last executing test programs:

3m24.363080624s ago: executing program 3 (id=146):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0))
ppoll(&(0x7f0000000080)=[{r0, 0x2040}], 0x1, &(0x7f0000000200), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x98, 0x0, &(0x7f0000001540)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

3m24.187041504s ago: executing program 3 (id=149):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r1, 0x40045431, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)

3m23.972015743s ago: executing program 3 (id=151):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x401, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x401}, 0x10a5, 0x4, 0x30000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000)
sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0)

3m23.718860892s ago: executing program 3 (id=153):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x32, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x8000, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}, 0x0)

3m23.550994271s ago: executing program 3 (id=155):
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)=@mmap={0x3344, 0x1, 0x4, 0x100000, 0x8, {}, {0x2, 0x0, 0x5, 0x2, 0x2, 0x9, "78075ed5"}, 0x10000})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005"], 0x178}}, 0x0)

3m23.482063431s ago: executing program 3 (id=157):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0xa00, 0x1000000a00})

3m15.711104469s ago: executing program 32 (id=188):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r0, 0x1, 0x0, 0x259fdbff, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf4, 0x27}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}]]}, 0x30}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x4000000)

3m7.946756247s ago: executing program 33 (id=157):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0xa00, 0x1000000a00})

2m47.975074056s ago: executing program 2 (id=295):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x4000)

2m47.899001585s ago: executing program 2 (id=296):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r3, 0x89e0, &(0x7f0000004880)=0x1)

2m44.795485673s ago: executing program 2 (id=305):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x24000095)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}})
r5 = socket$kcm(0x10, 0x3, 0x10)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r6, 0x1ff)
sendto$inet(r6, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3704000880fc0b0b000300", 0x33fe0}], 0x1}, 0x0)

2m43.622971138s ago: executing program 2 (id=312):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, 0x0, 0x4e)
recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8a", 0x74}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

2m37.357660462s ago: executing program 2 (id=320):
r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, r0, r1)

2m36.556560109s ago: executing program 2 (id=323):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

2m26.87603635s ago: executing program 6 (id=342):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ip_tables_targets\x00')
preadv(r2, &(0x7f0000000480), 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
semget$private(0x0, 0x207, 0x280)
keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000)
keyctl$dh_compute(0x17, 0x0, &(0x7f0000001600)=""/216, 0xd8, &(0x7f00000001c0)={&(0x7f0000000140)={'blake2b-160-generic\x00'}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100))
r6 = socket$kcm(0x10, 0xa, 0x0)
sendmsg$kcm(r6, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))

2m25.126095223s ago: executing program 6 (id=347):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r1=>0x0], &(0x7f0000000180)=[<r2=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2, 0x0, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)

2m22.960752494s ago: executing program 6 (id=351):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0)

2m22.570617302s ago: executing program 6 (id=352):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d80)=@nat={'nat\x00', 0x62, 0x5, 0x360, 0xa8, 0x150, 0xffffffff, 0x490, 0x398, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'rose0\x00', 'virt_wifi0\x00', {}, {}, 0xf1bca4f3d3c1eb74}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id=0x65, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'tunl0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x22}, 0xff000000, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "febc"}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @port=0x4e21, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0)
socket$l2tp6(0xa, 0x2, 0x73)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

2m21.068274726s ago: executing program 34 (id=323):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

2m21.036456236s ago: executing program 6 (id=357):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000800000008f9"], 0x0, 0x0, 0x0, 0x0}, 0x0)

2m19.194896918s ago: executing program 6 (id=364):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r2, 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
read(r0, &(0x7f00000001c0)=""/93, 0x5d)

2m18.255763085s ago: executing program 5 (id=372):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f3, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x40, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}})
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)

2m17.013945249s ago: executing program 5 (id=377):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x2, &(0x7f0000000040))

2m16.047240626s ago: executing program 5 (id=381):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
fadvise64(r0, 0x18, 0x0, 0x4)

2m15.910955725s ago: executing program 5 (id=383):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=@newchain={0x24, 0x64, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0xa, 0x2}, {0x9, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80)

2m15.652495544s ago: executing program 5 (id=385):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000f14010027bd7000fe9bdf25080001000000000009004500756d6164060000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)

2m15.481770473s ago: executing program 5 (id=387):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
accept4(r0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000440)=0x80, 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
get_mempolicy(&(0x7f00000002c0), &(0x7f0000000300), 0x400, &(0x7f0000ffb000/0x4000)=nil, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
mmap$usbmon(&(0x7f00001c2000/0x4000)=nil, 0x4000, 0x200000b, 0x810, r3, 0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
mount(&(0x7f0000000500)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='cramfs\x00', 0x0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000004c0)=[{0x6, 0x2, 0x80, 0xe, @time={0x3, 0x80000001}, {0x5, 0xf}, {0x7, 0x7}, @queue={0xd0, {0x35c, 0x7}}}], 0x1c)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)

2m3.625841704s ago: executing program 35 (id=364):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r2, 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
read(r0, &(0x7f00000001c0)=""/93, 0x5d)

2m0.382785341s ago: executing program 36 (id=387):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
accept4(r0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000440)=0x80, 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
get_mempolicy(&(0x7f00000002c0), &(0x7f0000000300), 0x400, &(0x7f0000ffb000/0x4000)=nil, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
mmap$usbmon(&(0x7f00001c2000/0x4000)=nil, 0x4000, 0x200000b, 0x810, r3, 0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
mount(&(0x7f0000000500)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='cramfs\x00', 0x0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000004c0)=[{0x6, 0x2, 0x80, 0xe, @time={0x3, 0x80000001}, {0x5, 0xf}, {0x7, 0x7}, @queue={0xd0, {0x35c, 0x7}}}], 0x1c)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)

1m51.873556707s ago: executing program 4 (id=459):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f3, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x40, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}})
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1m50.856879103s ago: executing program 4 (id=461):
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="010000000200000000", 0x9, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
connect$llc(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(&(0x7f0000000140)=@nullb, 0x0, 0x0, 0x208000, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x5, 0x0, 0x0)
syz_usb_disconnect(r2)
r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000440)=ANY=[], 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
sendmsg$nl_route(r1, 0x0, 0x48000)

1m49.537346737s ago: executing program 4 (id=466):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)

1m48.379001012s ago: executing program 4 (id=469):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffff0d850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\v'], 0x48)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000540)='P', &(0x7f0000000000)=""/7, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

1m48.210967642s ago: executing program 4 (id=471):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000103c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000100003800c00008008000340000000031400"], 0xc0}}, 0x0)

1m47.990838951s ago: executing program 4 (id=473):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2})

1m32.632343098s ago: executing program 37 (id=473):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2})

8.310529953s ago: executing program 1 (id=857):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4)
socket$inet(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x7fff}, 0x8)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x6, 0x8, 0x4, 0x100, 0x80000000, {0x0, 0x2710}, {0x5, 0x0, 0x29, 0x4, 0x3, 0x8, "999437a1"}, 0x832, 0x4, {}, 0x4, 0x0, <r2=>0xffffffffffffffff})
readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/240, 0xf0}], 0x1)
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf8)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000940))
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$FBIOBLANK(r6, 0x4611, 0x0)

7.846635762s ago: executing program 9 (id=863):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x0, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]})
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})

6.871687228s ago: executing program 9 (id=864):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xbe9b70537f851e0}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)

6.587885067s ago: executing program 8 (id=865):
r0 = syz_open_dev$video4linux(&(0x7f0000001800), 0x1, 0x1)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x203, 0x0, 0x3013, 0x3fffff9, 0xffffffff, 0x8, 0x0, 0x1})

6.446943656s ago: executing program 8 (id=866):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockname(r0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108)
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108)
getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="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", 0x379}, {0x0}], 0x2}}], 0x1, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0)

6.280542345s ago: executing program 7 (id=868):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x3, 0x0, 0x1013, 0x3903, 0x8, 0xe, 0x5})

6.152203335s ago: executing program 7 (id=870):
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000000c0)='H', 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x1}, 0x1c)
socket$caif_stream(0x25, 0x1, 0x0)
socket(0x40000000015, 0x5, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)

6.064220744s ago: executing program 1 (id=871):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x98}}, 0x0)

5.246165951s ago: executing program 9 (id=872):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r0, 0x0, 0x0)

5.210575681s ago: executing program 8 (id=874):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]})
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})

5.097367721s ago: executing program 9 (id=875):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x120a, 0x3})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000280)={0xe7, 0x4000000153f}, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x3})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

4.93506812s ago: executing program 1 (id=877):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @sack_perm, @mss={0x2, 0xfff}, @timestamp, @timestamp, @mss={0x2, 0x1}, @mss, @sack_perm], 0x8)
sendto$inet(r0, &(0x7f0000000200)="09283c62e68a269a4b2ec8be474a8efab19892cc1d483c7f10d9bc979de18ce5f8", 0x21, 0x4000000, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)

4.296083627s ago: executing program 8 (id=878):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

3.660592525s ago: executing program 7 (id=880):
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
gettid()
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r4, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x44)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

3.659735105s ago: executing program 9 (id=881):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4)
socket$inet(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x7fff}, 0x8)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x6, 0x8, 0x4, 0x100, 0x80000000, {0x0, 0x2710}, {0x5, 0x0, 0x29, 0x4, 0x3, 0x8, "999437a1"}, 0x832, 0x4, {}, 0x4, 0x0, <r2=>0xffffffffffffffff})
readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/240, 0xf0}], 0x1)
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf8)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000940))
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$FBIOBLANK(r6, 0x4611, 0x0)

3.534972654s ago: executing program 1 (id=883):
timer_settime(0x0, 0x0, 0x0, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x40})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0)

2.644584561s ago: executing program 7 (id=884):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

2.592640801s ago: executing program 1 (id=886):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="050000000100", 0x6)

2.52531577s ago: executing program 1 (id=887):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

1.462013446s ago: executing program 7 (id=888):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]})
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})

1.235281435s ago: executing program 0 (id=889):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4)

1.205204735s ago: executing program 8 (id=890):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008d80)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x24}}, 0x50)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x3b9ac9ff, 0x8c)
syz_fuse_handle_req(r0, &(0x7f0000004300)="1827dacb7cd53e01b4852de2d748e21fa033071acb841f449efc23d452101807ae5c485596338a6d31388444ae8ade7b60a85a37d3db29ef19ae4c4d4db9c2c82c7908debb2e2b5ebef336aad77bef942d064955079af4e914f372cec8ed0440f6ee0bded3c565283bdb75124011227712d5f01e8c1eb86cf69205a8b5b374edee58ebaf09d62191cf41190260c30a719bbc9bc29be0d60c678791de6b236c9b5a057247c281937c2b2ae747c858532113e0a1e7af49298ef54f15572301d3c907b02529bc470beab8f9208cf92b17a9df99ceff90a1e384d6bda3fe823d8eff0e2229a43c31781935de69466b1082c0f88d3716f234e1d6e17e1360f6621e686d661af20eaf08cc97c261590ac3291667a87bbf66f86d9005f034ea5517b2187b6dfecebc1cb8fc4dab511a2890a68ed185483c548168803f353520cc6f820d1349ac985e12a3ff6e8a78b29ed97213962fca3ba7d04d1ab4dbcfe93a88831f784ed278d079eb3e2e69d3161600fc7b0dae825b510a59c14315fc6ca0ce68dafd088f02a92ae0ab3f15ca1a863b640e8e4a89407a8b8d752892e1f8b0e793d430c3ec46cbe2b6a4bdad728c34e734864aeac2b6b2eb51c3a2f9e6773c5834166511086dc35847cfa17974889795ed305353d41c9399bb95936a3c1be1099f21795cfc04d9699929eca65a0edcae5d4e564404e5292dc15f40d78d94be9e8dca92983bc71729ab30a70455bbfd5a98d97cab9778d9b7b69fb20019e7e7c7bc17c84da1dab53a187a116ac229e00312c95b1074afff18a8771a4ab47be2205745836dc3cc1ce531fe697e9a734698fb2343b331ad9f13214d1d7d511dc646fb8b3b70fb4611e6d102a0e2bda6311ca824537f699efdefbd8a3a523e26272f07abd75504188edc788af9c75aabf77f4ac883573f63ded319fa5a8b6317d4490391879629446fa5ea4c695f3db9739f7bc1da7a19f3e1c0ccca98307b3a7a38272b7455c8957b17138c9e170c27895fcf47eb5530948b7cc43d61a621293b0c83dc893f02def2b42a8bd7ad6c9cdfeb7a3bde141e98e5af7500b07d85c6314949b754c88cc666bdaaec89271f56ec11bfa0aa337feb1140b8a07fbd5c79bdd0239f8aa1d454c0e5a16e99d38d1212ff709bb1964c317c98bfef37b56944666f0320ec85b5b1e07731de5584901f8c65e14fd2ba83b500fdbb137c7cdf91d66400688a5da6405ca7e0b8107ed65be0ef5c6234b62f613e7e76d6f3d5cc12bde4342391524e25bab6ec0a358c6c66b7cdbdd9301f91589af65cb7c02fe8271a798c5e122fef9e7581d28884d33d01f0475c9ac052d2d014bdc09e2738487742f7bff40facf2e96dcdfefa336c46923b77b334daf7b01a9fd5d957a29b83adf6f23acc507a58dabe6b2804532bc1a865a01b1126127f7c6a8029531db8a51d8472c0abffca5be97b9b5433ad220ab9ad65cf94a1167f3fb2b8804ce66f9f5cae212724b2b3a04343580f5919f446f40eaa0177f25ebe68ee7c7a35d9d5ef6e1cb220eaf8ad9b269b15c2ab9692c345f3c3bd5965f06adfdfa2d672b5e3184ebe192f73e70e829adfac2e6318d238dceb6e3d7d1422d57ff7124793b92966bd229c0725b0d591e59c57f98841b5ffad16d0ae903406014d3e632d0654e9084f870e124046f3ebae3ecbf5c5365aa32ebf169ccf1243dc8fb296cef006d5f00447ecd2980abb98e3b6e6bf6181e5df7994ea1c1273784af0d92a57394c71926dc143228a8ade103ff61860d21ffd467b2c41bbbd2490dd36add865828fb64396f16831a3a74f57ee2254cc93b25b7219bc00339a2518be3caa4765ed63295c84f1d59144e96aacfb57c6441f64f29729bb7d68127ae2472bbf089570003b1e820191878ab6f53db01c180751e34672cf5a96edfefe164580d6101672281b59f58f3c7b1222f2b6d19c8a8e5f9ad539045f7dbadaa767f993da974dae20744bf5ad0e0ec71ee97696659981e067463c78bd9337b8bcfc070e7e5b47303eaaf9651c19f19a15eab8e2c47041828be50994b5695ee5fbc9a9ecacf9de714215eb7992c07f262db8843937934fdf6fdd31d0f3a44f074f3a1dd6622dbdb3364df79d5ec90ead64c29e05a6c5358cc6b9d8493b7e1c53a91c37aa3653cf2002072461f4b99fcdec142e53b87f61ea55cdb834dd4e03f2f57a206cabe2f3f3cbfad3b4117bf4434718022b09a8419959a9bb97fba50a6b3b9a844cd1301de7bae89f8d1bf549b88dd2bd0697e70ce89cc2e383221ca2ae9d3671a730466c250a8963f6411a42ecc85a00c01b2b43c39432d5065a5fd11c29a23169891cd674cf3a31e82587a26c8d48aa3debeaf067a26669599fae850126dd516512e0cf5ab556b5582add7d2f665723a2244007ddc302f0ec29da73578a80c998849be2f766a334c7ade4dd46f37d648899da5cf7437af2d6e8d03d934903387c4c7e260909d59b546dfac9ffdce11fb92e5bb6ff6836fa0e6d0c5942b4660fdd68d3cc8a76ce0960584dbf634695ca75752b19067ba535e4779189b111c9a3e0ea877067c046d10021b0e60eae8d5dd7536b4474d8ab74679e2d8e68bc9208db5561e28d0bec177cda1e2f944a4cd97b6432033ce40063cbced6b36e486b096adffd699c9fdf58d5ec54bf4afdf52493fbfcd91e807da31ff675b567058697aa088118a6ecf1b7c7dceba3ba87d59d882fce3b3b676763ed658e991c4fd5746946815af0a2c1e96aeb27383cf6638d6d7e1932b3a028250fee18db7c46acd7fab33ab22ff91cf78029a4ed96494151652213fb7dcca0a8944568bf84aded113e20e6897d6b8f6f9fe5f6975c7cbf999d15ce5f8d50454d58e7a5b285fce4ef9d14758cf4a9619b17275fa66f2c6c48d44da95657708062bec9b633ba2df082766f549c5c1b661fc8a5f7b8b6699503da733a66df44f116c4a470b73648cb64bf04101e7bc1d048d230addbf22a5b98aea08beda847e33552faf771d9b181f610ce34530543096257856ea3a08276bec1ea40e7bf6957143623ef47b5c41e61d076eef0a5195431b49beab9fd7f07b1a153491a7250a889b26ce657df550b226fb94cb5f52306f47ee3af4627ef0cdc0c50536af7b386440b878ed5d672670abdb3ea3e3c3c031e67293104a4d6476cf325f6fe4762ce2351dffac116387baadb82f987cab7fe88ce1be7d44ccd572bfd29114d2ce4d5e90f4d6bf7be39ce25ab7de52815e4059d783564d518dd208714de1c524ff69a4ec5f29bb631eff605cc6f30a0bcfba44810a3a6fc263891791b51cb4be0d60d3d0798e38b01b9a21150589a436fb4df4584bf6e7094176884921bbb0f87b1bcdfb6df8aef8f58393800816c15647650448da0ba5bb76f7bf76c3be83aceab79eedae80e1fb46a2557a9485aa7a8053a5835e609fdf54222f5b43cba63c9508dbbd0e22953768f88e2070236d7255f682464d09c7ba12b2e8787a1bc889af686d2c355961d8f92f877bb09baef09d70b5b306047d8d3cb97fb06ba8d09bfbae02314dddf98092b6ef275743e9deb391995003d83b549ecd604daa9bd34ef311aeced5db504242241c0717f8302efedcd3fd43686a7ee21c73ba3c5af98c93d09158c9011e11bc4b51a3a4e904c4b6ced1a786adf310073405c27df6aae6d5da4398d78622ba9144ad09902da49b77046ad22fd303f07c1533f271eb82794b402382d2971f46c7907069907a7afb9e94dd4071685f91cfca10d86aad7c385e4d90f0d44d37588a8f1f267c1d8445634ca4194d1a0c5894a6d00cae3af3aec991cfefda59e3f46c0a6e2fac55b35259a9960ec7dbd1c7dd128368393f0de1e0994ba1f5b41762c22213f56bbf4c2cca458dd5731f9379f0651ba61fbf17a5861eb417e20a7fc9df12c6771f5ab322213ec95beff96dc1811dd0f45be8fb1ed93c2cc01e694620b550e45bd265fb357f52699cf9ca3ddf331fe4d11c5e97bb57631d9c7620b5c19562c85ef8e04ecd5cd5b713fbd94b6b76331a83f304cd8ae1a903ffa722cf5697b1e1bde206735656ce57254744daff8013f47f9aa4f062d8c5956fa8df5ee79d6e6ffbc0c47cd0c99517a6d92fe8ad18c001be4b55af7a6533712c6a2ccb7e813016e7cb74a94bf2a2ce9b3b440faae19210d43320cb81a6472d1da775ca27f2b5bbe5964271eefccdfa0bd6b163357af4539fdb5d5e2e7e1795040776d4d75b70928b8efa954556f4d225bd9b6f9e5a71a8e7a3ef5c36d459233c66650ada1c55dfa02bca3997f93b92028881d9c3ec0e7e1a42c587482b0cfbc77e8520c6ca0f3e5127c96b41056b7279d9e62358e39dc95e779affaaaddc8e9ee66ba336feca8b957ccb4f352c0d162390e3bde27b15132407c97c3a6b5f1704e1e559ee12655a71d7dce3711c8af907d7d2875e2407ff8c59c5457678058d3d00a7971d239c1b1c67dac3ff3fbcc2d8c8035e31040118ac46ba5110a16aedd0b7f731a4f86a63a697501a664946eaf7da6d3cc2a296f294ee765b8f26363ba6116e0ea0ef8eabb0f1e7cc429611194cf0bb66463d26a82dd118cbbd3f1040dca2f5f82ac5eb5df41a4658fcb34b68066c5708a4a16c48fd290b32e392e7f5b662f4e3fa2d79a814f52824cf737872604672bdaf80fc527deb1f690339c92b6c6c6c8635de5a2e1a7ff617d0f1c11bc3a3504d0de94d77678025ab5bea511d783df148e58b0793251db3b7b9e03bb201be89d5939c0a60ab548460d543d015082e00ad9d05418c327ebafbad7924aaf70e5fa6eb0be359b65ac2fbbcad495b17712e033cbf1853d1e2450ac4c8d19287074e76ca3d087d376b0f861b525d4949098dd4e3a3cc50118c8587adf6587ed9aa0352b7d812fe66bb64eb0c0f4d46822aa9c3d4848454d49b61cca24d7d6b82fafc5d8eb4e40e3665f24a95182b70b22c5f9303a49d1278f25de9855246c729fc8ba300fad799a949b9b0ce303477d22337d599d4c8441461d25725965183210a729fc59c4e5ddb45c0b9db06a09619e6009aa0653cd1e8b06d0e55c133d5022dcf91f12a21e9f977de2485f886c5133a8837987e7bc90662156b0250cc76cb03ad9fa36733ef371479ea9c1313682866b963f1f96bba8c658e2c6a10e5e29d8a07d4999b735bdef7f60326aa64fc198c3f2670fa4a44717fc613f1282fc324fd9476e6da7866cb6ce1efa8a1577088f2aa757584b8ade9f2ba34a2287870da2cc7704008b6e057eaf8bfe2fd0d6d60cf03e1751d2284c6439ee6079708451e64b1f7e7dc8400ae99e0d834a7daba6c3a8219812adff0760129e18a41eb0448c57a909714cd395933436e9ae040277f213e30ab7b6e7e3109642ffa051b3c423f6ffa7830c75d229acd617d6bc1f7948f09238f5437ff4fb302034fec1fed96c55c46c7d70d6ab3018c1a3d76120077f815fa67ec8815f44fd0cae7d1509d217a432ce904c778f201a508fdea4672e9cff797bd1d0f58d46f39396e148573ae9b2468e4ee5bd9a5abce8166333c524f0a104da2e3c99ddbc51fc6f4e7c628af79c93d0fbe61b1c4a72b11fe423597f126467a01ee6dad848f24abdfe453592f02c84e017fe553f27e639f88824d70aeeaca54758184f95f12d696291798046bb075fefd6876e8ef893f5b9340e21fc63c67feb6f03055f2f394a591164a61b1aab14c468998175b75974543e79b241dc69a6e346374dec5eebae154e36f29d17273e608ce69d539a5e4702f474bad66fbf3348f0c859bf884576faeeac754e290ec97e863526e55420da72b6b6cd209e6685ffb64e9865d00eb017c843d3c0cf3ab26f53f76316fbe009f0b2c4932b0694fecf1a148dbead458ca9f5f6d678d6c6fbd23fb6aea9e951914300eaaaf69bf35d4ce11c0349a02aa14529a083e701eac0177d4ddb305a9f9a5cf8bacd96327a161bb8b877813ea022d62bac8f0ab9eb5e9d145dda4b1fe79c0bee34c8bbfe866ba376d3a71b9809adda06e64eafaa6cf53fff8ed63e15525fd409e13b1809ae6e6e937acf858a59d2073b304171d5ab35ec92f66fbb2d4e34d46e886c3546c1026d0ff27821a15aa397dbc686540d546ea66fb43dcb9beaeadde6250cfe8e563f9033b432018c88bec07279c6a0228f3eb11031d3435d95c9c1789a5338f74aa6db2c853c87f8f2397f9067fa59774770f64b8ae42b9a07f85f1bcabbc6d3b3456a253bdb73ad3de0aa416589b722053c81db90e7b66a835d636615701e6869fef016bfaba9da0a869005ffc3174b605fdabdb8c7346262ce78a64aa7036960913edfffad202d664d1771018de43b6548a6672f48979b8e30017a93da2c093266306e09eb203fb37d7d54466fb26d4414ba88346d02d8811f100dcb0a3e50ae46247b986b928f12c1ad506c6b33b49d7e6955ae9619f73c79b72a95b053d53c4c54d36dceb8ae780b321aa41b5d61caa21a6c65329f08da522bbbb3d07501b39cc6bfbe4a2ef8054d7c57666bc805ed451517a1432b958141f3ce94752a67a17aadb41590037da8efdb251eb56de30b0e0e75adfbf4e06d4777f843a8d7c31e2ab62d98764217491d46960d67d3ee1213d150c28e75d1f440d41ffc3cf876554e2d4a354f70fce17e4c0fdc64992c32e785263ca4ffcab57d3d46d220627ed05f1628551e9843137996bc7a0b773e1ccfe5364216a8003757ffdc052d93793a3463baf4eef5dd283826f8510bb1f20505a6e61cb3d571d0f77e67ff3c0aa5ca91f6d68c7e0d2d79c649b091b30b2911c5c47157c9c531296eba681e039eaecab83722cc2fd5b91913a463ba9f693e34da60b1adb8ee9f4a83fa67e25f19e4cd6e19ed1381cba8b5b4591109637ae1f7f29b5495fc5f8057da565d937e7577735bd98fe626ce8568897d240f054ad69c8e0ca424d1be51b17d5e639253fb2fe6791e01edcf9c4f8404233d7f98b52c31c4996b6b63112d0126036ca20cf52a2da2478683c41bfd8fb5b34de59d5e87b5075e5e1d78ad06c6a2f6e662145be3d30d140b62c49df203350ea4412c97aaeec7aaa00d81b89f3b7295607840de2a8386f52012b5c4e6e0e1986565bc4f99b6bc10f3a2ab59783a8b9f3c696f741af0f51b6592c68ddff861fc7d2b16876b05a54eae9ec0e170fbf26d9358941c6cba50a5c41e77f72c7f41e0bbf6023f04f7701f676a64cb63ea1a8d373ee6a99ba56449699ccdf8a11dc7d840d695cd5ef987f74e5b16594cc8c6c2251c47b429281b6e34c0288c7242052ac3c9c63213f6ddb08726001e0afe1fb312d463db8722f1617972dc7f365de498027ef0b5c6d100e583348cd777a2afbfd60ef59969c8f88358b6995c177a7d7e69d86b11e36f42bae8c9af599d3f828447c31004000163bb74ef20f656f6a1c8159bd0f867f2e283c10656a40a397b2e514c19efb5d5a5f54316509801bd8208a2c84b2ef13e54d7b8af8787b826b50095a15e33a5e8e306454312a83af7869b7ba0039ca601751b580a9190435d35a8ce9d8e9558ca1bcea3cc3604f4e991aee79fd0d2393b9f87e8dac7782e837e1de5e88a7c79385a2b14556041f49c1113df43efd8aea14c4b651d713fc9989b2fd77ce13a98efef5e83cc6843d313117753d82870c5efec8cc6fd855ab6e0fc6d48c66874fdcb2d007db7fbb9371da3836eb23da1106283a20e32617bcaba574b7b6298d48334eaeef905ff348c2bfbc1c83a88d6915b644d1854161ab4f1d1db12e74de2853e48d1a10f9835c226bca6944d0de6a18e0e07df45ad72a7d354045a6997ffdee010e37091a3a5280e5db8aeea0245217a6f1160a6287d9a28c0eeabaebe755b9485da5b7ccb85166ed902e63200e5e8ac464124bef0196eddee6cfe90fce770b416817e1ca78494786bdaeafa3538841f74bbdb2585d63f667ef227287efa56c030c0999e9ead590f1ce383a138233235494ecec0aed97c803b4d7c4fb80ac9a3bcb1dd2bab51382a94195bee034c3f3d3d9efc44add83ec580a5cfe8f5942b1694b0ab3ef4b2d9f7c0b8634b056c6b6eeb946be1825fa452abdbc1545cd94774abed3fdc2b0399929298221030f6cd0a2b38490f5e4bfd53ee20de10eeb2ffacca980d40e0885cb91c94a4d81a61d863efd0f7a12da233e1dacf7af728950892ef887abcc5e4d08c6b57834a1e5dd1dfc69418fc681b47d8cd34c6a3846b0e1afdc7c7f9033ff817a72ac617c0a1e59e4e6ea40bd668c499f221c5f63700e74b68ba3045b4460f0fa60308cf8964d95237d888d5c1b1be0fa7bd2703eaeb0d2914b8d22cbd8693c16f21bb72566f38aa97e86f212557d40e10b285e1d4de0b153c8f91e168e9d0031bb7ee7fec5f0c3fbf15bc6fbceeae6dd363b7e9835b175b0be16a3348a2c2d07468449fbb2fcfca9e7d8b72b623355715a6a1edc87ea4c699ffeacb2277fbb5658a1eb12d0a7a93bf100ab11cf49b35c16a14044ac8e5bd69af05b252325f0eca41f90681b4a1ec399096939a96685926655a0c4d172d06646c87f35b65c0d7654882b79838f78c35febbdb378f9f28d7e6ba1c1fa191bbcdbf991731f546439a966e4f7a15c77367161bde14b731c9f2b91114fa46e02e70f07d3c40988e8140866ed3dcd98ef5524700deb75c1a6414016da0ce6845e936a8692b7beac01bc855a72a490c667c3b755ffaaa57af54af1bd07ae7b203be85f3653aa63cc5ae10f6e585c7bd8a5257604e82fad6c7be6f1a47eb665c1422c03d3263f351671a48bd5eed22077b8c16e706f009880941c29b90c29a11ef008a371b29200f32523b9847d911fab4ee1468bf98a49ff73703e2d9d7bbf6ae37459c3cb502541f304e1d5918518a06225b65f3b38b91f8e0b49a29ef9aacca369ce5cf8b45738e29118ab06078b885189acf4d0a5200b86cb2269dde90dfada27975dbe6ded12232c0faf7ea12ecacbdf416cff8632e48346478a75c0279c1920b7556fc6670704d5d97912c75d3a9cffe6891abdf747a6850ba7d9668e56c7e7ecc03c5c388e886bc984c8bfd9f470b7e4ea4d146c3c28e4f8ff82b9558266343036e6239a26f567f7633911ccc51522c29ff3ca36ad5b8cfd6ec1c86ae08f30d87a503c909e66dc278e9d14f3fae4bfa4813f315b1610ed76fc149d92f319044e813c3769d4978637e0ee732d3bb86e9fa584181f41d4304c07a1cb71d10f07da649288275a213eff161c536c7366d4c010cf9a4b1c2f2940607dc7468e51204c6983c554d616d48f93ae51e6a7769b3285785ae7bcba3cfb27879df1d7f1f18849a70814eb51df6d1d8cbe80b736cb38326f7db7a06e49cd4fe41b3f7a9156cfac9222ac23d13765e7f2910a365fb23a208f192cfca97b2b8a3de44a2d90d3c865bec109f4bdfb1d37216cf5f71a27c39a83b5562b0c06d76b46b2d8f5b15cb1765d6c78d065d24bedf72405dcb8e795fe183196a6b620f918a2dd7fdfac142aa653fd431ec153e3daac8f615a45b3a0d665d5fe36efb6e2f18b8399429e4f363748eddd5cd2a637e9a0a553fac6d05a3e2bd1b26f2f99433f8f59a3691417a4f35ff7d46a22e39e94641d942706850cb2843ff4a34122e37dcc8224ae9f6ab7f64ff4a0bcb0aaff2f429e4f0f5fcf90ab6a2c45e8f2408d9bbd4f60d6b01a0cf527895e1cd063b178b8973930b9488d81d3f0f7985b900d0a894c29642b809ef39294bfaaa5401f5ed50cbb91a047b60ad54b323a2f2ada04d19d6dbda02e0f22d4d6520f9db2263181c97c9bb74dd8a90adedc80bfd064eb103f67d02ea17571f870c779470bb6460c658da4c502b9a10c8050fc26ad5cc1ae1eb02f0d703d05b48f48ab8c9f9a1bd000181ccf929d45544b44e9a3cd0bcd412ad639323283ed229e5486a2a93babb165880a0a7329834bb51a0631cba5caa30637ca3f07074051c608b7c7170c8c415c2eb88bd6a798bd86953ff71052506ccf0e2357deff6cef24de5b7f68a17082c08d096e43fbe727ab0ab1aa27a703ccd58168039e50dce2d400ed7f2a217c1eea7b29455fbf910d36db324d1c6b53343a78484883ad100a0b5b28c74ab6296df5bf8048fb916e8ddda0ded3f5b08d262b9b1cb1ecb149c02a21490ebebe8856c844d448d2a3878dcc930c3c88d9addf73917e9d3f878fb12fba3e602cfde199a0e69eab56e3d4ffa01135b3145baa613be01f0b94af5bd3b8b432339c954f52b8551fd13790bc1ee18be226b819d8001a3da8e097f84c166e4002e4c1043d3a3721f05105cd17a278b9509d7a04826e8a5b4956bbf976ffb4857fd88da99cfea8d2e0a1c4f52f71f87cbee8c02fbf59b12bdaccb67d0b95f0a56693eafafeefce1953d708b56532ed5bbe12626a3d041c031b48a47b34c504f7dd57e21147b920c058385ddc8cbea5332086c269b0d5c2439f30fa431f88d1a10e25eba0df70d8617ecd5546314ffeae9c4baab872ab82a45eeaf0e1e1533e8a6189c324f31b652aeadc52981b66161313999c5a7bd7c79ef4ee55c7cb00ebd9637ffe01924508a44ab72ab16b70b8b815ce7d27772db315122f4a5a7679af5ac685c26320a71cdd8066b19f749705e2e35d1d9166ecb066053dd05a759270e119944cf99b918cb5e4e6c931031ae2eeffe349ac246c92174091c687c58879e1f05c43b010f7ec3f204c106cf60740b0bc2d355f57bbaec7d060dedab9aebaa4094e72ebffbf61cdfb7d69fbd146daea59339fa83c19c5f75b866af5e7f387740e675e1e2ba29c261d9e7237c6e9ef1b39a8fdacb44de0eaff5f4f9e3e42b75d0a37834eab0cf47acf65e882f0962e01982e783c0dae7efbc95dccb235562e5a2e04fd2b4b43388c0292e6e8198c6df0348920d6e1c8acdd2e892d3f7aef7703824dbb08695642f0e444ade6c4f1ec1e267feb5135cccd50fcde643acb66dbd18f507496957ced435e0db0a8e8441a8e2ebc365f995c32399f7d180b6faeb85ee1921b95f82f3194bed7d157e842257d2da26dfac90f32fb53147e48e232d5115f1cd12b45c55330b29775ab776599afa504b7fe114cd7fb3ab4eb6c30becb82f448b284b20010bea918019af99b2a9ccab1585aec19fd1abe8365a6023f96dddf1a37cce2734bb6585143729850bcd811787bd07cb5fdd57cc987f9278b7f5ef3c7529a9b6d20d18cc4446f1036cf7635da6732986c38df4785e2e428f14b84957319772bdbb7d2d2d20321e522b1ec6c807f3a3f575643d4b71e1bbd1e843b5816aa68900298f5058c65a9fe1022978a44a77bde2b99e221de97cd7fa6a2ea440220bac20e3e4c1e4224958aca15681d3a18f74218114c3e5eefa1fc16de8c07f1d1297b0e772d05f205337175c1dbe88dfc876dcfce367304afac68c41b98ed2ba3f04fd1b37db27dd5d9c9aafaeadfcc44585908ea655ffce1fc2516b060256777e8953e2a6861ec4460034691aed001ea2971627615fc7972773d6a8c343117bae3fc68cfd1f187c478c0f52e86b118c65c39848a8c582ed908fb1242ad3455288cc858e52e119d368e00783c2b8c2916ba564a3501326baefe1dcadac8b4b8b666f20a3a245ca171b43af", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

763.036733ms ago: executing program 0 (id=891):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000540)=0x5828728, 0x4)

762.780883ms ago: executing program 8 (id=892):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x120a, 0x3})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000280)={0xe7, 0x4000000153f}, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x3})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

649.659303ms ago: executing program 0 (id=893):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70537f851e0}, 0x0)

514.713002ms ago: executing program 0 (id=894):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r3 = dup(r2)
write$UHID_INPUT(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

505.375372ms ago: executing program 7 (id=895):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xbe9b70537f851e0}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)

418.988542ms ago: executing program 0 (id=896):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)

320.594012ms ago: executing program 0 (id=897):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0xcad8, 0x5, 0x9, 0x5, 0x8, 0x2, 0xe22a, 0x8, 0x7, 0xe76, 0xffff, 0x14}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
io_setup(0xa42, &(0x7f00000000c0)=<r1=>0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x38)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x4000001, @local, 0xf}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x8)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4040080)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
r8 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f0000000a40)={{0x80000000, 0x0, 0x6, [0x4, 0x2]}, {0x80000000, 0x0, 0x3, [0x401, 0x4]}, 0x10000000, [0x8, 0x80000001]})
syz_open_dev$vcsn(0x0, 0x6, 0x300)

0s ago: executing program 9 (id=898):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

kernel console output (not intermixed with test programs):

p entered promiscuous mode
[   43.082883][ T4367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.084745][ T4367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.091370][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   43.095138][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   43.097420][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   43.099553][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   43.108672][ T4306] device veth1_macvtap entered promiscuous mode
[   43.147216][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.149473][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.151548][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.154589][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.156738][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.159055][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.161220][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.168207][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.173446][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   43.176966][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   43.179098][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   43.181347][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   43.186565][ T4367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.188399][ T4367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.198638][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   43.250979][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.271963][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.274107][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.276272][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.305307][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.307540][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.309564][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.319238][ T4382] loop2: detected capacity change from 0 to 736
[   43.335715][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.366672][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   43.368539][ T4382] rock: directory entry would overflow storage
[   43.369904][ T4382] rock: sig=0x3b10, size=4, remaining=3
[   43.382039][ T4367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.383905][ T4367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.588593][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   43.590922][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   43.593542][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   43.598468][ T4306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.600467][ T4306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.603718][ T4306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.605613][ T4306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.704222][ T4385] "syz.2.3" (4385) uses obsolete ecb(arc4) skcipher
[   44.498588][ T4378] loop0: detected capacity change from 0 to 32768
[   44.547681][ T4378] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4378)
[   44.570211][ T4378] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   44.602154][ T4378] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[   44.604011][ T4378] BTRFS info (device loop0): using free space tree
[   44.605446][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.607209][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.613537][ T4295] cgroup: fork rejected by pids controller in /syz1
[   44.633629][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   44.642164][ T4297] Bluetooth: hci1: command 0x040f tx timeout
[   44.643555][ T4297] Bluetooth: hci4: command 0x040f tx timeout
[   44.644859][ T4297] Bluetooth: hci3: command 0x040f tx timeout
[   44.646132][ T4297] Bluetooth: hci0: command 0x040f tx timeout
[   44.647409][ T4297] Bluetooth: hci2: command 0x040f tx timeout
[   44.701315][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.703431][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.708349][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   44.718312][ T4396] loop2: detected capacity change from 0 to 736
[   44.721200][ T4392] loop3: detected capacity change from 0 to 736
[   44.774126][ T4396] rock: directory entry would overflow storage
[   44.775559][ T4396] rock: sig=0x3b10, size=4, remaining=3
[   44.816259][ T4392] rock: directory entry would overflow storage
[   44.817643][ T4392] rock: sig=0x3b10, size=4, remaining=3
[   44.833097][ T4411] loop4: detected capacity change from 0 to 736
[   44.850227][ T4378] BTRFS info (device loop0): enabling ssd optimizations
[   44.938153][ T4411] rock: directory entry would overflow storage
[   44.940275][ T4411] rock: sig=0x3b10, size=4, remaining=3
[   45.511747][ T4418] "syz.2.7" (4418) uses obsolete ecb(arc4) skcipher
[   45.721746][ T4421] "syz.3.4" (4421) uses obsolete ecb(arc4) skcipher
[   46.611727][ T4422] "syz.4.5" (4422) uses obsolete ecb(arc4) skcipher
[   47.894648][ T4426] Zero length message leads to an empty skb
[   48.482817][ T4300] Bluetooth: hci2: command 0x0419 tx timeout
[   48.484196][ T4300] Bluetooth: hci3: command 0x0419 tx timeout
[   48.485527][ T4300] Bluetooth: hci4: command 0x0419 tx timeout
[   48.486867][ T4300] Bluetooth: hci1: command 0x0419 tx timeout
[   48.509421][ T4305] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   48.658504][ T4431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9'.
[   48.728097][ T4433] loop3: detected capacity change from 0 to 736
[   48.826991][ T4433] rock: directory entry would overflow storage
[   48.828302][ T4433] rock: sig=0x3b10, size=4, remaining=3
[   49.127104][ T4452] "syz.3.12" (4452) uses obsolete ecb(arc4) skcipher
[   50.970737][ T4468] loop3: detected capacity change from 0 to 1024
[   50.988230][ T4468] EXT4-fs: Ignoring removed nobh option
[   51.005652][ T4438] loop4: detected capacity change from 0 to 32768
[   51.051397][ T4468] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   51.084491][ T4438] XFS (loop4): Mounting V5 Filesystem
[   51.190671][ T4438] XFS (loop4): Ending clean mount
[   51.211063][ T4438] 9pnet_fd: Insufficient options for proto=fd
[   51.227758][ T4296] EXT4-fs (loop3): unmounting filesystem.
[   51.423781][ T4306] XFS (loop4): Unmounting Filesystem
[   51.606955][ T4496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.614595][ T4496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.879247][ T4500] smc: net device bond0 applied user defined pnetid SYZ2
[   52.208598][ T4508] netlink: 'syz.4.28': attribute type 29 has an invalid length.
[   52.210706][ T4508] netlink: 'syz.4.28': attribute type 29 has an invalid length.
[   52.213396][ T4508] netlink: 'syz.4.28': attribute type 29 has an invalid length.
[   52.215489][ T4508] netlink: 'syz.4.28': attribute type 29 has an invalid length.
[   52.217295][ T4508] netlink: 'syz.4.28': attribute type 29 has an invalid length.
[   52.219067][ T4508] netlink: 'syz.4.28': attribute type 29 has an invalid length.
[   52.220832][ T4508] netlink: 'syz.4.28': attribute type 29 has an invalid length.
[   52.222713][ T4508] netlink: 'syz.4.28': attribute type 29 has an invalid length.
[   52.224502][ T4508] netlink: 'syz.4.28': attribute type 29 has an invalid length.
[   53.391618][    C0] sched: RT throttling activated
[   53.896613][  T112] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   54.081725][  T112] usb 1-1: Using ep0 maxpacket: 16
[   54.086875][  T112] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   54.089330][  T112] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   54.105655][  T112] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   54.107629][  T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.109401][  T112] usb 1-1: Product: syz
[   54.140845][  T112] usb 1-1: Manufacturer: syz
[   54.142263][  T112] usb 1-1: SerialNumber: syz
[   54.421092][ T4300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.425030][ T4300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.427336][ T4300] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.482577][ T4300] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.485235][ T4300] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   54.487260][ T4300] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.615624][  T112] usb 1-1: 0:2 : does not exist
[   54.635047][ T4533] tmpfs: Bad value for 'mpol'
[   54.864769][  T157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.954309][  T157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.020984][  T112] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   55.044558][  T112] usb 1-1: USB disconnect, device number 2
[   55.046546][  T157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.089396][ T4529] chnl_net:caif_netlink_parms(): no params data found
[   55.174383][  T157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.226655][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.228335][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.238552][ T4529] device bridge_slave_0 entered promiscuous mode
[   55.254074][ T4407] udevd[4407]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   55.254303][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.264430][ T4551] netlink: 36 bytes leftover after parsing attributes in process `syz.3.42'.
[   55.274275][ T4529] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.280660][ T4529] device bridge_slave_1 entered promiscuous mode
[   55.327797][ T4529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.350018][ T4529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.400054][ T4529] team0: Port device team_slave_0 added
[   55.413825][ T4529] team0: Port device team_slave_1 added
[   55.558125][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.559590][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.576705][ T4529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.599445][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.600971][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.627595][ T4529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.696243][ T4564] usb usb8: usbfs: process 4564 (syz.0.48) did not claim interface 0 before use
[   56.572480][ T4312] Bluetooth: hci0: command 0x0409 tx timeout
[   56.792276][ T4589] binder: 4584:4589 tried to acquire reference to desc 0, got 1 instead
[   56.802067][ T4589] binder_alloc: 4584: pid 4584 spamming oneway? 1 buffers allocated for a total size of 4096
[   56.844765][ T4529] device hsr_slave_0 entered promiscuous mode
[   56.902423][ T4529] device hsr_slave_1 entered promiscuous mode
[   56.931738][ T4435] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   56.948182][ T4529] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.949861][ T4529] Cannot create hsr debugfs directory
[   57.111824][ T4435] usb 1-1: Using ep0 maxpacket: 32
[   57.114685][ T4435] usb 1-1: unable to read config index 0 descriptor/start: -61
[   57.116492][ T4435] usb 1-1: can't read configurations, error -61
[   57.271800][ T4435] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   57.299363][ T4603] IPVS: Error joining to the multicast group
[   57.461739][ T4435] usb 1-1: Using ep0 maxpacket: 32
[   57.464923][ T4435] usb 1-1: unable to read config index 0 descriptor/start: -61
[   57.466592][ T4435] usb 1-1: can't read configurations, error -61
[   57.469332][ T4435] usb usb1-port1: attempt power cycle
[   57.510062][ T4442] binder: release 4584:4589 transaction 5 out, still active
[   57.525986][ T4442] binder: undelivered TRANSACTION_COMPLETE
[   57.527421][ T4442] binder: undelivered TRANSACTION_COMPLETE
[   57.551078][ T4442] binder: send failed reply for transaction 5, target dead
[   57.569216][ T4442] binder: undelivered transaction 6, process died.
[   57.987373][ T4435] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   59.269537][ T4300] Bluetooth: hci0: command 0x041b tx timeout
[   59.273356][ T4435] usb 1-1: device descriptor read/8, error -71
[   59.333635][ T4646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.335696][ T4646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.796613][ T4662] syz.0.67 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   60.407308][ T4529] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.463572][ T4529] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.475624][ T4669] netlink: 32 bytes leftover after parsing attributes in process `syz.0.70'.
[   60.669757][ T4529] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.683923][ T4529] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.323212][ T4312] Bluetooth: hci0: command 0x040f tx timeout
[   61.385875][   T51] block nbd0: Attempted send on invalid socket
[   61.387915][   T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.495984][ T4702] sctp: [Deprecated]: syz.2.76 (pid 4702) Use of int in max_burst socket option.
[   62.495984][ T4702] Use struct sctp_assoc_value instead
[   63.361808][ T4300] Bluetooth: hci0: command 0x0419 tx timeout
[   63.405588][  T157] device hsr_slave_0 left promiscuous mode
[   63.452566][  T157] device hsr_slave_1 left promiscuous mode
[   63.532223][  T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.534016][  T157] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.538509][  T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.540520][  T157] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.546038][  T157] device bridge_slave_1 left promiscuous mode
[   63.550770][  T157] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.674523][  T157] device bridge_slave_0 left promiscuous mode
[   63.676089][  T157] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.822225][  T157] device veth1_macvtap left promiscuous mode
[   63.823970][  T157] device veth0_macvtap left promiscuous mode
[   63.825335][  T157] device veth1_vlan left promiscuous mode
[   63.826785][  T157] device veth0_vlan left promiscuous mode
[   64.484273][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[   64.485914][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[   64.721142][ T4732] tmpfs: Bad value for 'mpol'
[   67.144857][  T157] team0 (unregistering): Port device team_slave_1 removed
[   67.574144][  T157] team0 (unregistering): Port device team_slave_0 removed
[   67.711039][ T4757] Bluetooth: MGMT ver 1.22
[   68.050680][ T4753] Set syz1 is full, maxelem 65536 reached
[   68.236603][ T4759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.238609][ T4759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.242950][  T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.243117][ T4759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.246911][ T4759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.361084][ T4761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.363275][ T4761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.512529][  T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.941980][ T1516] cfg80211: failed to load regulatory.db
[   71.639763][  T157] bond0 (unregistering): Released all slaves
[   71.866886][ T4715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.80'.
[   72.107227][ T4529] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.183004][ T4529] 8021q: adding VLAN 0 to HW filter on device team0
[   72.189665][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.192157][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.194298][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.197003][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.207051][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.208654][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.210523][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.222834][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.231182][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.232961][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.259231][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.261959][ T4437] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   72.312937][ T4813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'.
[   72.399108][ T4529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   72.401400][ T4529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.424187][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.426748][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.429183][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.451732][ T4437] usb 1-1: Using ep0 maxpacket: 8
[   72.454484][ T4437] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[   72.455629][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.456448][ T4437] usb 1-1: config 179 has no interface number 0
[   72.458746][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.459577][ T4437] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   72.464656][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.471898][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.479961][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.485502][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.487750][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.493492][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.496410][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.621711][ T4437] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   72.624277][ T4437] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   72.626821][ T4437] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   72.629249][ T4437] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   72.642174][ T4437] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   72.644238][ T4437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.655231][ T4795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   73.520302][ T4795] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   73.521969][ T4795] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   73.531449][ T4795] vhci_hcd vhci_hcd.0: Device attached
[   73.545749][ T4834] vhci_hcd: connection closed
[   73.552130][ T4454] vhci_hcd: stop threads
[   73.554647][ T4454] vhci_hcd: release socket
[   73.555679][ T4454] vhci_hcd: disconnect device
[   73.557310][ T4840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.559316][ T4840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.564298][ T4346] usb 1-1: USB disconnect, device number 7
[   73.564328][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   73.568353][    C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[   73.811521][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.813931][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.820395][ T4852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.827052][ T4852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.828501][ T4529] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.905039][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.907437][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.938443][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.944342][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.949866][ T4529] device veth0_vlan entered promiscuous mode
[   73.958763][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.961486][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.969124][ T4529] device veth1_vlan entered promiscuous mode
[   74.001306][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.003761][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.005975][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.008935][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.013477][ T4529] device veth0_macvtap entered promiscuous mode
[   74.019590][ T4529] device veth1_macvtap entered promiscuous mode
[   74.030107][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.042507][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.045352][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.048797][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.665144][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.667456][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.669489][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.671470][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.675152][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.677832][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.680205][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.709438][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.714017][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.731039][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.745081][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.747230][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.749436][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.751599][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.774223][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.782847][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.805734][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.831458][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.855151][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.857717][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.873372][ T4529] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.875215][ T4529] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.879172][ T4529] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.886473][ T4529] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.980171][ T4873] input: syz1 as /devices/virtual/input/input2
[   75.137996][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.139852][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.159697][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.179650][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.183969][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.194967][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.619779][ T4888] lo speed is unknown, defaulting to 1000
[   76.621826][ T4888] lo speed is unknown, defaulting to 1000
[   76.632132][ T4888] lo speed is unknown, defaulting to 1000
[   76.646729][ T4888] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.666237][ T4888] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   76.781290][ T4888] lo speed is unknown, defaulting to 1000
[   76.784005][ T4888] lo speed is unknown, defaulting to 1000
[   76.785692][ T4888] lo speed is unknown, defaulting to 1000
[   76.787462][ T4888] lo speed is unknown, defaulting to 1000
[   76.789303][ T4888] lo speed is unknown, defaulting to 1000
[   76.791059][ T4888] lo speed is unknown, defaulting to 1000
[   77.923286][ T4918] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   78.007257][ T4922] random: crng reseeded on system resumption
[   78.382042][ T4932] binder: 4931:4932 tried to acquire reference to desc 0, got 1 instead
[   78.384255][ T4932] binder_alloc: 4931: binder_alloc_buf size 4096 failed, no address space
[   78.386179][ T4932] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 4088 (num: 1 largest: 4088)
[   78.408047][ T4932] binder: cannot allocate buffer: no space left
[   78.408091][ T4932] binder: 4931:4932 transaction call to 4931:0 failed 12/29201/-28, size 0-0 line 3239
[   78.461862][ T4346] binder: undelivered TRANSACTION_COMPLETE
[   78.463244][ T4346] binder: undelivered TRANSACTION_ERROR: 29201
[   78.464612][ T4346] binder: undelivered transaction 11, process died.
[   78.582616][ T4922] Restarting kernel threads ... done.
[   78.621798][ T4347] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   78.785424][ T4944] sch_tbf: burst 4402 is lower than device lo mtu (65550) !
[   78.803629][ T4347] usb 1-1: config 0 has an invalid interface number: 88 but max is 0
[   78.805315][ T4347] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   78.807159][ T4347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   78.809444][ T4347] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[   78.811314][ T4347] usb 1-1: config 0 has no interface number 0
[   78.827427][ T4347] usb 1-1: config 0 interface 1 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   78.830179][ T4347] usb 1-1: config 0 interface 1 has no altsetting 0
[   78.861340][ T4347] usb 1-1: New USB device found, idVendor=05c6, idProduct=9625, bcdDevice=98.11
[   78.863639][ T4347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.865365][ T4347] usb 1-1: Product: syz
[   78.866249][ T4347] usb 1-1: Manufacturer: syz
[   78.867305][ T4347] usb 1-1: SerialNumber: syz
[   78.889555][ T4347] usb 1-1: config 0 descriptor??
[   79.107635][ T4347] option 1-1:0.88: GSM modem (1-port) converter detected
[   79.133357][ T4347] usb 1-1: USB disconnect, device number 8
[   79.135814][ T4347] option 1-1:0.88: device disconnected
[   79.151833][ T4956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'.
[   79.461253][ T4963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.479197][ T4963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.664228][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'.
[   80.666827][ T4976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.162'.
[   81.857391][ T4993] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input3
[   84.172089][ T4312] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   84.258461][ T5002] can0: slcan on ptm1.
[   84.355889][ T5002] can0 (unregistered): slcan off ptm1.
[   85.454903][ T5039] =======================================================
[   85.454903][ T5039] WARNING: The mand mount option has been deprecated and
[   85.454903][ T5039]          and is ignored by this kernel. Remove the mand
[   85.454903][ T5039]          option from the mount to silence this warning.
[   85.454903][ T5039] =======================================================
[   86.814404][  T157] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.931206][  T157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.010826][ T5068] netlink: 'syz.2.192': attribute type 7 has an invalid length.
[   87.053307][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'.
[   87.175206][  T157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.312167][ T5077] netlink: 'syz.1.191': attribute type 1 has an invalid length.
[   88.758936][ T5085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.763003][ T5085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.959004][ T4300] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.967362][ T4300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.972757][ T4300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.975215][ T4300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.977967][ T4300] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   88.979677][ T4300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   89.150469][ T4346] hid-generic 0A2F:0002:000F.0001: unknown main item tag 0xd
[   89.152685][ T4346] hid-generic 0A2F:0002:000F.0001: item fetching failed at offset 2/3
[   89.158236][ T4346] hid-generic: probe of 0A2F:0002:000F.0001 failed with error -22
[   89.859646][  T157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.957499][ T5086] lo speed is unknown, defaulting to 1000
[   90.907285][ T5086] chnl_net:caif_netlink_parms(): no params data found
[   91.061987][ T4300] Bluetooth: hci3: command 0x0409 tx timeout
[   92.026739][   T27] audit: type=1326 audit(92.010:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d52ba8 code=0x7ffc0000
[   92.037364][   T27] audit: type=1326 audit(92.020:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95d52ba8 code=0x7ffc0000
[   92.054839][   T27] audit: type=1326 audit(92.020:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d52ba8 code=0x7ffc0000
[   92.059473][   T27] audit: type=1326 audit(92.030:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95d52ba8 code=0x7ffc0000
[   92.069206][   T27] audit: type=1326 audit(92.030:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d52ba8 code=0x7ffc0000
[   92.074412][   T27] audit: type=1326 audit(92.030:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff95d52ba8 code=0x7ffc0000
[   92.078737][   T27] audit: type=1326 audit(92.030:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d52ba8 code=0x7ffc0000
[   92.083532][   T27] audit: type=1326 audit(92.040:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=128 compat=0 ip=0xffff95d52ba8 code=0x7ffc0000
[   92.087969][   T27] audit: type=1326 audit(92.040:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d52ba8 code=0x7ffc0000
[   92.092325][   T27] audit: type=1326 audit(92.050:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95d52ba8 code=0x7ffc0000
[   92.186393][ T5151] netlink: 'syz.1.204': attribute type 10 has an invalid length.
[   92.338221][ T5151] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.352424][ T5151] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   92.354462][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.356399][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.358740][ T5086] device bridge_slave_0 entered promiscuous mode
[   92.362631][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.364446][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.366619][ T5086] device bridge_slave_1 entered promiscuous mode
[   93.322258][ T4300] Bluetooth: hci3: command 0x041b tx timeout
[   93.862125][ T5086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.879773][ T5086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.028519][ T5179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.030632][ T5179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.130620][ T5086] team0: Port device team_slave_0 added
[   94.133782][ T5086] team0: Port device team_slave_1 added
[   94.225958][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.227514][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.230647][ T5186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.235159][ T5186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.246049][ T5086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.249653][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.251197][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.280904][ T5086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.427153][ T5086] device hsr_slave_0 entered promiscuous mode
[   94.553376][ T5086] device hsr_slave_1 entered promiscuous mode
[   94.601844][ T5086] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   94.604502][ T5086] Cannot create hsr debugfs directory
[   95.166840][ T4300] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   95.170885][ T4300] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   95.177821][ T4300] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   95.179504][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   95.180664][ T4300] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   95.189873][ T4300] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   95.192165][ T4300] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   95.361900][ T4312] Bluetooth: hci3: command 0x040f tx timeout
[   95.446312][ T5222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'.
[   95.931768][ T5212] lo speed is unknown, defaulting to 1000
[   95.994578][  T157] device hsr_slave_0 left promiscuous mode
[   96.047535][  T157] device hsr_slave_1 left promiscuous mode
[   96.111946][  T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.113719][  T157] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.115928][  T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.117469][  T157] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.134306][  T157] device bridge_slave_1 left promiscuous mode
[   96.135672][  T157] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.192492][  T157] device bridge_slave_0 left promiscuous mode
[   96.194039][  T157] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.745822][ T5276] tmpfs: Bad value for 'mpol'
[   96.891851][  T157] device veth1_macvtap left promiscuous mode
[   96.893425][  T157] device veth0_macvtap left promiscuous mode
[   96.895235][  T157] device veth1_vlan left promiscuous mode
[   96.896813][  T157] device veth0_vlan left promiscuous mode
[   97.201733][ T4300] Bluetooth: hci5: command 0x0409 tx timeout
[   97.441779][ T4300] Bluetooth: hci3: command 0x0419 tx timeout
[   99.281682][ T4300] Bluetooth: hci5: command 0x041b tx timeout
[   99.855230][ T5307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.856982][ T5307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.361996][ T4300] Bluetooth: hci5: command 0x040f tx timeout
[  101.387335][  T157] team0 (unregistering): Port device team_slave_1 removed
[  101.596872][  T157] team0 (unregistering): Port device team_slave_0 removed
[  101.794100][  T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.014400][  T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.832048][ T5315] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  102.833769][ T5315] vhci_hcd: default hub control req: d300 v0000 i0000 l0
[  103.442208][ T4300] Bluetooth: hci5: command 0x0419 tx timeout
[  104.032562][ T5326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.034699][ T5326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.535943][  T157] bond0 (unregistering): Released all slaves
[  104.790765][ T5309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.250'.
[  104.793459][ T5309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.250'.
[  104.997598][ T5086] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  105.033430][ T5334] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  105.073751][ T5086] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  105.111937][ T5086] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  105.146280][ T5086] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  105.198477][ T5342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.217359][ T5342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.358769][ T5212] chnl_net:caif_netlink_parms(): no params data found
[  105.520615][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.439124][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  106.441406][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  106.523992][ T5086] 8021q: adding VLAN 0 to HW filter on device team0
[  106.571171][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  106.574243][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  106.576325][ T4454] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.577939][ T4454] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.582268][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  106.624741][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  106.627228][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  106.629408][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.631035][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.668149][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.678772][ T5212] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.700449][ T5212] device bridge_slave_0 entered promiscuous mode
[  106.799674][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  106.813572][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.817894][ T5212] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.828946][ T5212] device bridge_slave_1 entered promiscuous mode
[  106.914020][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  106.916813][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  106.923760][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  106.930472][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  106.939607][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  106.960382][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  106.963455][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  106.965834][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  107.004759][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  107.010239][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  107.025570][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  107.038256][ T5212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.085049][ T5212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.132047][ T5212] team0: Port device team_slave_0 added
[  107.135043][ T5212] team0: Port device team_slave_1 added
[  107.182457][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.185162][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.196113][ T5212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.209846][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.211407][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.231739][ T5212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.343789][ T5212] device hsr_slave_0 entered promiscuous mode
[  107.392085][ T5212] device hsr_slave_1 entered promiscuous mode
[  107.429720][ T5212] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  107.431417][ T5212] Cannot create hsr debugfs directory
[  107.470483][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.585258][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  107.600680][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  108.628230][ T5414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.272'.
[  110.623224][ T5212] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  110.714686][ T5212] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  110.774434][ T5212] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  110.823732][ T5212] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  111.027138][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'.
[  111.141900][ T5212] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.151344][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  111.153754][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  111.982103][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  111.994084][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  112.000305][ T5086] device veth0_vlan entered promiscuous mode
[  112.007434][ T5212] 8021q: adding VLAN 0 to HW filter on device team0
[  112.009425][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  112.012766][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  112.017896][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  112.020779][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  112.047219][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  112.049428][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  112.055484][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.057004][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.065789][ T5086] device veth1_vlan entered promiscuous mode
[  112.068566][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  112.070753][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  112.076428][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  112.079221][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.080747][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.126818][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  112.129623][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  112.146199][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  112.149957][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  112.166235][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  112.195477][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  112.197864][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  112.972420][ T5086] device veth0_macvtap entered promiscuous mode
[  112.986650][ T5086] device veth1_macvtap entered promiscuous mode
[  113.025594][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.028300][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.030814][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.033743][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.036389][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.038952][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.041579][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.044383][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.047754][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.073387][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  113.075694][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  113.078091][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  113.080294][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  113.093608][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  113.101254][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  113.116994][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  113.142902][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  113.177710][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.180069][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.184566][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.186732][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.188892][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.191006][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.209113][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.220460][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.224497][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.230957][ T5212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  113.256596][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  113.332841][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  113.335411][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  113.337887][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  113.358535][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  113.417840][ T5086] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.419751][ T5086] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.421563][ T5086] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.443077][ T5086] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.006330][ T5486] capability: warning: `syz.2.290' uses 32-bit capabilities (legacy support in use)
[  114.306770][  T495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.308598][  T495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.313232][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  114.421108][ T4367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.424620][ T4367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.428598][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  114.474897][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  114.476786][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  114.492830][ T5496] block nbd1: Device being setup by another task
[  114.518350][ T5212] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.994459][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  114.997105][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  115.015098][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  115.017452][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  115.027721][ T5212] device veth0_vlan entered promiscuous mode
[  115.040657][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  115.046549][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  115.075716][ T5212] device veth1_vlan entered promiscuous mode
[  115.112176][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  115.114504][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  115.173627][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  115.177891][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  115.202294][ T5212] device veth0_macvtap entered promiscuous mode
[  115.203091][ T4312] block nbd1: Receive control failed (result -32)
[  115.209143][ T5493] block nbd1: shutting down sockets
[  115.225907][ T5212] device veth1_macvtap entered promiscuous mode
[  115.273697][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.284759][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.292457][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.301104][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.320021][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.333997][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.340481][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.354920][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.368120][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.379126][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.400998][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.411388][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  115.415465][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  115.419344][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  115.504731][ T5538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.507329][ T5538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.512709][ T5538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.514659][ T5538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.523943][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  115.659679][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.663737][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.695485][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.704191][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.456216][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.458892][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.461408][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.472660][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.476955][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.479192][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.491175][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.505702][ T5212] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.515605][ T5212] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.525017][ T5212] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.542353][ T5212] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.576509][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  116.579175][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  116.757881][ T5166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.759907][ T5166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.791185][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  116.834798][ T5166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.836650][ T5166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.844597][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  117.296106][ T5560] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  117.297535][ T5560] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  117.300356][ T5560] vhci_hcd vhci_hcd.0: Device attached
[  117.308574][ T5561] vhci_hcd: cannot find the pending unlink 7
[  117.310585][ T5561] vhci_hcd: connection closed
[  117.311288][ T4454] vhci_hcd: stop threads
[  117.319722][ T4454] vhci_hcd: release socket
[  117.336260][ T4454] vhci_hcd: disconnect device
[  117.758586][ T5569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.767228][ T5569] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.327468][ T5583] MPTCP: kernel_bind error, err=-22
[  118.783200][ T5582] sctp: failed to load transform for md5: -2
[  119.168696][ T5602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.194577][ T5602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.290549][ T5612] netlink: 20 bytes leftover after parsing attributes in process `syz.6.314'.
[  122.683004][ T5615] syz.2.312 uses obsolete (PF_INET,SOCK_PACKET)
[  122.910715][ T5621] IPVS: length: 24 != 49176
[  124.081985][ T5627] x_tables: ip_tables: osf match: only valid for protocol 6
[  125.922374][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  125.924285][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  126.319274][ T5663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.321425][ T5663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.371828][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.384932][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.661922][ T5690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.665684][ T5690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.248664][ T5721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.252854][ T5721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.286093][ T5721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.294931][ T5721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.038994][ T5749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.345'.
[  136.040979][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'.
[  139.062394][ T5777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.062553][ T5777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.532669][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.536601][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.432280][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.452002][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.441813][ T5816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.466434][ T5816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.538326][ T4300] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  142.542724][ T4300] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  142.545870][ T4300] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  142.548893][ T4300] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  142.550929][ T4300] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  142.553222][ T4300] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  143.695713][ T5819] lo speed is unknown, defaulting to 1000
[  143.709545][ T5842] binder: 5839:5842 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  143.761067][ T5855] binder: 5839:5855 tried to acquire reference to desc 0, got 1 instead
[  143.793024][ T4342] binder: release 5839:5855 transaction 17 out, still active
[  143.794848][ T4342] binder: undelivered TRANSACTION_COMPLETE
[  144.030179][ T5819] chnl_net:caif_netlink_parms(): no params data found
[  144.093764][ T5870] netlink: 'syz.4.369': attribute type 1 has an invalid length.
[  144.095677][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'.
[  144.159714][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.164631][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.172026][ T5819] device bridge_slave_0 entered promiscuous mode
[  144.188548][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.196821][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.204235][ T5819] device bridge_slave_1 entered promiscuous mode
[  144.316012][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.351511][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.387192][  T112] binder: release 5839:5842 transaction 17 in, still active
[  144.389115][  T112] binder: send failed reply for transaction 17, target dead
[  144.489040][ T5819] team0: Port device team_slave_0 added
[  144.552507][ T5819] team0: Port device team_slave_1 added
[  144.562049][ T4312] Bluetooth: hci6: command 0x0409 tx timeout
[  144.747944][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.749466][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.771844][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.777899][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.779884][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.785726][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.489383][ T5819] device hsr_slave_0 entered promiscuous mode
[  145.542190][ T5819] device hsr_slave_1 entered promiscuous mode
[  145.571818][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.573575][ T5819] Cannot create hsr debugfs directory
[  146.642996][ T4312] Bluetooth: hci6: command 0x041b tx timeout
[  146.655205][   T27] kauditd_printk_skb: 24 callbacks suppressed
[  146.655219][   T27] audit: type=1326 audit(146.640:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.5.381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad152ba8 code=0x7ffc0000
[  146.661076][   T27] audit: type=1326 audit(146.640:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.5.381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffad152ba8 code=0x7ffc0000
[  146.681514][ T5914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.683609][ T5914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.694653][   T27] audit: type=1326 audit(146.640:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.5.381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad152ba8 code=0x7ffc0000
[  146.699114][   T27] audit: type=1326 audit(146.640:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.5.381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=223 compat=0 ip=0xffffad152ba8 code=0x7ffc0000
[  146.758757][   T27] audit: type=1326 audit(146.640:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.5.381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad152ba8 code=0x7ffc0000
[  146.848457][ T5919] sch_tbf: burst 4402 is lower than device lo mtu (65550) !
[  146.946648][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.967682][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  146.970022][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  146.988265][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[  147.013600][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  147.016943][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  147.019138][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.020649][ T5588] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.033013][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  147.052595][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  147.054883][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.056924][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.058626][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.074039][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  147.087857][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  147.092940][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  147.098105][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  147.127612][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  147.133379][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  147.136679][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  147.140941][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  147.149737][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.157068][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  147.160068][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  147.167336][ T5819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  147.502127][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  147.503875][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  148.164832][ T5962] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  148.284722][ T5963] No such timeout policy "syz0"
[  148.498140][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.721749][ T4300] Bluetooth: hci6: command 0x040f tx timeout
[  148.961503][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  148.971236][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  149.009713][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  149.018724][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  149.023571][ T5819] device veth0_vlan entered promiscuous mode
[  149.030553][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  149.034918][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  149.038100][ T5819] device veth1_vlan entered promiscuous mode
[  149.080713][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  149.084105][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  149.086314][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  149.093915][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  149.103892][ T5819] device veth0_macvtap entered promiscuous mode
[  149.115002][ T5819] device veth1_macvtap entered promiscuous mode
[  149.134711][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.136986][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.139707][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.145490][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.147574][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.149721][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.152869][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.154941][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.157657][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.160522][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.172026][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.174372][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.178100][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.179907][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  149.182562][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  149.184689][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  149.186978][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  149.201183][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.211510][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.214629][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.216752][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.218692][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.220851][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.229361][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.237220][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.239396][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.241574][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.253907][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.257020][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.278304][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.280411][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  149.284499][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  149.389139][ T4454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.391019][ T4454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.397754][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  149.430775][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.433731][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.437833][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  149.551999][ T6003] sch_tbf: burst 4402 is lower than device lo mtu (65550) !
[  149.574458][ T6005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.582256][ T6005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.169411][ T6014] ./file0: Can't open blockdev
[  151.374522][ T4312] Bluetooth: hci6: command 0x0419 tx timeout
[  151.677109][ T6022] binder: 6021:6022 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  151.729015][ T6028] binder: 6021:6028 tried to acquire reference to desc 0, got 1 instead
[  151.733206][ T4348] binder: release 6021:6028 transaction 22 out, still active
[  151.734863][ T4348] binder: undelivered TRANSACTION_COMPLETE
[  151.987862][ T4348] binder: undelivered death notification, 0000000000000000
[  152.256631][ T4348] binder: release 6021:6022 transaction 22 in, still active
[  152.258235][ T4348] binder: send failed reply for transaction 22, target dead
[  154.040067][ T6050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.046024][ T6050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.240427][ T6060] sch_tbf: burst 4402 is lower than device lo mtu (65550) !
[  159.387318][ T4300] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  159.391339][ T4300] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  159.394468][ T4297] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  159.397411][ T4300] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  159.400169][ T4300] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  159.402074][ T4300] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  159.737589][ T6112] sch_tbf: burst 4402 is lower than device lo mtu (65550) !
[  159.759716][ T6094] lo speed is unknown, defaulting to 1000
[  161.334305][ T6094] chnl_net:caif_netlink_parms(): no params data found
[  161.722266][ T4300] Bluetooth: hci7: command 0x0409 tx timeout
[  162.337965][ T6141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.340956][ T6141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.422678][ T6094] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.424379][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.426624][ T6094] device bridge_slave_0 entered promiscuous mode
[  162.429990][ T6094] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.431531][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.434478][ T6094] device bridge_slave_1 entered promiscuous mode
[  162.450979][ T6094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.455619][ T6094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.535477][ T6094] team0: Port device team_slave_0 added
[  162.539305][ T6094] team0: Port device team_slave_1 added
[  162.577513][ T6148] sch_tbf: burst 4402 is lower than device lo mtu (65550) !
[  162.637683][ T4300] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  162.641956][ T4300] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  162.644961][ T4300] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  162.647075][ T4300] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  162.650427][ T4300] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  162.652880][ T4300] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  163.448052][ T6094] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.449573][ T6094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.462344][ T6094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.466078][ T6094] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.467596][ T6094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.551488][ T6094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.505684][ T4300] Bluetooth: hci7: command 0x041b tx timeout
[  164.507041][ T4300] Bluetooth: hci2: command 0x0406 tx timeout
[  164.508336][ T4300] Bluetooth: hci4: command 0x0406 tx timeout
[  164.509580][ T4300] Bluetooth: hci1: command 0x0406 tx timeout
[  164.721784][ T4312] Bluetooth: hci8: command 0x0409 tx timeout
[  164.864911][ T6094] device hsr_slave_0 entered promiscuous mode
[  164.952168][ T6094] device hsr_slave_1 entered promiscuous mode
[  165.012215][ T6094] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.013801][ T6094] Cannot create hsr debugfs directory
[  165.188458][ T6174] udevd[6174]: setting mode of /dev/gsmtty81 to 020600 failed: No such file or directory
[  165.190698][ T6174] udevd[6174]: setting owner of /dev/gsmtty81 to uid=0, gid=0 failed: No such file or directory
[  165.218320][ T6151] lo speed is unknown, defaulting to 1000
[  165.239416][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.251900][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.413844][ T6203] sch_tbf: burst 4402 is lower than device lo mtu (65550) !
[  166.475833][ T6094] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.559868][ T6094] 8021q: adding VLAN 0 to HW filter on device team0
[  166.571895][ T4312] Bluetooth: hci7: command 0x040f tx timeout
[  166.579636][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  166.582840][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  166.612813][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  166.615614][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  166.619415][  T157] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.621058][  T157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.668306][ T6151] chnl_net:caif_netlink_parms(): no params data found
[  166.851298][ T4300] Bluetooth: hci8: command 0x041b tx timeout
[  167.399504][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  167.402832][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  167.405945][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  167.408115][  T157] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.409598][  T157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.465594][ T6094] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  167.467810][ T6094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  167.722231][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  167.724672][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  167.727004][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  167.736675][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  169.034881][ T4312] Bluetooth: hci7: command 0x0419 tx timeout
[  169.201933][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  169.216699][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  169.229516][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  169.242469][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  169.247100][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  169.257073][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  169.276898][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  169.287330][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  169.463023][ T4300] Bluetooth: hci8: command 0x040f tx timeout
[  169.499940][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  170.226385][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.228422][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.237361][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.238938][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.251087][ T6151] device bridge_slave_0 entered promiscuous mode
[  170.259868][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.261346][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.264420][ T6151] device bridge_slave_1 entered promiscuous mode
[  170.293636][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.7.454'.
[  170.597656][ T6151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.624073][ T6151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.635224][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  170.637503][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  170.648254][ T6094] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.718971][ T6151] team0: Port device team_slave_0 added
[  170.730069][ T6151] team0: Port device team_slave_1 added
[  170.756696][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.758153][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.772159][ T6151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.779484][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.784720][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.801985][ T6151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.894306][ T6151] device hsr_slave_0 entered promiscuous mode
[  170.992300][ T6151] device hsr_slave_1 entered promiscuous mode
[  171.102954][ T6151] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  171.194243][ T6151] Cannot create hsr debugfs directory
[  171.782281][ T4312] Bluetooth: hci8: command 0x0419 tx timeout
[  171.901803][ T6265] sch_tbf: burst 4402 is lower than device lo mtu (65550) !
[  172.019189][ T6264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.021104][ T6264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.071393][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  172.073862][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  172.090896][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  172.097609][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  172.102657][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  172.117385][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  172.127435][ T6094] device veth0_vlan entered promiscuous mode
[  172.156024][ T6094] device veth1_vlan entered promiscuous mode
[  172.229042][ T6264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.231186][ T6264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.255682][ T6151] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.276197][ T6151] 8021q: adding VLAN 0 to HW filter on device team0
[  172.311116][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  172.315685][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  172.317970][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  172.320283][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  172.326212][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  172.330483][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  172.333859][ T4454] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.335410][ T4454] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.338554][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  172.598164][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  172.919902][ T4454] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.921598][ T4454] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.070757][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  173.082640][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  173.092591][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  173.103885][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  173.112362][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  173.116499][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  173.178318][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  173.192296][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  173.202630][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  173.205125][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  173.341281][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  173.358119][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  173.378572][ T6277] device wireguard0 entered promiscuous mode
[  173.860480][ T6094] device veth0_macvtap entered promiscuous mode
[  173.871831][ T6151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  173.879206][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  173.881853][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  173.884300][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  173.896213][ T6094] device veth1_macvtap entered promiscuous mode
[  173.936079][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.938373][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.940471][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.947506][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.950345][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.954721][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.963410][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.965723][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.967978][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.970139][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.975598][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.978801][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.982497][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.984811][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.993593][ T6094] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.002895][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.005824][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.008375][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.040857][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.043731][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.046158][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.049417][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.063049][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.069851][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.111667][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.113897][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.121729][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.124170][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.126897][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.132465][ T6094] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.134806][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  174.143698][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  174.146129][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  174.148528][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  174.150858][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  174.174799][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  174.176715][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  174.189510][ T6151] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.279250][ T5589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.285795][ T5589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.290009][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  174.307426][ T5016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.310251][ T5016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.326090][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  174.708361][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  174.712243][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  174.809318][ T6310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.999956][ T6312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.447637][ T6151] device veth0_vlan entered promiscuous mode
[  175.470135][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  175.472848][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  175.478792][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  175.485478][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  175.509936][ T6151] device veth1_vlan entered promiscuous mode
[  175.563705][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  175.565994][  T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  175.584508][ T6151] device veth0_macvtap entered promiscuous mode
[  175.597342][ T6151] device veth1_macvtap entered promiscuous mode
[  175.637468][ T6320] sch_tbf: burst 4402 is lower than device lo mtu (65550) !
[  175.692337][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.694579][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.696648][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.700809][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.707134][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.711820][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.714081][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.716459][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.725387][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.738917][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.751369][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.757072][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.763631][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.771118][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.778379][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.782284][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.786259][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.792449][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  175.794676][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  175.797063][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  175.802679][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  175.813091][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.815218][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.817215][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.819257][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.821360][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.842730][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.845813][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.847847][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.849775][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.852583][ T6285] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  175.861766][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.863779][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.866149][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.868293][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.870336][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.881215][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.886437][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.892560][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.018878][ T5898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.020995][ T5898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.030460][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  176.044924][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  176.051140][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  176.918945][ T5898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.921014][ T5898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.927215][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  181.934460][ T6364] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  182.624634][ T6395] binder: 6389:6395 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  182.627501][ T6395] binder: 6395 RLIMIT_NICE not set
[  183.083494][ T6396] binder: 6389:6396 tried to acquire reference to desc 0, got 1 instead
[  183.211800][ T6395] binder: 6395 RLIMIT_NICE not set
[  184.121550][ T4348] binder: release 6389:6395 transaction 29 in, still active
[  184.151699][ T4348] binder: send failed reply for transaction 29 to 6389:6396
[  184.153680][ T4348] binder: undelivered TRANSACTION_COMPLETE
[  184.154920][ T4348] binder: undelivered TRANSACTION_ERROR: 29189
[  184.622865][ T6412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.628398][ T6412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.661927][ T6419] mmap: syz.1.504 (6419) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  186.323381][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.8.507'.
[  187.980573][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  187.981992][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  188.354461][   T27] audit: type=1326 audit(188.280:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.9.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86152ba8 code=0x7ffc0000
[  188.359748][   T27] audit: type=1326 audit(188.280:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.9.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff86152ba8 code=0x7ffc0000
[  188.369598][   T27] audit: type=1326 audit(188.280:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.9.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86152ba8 code=0x7ffc0000
[  188.375065][   T27] audit: type=1326 audit(188.280:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.9.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=134 compat=0 ip=0xffff86152ba8 code=0x7ffc0000
[  188.380153][   T27] audit: type=1326 audit(188.280:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.9.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86152ba8 code=0x7ffc0000
[  189.993745][ T4312] Bluetooth: hci7: command 0x201b tx timeout
[  190.177830][ T6446] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  191.407773][ T4300] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.415274][ T4300] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.417662][ T4300] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  191.425364][ T4297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  191.427312][ T4297] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  191.428827][ T4297] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  192.610118][ T6474] lo speed is unknown, defaulting to 1000
[  193.523125][ T4312] Bluetooth: hci4: command 0x0409 tx timeout
[  193.823832][ T6474] chnl_net:caif_netlink_parms(): no params data found
[  194.352057][ T6523] xt_nat: multiple ranges no longer supported
[  195.141456][ T6526] binder: 6520:6526 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  195.144494][ T6526] binder: 6526 RLIMIT_NICE not set
[  195.224179][ T6527] binder: 6520:6527 tried to acquire reference to desc 0, got 1 instead
[  195.226983][ T6526] binder: 6526 RLIMIT_NICE not set
[  195.627620][ T4348] binder: release 6520:6527 transaction 34 out, still active
[  195.629186][ T4348] binder: undelivered TRANSACTION_COMPLETE
[  195.631540][ T4297] Bluetooth: hci4: command 0x041b tx timeout
[  195.762641][   T24] binder: release 6520:6526 transaction 34 in, still active
[  195.764380][   T24] binder: send failed reply for transaction 34, target dead
[  195.792664][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.794386][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.811541][ T6474] device bridge_slave_0 entered promiscuous mode
[  195.839009][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.840558][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.843566][ T6474] device bridge_slave_1 entered promiscuous mode
[  195.881477][ T6474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.893951][ T6474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.925968][ T6537] netlink: 'syz.7.541': attribute type 10 has an invalid length.
[  195.982368][ T6537] 8021q: adding VLAN 0 to HW filter on device team0
[  196.001903][ T6537] bond0: (slave team0): Enslaving as an active interface with an up link
[  196.064982][ T6531] lo speed is unknown, defaulting to 1000
[  196.107132][ T6474] team0: Port device team_slave_0 added
[  196.117770][ T6474] team0: Port device team_slave_1 added
[  196.345316][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.347419][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.697059][ T6474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.083536][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.085071][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.137685][ T6474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.323691][ T6474] device hsr_slave_0 entered promiscuous mode
[  197.374870][ T6474] device hsr_slave_1 entered promiscuous mode
[  197.411928][ T6474] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.413562][ T6474] Cannot create hsr debugfs directory
[  197.713055][ T4312] Bluetooth: hci4: command 0x040f tx timeout
[  198.586910][ T6474] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.595721][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  198.598095][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  198.614683][ T6474] 8021q: adding VLAN 0 to HW filter on device team0
[  198.773234][ T6582] binder: 6576:6582 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  198.776078][ T6582] binder: 6582 RLIMIT_NICE not set
[  198.865328][ T6583] binder: 6576:6583 tried to acquire reference to desc 0, got 1 instead
[  198.869129][ T6582] binder: 6582 RLIMIT_NICE not set
[  199.421323][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  199.423944][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  199.426196][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.427842][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.431566][ T4348] binder: release 6576:6582 transaction 39 in, still active
[  199.433299][ T4348] binder: send failed reply for transaction 39 to 6576:6583
[  199.434867][ T4348] binder: undelivered TRANSACTION_COMPLETE
[  199.436085][ T4348] binder: undelivered TRANSACTION_ERROR: 29189
[  199.468645][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  199.505445][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  199.507943][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.509484][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.518062][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  199.532908][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  199.549932][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  199.572999][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  199.577529][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  199.598597][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  199.605746][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  199.611285][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  199.677646][ T6474] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  199.685525][ T6474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  199.755349][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  199.761732][ T4312] Bluetooth: hci4: command 0x0419 tx timeout
[  199.765832][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  199.776196][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  199.780825][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  199.783382][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  200.769517][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  200.771269][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  200.837956][ T6474] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.279683][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  202.311846][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  202.334422][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  202.337212][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  202.339614][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  202.377789][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  203.096839][ T6474] device veth0_vlan entered promiscuous mode
[  203.156194][ T6474] device veth1_vlan entered promiscuous mode
[  203.256320][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  203.258721][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  203.261280][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  203.267091][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  203.287929][ T6474] device veth0_macvtap entered promiscuous mode
[  203.302889][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  203.311541][ T6474] device veth1_macvtap entered promiscuous mode
[  204.350767][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.366765][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.368823][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.370908][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.379684][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.382113][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.384283][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.386571][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.687997][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.774828][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.859643][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.960340][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.069464][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.079315][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.093423][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.095854][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.097980][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.112269][ T6661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.114393][ T6661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.126602][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.130728][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.225506][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.227786][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.229906][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.262312][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.272002][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.274280][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.313522][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.315832][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.317906][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.322149][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.324157][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.538648][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.642423][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.961425][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.964890][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.967177][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.976453][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.986969][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.989105][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.991345][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.008107][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.011304][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  207.014834][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  207.018659][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  207.038780][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  207.381147][ T4297] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  208.366092][ T5589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.368007][ T5589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.372471][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  208.461715][ T5589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.463808][ T5589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.468596][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  208.812658][ T6694] netlink: 'syz.9.588': attribute type 1 has an invalid length.
[  215.246165][ T4312] Bluetooth: hci3: command 0x0406 tx timeout
[  219.718859][ T6785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.611'.
[  222.090517][ T4312] Bluetooth: hci5: command 0x0406 tx timeout
[  222.393268][ T4312] Bluetooth: hci7: unexpected event 0x3e length: 318 > 260
[  222.393299][ T4312] Bluetooth: hci7: unexpected subevent 0x0d length: 317 > 260
[  222.396544][ T4312] Bluetooth: hci7: adv larger than maximum supported
[  222.396605][ T4312] Bluetooth: hci7: Malformed LE Event: 0x0d
[  223.164865][ T6823] netlink: 16 bytes leftover after parsing attributes in process `syz.8.624'.
[  225.979460][ T6848] binder: 6844:6848 Acquire 1 refcount change on invalid ref 0 ret -22
[  225.986909][ T6848] binder: 6844:6848 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  226.038593][ T6845] binder: 6844:6845 got transaction to invalid handle, 1
[  226.040578][ T6845] binder: 6845:6844 cannot find target node
[  226.104740][ T6845] binder: 6844:6845 transaction call to 0:0 failed 42/29201/-22, size 0-0 line 3054
[  226.674134][ T4349] binder: undelivered TRANSACTION_ERROR: 29201
[  226.674493][ T6862] binder: 6861:6862 tried to acquire reference to desc 0, got 1 instead
[  226.682770][ T6862] binder_alloc: 6861: pid 6861 spamming oneway? 1 buffers allocated for a total size of 4096
[  226.688188][ T4435] binder: release 6861:6862 transaction 47 out, still active
[  226.690263][ T4435] binder: undelivered TRANSACTION_COMPLETE
[  226.692232][ T4435] binder: undelivered TRANSACTION_COMPLETE
[  226.753984][ T4349] binder: send failed reply for transaction 47, target dead
[  226.756015][ T4349] binder: undelivered transaction 48, process died.
[  227.025398][ T6866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.637'.
[  227.371251][ T6879] netlink: 'syz.7.640': attribute type 29 has an invalid length.
[  227.376924][ T6879] netlink: 'syz.7.640': attribute type 29 has an invalid length.
[  227.393201][ T6879] netlink: 'syz.7.640': attribute type 29 has an invalid length.
[  227.401795][ T6879] netlink: 'syz.7.640': attribute type 29 has an invalid length.
[  227.405881][ T6879] netlink: 'syz.7.640': attribute type 29 has an invalid length.
[  227.409946][ T6879] netlink: 'syz.7.640': attribute type 29 has an invalid length.
[  227.413871][ T6879] netlink: 'syz.7.640': attribute type 29 has an invalid length.
[  227.417979][ T6879] netlink: 'syz.7.640': attribute type 29 has an invalid length.
[  227.422242][ T6879] netlink: 'syz.7.640': attribute type 29 has an invalid length.
[  230.252138][ T4312] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  230.389281][ T6905] binder: 6904:6905 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  230.440748][ T6914] binder: 6904:6914 tried to acquire reference to desc 0, got 1 instead
[  230.445566][ T6756] binder: release 6904:6914 transaction 53 out, still active
[  230.447146][ T6756] binder: undelivered TRANSACTION_COMPLETE
[  232.023284][ T4441] binder: release 6904:6905 transaction 53 in, still active
[  232.025071][ T4441] binder: send failed reply for transaction 53, target dead
[  232.149126][  T112] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  232.218566][ T6944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.220670][ T6944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.051758][  T112] usb 1-1: Using ep0 maxpacket: 16
[  234.055107][  T112] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  234.057245][  T112] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.059716][  T112] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  234.074745][  T112] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  234.095155][  T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.111014][  T112] usb 1-1: Product: syz
[  234.119937][  T112] usb 1-1: Manufacturer: syz
[  234.156504][  T112] usb 1-1: SerialNumber: syz
[  234.188519][  T112] usb 1-1: can't set config #1, error -71
[  234.198281][  T112] usb 1-1: USB disconnect, device number 9
[  234.325682][ T6964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.327916][ T6964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.055486][ T7007] tipc: Started in network mode
[  238.056900][ T7007] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  238.058828][ T7007] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  239.890810][ T6756] tipc: Node number set to 10136234
[  241.279658][ T7035] binder: 7029:7035 tried to acquire reference to desc 0, got 1 instead
[  241.442991][ T7035] binder: 7029:7035 ioctl c0306201 20000300 returned -11
[  241.443329][ T4346] binder: release 7029:7035 transaction 58 out, still active
[  241.443374][ T4346] binder: undelivered TRANSACTION_COMPLETE
[  241.625343][ T4346] binder: send failed reply for transaction 58, target dead
[  241.831757][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.8.700'.
[  244.023876][ T7075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.025903][ T7075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.211907][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.7.714'.
[  247.465744][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.474226][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.804767][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  248.806176][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  251.830360][ T7176] netlink: 16 bytes leftover after parsing attributes in process `syz.8.742'.
[  251.988998][ T6756] kernel write not supported for file /sequencer2 (pid: 6756 comm: kworker/1:13)
[  252.389502][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.401952][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.896915][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.911460][ T7254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.912347][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.913663][ T7254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.002961][ T7276] binder: 7275:7276 tried to acquire reference to desc 0, got 1 instead
[  256.014640][ T7276] binder_alloc: 7275: pid 7275 spamming oneway? 1 buffers allocated for a total size of 4096
[  256.034205][ T4435] binder: release 7275:7276 transaction 63 out, still active
[  256.035881][ T4435] binder: undelivered TRANSACTION_COMPLETE
[  256.037162][ T4435] binder: undelivered TRANSACTION_COMPLETE
[  256.102545][ T4435] binder: send failed reply for transaction 63, target dead
[  256.104354][ T4435] binder: undelivered transaction 64, process died.
[  256.120855][ T7284] netlink: 1788 bytes leftover after parsing attributes in process `syz.0.786'.
[  256.204786][ T7286] fuse: Bad value for 'fd'
[  260.455594][ T4297] Bluetooth: hci7: command 0x0406 tx timeout
[  260.491422][ T7338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.500553][ T7338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.774809][ T7362] binder: 7361:7362 got transaction to invalid handle, 1
[  261.776394][ T7362] binder: 7362:7361 cannot find target node
[  261.777643][ T7362] binder: 7361:7362 transaction call to 0:0 failed 67/29201/-22, size 0-0 line 3054
[  261.782542][  T112] binder: undelivered TRANSACTION_ERROR: 29201
[  263.178857][ T7385] fuse: Bad value for 'fd'
[  267.556519][ T4312] Bluetooth: hci6: command 0x0406 tx timeout
[  267.715605][ T7423] binder: 7422:7423 got transaction to invalid handle, 1
[  267.725207][ T7423] binder: 7423:7422 cannot find target node
[  267.726721][ T7423] binder: 7422:7423 transaction call to 0:0 failed 70/29201/-22, size 0-0 line 3054
[  267.759573][ T6756] binder: undelivered TRANSACTION_ERROR: 29201
[  269.602081][ T7450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.613586][ T7450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.761814][ T4297] Bluetooth: hci1: command 0x0000 tx timeout
[  270.072719][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.075225][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.423643][ T7466] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.429578][ T7466] bond0: (slave rose0): Enslaving as an active interface with an up link
[  270.460310][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  271.601303][ T7479] binder: BINDER_SET_CONTEXT_MGR already set
[  271.605998][ T7479] binder: 7478:7479 ioctl 4018620d 200001c0 returned -16
[  271.646999][ T7479] binder: 7478:7479 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  271.686785][ T7492] binder: 7478:7492 got transaction to invalid handle, 1
[  271.688257][ T7492] binder: 7492:7478 cannot find target node
[  271.689959][ T7492] binder: 7478:7492 transaction call to 0:0 failed 73/29201/-22, size 0-0 line 3054
[  271.803242][ T4349] binder: undelivered TRANSACTION_ERROR: 29201
[  273.902205][ T7526] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  274.278785][ T7528] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  274.521963][ T4435] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  274.609032][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.9.860'.
[  274.623817][ T7544] netlink: 16 bytes leftover after parsing attributes in process `syz.9.860'.
[  274.703367][ T4435] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  274.705058][ T4435] usb 1-1: config 0 has no interface number 0
[  274.706323][ T4435] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.708705][ T4435] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.708839][ T7551] binder: BINDER_SET_CONTEXT_MGR already set
[  274.710832][ T4435] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  274.712716][ T7551] binder: 7550:7551 ioctl 4018620d 200001c0 returned -16
[  274.718802][ T7551] binder: 7550:7551 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  274.735485][ T4435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.763951][ T4435] usb 1-1: config 0 descriptor??
[  274.770743][ T7553] binder: 7550:7553 got transaction to invalid handle, 1
[  274.772233][ T7553] binder: 7553:7550 cannot find target node
[  274.773869][ T7553] binder: 7550:7553 transaction call to 0:0 failed 76/29201/-22, size 0-0 line 3054
[  275.430779][ T4435] prodikeys 0003:041E:2801.0002: collection stack underflow
[  275.433652][ T4435] prodikeys 0003:041E:2801.0002: item 0 1 0 12 parsing failed
[  275.438418][ T4435] prodikeys 0003:041E:2801.0002: hid parse failed
[  275.450997][ T4435] prodikeys: probe of 0003:041E:2801.0002 failed with error -22
[  275.537580][ T4435] binder: undelivered TRANSACTION_ERROR: 29201
[  275.640798][ T4349] usb 1-1: USB disconnect, device number 10
[  278.163191][ T7601] binder: BINDER_SET_CONTEXT_MGR already set
[  278.164673][ T7601] binder: 7599:7601 ioctl 4018620d 200001c0 returned -16
[  278.184581][ T7601] binder: 7599:7601 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  278.235883][ T7610] binder: 7599:7610 got transaction to invalid handle, 1
[  278.237616][ T7610] binder: 7610:7599 cannot find target node
[  278.238952][ T7610] binder: 7599:7610 transaction call to 0:0 failed 79/29201/-22, size 0-0 line 3054
[  278.439101][ T4349] binder: undelivered TRANSACTION_ERROR: 29201
[  279.207863][ T7626] netlink: 36 bytes leftover after parsing attributes in process `syz.7.880'.
[  281.642032][ T4297] Bluetooth: hci7: command 0x0406 tx timeout
[  281.959959][ T7658] binder: 7657:7658 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  282.011983][ T7659] binder: 7657:7659 got transaction to invalid handle, 1
[  282.013679][ T7659] binder: 7659:7657 cannot find target node
[  282.015017][ T7659] binder: 7657:7659 transaction call to 0:0 failed 83/29201/-22, size 0-0 line 3054
[  282.215373][ T7665] fuse: Invalid rootmode
[  282.661771][   T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  282.727315][   T28] INFO: task syz.2.323:5662 blocked for more than 143 seconds.
[  282.728991][   T28]       Not tainted 6.1.123-syzkaller #0
[  282.730202][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  282.734893][   T28] task:syz.2.323       state:D stack:0     pid:5662  ppid:4302   flags:0x00000001
[  282.737809][   T28] Call trace:
[  282.739089][   T28]  __switch_to+0x308/0x598
[  282.739991][   T28]  __schedule+0xef4/0x1d44
[  282.740932][   T28]  schedule+0xc4/0x170
[  282.749959][   T28]  schedule_preempt_disabled+0x18/0x2c
[  282.751156][   T28]  rwsem_down_read_slowpath+0x534/0x858
[  282.753500][   T28]  down_read+0xac/0x308
[  282.755306][   T28]  page_cache_ra_unbounded+0xc8/0x58c
[  282.757306][   T28]  page_cache_ra_order+0x850/0xa74
[  282.759267][   T28]  do_sync_mmap_readahead+0x3a4/0x844
[  282.761405][   T28]  filemap_fault+0x604/0xf7c
[  282.763400][   T28]  __do_fault+0x11c/0x3d8
[  282.765331][   T28]  handle_mm_fault+0x17ac/0x3d38
[  282.767320][   T28]  do_page_fault+0x330/0x890
[  282.776086][ T4443] binder: undelivered TRANSACTION_ERROR: 29201
[  282.777666][   T28]  do_translation_fault+0x94/0xc8
[  282.781276][   T28]  do_mem_abort+0x74/0x200
[  282.782455][   T28]  el1_abort+0x3c/0x5c
[  282.783297][   T28]  el1h_64_sync_handler+0x60/0xac
[  282.784463][   T28]  el1h_64_sync+0x64/0x68
[  282.785637][   T28]  __sys_socketpair+0x204/0x7a4
[  282.786797][   T28]  __arm64_sys_socketpair+0x9c/0xb8
[  282.789135][   T28]  invoke_syscall+0x98/0x2bc
[  282.790293][   T28]  el0_svc_common+0x138/0x258
[  282.791563][   T28]  do_el0_svc+0x58/0x13c
[  282.792729][   T28]  el0_svc+0x58/0x168
[  282.793667][   T28]  el0t_64_sync_handler+0x84/0xf0
[  282.795082][   T28]  el0t_64_sync+0x18c/0x190
[  282.796570][   T28] 
[  282.796570][   T28] Showing all locks held in the system:
[  282.798398][   T28] 1 lock held by rcu_tasks_kthre/12:
[  282.799754][   T28]  #0: ffff800015c65530 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4
[  282.802872][   T28] 1 lock held by rcu_tasks_trace/13:
[  282.804174][   T28]  #0: ffff800015c65d30 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4
[  282.806986][   T28] 6 locks held by kworker/1:1/24:
[  282.808266][   T28]  #0: ffff0000c46a8d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x664/0x1404
[  282.810863][   T28]  #1: ffff80001d2e7c20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404
[  282.814015][   T28]  #2: ffff0000d16f6190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1b0/0x42e4
[  282.816458][   T28]  #3: ffff0000d1f21510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x1bdc/0x42e4
[  282.819178][   T28]  #4: ffff0000d1a38e68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x1c04/0x42e4
[  282.821534][   T28]  #5: ffff0001b3d14158 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2c4/0x1d44
[  282.845780][   T24] usb 1-1: Using ep0 maxpacket: 32
[  282.853423][   T24] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  282.855803][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.861217][   T28] 1 lock held by khungtaskd/28:
[  282.865186][   T28]  #0: ffff800015c65360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44
[  282.875490][   T28] 2 locks held by getty/4056:
[  282.881206][   T28]  #0: ffff0000d6354098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[  282.889335][   T24] usb 1-1: config 0 descriptor??
[  282.906088][   T24] gspca_main: sunplus-2.14.0 probing 041e:400b
[  282.908910][   T28]  #1: ffff80001d8202f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214
[  282.922674][   T28] 1 lock held by syz.3.157/4958:
[  282.928192][   T28]  #0: ffff0000c0549ed8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x1a08/0x26c8
[  282.941975][   T28] 1 lock held by syz.2.323/5662:
[  282.960383][   T28]  #0: ffff0000c0549ed8 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xc8/0x58c
[  282.979320][   T28] 1 lock held by syz.6.364/5837:
[  282.984323][   T28]  #0: ffff0000c0549ed8 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xc8/0x58c
[  282.994175][   T28] 3 locks held by kworker/u4:19/5898:
[  282.998581][   T28] 3 locks held by syz.5.387/5962:
[  283.004051][   T28]  #0: ffff0000c96680e0 (&type->s_umount_key#63/1){+.+.}-{3:3}, at: alloc_super+0x1b4/0x824
[  283.013004][   T28]  #1: ffff800015e2a4e8 (read_mutex){+.+.}-{3:3}, at: cramfs_read_super+0xb0/0x7f4
[  283.021120][   T28]  #2: ffff0000c0549ed8 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xc8/0x58c
[  283.031068][   T28] 4 locks held by udevd/6185:
[  283.036922][   T28]  #0: ffff0000fa9b1b08 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xac/0xc44
[  283.044865][   T28]  #1: ffff0000f471e488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x58/0x384
[  283.066527][   T28]  #2: ffff00010ce1bda0 (kn->active#4){.+.+}-{0:0}, at: kernfs_seq_start+0x74/0x384
[  283.081747][   T28]  #3: ffff0000f55f8190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x178/0x338
[  283.099994][   T28] 1 lock held by syz.7.895/7666:
[  283.105508][   T28] 4 locks held by syz.9.898/7675:
[  283.110057][   T28] 
[  283.111082][   T28] =============================================
[  283.111082][   T28] 
[  283.121885][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  283.123348][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.123-syzkaller #0
[  283.125174][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  283.127626][   T28] Call trace:
[  283.128410][   T28]  dump_backtrace+0x1c8/0x1f4
[  283.129519][   T28]  show_stack+0x2c/0x3c
[  283.130537][   T28]  dump_stack_lvl+0x108/0x170
[  283.131617][   T28]  dump_stack+0x1c/0x58
[  283.132473][   T28]  panic+0x300/0x804
[  283.133327][   T28]  hung_task_panic+0x0/0x2c
[  283.134314][   T28]  kthread+0x250/0x2d8
[  283.135209][   T28]  ret_from_fork+0x10/0x20
[  283.136169][   T28] SMP: stopping secondary CPUs
[  283.137181][   T28] Kernel Offset: disabled
[  283.138034][   T28] CPU features: 0x080000,02070084,26017203
[  283.139257][   T28] Memory Limit: none
[  283.227570][   T28] Rebooting in 86400 seconds..