ T7157] netlink: 'syz.1.702': attribute type 4 has an invalid length.
[  289.105505][ T7158] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  289.105880][ T7157] netlink: 17 bytes leftover after parsing attributes in process `syz.1.702'.
[  289.236102][ T4299] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  289.286955][ T6091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.289390][ T6091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.293660][ T6091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.322351][ T6091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.337410][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  289.343741][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  290.007409][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  291.016139][ T4299] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  291.019132][ T4299] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  291.023185][ T4299] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  292.826746][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.052184][ T4299] usb 1-1: config 0 descriptor??
[  293.076074][ T4299] usb 1-1: can't set config #0, error -71
[  293.079073][ T4299] usb 1-1: USB disconnect, device number 6
[  293.156973][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.710'.
[  293.804679][ T7205] ODEBUG: Out of memory. ODEBUG disabled
[  294.073635][ T7205] syz.5.711 (7205): drop_caches: 2
[  297.430465][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.5.723'.
[  302.066279][ T6091] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  306.550864][ T7314] bridge1: the hash_elasticity option has been deprecated and is always 16
[  307.657535][ T4081] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  307.661865][ T4081] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  310.050029][ T7372] tmpfs: Unknown parameter 'quota'
[  310.694146][ T4182] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.720394][ T7372] lo speed is unknown, defaulting to 1000
[  310.722470][ T7372] lo speed is unknown, defaulting to 1000
[  310.726214][ T7372] lo speed is unknown, defaulting to 1000
[  310.730728][ T7372] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  310.736298][ T7372] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  310.753486][ T7372] lo speed is unknown, defaulting to 1000
[  310.756439][ T7372] lo speed is unknown, defaulting to 1000
[  310.758703][ T7372] lo speed is unknown, defaulting to 1000
[  310.761177][ T7372] lo speed is unknown, defaulting to 1000
[  310.763253][ T7372] lo speed is unknown, defaulting to 1000
[  310.765349][ T7372] lo speed is unknown, defaulting to 1000
[  310.767916][ T7372] lo speed is unknown, defaulting to 1000
[  310.770112][ T7372] lo speed is unknown, defaulting to 1000
[  310.772191][ T7372] lo speed is unknown, defaulting to 1000
[  310.774249][ T7372] lo speed is unknown, defaulting to 1000
[  310.908960][ T4182] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.363645][ T7396] lo speed is unknown, defaulting to 1000
[  312.018215][ T4182] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.938199][ T4182] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.338577][ T7454] netlink: 'syz.8.773': attribute type 10 has an invalid length.
[  315.388450][ T2056] ieee802154 phy0 wpan0: encryption failed: -22
[  315.390278][ T2056] ieee802154 phy1 wpan1: encryption failed: -22
[  315.412734][ T7454] team0: Device hsr_slave_0 failed to register rx_handler
[  316.450737][ T7471] device vlan2 entered promiscuous mode
[  316.452674][ T7471] device dummy0 entered promiscuous mode
[  317.597817][ T7499] capability: warning: `syz.0.782' uses 32-bit capabilities (legacy support in use)
[  319.566239][ T7517] netlink: 'syz.8.788': attribute type 10 has an invalid length.
[  319.571961][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.580683][ T7517] device bridge_slave_1 left promiscuous mode
[  319.582531][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.621961][ T7517] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  322.733884][ T7547] bridge1: the hash_elasticity option has been deprecated and is always 16
[  324.811905][ T7575] lo speed is unknown, defaulting to 1000
[  324.908284][ T7600] udc-core: couldn't find an available UDC or it's busy
[  324.910315][ T7600] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  324.962485][ T7600] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  324.964358][ T7600] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  324.967014][ T7600] vhci_hcd vhci_hcd.0: Device attached
[  325.717230][ T4121] Bluetooth: hci1: command 0x0409 tx timeout
[  326.618442][ T7613] lo speed is unknown, defaulting to 1000
[  326.679584][ T7600] bridge0: port 3(netdevsim0) entered blocking state
[  326.681608][ T7600] bridge0: port 3(netdevsim0) entered disabled state
[  326.684695][ T7600] device netdevsim0 entered promiscuous mode
[  326.697385][ T4404] usb 12-1: new low-speed USB device number 2 using vhci_hcd
[  326.733704][ T7600] bridge0: port 3(netdevsim0) entered blocking state
[  326.735861][ T7600] bridge0: port 3(netdevsim0) entered forwarding state
[  326.788700][ T7617] device bpq0 entered promiscuous mode
[  326.790509][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  326.834444][ T7617] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  327.090054][ T7575] chnl_net:caif_netlink_parms(): no params data found
[  327.372115][ T7603] vhci_hcd: connection reset by peer
[  327.375039][  T148] vhci_hcd: stop threads
[  327.381686][  T148] vhci_hcd: release socket
[  327.383303][  T148] vhci_hcd: disconnect device
[  327.397931][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.400201][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.402977][ T7575] device bridge_slave_0 entered promiscuous mode
[  327.448166][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.463277][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.491350][ T7575] device bridge_slave_1 entered promiscuous mode
[  327.604971][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  327.625714][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  327.721116][ T7575] team0: Port device team_slave_0 added
[  327.725661][ T7575] team0: Port device team_slave_1 added
[  327.786202][ T4121] Bluetooth: hci1: command 0x041b tx timeout
[  327.788576][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  327.790587][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.830347][ T7575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  327.842012][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  327.844034][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.898473][ T7575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  328.914991][ T7654] netlink: 'syz.1.818': attribute type 4 has an invalid length.
[  328.933264][ T7654] netlink: 17 bytes leftover after parsing attributes in process `syz.1.818'.
[  329.038037][ T7575] device hsr_slave_0 entered promiscuous mode
[  329.076483][ T7575] device hsr_slave_1 entered promiscuous mode
[  329.225979][ T7575] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  329.228349][ T7575] Cannot create hsr debugfs directory
[  329.870013][ T4340] Bluetooth: hci1: command 0x040f tx timeout
[  331.946141][ T4339] Bluetooth: hci1: command 0x0419 tx timeout
[  331.976157][ T7681] lo speed is unknown, defaulting to 1000
[  332.035951][ T4404] vhci_hcd: vhci_device speed not set
[  332.155432][ T7575] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  332.334713][ T7694] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  332.946349][ T7575] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  333.089284][ T7575] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  333.108264][ T4182] device hsr_slave_0 left promiscuous mode
[  333.188571][ T4182] device hsr_slave_1 left promiscuous mode
[  333.267866][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  333.269925][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_0
[  333.272904][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  333.276589][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_1
[  333.304898][ T4182] device bridge_slave_1 left promiscuous mode
[  333.307085][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.347428][ T4182] device bridge_slave_0 left promiscuous mode
[  333.349400][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.495080][ T4182] device veth1_macvtap left promiscuous mode
[  333.496874][ T4182] device veth0_macvtap left promiscuous mode
[  333.498744][ T4182] device veth1_vlan left promiscuous mode
[  333.500412][ T4182] device veth0_vlan left promiscuous mode
[  334.053582][ T4182] team0 (unregistering): Port device team_slave_1 removed
[  334.073659][ T4182] team0 (unregistering): Port device team_slave_0 removed
[  334.091067][ T4182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.139699][ T4182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.692281][ T4182] bond0 (unregistering): Released all slaves
[  334.926510][ T7575] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  334.990245][ T7703] netlink: 'syz.1.829': attribute type 4 has an invalid length.
[  334.992581][ T7703] netlink: 17 bytes leftover after parsing attributes in process `syz.1.829'.
[  337.150233][ T7748] lo speed is unknown, defaulting to 1000
[  337.250879][ T7575] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.290716][  T148] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  337.294686][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  337.299411][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  337.309248][ T7575] 8021q: adding VLAN 0 to HW filter on device team0
[  337.364253][ T7761] netlink: 'syz.8.845': attribute type 4 has an invalid length.
[  337.367138][ T7761] netlink: 17 bytes leftover after parsing attributes in process `syz.8.845'.
[  337.488048][ T7766] device bpq0 left promiscuous mode
[  337.489806][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  337.508074][ T7766] mkiss: ax0: crc mode is auto.
[  337.540104][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  337.543404][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  337.550928][  T153] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.553027][  T153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  337.950620][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  337.953416][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  337.966391][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  337.969082][  T153] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.971095][  T153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.052496][ T7575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  338.055399][ T7575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  338.205605][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  338.208905][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  338.212089][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  338.268048][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  338.271263][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  338.286998][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  338.300288][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  338.306604][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  338.320509][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  338.325762][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  338.337798][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  338.356485][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  338.870322][ T7801] lo speed is unknown, defaulting to 1000
[  340.034987][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  340.037763][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  340.079973][ T7575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.109024][ T7810] bridge2: the hash_elasticity option has been deprecated and is always 16
[  341.227137][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.857'.
[  341.316044][ T7833] mkiss: ax0: crc mode is auto.
[  341.704851][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  341.708368][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  342.732356][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  342.735561][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  342.743654][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  342.903912][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  342.927783][ T7575] device veth0_vlan entered promiscuous mode
[  342.942632][ T7575] device veth1_vlan entered promiscuous mode
[  343.636803][ T7575] device veth0_macvtap entered promiscuous mode
[  343.681560][ T7575] device veth1_macvtap entered promiscuous mode
[  343.709658][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  343.712917][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  343.716782][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  343.752734][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  343.789458][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.792395][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.824692][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.855142][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.874911][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.894071][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.907650][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.911874][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.932138][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  343.956588][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  343.959621][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  343.965151][ T7869] bridge3: the hash_elasticity option has been deprecated and is always 16
[  343.991337][ T7859] lo speed is unknown, defaulting to 1000
[  343.994507][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.011389][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.023182][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.063084][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.065736][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.090228][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.093087][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.125982][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.133686][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.197042][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  344.200015][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  344.204167][ T7575] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.207283][ T7575] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.209589][ T7575] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.211905][ T7575] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.614517][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.653519][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.669784][ T4217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.672124][ T4217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.675415][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  344.678713][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  344.684921][ T7859] chnl_net:caif_netlink_parms(): no params data found
[  346.059239][ T4411] Bluetooth: hci0: command 0x0409 tx timeout
[  346.280565][ T7897] sp0: Synchronizing with TNC
[  347.106140][ T7859] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.108474][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.111681][ T7859] device bridge_slave_0 entered promiscuous mode
[  348.016921][ T7859] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.019137][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.022184][ T7859] device bridge_slave_1 entered promiscuous mode
[  348.169743][ T4411] Bluetooth: hci0: command 0x041b tx timeout
[  348.246444][ T7859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.251648][ T7859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.670308][ T7859] team0: Port device team_slave_0 added
[  348.729806][ T7859] team0: Port device team_slave_1 added
[  348.894231][ T7927] bridge2: the hash_elasticity option has been deprecated and is always 16
[  348.907181][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.924097][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.951434][ T7859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.970849][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.982260][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.011395][ T7859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.198122][ T7859] device hsr_slave_0 entered promiscuous mode
[  349.236359][ T7859] device hsr_slave_1 entered promiscuous mode
[  349.276445][ T7859] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  349.278614][ T7859] Cannot create hsr debugfs directory
[  349.796612][ T4182] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.895423][ T4182] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.966776][ T4182] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.062753][ T4182] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.186184][ T4411] Bluetooth: hci0: command 0x040f tx timeout
[  351.934993][ T7960] lo speed is unknown, defaulting to 1000
[  352.457489][ T1533] Bluetooth: hci0: command 0x0419 tx timeout
[  354.461042][ T7987] mkiss: ax0: crc mode is auto.
[  354.632425][ T1533] Bluetooth: hci0: command 0x0405 tx timeout
[  355.678009][ T8006] bridge3: the hash_elasticity option has been deprecated and is always 16
[  359.482764][ T8030] lo speed is unknown, defaulting to 1000
[  361.788897][ T8062] mkiss: ax0: crc mode is auto.
[  361.813090][ T7859] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  361.851558][ T7859] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  361.902866][ T7859] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  361.940424][ T7859] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  363.319178][ T8079] bridge4: the hash_elasticity option has been deprecated and is always 16
[  363.378643][ T7859] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.412436][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  363.415373][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  363.430845][ T7859] 8021q: adding VLAN 0 to HW filter on device team0
[  363.472667][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  363.480017][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  363.489524][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.491644][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.530758][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  363.542051][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  363.555746][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  363.601307][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.603527][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.426341][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  364.706021][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  364.709316][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  364.728863][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  364.737365][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  364.747482][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  364.751112][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  364.780406][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  364.794506][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  364.812844][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  364.824686][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  364.837871][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  364.853756][ T8099] Restarting kernel threads ... done.
[  365.870055][ T8115] netlink: 'syz.5.914': attribute type 4 has an invalid length.
[  365.872244][ T8115] netlink: 17 bytes leftover after parsing attributes in process `syz.5.914'.
[  366.060718][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  366.063165][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  366.078803][ T7859] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.265150][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.915'.
[  366.279370][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  366.282390][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  366.940522][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  366.943382][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  366.947166][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  366.979794][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  366.984629][ T7859] device veth0_vlan entered promiscuous mode
[  367.049593][ T7859] device veth1_vlan entered promiscuous mode
[  367.174660][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  367.179470][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  367.190053][ T7859] device veth0_macvtap entered promiscuous mode
[  367.292752][ T7859] device veth1_macvtap entered promiscuous mode
[  367.328706][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.340135][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.352598][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.361986][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.371345][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.389895][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.400145][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.410012][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.419186][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.431172][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.454573][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_0
[  367.465885][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  367.469623][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  367.472676][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  367.485212][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  367.497803][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.501192][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.511052][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.522152][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.530717][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.539602][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.548873][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.558323][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.569904][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.579348][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.591217][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_1
[  367.599444][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  367.602492][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  367.610781][ T7859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.618637][ T7859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.625599][ T7859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.633518][ T7859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.777319][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.779888][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.784350][  T570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  367.900615][ T4217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.903174][ T4217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.927907][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  370.014649][ T8171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  370.034671][  T153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  370.976155][ T4182] IPVS: stopping backup sync thread 6361 ...
[  373.602789][ T8198] lo speed is unknown, defaulting to 1000
[  375.749527][ T4182] device hsr_slave_0 left promiscuous mode
[  375.977802][ T4182] device hsr_slave_1 left promiscuous mode
[  376.267636][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  376.272015][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_0
[  376.546158][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  376.607338][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_1
[  376.630563][ T4182] device bridge_slave_0 left promiscuous mode
[  376.642317][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.839376][ T2056] ieee802154 phy0 wpan0: encryption failed: -22
[  376.841350][ T2056] ieee802154 phy1 wpan1: encryption failed: -22
[  377.050248][ T4182] device hsr_slave_0 left promiscuous mode
[  377.086869][ T4182] device hsr_slave_1 left promiscuous mode
[  377.466561][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_0
[  377.486718][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_1
[  377.489621][ T4182] device bridge_slave_1 left promiscuous mode
[  377.491662][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.577472][ T4182] device bridge_slave_0 left promiscuous mode
[  377.579441][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.756093][ T4182] device veth1_macvtap left promiscuous mode
[  377.757894][ T4182] device veth0_macvtap left promiscuous mode
[  377.759629][ T4182] device veth1_vlan left promiscuous mode
[  377.761830][ T4182] device veth0_vlan left promiscuous mode
[  381.245457][ T4182] team0 (unregistering): Port device team_slave_1 removed
[  381.276610][ T4182] team0 (unregistering): Port device team_slave_0 removed
[  381.297371][ T4182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  381.354116][ T4182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  381.468136][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.9.940'.
[  381.476360][ T4182] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  382.092102][ T4182] bond0 (unregistering): Released all slaves
[  382.532984][ T4182] team0 (unregistering): Port device team_slave_1 removed
[  382.545450][ T4182] team0 (unregistering): Port device team_slave_0 removed
[  382.571347][ T4182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  382.652189][ T4182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.903905][ T4182] bond0 (unregistering): Released all slaves
[  383.052550][ T8256] lo speed is unknown, defaulting to 1000
[  387.349067][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.953'.
[  391.184948][ T8350] lo speed is unknown, defaulting to 1000
[  395.534622][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.965'.
[  399.323313][ T8429] lo speed is unknown, defaulting to 1000
[  400.234715][ T8435] mkiss: ax0: crc mode is auto.
[  401.164548][ T6091] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  404.904881][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.982'.
[  405.250699][ T8529] lo speed is unknown, defaulting to 1000
[  411.607543][ T8617] lo speed is unknown, defaulting to 1000
[  416.601693][ T8690] lo speed is unknown, defaulting to 1000
[  417.036511][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1006'.
[  426.182930][ T8817] lo speed is unknown, defaulting to 1000
[  426.925704][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1026'.
[  430.110001][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  432.530509][ T6073] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  432.840466][ T8931] lo speed is unknown, defaulting to 1000
[  438.270248][ T2056] ieee802154 phy0 wpan0: encryption failed: -22
[  438.273113][ T2056] ieee802154 phy1 wpan1: encryption failed: -22
[  438.969882][ T9011] Restarting kernel threads ... done.
[  439.641813][ T9026] lo speed is unknown, defaulting to 1000
[  440.734632][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1057'.
[  445.701774][ T9114] lo speed is unknown, defaulting to 1000
[  447.450578][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1071'.
[  450.721539][ T8514] Bluetooth: hci1: command 0x0406 tx timeout
[  450.843326][ T9155] lo speed is unknown, defaulting to 1000
[  454.786179][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1085'.
[  456.920728][ T9234] lo speed is unknown, defaulting to 1000
[  458.129609][ T9242] mkiss: ax0: crc mode is auto.
[  459.955103][ T9273] bridge4: the hash_elasticity option has been deprecated and is always 16
[  461.087585][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1100'.
[  463.258273][ T9308] tmpfs: Unknown parameter 'quota'
[  463.301269][ T9308] siw: device registration error -23
[  464.121426][  T136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  466.810365][    T7] Bluetooth: hci0: command 0x0406 tx timeout
[  466.925427][ T9339] mkiss: ax0: crc mode is auto.
[  466.933058][ T9343] bridge5: the hash_elasticity option has been deprecated and is always 16
[  467.160636][ T9347] Restarting kernel threads ... done.
[  467.412333][ T9353] lo speed is unknown, defaulting to 1000
[  468.942510][ T9376] udc-core: couldn't find an available UDC or it's busy
[  468.944615][ T9376] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  471.470928][ T9405] bridge3: the hash_elasticity option has been deprecated and is always 16
[  471.904605][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1127'.
[  473.965748][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1129'.
[  473.971779][ T9435] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  478.255956][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1139'.
[  481.387238][ T9532] mkiss: ax0: crc mode is auto.
[  483.293386][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1151'.
[  485.406471][ T9603] dccp_invalid_packet: P.Data Offset(0) too small
[  485.606560][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1159'.
[  488.166249][ T9638] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  489.887087][ T9665] mkiss: ax0: crc mode is auto.
[  491.083789][ T9680] lo speed is unknown, defaulting to 1000
[  491.147958][ T9685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1176'.
[  493.310600][ T9697] udc-core: couldn't find an available UDC or it's busy
[  493.312497][ T9697] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  498.108235][  T148] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  499.713585][ T2056] ieee802154 phy0 wpan0: encryption failed: -22
[  499.715582][ T2056] ieee802154 phy1 wpan1: encryption failed: -22
[  501.362468][ T9788] trusted_key: encrypted_key: insufficient parameters specified
[  501.431193][ T9788] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  502.357529][ T9796] bridge1: the hash_elasticity option has been deprecated and is always 16
[  503.803194][ T9809] sp0: Synchronizing with TNC
[  508.250495][ T9848] bridge1: the hash_elasticity option has been deprecated and is always 16
[  508.291016][ T9858] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  508.293456][ T9858] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  512.706371][ T9896] netlink: 'syz.1.1227': attribute type 12 has an invalid length.
[  512.879712][ T9867] syz.6.1221 (9867): drop_caches: 1
[  512.895765][ T9864] syz.6.1221 (9864): drop_caches: 1
[  513.587025][ T9912] bridge6: the hash_elasticity option has been deprecated and is always 16
[  513.937110][ T9929] tipc: Can't bind to reserved service type 1
[  513.952354][ T9927] mkiss: ax0: crc mode is auto.
[  516.539250][ T9954] lo speed is unknown, defaulting to 1000
[  517.480941][ T9967] udc-core: couldn't find an available UDC or it's busy
[  517.482913][ T9967] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  521.201978][ T9998] xt_ecn: cannot match TCP bits for non-tcp packets
[  522.731622][T10009] udc-core: couldn't find an available UDC or it's busy
[  522.733651][T10009] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  524.711999][T10030] 
[  524.712637][T10030] ======================================================
[  524.714601][T10030] WARNING: possible circular locking dependency detected
[  524.716669][T10030] 5.15.189-syzkaller #0 Not tainted
[  524.718105][T10030] ------------------------------------------------------
[  524.720065][T10030] syz.9.1263/10030 is trying to acquire lock:
[  524.721667][T10030] ffff80001629c1e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  524.723903][T10030] 
[  524.723903][T10030] but task is already holding lock:
[  524.725946][T10030] ffff0000d78a3120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_setsockopt+0x274/0xa5c
[  524.728466][T10030] 
[  524.728466][T10030] which lock already depends on the new lock.
[  524.728466][T10030] 
[  524.731398][T10030] 
[  524.731398][T10030] the existing dependency chain (in reverse order) is:
[  524.733894][T10030] 
[  524.733894][T10030] -> #1 (sk_lock-AF_AX25){+.+.}-{0:0}:
[  524.736027][T10030]        lock_sock_nested+0xd8/0x1d4
[  524.737446][T10030]        ax25_device_event+0x20c/0x590
[  524.738954][T10030]        raw_notifier_call_chain+0xd4/0x164
[  524.740595][T10030]        dev_close_many+0x2cc/0x440
[  524.741982][T10030]        dev_close+0x148/0x1f8
[  524.743341][T10030]        bpq_device_event+0x318/0x824
[  524.744821][T10030]        raw_notifier_call_chain+0xd4/0x164
[  524.746479][T10030]        dev_close_many+0x2cc/0x440
[  524.747894][T10030]        dev_close+0x148/0x1f8
[  524.749309][T10030]        bond_setup_by_slave+0x70/0x318
[  524.750912][T10030]        bond_enslave+0x624/0x3014
[  524.752336][T10030]        bond_do_ioctl+0x6ec/0xb3c
[  524.753766][T10030]        bond_siocdevprivate+0x18c/0x1dc
[  524.755402][T10030]        dev_ifsioc+0xa30/0xef4
[  524.756761][T10030]        dev_ioctl+0x550/0xc94
[  524.758153][T10030]        sock_ioctl+0x7e0/0x87c
[  524.759572][T10030]        __arm64_sys_ioctl+0x14c/0x1c8
[  524.761162][T10030]        invoke_syscall+0x98/0x2b8
[  524.762647][T10030]        el0_svc_common+0x138/0x258
[  524.764145][T10030]        do_el0_svc+0x58/0x14c
[  524.765520][T10030]        el0_svc+0x78/0x1e0
[  524.766806][T10030]        el0t_64_sync_handler+0xcc/0xe4
[  524.768420][T10030]        el0t_64_sync+0x1a0/0x1a4
[  524.769869][T10030] 
[  524.769869][T10030] -> #0 (rtnl_mutex){+.+.}-{3:3}:
[  524.771942][T10030]        __lock_acquire+0x2928/0x651c
[  524.773498][T10030]        lock_acquire+0x1f4/0x620
[  524.774889][T10030]        __mutex_lock_common+0x194/0x1edc
[  524.776498][T10030]        mutex_lock_nested+0xac/0x11c
[  524.778031][T10030]        rtnl_lock+0x20/0x2c
[  524.779354][T10030]        ax25_setsockopt+0x870/0xa5c
[  524.780837][T10030]        __sys_setsockopt+0x260/0x36c
[  524.782370][T10030]        __arm64_sys_setsockopt+0xb8/0xd4
[  524.784023][T10030]        invoke_syscall+0x98/0x2b8
[  524.785550][T10030]        el0_svc_common+0x138/0x258
[  524.786985][T10030]        do_el0_svc+0x58/0x14c
[  524.788377][T10030]        el0_svc+0x78/0x1e0
[  524.789689][T10030]        el0t_64_sync_handler+0xcc/0xe4
[  524.791262][T10030]        el0t_64_sync+0x1a0/0x1a4
[  524.792609][T10030] 
[  524.792609][T10030] other info that might help us debug this:
[  524.792609][T10030] 
[  524.795568][T10030]  Possible unsafe locking scenario:
[  524.795568][T10030] 
[  524.797651][T10030]        CPU0                    CPU1
[  524.799081][T10030]        ----                    ----
[  524.800664][T10030]   lock(sk_lock-AF_AX25);
[  524.801895][T10030]                                lock(rtnl_mutex);
[  524.803758][T10030]                                lock(sk_lock-AF_AX25);
[  524.805715][T10030]   lock(rtnl_mutex);
[  524.806895][T10030] 
[  524.806895][T10030]  *** DEADLOCK ***
[  524.806895][T10030] 
[  524.809196][T10030] 1 lock held by syz.9.1263/10030:
[  524.810650][T10030]  #0: ffff0000d78a3120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_setsockopt+0x274/0xa5c
[  524.813394][T10030] 
[  524.813394][T10030] stack backtrace:
[  524.815068][T10030] CPU: 1 PID: 10030 Comm: syz.9.1263 Not tainted 5.15.189-syzkaller #0
[  524.817372][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  524.820168][T10030] Call trace:
[  524.821073][T10030]  dump_backtrace+0x0/0x43c
[  524.822412][T10030]  show_stack+0x2c/0x3c
[  524.823618][T10030]  __dump_stack+0x30/0x40
[  524.824873][T10030]  dump_stack_lvl+0xf8/0x160
[  524.826137][T10030]  dump_stack+0x1c/0x5c
[  524.827283][T10030]  print_circular_bug+0x148/0x1b0
[  524.828723][T10030]  check_noncircular+0x240/0x2d4
[  524.830101][T10030]  __lock_acquire+0x2928/0x651c
[  524.831501][T10030]  lock_acquire+0x1f4/0x620
[  524.832810][T10030]  __mutex_lock_common+0x194/0x1edc
[  524.834492][T10030]  mutex_lock_nested+0xac/0x11c
[  524.835876][T10030]  rtnl_lock+0x20/0x2c
[  524.836998][T10030]  ax25_setsockopt+0x870/0xa5c
[  524.838404][T10030]  __sys_setsockopt+0x260/0x36c
[  524.839839][T10030]  __arm64_sys_setsockopt+0xb8/0xd4
[  524.841357][T10030]  invoke_syscall+0x98/0x2b8
[  524.842685][T10030]  el0_svc_common+0x138/0x258
[  524.843973][T10030]  do_el0_svc+0x58/0x14c
[  524.845130][T10030]  el0_svc+0x78/0x1e0
[  524.846284][T10030]  el0t_64_sync_handler+0xcc/0xe4
[  524.847768][T10030]  el0t_64_sync+0x1a0/0x1a4
[  530.495382][ T4217] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)