last executing test programs:

7m45.550350143s ago: executing program 1 (id=195):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x2, 0x1, {{0x5, 0x4, 0x2, 0x3f, 0x14, 0x68, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010100, @multicast2}}}})

7m44.286551685s ago: executing program 1 (id=199):
openat$vsock(0xffffff9c, &(0x7f0000000200), 0x4e41, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x68}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m40.230325213s ago: executing program 1 (id=206):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x0, 0x40000331}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000280)}, 0x10)
io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0)

7m38.590817616s ago: executing program 1 (id=212):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000080)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7m38.286092007s ago: executing program 1 (id=218):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@gettfilter={0x24, 0x2e, 0x301}, 0x24}}, 0x0)

7m37.130275409s ago: executing program 1 (id=223):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcf, 0x0, 0x0, 0x10, 0x682, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_freezer_state(r6, 0x0, 0x2, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r7 = accept(r1, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000000380)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r8 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$kcm(r8, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x1}, {&(0x7f00000002c0)="bcc9b1b53de1fad1f955144629ed4dcf3c33679ea20502e3cff8923bf5d43921bc111a26", 0x24}, {0x0}], 0x3}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000000007b1af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

7m34.858769573s ago: executing program 32 (id=223):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcf, 0x0, 0x0, 0x10, 0x682, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_freezer_state(r6, 0x0, 0x2, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r7 = accept(r1, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000000380)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r8 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$kcm(r8, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x1}, {&(0x7f00000002c0)="bcc9b1b53de1fad1f955144629ed4dcf3c33679ea20502e3cff8923bf5d43921bc111a26", 0x24}, {0x0}], 0x3}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000000007b1af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

7m19.095742153s ago: executing program 3 (id=278):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10)

7m17.536410056s ago: executing program 3 (id=282):
syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x76, &(0x7f0000000000)=@string={0x76, 0x3, "abe98397850d9289638d7120310994176d76ee8005e3bf5de76d569d98cc3ce7d4419c84da5f7e420900d136a14f65099da81db6c35a3e0c7fb9fe03b0fa265df2be125facefe74e0e21bb6a1889f400fb20971f7f4031183b1ef33a6b6292c4d96927f019fba2ad2987739c5e0d593517558636"}}]})
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0)

7m14.184928892s ago: executing program 3 (id=295):
membarrier(0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x7040, 0x0)

7m13.998514923s ago: executing program 3 (id=298):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000b000000080008008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)

7m13.168078105s ago: executing program 3 (id=300):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000400)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getpeername(r5, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80)
sendfile(r7, r7, 0x0, 0xb)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x60, r9, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @local, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0)
r10 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @auto=[0x35, 0x66, 0x66, 0x33, 0x0, 0x35, 0x61, 0x64, 0x66, 0x63, 0x35, 0x38, 0x65, 0x37, 0x61, 0x31]}, 0x0, 0x0, r10)

7m7.074801806s ago: executing program 3 (id=325):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

6m51.246055746s ago: executing program 33 (id=325):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

6m20.691512775s ago: executing program 4 (id=455):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, 0x0, &(0x7f0000000880)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x80}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f00000001c0)=@req={0x3, 0x0, 0x4, 0x4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
unshare(0x64000600)

6m19.497266867s ago: executing program 4 (id=457):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})

6m18.428217569s ago: executing program 4 (id=460):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00')
r1 = fanotify_init(0x0, 0x0)
fanotify_mark(r1, 0x1, 0x40000011, r0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r2, &(0x7f0000001500)='4\x00', 0x2)

6m18.296002959s ago: executing program 4 (id=462):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000080)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)

6m18.048045729s ago: executing program 4 (id=464):
membarrier(0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x7040, 0x0)

6m15.244068385s ago: executing program 4 (id=472):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x3)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

6m15.105241645s ago: executing program 34 (id=472):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x3)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

2m26.419463361s ago: executing program 5 (id=448):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000400)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getpeername(r5, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80)
sendfile(r7, r7, 0x0, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r8 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @auto=[0x35, 0x66, 0x66, 0x33, 0x0, 0x35, 0x61, 0x64, 0x66, 0x63, 0x35, 0x38, 0x65, 0x37, 0x61, 0x31]}, 0x0, 0x0, r8)
close(r0)

2m5.6161504s ago: executing program 5 (id=448):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000400)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getpeername(r5, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80)
sendfile(r7, r7, 0x0, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r8 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @auto=[0x35, 0x66, 0x66, 0x33, 0x0, 0x35, 0x61, 0x64, 0x66, 0x63, 0x35, 0x38, 0x65, 0x37, 0x61, 0x31]}, 0x0, 0x0, r8)
close(r0)

1m47.827963734s ago: executing program 5 (id=448):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000400)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getpeername(r5, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80)
sendfile(r7, r7, 0x0, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r8 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @auto=[0x35, 0x66, 0x66, 0x33, 0x0, 0x35, 0x61, 0x64, 0x66, 0x63, 0x35, 0x38, 0x65, 0x37, 0x61, 0x31]}, 0x0, 0x0, r8)
close(r0)

1m25.432057027s ago: executing program 5 (id=448):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000400)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getpeername(r5, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80)
sendfile(r7, r7, 0x0, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r8 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @auto=[0x35, 0x66, 0x66, 0x33, 0x0, 0x35, 0x61, 0x64, 0x66, 0x63, 0x35, 0x38, 0x65, 0x37, 0x61, 0x31]}, 0x0, 0x0, r8)
close(r0)

57.95835896s ago: executing program 5 (id=448):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000400)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getpeername(r5, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80)
sendfile(r7, r7, 0x0, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r8 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @auto=[0x35, 0x66, 0x66, 0x33, 0x0, 0x35, 0x61, 0x64, 0x66, 0x63, 0x35, 0x38, 0x65, 0x37, 0x61, 0x31]}, 0x0, 0x0, r8)
close(r0)

29.087688635s ago: executing program 5 (id=448):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000400)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getpeername(r5, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80)
sendfile(r7, r7, 0x0, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r8 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @auto=[0x35, 0x66, 0x66, 0x33, 0x0, 0x35, 0x61, 0x64, 0x66, 0x63, 0x35, 0x38, 0x65, 0x37, 0x61, 0x31]}, 0x0, 0x0, r8)
close(r0)

15.64466327s ago: executing program 0 (id=1343):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x44800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000001440))
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000000ffff000000000000000000", @ANYBLOB='\x00'/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x48)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'})
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0x0, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xba, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
syz_open_dev$loop(&(0x7f00000001c0), 0x4000000000, 0x94b382)
memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eN\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129082, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000040))
write$binfmt_elf32(r7, 0x0, 0x4cd)

14.285615593s ago: executing program 0 (id=1347):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x87f0389ef7e17334, 0x10, 0xffffffffffffffff, 0x41f3e000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfd, &(0x7f0000001480))

11.817395937s ago: executing program 0 (id=1353):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='rxrpc_conn\x00', r3, 0x0, 0x3}, 0x18)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]})
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6)

8.914501883s ago: executing program 7 (id=1362):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000e87000/0x4000)=nil)
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

7.305834446s ago: executing program 0 (id=1366):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare(0x400)
r2 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
dup2(r2, r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r4}, 0x18)
set_mempolicy(0x2, &(0x7f0000000000)=0x470, 0x6)
fsconfig$FSCONFIG_SET_FLAG(r3, 0x5, &(0x7f00000020c0)='ro\x00', 0x0, 0x0)
unshare(0x8000000)
shmget$private(0x0, 0x2000, 0x2, &(0x7f000000b000/0x2000)=nil)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
unshare(0x30000)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x2}, 0x4)
chdir(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40186f40, 0x20000502)

6.989382317s ago: executing program 0 (id=1370):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x9, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
timer_create(0x6, 0x0, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
io_uring_setup(0x442b, &(0x7f0000000200)={0x0, 0x6695, 0x444, 0x0, 0x3d7})
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x1})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r3, 0x26, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mknod$loop(0x0, 0x0, 0x0)

6.684223987s ago: executing program 7 (id=1371):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10)
socket$alg(0x26, 0x5, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000b000000080008008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4)

5.720533459s ago: executing program 7 (id=1372):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

5.42144451s ago: executing program 6 (id=1373):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="270e00000000000000000302"], 0x20}, 0x1, 0x40030000000000}, 0x0)

5.40640712s ago: executing program 0 (id=1374):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
write$vhost_msg(r4, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)

5.076160111s ago: executing program 6 (id=1376):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='rxrpc_conn\x00', r1, 0x0, 0x3}, 0x18)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]})
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6)

4.788534211s ago: executing program 6 (id=1377):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000a00300000d00000000", @ANYBLOB], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r0, &(0x7f00000004c0), &(0x7f00000007c0)=""/128}, 0x20)

4.422104241s ago: executing program 2 (id=1378):
socket$kcm(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x4})
setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0)

3.872568153s ago: executing program 6 (id=1379):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4b, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006)

3.368195334s ago: executing program 2 (id=1380):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare(0x400)
r2 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
dup2(r2, r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
set_mempolicy(0x2, 0x0, 0x6)
fsconfig$FSCONFIG_SET_FLAG(r3, 0x5, &(0x7f00000020c0)='ro\x00', 0x0, 0x0)
unshare(0x8000000)
shmget$private(0x0, 0x2000, 0x2, &(0x7f000000b000/0x2000)=nil)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
unshare(0x30000)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x2}, 0x4)
chdir(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40186f40, 0x20000502)

2.863442955s ago: executing program 6 (id=1381):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000e87000/0x4000)=nil)
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

2.826145365s ago: executing program 2 (id=1382):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
modify_ldt$write(0x1, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000b000000080008008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4)

1.723913477s ago: executing program 6 (id=1383):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x48)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_getaffinity(0x0, 0x8, &(0x7f0000000040))
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46048003ff00000000000000000300060010000000f200000034000000420300000700000000802547d321a725b37b7f00000000000600000005000000f5ffffff0600701129132e108acd27f262d66336ac7f000002000000ffff0000ff0f000004"], 0x54)
write$sequencer(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="8101000005"], 0x8)
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
creat(&(0x7f00000001c0)='./file0\x00', 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101)

1.714248017s ago: executing program 2 (id=1384):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94)

1.501536207s ago: executing program 2 (id=1385):
r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4004001, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f000000a2c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)}], 0x1}}], 0x1, 0x40805)
ioctl$KDSETMODE(0xffffffffffffffff, 0x5607, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000005b80)={0x17, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="0001000000e96fe9920fe58697254d72f2"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, @fallback=0x11, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x41, &(0x7f0000000180)=[@efer={0x2, 0x4800}], 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.500921767s ago: executing program 7 (id=1386):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x44800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000001440))
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000000ffff000000000000000000", @ANYBLOB='\x00'/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x48)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'})
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0x0, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xba, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
syz_open_dev$loop(&(0x7f00000001c0), 0x4000000000, 0x94b382)
memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eN\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129082, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f00000000c0)=0x20)

80.17161ms ago: executing program 7 (id=1387):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='rxrpc_conn\x00', r1, 0x0, 0x3}, 0x18)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]})
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6)

61.3162ms ago: executing program 7 (id=1388):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000300018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003908000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x72, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
socket$pppoe(0x18, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f0000000400)=""/213, 0x355a})
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000180)={0xf0f03c, 0x4})
write$fb(r4, &(0x7f00000000c0)="aa", 0x1)

0s ago: executing program 2 (id=1389):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x52}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18)
accept$alg(r6, 0x0, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x150, 0x150, 0x170, 0x0, 0x260, 0x238, 0x206, 0x260, 0x238, 0x7fffffe, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'xfrm0\x00', {}, {}, 0x6}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x100, 0x0, 0x0, 0xfffffff7, 0x7}}}, @common=@inet=@ecn={{0x28}, {0x11}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390)

kernel console output (not intermixed with test programs):

n_unlock+0x137/0x8b0
[  357.669183][ T4179]  kobject_add_internal+0x6e0/0xe00
[  357.674426][ T4179]  kobject_add+0x14e/0x210
[  357.678898][ T4179]  ? device_add+0x3c2/0xfd0
[  357.683426][ T4179]  ? kobject_init+0x1d0/0x1d0
[  357.688140][ T4179]  ? __raw_spin_lock_init+0x41/0x100
[  357.693449][ T4179]  ? get_device_parent+0x128/0x400
[  357.698573][ T4179]  device_add+0x476/0xfd0
[  357.702913][ T4179]  hci_conn_add_sysfs+0xe4/0x1f0
[  357.707855][ T4179]  le_conn_complete_evt+0xc15/0x1500
[  357.713167][ T4179]  ? cs_le_create_conn+0x5f0/0x5f0
[  357.718296][ T4179]  hci_le_meta_evt+0x28c/0x3f50
[  357.723157][ T4179]  ? __lock_acquire+0x1ff0/0x1ff0
[  357.728184][ T4179]  ? __mutex_lock_common+0x444/0x25a0
[  357.733599][ T4179]  ? hci_remote_host_features_evt+0x280/0x280
[  357.739668][ T4179]  ? __mutex_unlock_slowpath+0x218/0x750
[  357.745300][ T4179]  ? hci_event_packet+0x3b4/0x1550
[  357.750417][ T4179]  ? mutex_unlock+0x10/0x10
[  357.754924][ T4179]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  357.760908][ T4179]  ? print_irqtrace_events+0x210/0x210
[  357.766371][ T4179]  hci_event_packet+0xc41/0x1550
[  357.771343][ T4179]  ? rcu_lock_release+0x20/0x20
[  357.776209][ T4179]  ? hci_send_to_monitor+0x99/0x4d0
[  357.781415][ T4179]  hci_rx_work+0x232/0x990
[  357.785845][ T4179]  process_one_work+0x8a1/0x10c0
[  357.790801][ T4179]  ? worker_detach_from_pool+0x260/0x260
[  357.796443][ T4179]  ? _raw_spin_lock_irqsave+0x120/0x120
[  357.801990][ T4179]  ? kthread_data+0x4e/0xc0
[  357.806495][ T4179]  ? wq_worker_running+0x97/0x170
[  357.811520][ T4179]  worker_thread+0xaca/0x1280
[  357.816203][ T4179]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  357.822129][ T4179]  kthread+0x3f6/0x4f0
[  357.826198][ T4179]  ? rcu_lock_release+0x20/0x20
[  357.831046][ T4179]  ? kthread_blkcg+0xd0/0xd0
[  357.835635][ T4179]  ret_from_fork+0x1f/0x30
[  357.840110][ T4179]  </TASK>
[  357.859720][ T4179] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  357.873239][ T4179] Bluetooth: hci3: failed to register connection device
[  359.202492][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.210182][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.533997][ T7428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.715789][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.879232][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.918402][ T7428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  360.052607][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.7.855'.
[  360.187643][ T4212] Bluetooth: hci1: command 0x1003 tx timeout
[  360.209080][ T4169] Bluetooth: hci1: sending frame failed (-49)
[  360.653498][ T7428] device hsr_slave_0 entered promiscuous mode
[  360.758477][ T7428] device hsr_slave_1 entered promiscuous mode
[  360.820446][ T7428] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  360.869569][ T7428] Cannot create hsr debugfs directory
[  362.220089][   T13] Bluetooth: hci1: command 0x1001 tx timeout
[  362.226864][ T4177] Bluetooth: hci1: sending frame failed (-49)
[  362.260033][    T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  362.288726][ T7593] syz.7.855 (7593): drop_caches: 2
[  362.698468][ T7428] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  362.727451][ T7428] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  362.759633][ T7428] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  362.790044][ T7428] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  363.646480][ T7428] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.060106][ T5240] Bluetooth: hci6: command 0x1003 tx timeout
[  364.069529][ T4177] Bluetooth: hci6: sending frame failed (-49)
[  364.220516][ T5240] Bluetooth: hci3: command 0x0406 tx timeout
[  364.300075][ T5240] Bluetooth: hci1: command 0x1009 tx timeout
[  364.774839][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  364.797520][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  364.833818][ T7428] 8021q: adding VLAN 0 to HW filter on device team0
[  364.867198][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  365.043036][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  365.204172][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.211339][ T4251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.508874][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  365.634840][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  365.744978][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  365.783532][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.790807][ T4251] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.037159][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  366.071822][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  366.899618][ T4212] Bluetooth: hci6: command 0x1001 tx timeout
[  366.908004][ T4177] Bluetooth: hci6: sending frame failed (-49)
[  366.928433][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  366.938611][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  366.948788][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  366.970518][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  367.126884][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  367.192197][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  367.230839][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  368.001481][ T7428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  368.013019][ T7428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  368.030271][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  368.047436][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  369.055226][ T4254] Bluetooth: hci6: command 0x1009 tx timeout
[  369.415480][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  369.423377][   T26] audit: type=1326 audit(1733531219.976:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.7.870" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44ffba3ed9 code=0x0
[  369.426482][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  369.495823][ T7428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.874718][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  370.045463][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  371.021029][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  371.031535][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  371.199279][ T7428] device veth0_vlan entered promiscuous mode
[  372.733622][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  372.804924][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  372.916482][ T7428] device veth1_vlan entered promiscuous mode
[  373.337790][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  373.389167][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  373.853351][ T7428] device veth0_macvtap entered promiscuous mode
[  373.930869][ T7428] device veth1_macvtap entered promiscuous mode
[  373.988075][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.027291][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.037732][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.048640][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.247065][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.268063][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.286830][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.297838][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.315629][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.327394][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.565731][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  374.671447][ T7755] netlink: 'syz.6.876': attribute type 21 has an invalid length.
[  374.679288][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.876'.
[  374.767381][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  374.796206][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  376.180086][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.329916][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.357750][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.432182][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.473805][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.507839][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.525212][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.537484][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.563019][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.634321][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.648852][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.669006][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  377.743263][ T4211] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  377.763901][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  377.801994][ T7428] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  377.825936][ T7428] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  377.869606][ T7428] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  377.919491][ T7428] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.172101][  T385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.206644][  T385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.271141][ T4211] usb 3-1: New USB device found, idVendor=0458, idProduct=7029, bcdDevice=8b.92
[  378.300107][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.329381][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.357054][ T4211] usb 3-1: Product: syz
[  378.366637][ T4211] usb 3-1: Manufacturer: syz
[  378.372507][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.399158][ T4211] usb 3-1: SerialNumber: syz
[  378.456181][ T4211] usb 3-1: config 0 descriptor??
[  378.532326][ T4211] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:7029
[  378.570378][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  378.576745][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  378.766413][ T4254] Bluetooth: hci1: command 0x1003 tx timeout
[  378.772721][ T4179] Bluetooth: hci1: sending frame failed (-49)
[  378.820147][ T4211] gspca_sn9c20x: Write register 1000 failed -71
[  378.831519][ T4211] gspca_sn9c20x: Device initialization failed
[  378.864927][ T4211] gspca_sn9c20x: probe of 3-1:0.0 failed with error -71
[  378.910151][ T4211] usb 3-1: USB disconnect, device number 7
[  378.978666][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  379.014101][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  379.508514][  T385] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.102921][  T385] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.376793][  T385] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.429108][  T385] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.789938][ T5240] Bluetooth: hci1: command 0x1001 tx timeout
[  380.796167][ T4179] Bluetooth: hci1: sending frame failed (-49)
[  380.858782][ T7855] netlink: 'syz.2.889': attribute type 21 has an invalid length.
[  380.867393][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.889'.
[  382.860559][ T5240] Bluetooth: hci1: command 0x1009 tx timeout
[  383.259888][ T5240] Bluetooth: hci4: command 0x0409 tx timeout
[  384.982696][ T7863] chnl_net:caif_netlink_parms(): no params data found
[  385.226862][  T385] device hsr_slave_0 left promiscuous mode
[  385.237010][  T385] device hsr_slave_1 left promiscuous mode
[  385.245426][  T385] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.253391][  T385] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.261793][  T385] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  385.270272][  T385] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.304277][  T385] device bridge_slave_1 left promiscuous mode
[  385.318578][  T385] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.337748][  T385] device bridge_slave_0 left promiscuous mode
[  385.357616][  T385] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.395277][  T385] device veth1_macvtap left promiscuous mode
[  385.416736][  T385] device veth0_macvtap left promiscuous mode
[  385.435820][  T385] device veth1_vlan left promiscuous mode
[  385.453475][  T385] device veth0_vlan left promiscuous mode
[  385.590021][ T5240] Bluetooth: hci4: command 0x041b tx timeout
[  386.010561][ T7924] kvm: pic: non byte write
[  386.028256][ T7919] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  386.039068][ T7919] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  386.069076][ T7919] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  386.261426][  T385] team0 (unregistering): Port device team_slave_1 removed
[  386.355715][  T385] team0 (unregistering): Port device team_slave_0 removed
[  386.428970][  T385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  386.500579][  T385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  387.438964][  T385] bond0 (unregistering): Released all slaves
[  387.802375][ T4207] Bluetooth: hci4: command 0x040f tx timeout
[  387.908575][ T7932] netlink: 'syz.2.900': attribute type 21 has an invalid length.
[  387.916515][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'.
[  387.969317][ T7863] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.167808][ T7945] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  388.195384][ T7945] CIFS: Unable to determine destination address
[  388.199879][ T7863] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.253228][ T7863] device bridge_slave_0 entered promiscuous mode
[  388.272689][ T7863] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.289147][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.298088][ T7863] device bridge_slave_1 entered promiscuous mode
[  389.878965][ T4254] Bluetooth: hci4: command 0x0419 tx timeout
[  393.113174][ T7863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.211147][ T7863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  393.229952][   T21] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  393.573230][ T7863] team0: Port device team_slave_0 added
[  393.615681][ T7863] team0: Port device team_slave_1 added
[  394.108354][ T4254] Bluetooth: hci1: command 0x1003 tx timeout
[  394.114752][ T4172] Bluetooth: hci1: sending frame failed (-49)
[  394.170008][   T21] usb 7-1: device descriptor read/all, error -71
[  394.212899][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.264087][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.408632][ T7863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.542011][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.548991][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.624461][ T7863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.819082][ T7863] device hsr_slave_0 entered promiscuous mode
[  394.858535][ T7863] device hsr_slave_1 entered promiscuous mode
[  394.894644][ T7863] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  394.908100][ T7863] Cannot create hsr debugfs directory
[  396.709087][ T4207] Bluetooth: hci1: command 0x1001 tx timeout
[  396.715725][ T4172] Bluetooth: hci1: sending frame failed (-49)
[  397.021941][ T7863] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  397.124300][ T7863] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  397.658812][ T7863] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  397.718594][ T7863] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  398.051880][ T7863] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.105734][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  398.124391][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  398.576189][ T7863] 8021q: adding VLAN 0 to HW filter on device team0
[  398.625076][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  398.644277][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  398.694498][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.701656][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  398.716518][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  398.739441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  398.756165][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  398.790967][ T4207] Bluetooth: hci1: command 0x1009 tx timeout
[  398.797236][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.797278][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.817099][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  398.835825][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  398.857322][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  399.694612][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  399.761698][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  399.830722][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  399.839500][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  399.895678][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  399.913274][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  401.462448][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  401.503252][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  401.622644][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  402.045879][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  402.065865][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  402.103047][ T7863] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.022350][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  403.072878][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  403.326764][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  403.337102][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  403.370747][ T7863] device veth0_vlan entered promiscuous mode
[  403.393859][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  403.423021][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  403.464737][ T7863] device veth1_vlan entered promiscuous mode
[  403.567206][ T7863] device veth0_macvtap entered promiscuous mode
[  403.585111][  T817] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  403.598458][  T817] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  403.627611][  T817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  403.643333][  T817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  403.669169][  T817] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  403.695455][ T7863] device veth1_macvtap entered promiscuous mode
[  403.733187][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.756553][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.778266][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.801920][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.838722][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.850061][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.861136][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.872423][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.883282][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.894622][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.907611][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.925381][  T817] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  403.934157][  T817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  404.105412][  T817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  404.304329][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.423856][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.625177][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.830034][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.883652][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.919951][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.930475][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.979943][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.019802][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  405.059810][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.079313][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_1
[  405.269634][  T817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  405.279572][  T817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  405.850723][ T7863] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.869135][ T7863] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.001232][ T7863] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.043125][ T7863] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.068824][ T8194] smc: net device bond0 applied user defined pnetid SYZ0
[  406.100136][ T8197] smc: net device bond0 erased user defined pnetid SYZ0
[  406.297068][ T8206] netlink: 'syz.6.954': attribute type 21 has an invalid length.
[  406.305140][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.6.954'.
[  407.545575][ T8209] netlink: 'syz.0.955': attribute type 10 has an invalid length.
[  407.553395][ T8209] netlink: 212848 bytes leftover after parsing attributes in process `syz.0.955'.
[  408.148000][  T817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.199090][  T817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.492047][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  408.882134][ T5201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.932061][ T5201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.985502][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  409.701981][ T4240] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.826591][ T4240] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.900139][ T4211] Bluetooth: hci1: command 0x1003 tx timeout
[  409.906258][ T4172] Bluetooth: hci1: sending frame failed (-49)
[  409.919954][ T4240] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.006467][ T4240] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.979862][ T4211] Bluetooth: hci1: command 0x1001 tx timeout
[  411.987173][ T4172] Bluetooth: hci1: sending frame failed (-49)
[  412.153936][ T4240] device hsr_slave_0 left promiscuous mode
[  412.197257][ T4240] device hsr_slave_1 left promiscuous mode
[  412.219074][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  412.235212][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_0
[  412.245281][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  412.259649][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_1
[  412.269411][ T4240] device bridge_slave_1 left promiscuous mode
[  412.283377][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.296679][ T4240] device bridge_slave_0 left promiscuous mode
[  412.314335][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.367074][ T4240] device veth1_macvtap left promiscuous mode
[  412.390112][ T4240] device veth0_macvtap left promiscuous mode
[  412.403037][ T4240] device veth1_vlan left promiscuous mode
[  412.424965][ T4240] device veth0_vlan left promiscuous mode
[  413.664861][   T13] Bluetooth: hci4: command 0x0409 tx timeout
[  414.504679][   T13] Bluetooth: hci1: command 0x1009 tx timeout
[  415.157985][ T4240] team0 (unregistering): Port device team_slave_1 removed
[  415.422268][ T4240] team0 (unregistering): Port device team_slave_0 removed
[  415.550542][ T4240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  415.618100][ T4240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  415.739863][   T13] Bluetooth: hci4: command 0x041b tx timeout
[  415.762386][ T4240] bond0 (unregistering): Released all slaves
[  416.573392][ T8245] chnl_net:caif_netlink_parms(): no params data found
[  417.276023][ T8245] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.331191][ T8245] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.399464][ T8245] device bridge_slave_0 entered promiscuous mode
[  417.445953][ T8245] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.497754][ T8245] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.561055][ T8245] device bridge_slave_1 entered promiscuous mode
[  417.627912][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.976'.
[  417.774317][ T8245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.807002][ T8245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  417.819847][   T13] Bluetooth: hci4: command 0x040f tx timeout
[  417.945174][ T8245] team0: Port device team_slave_0 added
[  418.031050][ T8245] team0: Port device team_slave_1 added
[  418.153977][ T8245] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.185319][ T8245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.457313][ T8245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.668710][ T8245] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.979540][ T8245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.469703][ T8245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  420.249869][   T13] Bluetooth: hci4: command 0x0419 tx timeout
[  420.333384][ T8245] device hsr_slave_0 entered promiscuous mode
[  420.349195][ T8245] device hsr_slave_1 entered promiscuous mode
[  420.449092][ T8245] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  420.479090][ T8245] Cannot create hsr debugfs directory
[  422.135247][ T8409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.820022][ T5240] Bluetooth: hci1: command 0x1003 tx timeout
[  424.127976][ T4172] Bluetooth: hci1: sending frame failed (-49)
[  425.320490][ T8245] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  425.379441][ T8245] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  425.427281][ T8245] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  425.491152][ T8245] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  425.581533][ T8442] netlink: 'syz.0.999': attribute type 10 has an invalid length.
[  425.589306][ T8442] netlink: 212848 bytes leftover after parsing attributes in process `syz.0.999'.
[  425.800555][ T8245] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.844308][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  425.853256][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  425.884591][ T8245] 8021q: adding VLAN 0 to HW filter on device team0
[  425.941002][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  425.956430][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  425.998147][  T385] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.005298][  T385] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.130797][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  426.324519][ T8245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  426.379829][ T8245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  426.521246][ T4209] Bluetooth: hci1: command 0x1001 tx timeout
[  426.531712][ T4172] Bluetooth: hci1: sending frame failed (-49)
[  426.539040][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  426.581028][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  426.657124][  T385] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.664271][  T385] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.718218][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  426.727429][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  426.737388][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  426.747512][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  426.757508][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  426.779152][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  426.801591][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  427.016273][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  427.201465][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  427.352088][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  427.499522][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  427.563697][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  427.763173][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  427.793246][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  427.815166][ T8245] 8021q: adding VLAN 0 to HW filter on device batadv0
[  428.541114][ T4212] Bluetooth: hci1: command 0x1009 tx timeout
[  428.771112][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  428.796920][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  428.854829][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  428.878061][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  428.905428][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  428.923540][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  428.954581][ T8245] device veth0_vlan entered promiscuous mode
[  428.996599][ T8245] device veth1_vlan entered promiscuous mode
[  429.073798][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  429.090598][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  429.099237][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  429.126092][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  429.157341][ T8245] device veth0_macvtap entered promiscuous mode
[  429.194503][ T8245] device veth1_macvtap entered promiscuous mode
[  429.277310][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.308338][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.338114][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.367128][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.398889][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.438131][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.459290][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.481269][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.504075][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.535516][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.574750][ T8245] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.602552][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.668260][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.693199][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.749292][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.773678][ T8526] netlink: 'syz.0.1012': attribute type 10 has an invalid length.
[  429.779826][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.809817][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.823553][ T8526] netlink: 212848 bytes leftover after parsing attributes in process `syz.0.1012'.
[  429.841219][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.863311][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.883243][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.906359][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.929027][ T8245] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.984291][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  430.005819][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  430.224941][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  430.314154][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  430.465933][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  430.493490][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  430.536081][ T8245] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.556519][ T8245] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.605505][ T8245] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.624731][ T8245] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.860672][ T6673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.908127][ T6673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.922559][ T5201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.947420][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  430.977275][ T5201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.025349][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  432.751777][ T4240] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.486550][ T4240] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.556796][ T4240] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.636412][ T4240] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.875007][ T8629] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1027'.
[  433.947533][ T8629] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1027'.
[  433.981436][ T8629] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1027'.
[  434.449062][ T8630] chnl_net:caif_netlink_parms(): no params data found
[  434.721817][ T8630] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.748437][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.777615][ T8630] device bridge_slave_0 entered promiscuous mode
[  434.793438][ T8630] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.808400][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.819093][ T8630] device bridge_slave_1 entered promiscuous mode
[  434.938965][ T8630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  434.987021][ T8630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  435.926010][ T8630] team0: Port device team_slave_0 added
[  435.980015][ T8630] team0: Port device team_slave_1 added
[  436.202867][ T5240] Bluetooth: hci1: command 0x0409 tx timeout
[  437.100755][ T8679] fuse: Unknown parameter '0xffffffffffffffff'
[  437.147742][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.187718][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.388485][ T8630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.425587][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.432982][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.167150][ T8630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  438.228363][ T5240] Bluetooth: hci1: command 0x041b tx timeout
[  438.318006][ T8630] device hsr_slave_0 entered promiscuous mode
[  438.334952][ T8630] device hsr_slave_1 entered promiscuous mode
[  438.350450][ T8630] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  438.368323][ T8630] Cannot create hsr debugfs directory
[  438.479905][ T4240] device hsr_slave_0 left promiscuous mode
[  438.537386][ T4240] device hsr_slave_1 left promiscuous mode
[  438.554925][ T8707] kvm: pic: non byte write
[  438.568838][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  438.585592][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_0
[  438.621647][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  438.643444][ T8707] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  438.663877][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_1
[  438.676351][ T8707] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  438.687640][ T4240] device bridge_slave_1 left promiscuous mode
[  438.697533][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.742287][ T4240] device bridge_slave_0 left promiscuous mode
[  438.757702][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.785340][ T4240] device veth1_macvtap left promiscuous mode
[  438.799090][ T4240] device veth0_macvtap left promiscuous mode
[  438.808236][ T4240] device veth1_vlan left promiscuous mode
[  438.821357][ T4240] device veth0_vlan left promiscuous mode
[  439.029824][ T5240] Bluetooth: hci4: command 0x1003 tx timeout
[  439.036193][ T4169] Bluetooth: hci4: sending frame failed (-49)
[  439.295856][ T4240] team0 (unregistering): Port device team_slave_1 removed
[  439.314450][ T4240] team0 (unregistering): Port device team_slave_0 removed
[  439.338628][ T4240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  439.368618][ T4240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  439.986495][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  439.993583][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  440.241643][ T4240] bond0 (unregistering): Released all slaves
[  440.326848][ T5240] Bluetooth: hci1: command 0x040f tx timeout
[  442.030765][ T5240] Bluetooth: hci4: command 0x1001 tx timeout
[  442.036983][ T4169] Bluetooth: hci4: sending frame failed (-49)
[  442.363556][ T8752] infiniband sy{0: RDMA CMA: cma_listen_on_dev, error -98
[  442.872962][ T5240] Bluetooth: hci1: command 0x0419 tx timeout
[  444.060072][ T4212] Bluetooth: hci4: command 0x1009 tx timeout
[  444.231484][ T8630] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  444.412313][ T8630] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  444.449583][ T8630] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  444.918298][ T8630] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  445.516681][ T8630] 8021q: adding VLAN 0 to HW filter on device bond0
[  445.557184][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  445.577262][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  445.612979][ T8630] 8021q: adding VLAN 0 to HW filter on device team0
[  445.653282][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  445.675009][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  445.708486][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.715692][ T5201] bridge0: port 1(bridge_slave_0) entered forwarding state
[  446.449007][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  446.461314][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  446.551927][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  446.629346][ T5201] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.636515][ T5201] bridge0: port 2(bridge_slave_1) entered forwarding state
[  446.671557][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  446.680818][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  447.913108][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  447.955681][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  447.985171][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  448.034841][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  448.090865][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  448.099474][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  448.701609][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  448.826798][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  448.864759][ T8630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  448.901617][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  449.297678][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  449.323660][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  449.365886][ T8630] 8021q: adding VLAN 0 to HW filter on device batadv0
[  449.926987][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  449.952296][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  450.044006][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  450.060888][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  450.102018][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  450.151102][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  450.196029][ T8630] device veth0_vlan entered promiscuous mode
[  450.267013][ T8630] device veth1_vlan entered promiscuous mode
[  450.388498][ T8630] device veth0_macvtap entered promiscuous mode
[  450.461846][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  450.500865][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  450.532898][ T8630] device veth1_macvtap entered promiscuous mode
[  450.563474][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  450.590530][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  450.704503][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  450.771043][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.790452][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  450.801058][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.811025][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  450.822520][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.921729][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.002951][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.092240][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.195411][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.293064][ T8630] batman_adv: batadv0: Interface activated: batadv_slave_0
[  451.340090][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  451.360705][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  451.472878][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  451.529776][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.588872][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  451.626888][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.668108][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  451.699322][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.746855][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  451.778195][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.800166][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  451.839892][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.881246][ T8630] batman_adv: batadv0: Interface activated: batadv_slave_1
[  451.899870][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  451.908659][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  451.972446][ T8630] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.001673][ T8630] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.029912][ T8630] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.062524][ T8630] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.911184][  T817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.999998][  T817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.034864][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.040612][  T817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  453.051360][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.074070][  T817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  453.132584][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1072'.
[  453.332314][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1072'.
[  453.474713][ T8921] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.611482][ T8921] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.506691][ T8921] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.625773][ T8921] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.680729][ T8921] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  454.694844][ T8921] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  454.713859][ T8921] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  454.727894][ T8921] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  454.743494][  T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.870379][   T21] Bluetooth: hci4: command 0x1003 tx timeout
[  454.876656][ T4169] Bluetooth: hci4: sending frame failed (-49)
[  454.946655][  T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.069136][ T8951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1077'.
[  455.078255][ T8951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1077'.
[  455.487246][  T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.568192][  T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.222003][ T8954] chnl_net:caif_netlink_parms(): no params data found
[  456.336138][ T8947] Trying to write to read-only block-device nullb0
[  456.368449][ T8947] Trying to write to read-only block-device nullb0
[  456.401078][ T8947] Trying to write to read-only block-device nullb0
[  456.416940][ T8947] Trying to write to read-only block-device nullb0
[  456.426050][ T8947] Trying to write to read-only block-device nullb0
[  456.438379][ T8947] Trying to write to read-only block-device nullb0
[  456.448500][ T8947] Trying to write to read-only block-device nullb0
[  456.461027][ T8947] Trying to write to read-only block-device nullb0
[  456.476571][ T8947] Trying to write to read-only block-device nullb0
[  456.486786][ T8947] Trying to write to read-only block-device nullb0
[  456.546563][ T8954] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.600218][ T8954] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.608444][ T8954] device bridge_slave_0 entered promiscuous mode
[  456.739803][ T8954] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.746920][ T8954] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.778667][ T8954] device bridge_slave_1 entered promiscuous mode
[  456.841721][ T8954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.863834][ T8954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  456.940500][ T4212] Bluetooth: hci4: command 0x1001 tx timeout
[  456.946848][ T4169] Bluetooth: hci4: sending frame failed (-49)
[  457.719596][ T7061] Bluetooth: hci1: command 0x0409 tx timeout
[  457.736770][ T8954] team0: Port device team_slave_0 added
[  457.771510][ T8954] team0: Port device team_slave_1 added
[  457.859451][ T8954] batman_adv: batadv0: Adding interface: batadv_slave_0
[  457.876189][ T8954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  457.940947][ T8954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  458.376386][ T8954] batman_adv: batadv0: Adding interface: batadv_slave_1
[  458.396305][ T8954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  458.508167][ T8954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  458.767688][ T8954] device hsr_slave_0 entered promiscuous mode
[  458.801425][ T8954] device hsr_slave_1 entered promiscuous mode
[  458.828330][ T8954] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  458.865973][ T8954] Cannot create hsr debugfs directory
[  459.019829][ T7061] Bluetooth: hci4: command 0x1009 tx timeout
[  459.428035][  T144] device hsr_slave_0 left promiscuous mode
[  459.440283][  T144] device hsr_slave_1 left promiscuous mode
[  459.451167][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  459.458644][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  459.471854][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.479517][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  459.510385][  T144] device bridge_slave_1 left promiscuous mode
[  459.537194][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.551416][  T144] device bridge_slave_0 left promiscuous mode
[  459.557946][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.613953][  T144] device veth1_macvtap left promiscuous mode
[  459.620236][  T144] device veth0_macvtap left promiscuous mode
[  459.626945][  T144] device veth1_vlan left promiscuous mode
[  459.633174][  T144] device veth0_vlan left promiscuous mode
[  459.739844][ T7061] Bluetooth: hci1: command 0x041b tx timeout
[  459.888883][  T144] team0 (unregistering): Port device team_slave_1 removed
[  459.927300][  T144] team0 (unregistering): Port device team_slave_0 removed
[  459.943570][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  459.958847][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  459.969894][ T4168] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  460.034092][  T144] bond0 (unregistering): Released all slaves
[  460.139431][ T9022] device batadv_slave_1 entered promiscuous mode
[  460.149292][ T9023] device veth0_to_batadv entered promiscuous mode
[  460.195306][ T9021] device veth0_to_batadv left promiscuous mode
[  460.210195][ T9021] device batadv_slave_1 left promiscuous mode
[  460.402504][ T9031] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1090'.
[  460.411648][ T9031] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1090'.
[  460.772370][ T4168] usb 7-1: config 0 has an invalid interface number: 107 but max is 0
[  460.780949][ T4168] usb 7-1: config 0 has no interface number 0
[  460.787079][ T4168] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  460.798292][ T4168] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 19090, setting to 64
[  460.874037][ T8954] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  460.902435][ T8954] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  460.925588][ T8954] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  460.960807][ T4168] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  460.972508][ T8954] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  461.041799][ T4168] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  461.070595][ T4168] usb 7-1: Product: syz
[  461.101921][ T4168] usb 7-1: Manufacturer: syz
[  461.108234][ T4168] usb 7-1: SerialNumber: syz
[  461.596914][ T4168] usb 7-1: config 0 descriptor??
[  461.640276][ T9018] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  461.677237][ T4168] keyspan 7-1:0.107: Keyspan 4 port adapter converter detected
[  461.719429][ T4168] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 81
[  461.764276][ T4168] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 1
[  461.857466][ T4168] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  461.918843][ T4168] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 2
[  461.961250][ T4168] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  461.997725][ T8954] 8021q: adding VLAN 0 to HW filter on device bond0
[  462.026689][ T4168] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 4
[  462.032006][ T8954] 8021q: adding VLAN 0 to HW filter on device team0
[  462.126897][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  462.297862][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  462.470515][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  462.770871][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  462.830146][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.837249][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state
[  462.874366][ T4168] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  462.883553][ T4168] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 6
[  462.892845][ T4168] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  462.904334][ T4168] usb 7-1: USB disconnect, device number 6
[  462.925566][ T4168] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  462.948299][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  462.965346][ T4168] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  462.977968][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  462.978624][ T4168] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  463.000186][ T4168] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  463.012381][ T4168] keyspan 7-1:0.107: device disconnected
[  463.022672][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  463.037130][ T4275] Bluetooth: hci1: command 0x040f tx timeout
[  463.064509][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.071712][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.147774][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  463.221702][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  463.423950][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  463.592625][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  463.861642][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  464.179346][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  464.212898][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  464.222124][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  464.232300][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  464.249429][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  464.270727][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  464.306597][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  464.634791][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  464.646100][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  464.685141][ T8954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  465.043685][ T9103] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1103'.
[  465.053311][ T9103] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1103'.
[  465.428225][ T4254] Bluetooth: hci1: command 0x0419 tx timeout
[  465.478235][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  465.511144][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  465.612325][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  465.626394][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  465.787475][ T8954] device veth0_vlan entered promiscuous mode
[  465.850433][ T8954] device veth1_vlan entered promiscuous mode
[  465.867199][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  465.883993][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  467.010287][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  467.110940][ T8954] device veth0_macvtap entered promiscuous mode
[  467.264645][ T8954] device veth1_macvtap entered promiscuous mode
[  467.323719][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  467.351326][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  467.361434][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  467.381023][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  467.413676][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  467.477396][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  467.561777][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.586010][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  467.597240][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.742189][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  467.929284][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.929317][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  467.929335][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.929358][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  467.929373][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.930921][ T8954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  467.934782][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  467.934804][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.934818][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  467.934834][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.934847][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  467.934862][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.934877][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  467.934892][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.934905][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  467.934920][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.936062][ T8954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  467.939060][ T8954] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  467.939161][ T8954] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  467.939193][ T8954] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  467.939232][ T8954] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  468.270173][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  468.270945][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  468.271575][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  468.272168][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  468.297716][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.297804][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.301330][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  468.622178][ T4240] Bluetooth: hci6: Frame reassembly failed (-84)
[  468.757538][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.757626][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.769472][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  469.728435][ T9177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1117'.
[  469.737649][ T9177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1117'.
[  469.988144][ T4254] Bluetooth: hci4: command 0x1003 tx timeout
[  469.994462][ T4172] Bluetooth: hci4: sending frame failed (-49)
[  470.972027][ T5935] Bluetooth: hci6: command 0x1003 tx timeout
[  470.980174][ T4172] Bluetooth: hci6: sending frame failed (-49)
[  471.319042][  T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.244351][ T5935] Bluetooth: hci4: command 0x1001 tx timeout
[  472.251397][ T4172] Bluetooth: hci4: sending frame failed (-49)
[  472.669532][  T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.725414][  T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.774859][  T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.029944][ T5935] Bluetooth: hci6: command 0x1001 tx timeout
[  473.044162][ T4172] Bluetooth: hci6: sending frame failed (-49)
[  474.300430][ T5935] Bluetooth: hci4: command 0x1009 tx timeout
[  474.543853][ T9236] chnl_net:caif_netlink_parms(): no params data found
[  474.718691][ T9275] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1129'.
[  474.727770][ T9275] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1129'.
[  474.773751][  T144] device hsr_slave_0 left promiscuous mode
[  474.799483][  T144] device hsr_slave_1 left promiscuous mode
[  474.830937][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  474.838577][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  474.846720][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  474.854464][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  474.862574][  T144] device bridge_slave_1 left promiscuous mode
[  474.869277][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.878343][  T144] device bridge_slave_0 left promiscuous mode
[  474.885454][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.910309][  T144] device veth1_macvtap left promiscuous mode
[  474.922769][  T144] device veth0_macvtap left promiscuous mode
[  474.942707][  T144] device veth1_vlan left promiscuous mode
[  474.954568][  T144] device veth0_vlan left promiscuous mode
[  475.100356][ T5935] Bluetooth: hci6: command 0x1009 tx timeout
[  475.801588][    T7] Bluetooth: hci1: command 0x0409 tx timeout
[  476.089134][  T144] team0 (unregistering): Port device team_slave_1 removed
[  476.126772][  T144] team0 (unregistering): Port device team_slave_0 removed
[  476.154338][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  476.171925][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  476.219897][ T4172] Bluetooth: hci7: Entering manufacturer mode failed (-110)
[  477.073956][  T144] bond0 (unregistering): Released all slaves
[  477.099102][ T9289] netlink: 'syz.2.1132': attribute type 2 has an invalid length.
[  477.348853][ T9236] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.373648][ T9236] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.652513][ T9236] device bridge_slave_0 entered promiscuous mode
[  478.822171][ T9236] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.827955][ T4168] Bluetooth: hci1: command 0x041b tx timeout
[  478.861902][ T9236] bridge0: port 2(bridge_slave_1) entered disabled state
[  478.945138][ T9236] device bridge_slave_1 entered promiscuous mode
[  479.841193][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1140'.
[  479.850514][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1140'.
[  479.892305][ T9236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  480.601991][ T9236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  481.003943][ T9330] loop4: detected capacity change from 0 to 66
[  481.012310][ T5240] Bluetooth: hci1: command 0x040f tx timeout
[  481.057830][ T9336] netlink: 'syz.6.1144': attribute type 10 has an invalid length.
[  481.334840][ T9336] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1144'.
[  481.558127][ T9336] team0: Port device geneve0 added
[  481.574668][ T9236] team0: Port device team_slave_0 added
[  481.620867][ T9236] team0: Port device team_slave_1 added
[  481.754219][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  481.777260][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  481.846393][ T9236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  481.988871][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  481.997671][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  482.033092][ T9236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  482.858593][ T9236] device hsr_slave_0 entered promiscuous mode
[  482.870910][ T9236] device hsr_slave_1 entered promiscuous mode
[  482.871519][ T9236] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  482.871545][ T9236] Cannot create hsr debugfs directory
[  483.212797][ T4209] Bluetooth: hci1: command 0x0419 tx timeout
[  483.213179][ T4212] Bluetooth: hci4: command 0x1003 tx timeout
[  483.213957][ T4172] Bluetooth: hci4: sending frame failed (-49)
[  484.681280][ T9398] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1153'.
[  484.699359][ T9398] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1153'.
[  485.179838][ T4212] Bluetooth: hci6: command 0x1003 tx timeout
[  485.185964][ T4172] Bluetooth: hci6: sending frame failed (-49)
[  485.270391][ T4212] Bluetooth: hci4: command 0x1001 tx timeout
[  485.276987][ T4172] Bluetooth: hci4: sending frame failed (-49)
[  485.311808][ T9236] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  485.331230][ T9236] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  485.368512][ T9236] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  485.399580][ T9236] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  485.617684][ T9236] 8021q: adding VLAN 0 to HW filter on device bond0
[  485.658423][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  485.688742][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  485.741013][ T9236] 8021q: adding VLAN 0 to HW filter on device team0
[  485.798589][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  485.921102][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  485.953246][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.960406][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  486.170355][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  486.363269][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  486.620126][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  486.640719][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.647816][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state
[  486.764950][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  486.841878][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  486.871036][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  486.882897][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  486.922537][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  486.940856][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  487.043897][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  487.131016][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  487.182265][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  487.225190][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  487.239678][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  487.266702][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  487.270367][ T4212] Bluetooth: hci6: command 0x1001 tx timeout
[  487.286776][ T4172] Bluetooth: hci6: sending frame failed (-49)
[  487.349870][ T5240] Bluetooth: hci4: command 0x1009 tx timeout
[  487.610393][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  487.622475][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  487.655471][ T9236] 8021q: adding VLAN 0 to HW filter on device batadv0
[  488.148640][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  488.210952][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  488.273571][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  488.632468][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  488.672499][ T9236] device veth0_vlan entered promiscuous mode
[  488.721069][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  488.730476][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  488.764720][ T9236] device veth1_vlan entered promiscuous mode
[  488.806728][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  488.820486][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  488.893023][ T9236] device veth0_macvtap entered promiscuous mode
[  488.961227][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  488.980516][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  489.018647][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  489.052290][ T9236] device veth1_macvtap entered promiscuous mode
[  489.114766][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  489.126798][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.137297][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  489.147921][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.158070][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  489.178476][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.188928][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  489.221921][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.260307][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  489.314157][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.326955][ T9236] batman_adv: batadv0: Interface activated: batadv_slave_0
[  489.336315][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  489.350168][ T4254] Bluetooth: hci6: command 0x1009 tx timeout
[  489.361201][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  489.711434][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  489.764373][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.795724][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.856868][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.898130][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.915014][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.925543][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.936325][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.946862][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.956834][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.967608][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.990741][ T9236] batman_adv: batadv0: Interface activated: batadv_slave_1
[  490.009005][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  490.038032][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  490.066115][ T9236] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.075509][ T9236] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.897762][ T9236] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.907818][ T9236] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.121367][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.161834][ T5201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.162194][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.300409][ T5201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.332781][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  491.404940][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  491.711638][ T9507] kvm [9503]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x6600000080
[  491.736507][ T9507] kvm [9503]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xfe00000000
[  491.750762][ T9507] kvm [9503]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x1e600000080
[  491.791912][ T9507] kvm [9503]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x36600000080
[  491.826741][ T9507] kvm [9503]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x3fe00000000
[  491.898895][ T9507] kvm [9503]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4e600000080
[  491.946913][ T9507] kvm [9503]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x66600000080
[  491.963877][ T9507] kvm [9503]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x6fe00000000
[  491.978985][ T9507] kvm [9503]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x7e600000080
[  492.006560][ T9507] kvm [9503]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x96600000080
[  493.591750][ T9539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1170'.
[  493.639917][ T9539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1170'.
[  495.848485][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'.
[  497.848097][ T9585] chnl_net:caif_netlink_parms(): no params data found
[  497.980149][ T7061] Bluetooth: hci1: command 0x0409 tx timeout
[  498.174174][ T9585] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.220438][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.239080][ T9603] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  498.255734][ T9585] device bridge_slave_0 entered promiscuous mode
[  498.274747][ T9585] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.282389][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.299641][ T9603] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  498.300141][ T9585] device bridge_slave_1 entered promiscuous mode
[  498.476325][ T9585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  498.535238][ T9585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  498.716591][ T9585] team0: Port device team_slave_0 added
[  498.748375][ T9585] team0: Port device team_slave_1 added
[  498.755632][ T9612] ubi: mtd0 is already attached to ubi0
[  498.852170][ T9585] batman_adv: batadv0: Adding interface: batadv_slave_0
[  498.891204][ T9585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  498.985210][ T9585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  499.065473][ T9585] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.080529][ T9585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  499.136929][ T9585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.286347][  T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.506156][ T9585] device hsr_slave_0 entered promiscuous mode
[  500.041109][ T9585] device hsr_slave_1 entered promiscuous mode
[  500.142458][ T4209] Bluetooth: hci1: command 0x041b tx timeout
[  500.148892][ T9585] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  500.168745][ T9585] Cannot create hsr debugfs directory
[  500.315612][  T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.705533][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  501.723420][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  501.854736][  T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.220550][ T4210] Bluetooth: hci1: command 0x040f tx timeout
[  502.693649][  T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.080086][ T9657] ubi: mtd0 is already attached to ubi0
[  503.102249][ T9653] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  503.130209][ T9653] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  503.759002][ T4209] Bluetooth: hci4: command 0x1003 tx timeout
[  503.789805][ T4177] Bluetooth: hci4: sending frame failed (-49)
[  505.093618][ T5240] Bluetooth: hci1: command 0x0419 tx timeout
[  505.842972][ T4209] Bluetooth: hci4: command 0x1001 tx timeout
[  505.849878][ T4169] Bluetooth: hci4: sending frame failed (-49)
[  506.238730][  T144] device hsr_slave_0 left promiscuous mode
[  506.294074][  T144] device hsr_slave_1 left promiscuous mode
[  506.311665][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  506.344933][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  506.390206][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  506.419304][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  506.646471][  T144] device bridge_slave_1 left promiscuous mode
[  506.684586][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.144888][ T4254] Bluetooth: hci6: command 0x1003 tx timeout
[  507.184624][ T4169] Bluetooth: hci6: sending frame failed (-49)
[  507.304386][  T144] device bridge_slave_0 left promiscuous mode
[  507.418336][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.276953][ T4254] Bluetooth: hci4: command 0x1009 tx timeout
[  508.324291][ T9723] ubi: mtd0 is already attached to ubi0
[  508.372611][  T144] device veth1_macvtap left promiscuous mode
[  508.383936][  T144] device veth0_macvtap left promiscuous mode
[  508.559958][  T144] device veth1_vlan left promiscuous mode
[  508.570379][  T144] device veth0_vlan left promiscuous mode
[  508.807771][ T9730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1206'.
[  509.162745][  T144] team0 (unregistering): Port device team_slave_1 removed
[  509.189309][  T144] team0 (unregistering): Port device team_slave_0 removed
[  509.216102][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  509.239480][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  509.259914][ T4254] Bluetooth: hci6: command 0x1001 tx timeout
[  509.266020][ T4169] Bluetooth: hci6: sending frame failed (-49)
[  509.398790][  T144] bond0 (unregistering): Released all slaves
[  509.484825][ T9737] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1207'.
[  509.530641][ T9737] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1207'.
[  509.635853][ T9585] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  509.667235][ T9585] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  509.729541][ T9744] usb usb8: usbfs: process 9744 (syz.2.1209) did not claim interface 0 before use
[  509.753888][ T9585] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  509.842017][ T9585] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  510.256486][ T9585] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.287143][ T9585] 8021q: adding VLAN 0 to HW filter on device team0
[  510.304721][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  510.330807][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  510.380389][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  510.399452][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  510.425271][  T385] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.432435][  T385] bridge0: port 1(bridge_slave_0) entered forwarding state
[  510.486541][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  510.500656][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  510.536426][  T385] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.543612][  T385] bridge0: port 2(bridge_slave_1) entered forwarding state
[  510.603012][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  510.650507][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  510.931283][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  510.982251][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  511.022326][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  511.070848][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  511.102394][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  511.160698][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  511.180470][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  511.189353][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  511.198287][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  511.207876][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  511.281532][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  511.352813][ T5240] Bluetooth: hci6: command 0x1009 tx timeout
[  511.737958][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  511.763491][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  511.798885][ T9585] 8021q: adding VLAN 0 to HW filter on device batadv0
[  511.997188][  T150] block nbd2: Attempted send on invalid socket
[  512.004466][  T150] blk_update_request: I/O error, dev nbd2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  512.018171][ T9769] VFS: unable to read V7 FS superblock on device nbd2.
[  512.050395][ T9769] VFS: could not find a valid V7 on nbd2.
[  512.240706][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  512.272576][ T9776] ubi: mtd0 is already attached to ubi0
[  512.277880][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  512.318049][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  512.420516][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  512.429336][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  512.670502][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  512.698642][ T9585] device veth0_vlan entered promiscuous mode
[  512.737590][ T9585] device veth1_vlan entered promiscuous mode
[  513.712211][ T9585] device veth0_macvtap entered promiscuous mode
[  513.801972][ T9585] device veth1_macvtap entered promiscuous mode
[  513.900108][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  513.939079][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  513.981005][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  514.029167][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  514.908972][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.110054][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.120801][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.157194][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.429120][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.491914][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.532626][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.579785][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.618699][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.656744][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.747541][ T9585] batman_adv: batadv0: Interface activated: batadv_slave_0
[  516.827902][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  516.858371][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  517.553056][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  517.574822][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.586477][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  517.607226][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.619859][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  517.636778][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.660051][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  517.692478][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.727435][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  517.775510][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.799592][ T9585] batman_adv: batadv0: Interface activated: batadv_slave_1
[  517.801312][ T9817] ubi: mtd0 is already attached to ubi0
[  517.810530][ T9803] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1221'.
[  517.830253][ T9803] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1221'.
[  517.942467][ T9585] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  517.976629][ T9585] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  518.003642][ T9585] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  518.020265][ T9585] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  518.038497][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  518.078267][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  518.181835][ T9821] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.1228'.
[  518.793024][ T5495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.829746][ T5495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.951120][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  518.966641][ T6673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.015330][ T6673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.072567][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  520.300765][ T9839] devtmpfs: Too few inodes for current use
[  521.226826][ T6673] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.326545][ T6673] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.409006][ T6673] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.473760][ T6673] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.509922][    T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  521.759863][    T7] usb 3-1: Using ep0 maxpacket: 32
[  521.879940][    T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  521.888931][    T7] usb 3-1: config 0 has no interface number 0
[  522.051601][    T7] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  522.068170][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.076508][    T7] usb 3-1: Product: syz
[  522.086645][    T7] usb 3-1: Manufacturer: syz
[  522.091869][    T7] usb 3-1: SerialNumber: syz
[  522.114102][    T7] usb 3-1: config 0 descriptor??
[  522.160916][    T7] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  522.175516][    T7] usb 3-1: selecting invalid altsetting 1
[  522.181545][    T7] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  522.206894][    T7] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  522.221989][    T7] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  522.232447][    T7] usb 3-1: media controller created
[  522.251373][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  522.361553][    T7] usb 3-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)...
[  522.373642][    T7] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered.
[  522.427631][    T7] DVB: Unable to find symbol mxl5005s_attach()
[  522.646753][ T6673] device hsr_slave_0 left promiscuous mode
[  522.668571][ T6673] device hsr_slave_1 left promiscuous mode
[  522.695673][ T9894] ubi: mtd0 is already attached to ubi0
[  522.706959][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  522.723666][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_0
[  522.744443][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  522.760939][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.786407][ T6673] device bridge_slave_1 left promiscuous mode
[  522.798715][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.859209][ T6673] device bridge_slave_0 left promiscuous mode
[  522.868317][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.924533][ T6673] device veth1_macvtap left promiscuous mode
[  522.931300][ T6673] device veth0_macvtap left promiscuous mode
[  522.937375][ T6673] device veth1_vlan left promiscuous mode
[  522.943816][ T6673] device veth0_vlan left promiscuous mode
[  523.756648][ T6673] team0 (unregistering): Port device team_slave_1 removed
[  523.787649][ T6673] team0 (unregistering): Port device team_slave_0 removed
[  523.814036][ T6673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  523.846661][ T6673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  523.963432][ T6673] bond0 (unregistering): Released all slaves
[  524.646572][ T9843] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.878082][ T9843] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.030646][ T4212] Bluetooth: hci1: command 0x0409 tx timeout
[  525.968468][ T9843] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.061524][ T9900] chnl_net:caif_netlink_parms(): no params data found
[  526.128381][ T9920] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1242'.
[  526.137907][ T9920] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1242'.
[  526.506448][ T9843] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.565897][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.603672][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.627238][ T9900] device bridge_slave_0 entered promiscuous mode
[  526.663681][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.671513][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.682421][ T9900] device bridge_slave_1 entered promiscuous mode
[  526.734809][ T9900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.762338][ T9900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  526.845102][ T9843] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  526.882277][ T9900] team0: Port device team_slave_0 added
[  526.908445][ T9900] team0: Port device team_slave_1 added
[  526.937759][ T9843] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  527.044847][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.063033][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.129596][ T9900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.174225][ T9843] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  527.190052][ T4254] Bluetooth: hci1: command 0x041b tx timeout
[  527.208967][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.226909][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.319765][ T9900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.511702][    T7] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-110
[  527.525069][ T9843] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  528.032365][    T7] usb 3-1: USB disconnect, device number 8
[  528.078135][ T9900] device hsr_slave_0 entered promiscuous mode
[  528.100943][ T9900] device hsr_slave_1 entered promiscuous mode
[  528.130766][ T9900] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  528.158736][ T9900] Cannot create hsr debugfs directory
[  528.426132][ T9946] ubi: mtd0 is already attached to ubi0
[  529.270514][ T4254] Bluetooth: hci1: command 0x040f tx timeout
[  531.799842][   T21] Bluetooth: hci1: command 0x0419 tx timeout
[  532.394207][ T9979] tmpfs: Unknown parameter 'usrquota'
[  532.604136][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1256'.
[  532.613223][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1256'.
[  532.651055][ T9900] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  532.664900][ T9981] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  532.726055][ T9900] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  532.774425][ T9981] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  532.831181][ T9900] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  532.950579][ T9900] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  533.150045][ T9900] 8021q: adding VLAN 0 to HW filter on device bond0
[  533.218086][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  533.246224][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  533.285270][ T9900] 8021q: adding VLAN 0 to HW filter on device team0
[  533.304078][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  533.333533][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  533.384721][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.391895][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state
[  533.473933][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  533.507422][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  533.561596][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  533.670524][T10006] ubi: mtd0 is already attached to ubi0
[  533.777249][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.784433][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state
[  534.217771][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  534.260907][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  534.401793][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  534.441861][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  534.470967][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  535.087830][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  535.162731][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  535.424072][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  535.480943][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  535.584845][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  535.601220][ T9900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  535.643689][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  538.621003][T10057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1269'.
[  538.630078][T10057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1269'.
[  538.971628][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1271'.
[  539.005891][T10060] ubi: mtd0 is already attached to ubi0
[  539.205591][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  539.230321][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  539.290543][ T9900] 8021q: adding VLAN 0 to HW filter on device batadv0
[  539.319024][   T21] Bluetooth: hci4: command 0x1003 tx timeout
[  539.333271][ T9239] Bluetooth: hci4: sending frame failed (-49)
[  540.264042][T10074] UBIFS error (pid: 10074): cannot open "c:::", error -22
[  541.422675][ T7061] Bluetooth: hci4: command 0x1001 tx timeout
[  541.646007][ T9239] Bluetooth: hci4: sending frame failed (-49)
[  542.411583][T10101] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1278'.
[  542.433352][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  542.454830][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  542.518208][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  542.541016][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  542.582815][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  542.598956][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  542.882288][ T9900] device veth0_vlan entered promiscuous mode
[  543.462954][T10116] ubi: mtd0 is already attached to ubi0
[  544.100022][   T13] Bluetooth: hci4: command 0x1009 tx timeout
[  544.114025][ T9900] device veth1_vlan entered promiscuous mode
[  544.212838][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  544.237261][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  544.280765][ T9900] device veth0_macvtap entered promiscuous mode
[  545.190077][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  545.780638][T10132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1285'.
[  545.790061][T10132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1285'.
[  545.850822][ T9900] device veth1_macvtap entered promiscuous mode
[  545.864270][T10150] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1289'.
[  545.871361][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.899119][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.909215][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.919907][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.930377][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.940922][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.952085][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.963379][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.973570][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.986109][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.027885][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_0
[  546.040339][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  546.054402][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  546.072541][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.100072][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.146618][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.181664][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.228192][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.279589][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.329892][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.357725][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.359515][T10177] ubi: mtd0 is already attached to ubi0
[  546.380898][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.397754][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.479403][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_1
[  546.514193][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  546.528673][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  546.547448][ T9900] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.588472][ T9900] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.625747][ T9900] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.770092][ T9900] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  548.581174][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.589032][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.666248][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  548.687670][T10210] netlink: 120 bytes leftover after parsing attributes in process `syz.7.1301'.
[  548.702561][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.733447][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.839382][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  548.969959][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1302'.
[  549.797875][T10231] ubi: mtd0 is already attached to ubi0
[  550.074948][ T4294] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.182831][ T4294] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.262322][ T4294] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.374638][ T4294] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.321321][ T4294] device hsr_slave_0 left promiscuous mode
[  551.327909][ T4294] device hsr_slave_1 left promiscuous mode
[  551.334552][ T4294] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  551.342267][ T4294] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.350143][ T4294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.357605][ T4294] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.366024][ T4294] device bridge_slave_1 left promiscuous mode
[  551.374032][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.382980][ T4294] device bridge_slave_0 left promiscuous mode
[  551.389188][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.405559][ T4294] device veth1_macvtap left promiscuous mode
[  551.411767][ T4294] device veth0_macvtap left promiscuous mode
[  551.417848][ T4294] device veth1_vlan left promiscuous mode
[  551.424259][ T4294] device veth0_vlan left promiscuous mode
[  552.834237][T10300] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1314'.
[  553.487063][ T4294] team0 (unregistering): Port device team_slave_1 removed
[  553.530426][ T4294] team0 (unregistering): Port device team_slave_0 removed
[  553.574957][ T4294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  553.647772][ T4294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  553.926489][T10313] netlink: 'syz.6.1317': attribute type 10 has an invalid length.
[  553.934464][T10313] netlink: 212848 bytes leftover after parsing attributes in process `syz.6.1317'.
[  554.440902][ T4294] bond0 (unregistering): Released all slaves
[  554.788122][T10315] ubi: mtd0 is already attached to ubi0
[  555.475596][ T5611] Bluetooth: hci1: command 0x0409 tx timeout
[  555.686109][T10301] chnl_net:caif_netlink_parms(): no params data found
[  558.081027][T10357] netlink: 120 bytes leftover after parsing attributes in process `syz.7.1327'.
[  558.139252][ T7061] Bluetooth: hci1: command 0x041b tx timeout
[  558.399876][T10360] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9
[  558.416037][T10301] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.470250][T10301] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.604517][T10301] device bridge_slave_0 entered promiscuous mode
[  558.661433][T10373] ubi: mtd0 is already attached to ubi0
[  558.674953][T10301] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.767381][T10301] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.813830][T10375] netlink: 'syz.2.1329': attribute type 10 has an invalid length.
[  558.822090][T10375] netlink: 212848 bytes leftover after parsing attributes in process `syz.2.1329'.
[  559.403046][T10301] device bridge_slave_1 entered promiscuous mode
[  559.757829][T10301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  560.170180][T10301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  560.330541][ T4210] Bluetooth: hci1: command 0x040f tx timeout
[  560.394248][T10301] team0: Port device team_slave_0 added
[  560.511675][T10301] team0: Port device team_slave_1 added
[  562.305047][T10301] batman_adv: batadv0: Adding interface: batadv_slave_0
[  562.325995][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.354880][T10301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  562.379849][ T7061] Bluetooth: hci1: command 0x0419 tx timeout
[  562.393028][T10301] batman_adv: batadv0: Adding interface: batadv_slave_1
[  562.408272][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.606500][T10301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  562.743795][T10416] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1338'.
[  563.000180][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  563.006516][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  563.087104][T10301] device hsr_slave_0 entered promiscuous mode
[  563.108653][T10301] device hsr_slave_1 entered promiscuous mode
[  563.111279][   T26] audit: type=1804 audit(1733531413.656:97): pid=10419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1340" name="/newroot/177/bus/file0" dev="overlay" ino=937 res=1 errno=0
[  563.152893][T10301] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  563.170457][T10301] Cannot create hsr debugfs directory
[  563.191289][T10422] ubi: mtd0 is already attached to ubi0
[  563.510613][T10427] netlink: 'syz.6.1342': attribute type 10 has an invalid length.
[  563.518525][T10427] netlink: 212848 bytes leftover after parsing attributes in process `syz.6.1342'.
[  568.023784][T10482] ubi: mtd0 is already attached to ubi0
[  568.561635][T10489] netlink: 'syz.7.1356': attribute type 10 has an invalid length.
[  568.569503][T10489] netlink: 212848 bytes leftover after parsing attributes in process `syz.7.1356'.
[  568.738677][T10301] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  568.777590][T10301] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  568.800720][T10301] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  568.839329][T10301] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  570.463953][T10301] 8021q: adding VLAN 0 to HW filter on device bond0
[  570.635282][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  570.669251][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  571.083072][T10301] 8021q: adding VLAN 0 to HW filter on device team0
[  571.156443][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  571.191093][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  571.297815][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.305023][ T4251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  571.386725][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  571.427829][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  571.443264][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  571.483275][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.490477][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  571.531367][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  571.570781][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  571.601094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  571.630227][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  571.652593][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  571.682446][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  571.718449][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  571.755898][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  571.776543][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  571.797077][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  571.812398][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  571.888986][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  572.061130][T10536] ubi: mtd0 is already attached to ubi0
[  572.659091][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  572.685847][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  573.435201][T10301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  573.844340][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1373'.
[  573.920567][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  573.970616][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  574.070724][T10301] device veth0_vlan entered promiscuous mode
[  574.181427][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  574.217777][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  574.399222][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  574.529413][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  574.649632][T10301] device veth1_vlan entered promiscuous mode
[  574.842283][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  574.860564][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  574.891525][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  574.941687][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  575.022497][T10301] device veth0_macvtap entered promiscuous mode
[  575.050489][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  575.092307][T10301] device veth1_macvtap entered promiscuous mode
[  575.142110][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.173198][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.209776][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.249808][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.322681][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.353141][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.461183][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.528833][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.552282][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.562949][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.574534][T10301] batman_adv: batadv0: Interface activated: batadv_slave_0
[  575.600679][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  575.615120][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  575.675369][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  575.736971][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.811349][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  575.859747][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.874070][T10613] ubi: mtd0 is already attached to ubi0
[  575.910362][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  575.934429][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.980033][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.014670][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.064700][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.111212][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.170539][T10301] batman_adv: batadv0: Interface activated: batadv_slave_1
[  576.298474][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  576.330010][  T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  576.397187][T10301] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  576.439512][T10301] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  576.650109][T10301] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  576.658885][T10301] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  577.692736][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  577.783724][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  577.994927][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  578.003559][  T385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.032455][  T385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  578.918807][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  579.310254][T10368] ==================================================================
[  579.318848][T10368] BUG: KASAN: use-after-free in __mutex_lock_common+0xe4a/0x25a0
[  579.326602][T10368] Read of size 8 at addr ffff888067c28060 by task khidpd_15bc5886/10368
[  579.334944][T10368] 
[  579.337290][T10368] CPU: 1 PID: 10368 Comm: khidpd_15bc5886 Not tainted 5.15.173-syzkaller #0
[  579.345980][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  579.356051][T10368] Call Trace:
[  579.359342][T10368]  <TASK>
[  579.362288][T10368]  dump_stack_lvl+0x1e3/0x2d0
[  579.367011][T10368]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  579.372661][T10368]  ? _printk+0xd1/0x120
[  579.376817][T10368]  ? __wake_up_klogd+0xcc/0x100
[  579.381660][T10368]  ? panic+0x860/0x860
[  579.385720][T10368]  ? _raw_spin_lock_irqsave+0xdd/0x120
[  579.391177][T10368]  print_address_description+0x63/0x3b0
[  579.396719][T10368]  ? __mutex_lock_common+0xe4a/0x25a0
[  579.402086][T10368]  kasan_report+0x16b/0x1c0
[  579.406589][T10368]  ? __mutex_lock_common+0xe4a/0x25a0
[  579.411963][T10368]  __mutex_lock_common+0xe4a/0x25a0
[  579.417176][T10368]  ? l2cap_unregister_user+0x63/0x1b0
[  579.422543][T10368]  ? mutex_lock_io_nested+0x60/0x60
[  579.427739][T10368]  ? timer_delete_sync+0x247/0x2e0
[  579.432985][T10368]  ? try_to_del_timer_sync+0x310/0x310
[  579.438456][T10368]  ? _raw_spin_unlock+0x40/0x40
[  579.443323][T10368]  mutex_lock_nested+0x17/0x20
[  579.448102][T10368]  l2cap_unregister_user+0x63/0x1b0
[  579.453300][T10368]  hidp_session_thread+0x44b/0x490
[  579.458410][T10368]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  579.464389][T10368]  ? hidp_session_get+0x80/0x80
[  579.469252][T10368]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  579.475144][T10368]  ? hidp_session_thread+0x490/0x490
[  579.480435][T10368]  ? lockdep_hardirqs_on+0x94/0x130
[  579.485658][T10368]  ? hidp_session_thread+0x490/0x490
[  579.490939][T10368]  ? __kthread_parkme+0x15c/0x1c0
[  579.495969][T10368]  kthread+0x3f6/0x4f0
[  579.500032][T10368]  ? hidp_session_get+0x80/0x80
[  579.504888][T10368]  ? kthread_blkcg+0xd0/0xd0
[  579.509475][T10368]  ret_from_fork+0x1f/0x30
[  579.513918][T10368]  </TASK>
[  579.516937][T10368] 
[  579.519260][T10368] Allocated by task 10301:
[  579.523679][T10368]  ____kasan_kmalloc+0xba/0xf0
[  579.528445][T10368]  __kmalloc+0x168/0x300
[  579.532696][T10368]  hci_alloc_dev_priv+0x23/0x1d60
[  579.537733][T10368]  vhci_create_device+0x120/0x590
[  579.542769][T10368]  vhci_write+0x382/0x430
[  579.547295][T10368]  vfs_write+0xacd/0xe50
[  579.551552][T10368]  ksys_write+0x1a2/0x2c0
[  579.555886][T10368]  do_syscall_64+0x3b/0xb0
[  579.560297][T10368]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  579.566188][T10368] 
[  579.568509][T10368] Freed by task 10301:
[  579.572558][T10368]  kasan_set_track+0x4b/0x80
[  579.577143][T10368]  kasan_set_free_info+0x1f/0x40
[  579.582087][T10368]  ____kasan_slab_free+0xd8/0x120
[  579.587191][T10368]  slab_free_freelist_hook+0xdd/0x160
[  579.592563][T10368]  kfree+0xf1/0x270
[  579.596365][T10368]  hci_release_dev+0x149e/0x1620
[  579.601303][T10368]  bt_host_release+0x7f/0x90
[  579.605890][T10368]  device_release+0x91/0x1c0
[  579.610473][T10368]  kobject_put+0x224/0x460
[  579.614882][T10368]  vhci_release+0x7b/0xc0
[  579.619211][T10368]  __fput+0x3fe/0x8e0
[  579.623191][T10368]  task_work_run+0x129/0x1a0
[  579.627785][T10368]  do_exit+0x6a3/0x2480
[  579.631940][T10368]  do_group_exit+0x144/0x310
[  579.636528][T10368]  __x64_sys_exit_group+0x3b/0x40
[  579.641558][T10368]  do_syscall_64+0x3b/0xb0
[  579.645965][T10368]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  579.651853][T10368] 
[  579.654274][T10368] Last potentially related work creation:
[  579.659986][T10368]  kasan_save_stack+0x36/0x60
[  579.664696][T10368]  kasan_record_aux_stack+0xba/0x100
[  579.669985][T10368]  insert_work+0x54/0x3e0
[  579.674306][T10368]  __queue_work+0x963/0xd00
[  579.678799][T10368]  queue_work_on+0x14b/0x250
[  579.683386][T10368]  process_one_work+0x8a1/0x10c0
[  579.688318][T10368]  worker_thread+0xaca/0x1280
[  579.692986][T10368]  kthread+0x3f6/0x4f0
[  579.697055][T10368]  ret_from_fork+0x1f/0x30
[  579.701463][T10368] 
[  579.703780][T10368] Second to last potentially related work creation:
[  579.710356][T10368]  kasan_save_stack+0x36/0x60
[  579.715029][T10368]  kasan_record_aux_stack+0xba/0x100
[  579.720304][T10368]  insert_work+0x54/0x3e0
[  579.724638][T10368]  __queue_work+0x963/0xd00
[  579.729143][T10368]  call_timer_fn+0x16d/0x560
[  579.733726][T10368]  __run_timers+0x6a8/0x890
[  579.738319][T10368]  run_timer_softirq+0x63/0xf0
[  579.743080][T10368]  handle_softirqs+0x3a7/0x930
[  579.747838][T10368]  __irq_exit_rcu+0x157/0x240
[  579.752509][T10368]  irq_exit_rcu+0x5/0x20
[  579.756741][T10368]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  579.762386][T10368]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  579.768369][T10368] 
[  579.770690][T10368] The buggy address belongs to the object at ffff888067c28000
[  579.770690][T10368]  which belongs to the cache kmalloc-8k of size 8192
[  579.784736][T10368] The buggy address is located 96 bytes inside of
[  579.784736][T10368]  8192-byte region [ffff888067c28000, ffff888067c2a000)
[  579.798011][T10368] The buggy address belongs to the page:
[  579.803637][T10368] page:ffffea00019f0a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67c28
[  579.813797][T10368] head:ffffea00019f0a00 order:3 compound_mapcount:0 compound_pincount:0
[  579.822120][T10368] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  579.830105][T10368] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017442280
[  579.838680][T10368] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  579.847265][T10368] page dumped because: kasan: bad access detected
[  579.853668][T10368] page_owner tracks the page as allocated
[  579.859374][T10368] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9833, ts 519144555062, free_ts 519130636912
[  579.880031][T10368]  get_page_from_freelist+0x3b78/0x3d40
[  579.885575][T10368]  __alloc_pages+0x272/0x700
[  579.890165][T10368]  new_slab+0xbb/0x4b0
[  579.894226][T10368]  ___slab_alloc+0x6f6/0xe10
[  579.898810][T10368]  __kmalloc_node+0x1fa/0x390
[  579.903502][T10368]  crypto_create_tfm_node+0x73/0x360
[  579.908812][T10368]  crypto_alloc_tfm_node+0x15d/0x350
[  579.914102][T10368]  alg_bind+0x2fd/0x560
[  579.918249][T10368]  __sys_bind+0x388/0x400
[  579.922576][T10368]  __x64_sys_bind+0x76/0x80
[  579.927077][T10368]  do_syscall_64+0x3b/0xb0
[  579.931486][T10368]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  579.937375][T10368] page last free stack trace:
[  579.942046][T10368]  free_unref_page_prepare+0xc34/0xcf0
[  579.947533][T10368]  free_unref_page+0x95/0x2d0
[  579.952241][T10368]  __unfreeze_partials+0x1b7/0x210
[  579.957361][T10368]  put_cpu_partial+0x132/0x1a0
[  579.962129][T10368]  ___cache_free+0xe3/0x100
[  579.966642][T10368]  qlist_free_all+0x36/0x90
[  579.971141][T10368]  kasan_quarantine_reduce+0x162/0x180
[  579.976596][T10368]  __kasan_slab_alloc+0x2f/0xc0
[  579.981440][T10368]  slab_post_alloc_hook+0x53/0x380
[  579.986546][T10368]  kmem_cache_alloc_node+0x121/0x2c0
[  579.991824][T10368]  __alloc_skb+0xdd/0x590
[  579.996177][T10368]  alloc_skb_with_frags+0xa3/0x780
[  580.001281][T10368]  sock_alloc_send_pskb+0x915/0xa50
[  580.006484][T10368]  unix_dgram_sendmsg+0x6fd/0x2090
[  580.011585][T10368]  __sys_sendto+0x564/0x720
[  580.016083][T10368]  __x64_sys_sendto+0xda/0xf0
[  580.020750][T10368] 
[  580.023082][T10368] Memory state around the buggy address:
[  580.028700][T10368]  ffff888067c27f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  580.036783][T10368]  ffff888067c27f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  580.044853][T10368] >ffff888067c28000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  580.052915][T10368]                                                        ^
[  580.060119][T10368]  ffff888067c28080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  580.068188][T10368]  ffff888067c28100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  580.076252][T10368] ==================================================================
[  580.084435][T10368] Disabling lock debugging due to kernel taint
[  580.091975][T10368] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  580.099195][T10368] CPU: 1 PID: 10368 Comm: khidpd_15bc5886 Tainted: G    B             5.15.173-syzkaller #0
[  580.109252][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  580.119310][T10368] Call Trace:
[  580.122594][T10368]  <TASK>
[  580.125535][T10368]  dump_stack_lvl+0x1e3/0x2d0
[  580.130227][T10368]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  580.135879][T10368]  ? panic+0x860/0x860
[  580.139960][T10368]  ? rcu_is_watching+0x11/0xa0
[  580.144756][T10368]  panic+0x318/0x860
[  580.148759][T10368]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  580.154929][T10368]  ? check_panic_on_warn+0x1d/0xa0
[  580.160047][T10368]  ? fb_is_primary_device+0xd0/0xd0
[  580.165321][T10368]  ? _raw_spin_unlock_irqrestore+0xd4/0x130
[  580.171223][T10368]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  580.177239][T10368]  ? _raw_spin_unlock+0x40/0x40
[  580.182114][T10368]  check_panic_on_warn+0x7e/0xa0
[  580.187053][T10368]  ? __mutex_lock_common+0xe4a/0x25a0
[  580.192415][T10368]  end_report+0x6d/0xf0
[  580.196561][T10368]  kasan_report+0x18e/0x1c0
[  580.201063][T10368]  ? __mutex_lock_common+0xe4a/0x25a0
[  580.206449][T10368]  __mutex_lock_common+0xe4a/0x25a0
[  580.211643][T10368]  ? l2cap_unregister_user+0x63/0x1b0
[  580.217015][T10368]  ? mutex_lock_io_nested+0x60/0x60
[  580.222213][T10368]  ? timer_delete_sync+0x247/0x2e0
[  580.227321][T10368]  ? try_to_del_timer_sync+0x310/0x310
[  580.232776][T10368]  ? _raw_spin_unlock+0x40/0x40
[  580.237626][T10368]  mutex_lock_nested+0x17/0x20
[  580.242387][T10368]  l2cap_unregister_user+0x63/0x1b0
[  580.247607][T10368]  hidp_session_thread+0x44b/0x490
[  580.252833][T10368]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  580.258732][T10368]  ? hidp_session_get+0x80/0x80
[  580.263574][T10368]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  580.269469][T10368]  ? hidp_session_thread+0x490/0x490
[  580.274780][T10368]  ? lockdep_hardirqs_on+0x94/0x130
[  580.279979][T10368]  ? hidp_session_thread+0x490/0x490
[  580.285257][T10368]  ? __kthread_parkme+0x15c/0x1c0
[  580.290297][T10368]  kthread+0x3f6/0x4f0
[  580.294468][T10368]  ? hidp_session_get+0x80/0x80
[  580.299311][T10368]  ? kthread_blkcg+0xd0/0xd0
[  580.303910][T10368]  ret_from_fork+0x1f/0x30
[  580.308344][T10368]  </TASK>
[  580.311470][T10368] Kernel Offset: disabled
[  580.315796][T10368] Rebooting in 86400 seconds..