last executing test programs:

13.294517175s ago: executing program 3 (id=146):
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_clone3(&(0x7f0000000300)={0x101004880, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, 0x0, 0x0, 0x0)
shutdown(r1, 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf20000091612c21f30000000000000000000000000000d285abae000000000000ffffe000000200000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9bb759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be9b0220836729028b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb3596b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb6ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b784d392645d013d1424c6e7f141f67ef620df8a8bac03489bf70423fa9f2c79c41d5b6496ae17718b5044c5cadb43264b290ebfcd9d5236d0b14e280fd3fcbb2fa330dcc58f44ed0b12c9299e74ea56ffefb003034230e20886f502e6df00aa138e9c8761d107bdea8d57b64345f91e055c6f52356aec1ce68e612e94224407bcf7b1df9f2aec27d44b0b9a944d16236"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff892f00004000633277fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0xfe, 0x60000000}, 0x4c)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="10c32900000000dbdf253700000008005700020000000800342b675bd3758e792c34cc5bf858e26599e2cb3688532661feb890f64900270002000000a75f59d89d3639214e59f560db111da535aced570a3768b9995bbd315f65ade2"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000200)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x58)
syz_emit_ethernet(0xfc6, &(0x7f0000001000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c890f902bff20010000000000000000000000000000fe8000000000000000000000000000aa3cf00000000000000401aa05020009040101007503a05ea1a450710e39e45f43900c1597c958f65cad2b2261c7ecaa658392b3be2d7e27e0e4f0e1ae727081dc1e6b28cca212d4580bada268c4f1330da9b27818057c9ac90f3140536c824850e3928a28a6a1871374a6be57bf11afbad5047ff833cb7cc58a7e9aa5e7d00d1f0ff2c0443cd45192c023cec099f75e720a664898e88ca684b991c56d97a67638b3aa45b0df209a2e3a64cdfc4f1ad67dacf6de0659b42247e508bfc25e38a45f0dfcb086121cef4c827535737ca766e2156a11b248f40f14517cfcc411cee2402cd1402d67948e8ef3efd93dd07a3399197f894bc67a427d6055ae7c65e11a167f04ede9833c2831a2f029dfa400e79aa0b572740eedbd42d6e3a3b28e95721b37b5312d650cb93a673fcaeac5e4957de61786d5ae86bd1566524a081ac8aac160801849355eb388c8343d661b772ffea40aa77e94f0b6b3b609eb799fbd713ff944d2cc679b037d845ba31eebc347ef42eb78701771d99d1f32d12458578ec39037e9c812eedef05571e94b27a611748ce2aef5a6c5b0de3c81a2e99c2829ec4bdc897f0812c5048bd47de69918a64cbcc229a92720c85ba3f460ee76222bd0592aa62af50de5aa6e2f2c2f503b547ba266f875d8fd13381600309778467392fdf7959fc43e3625fe7d82b8f27d0172e0df5625474eff8598064b322a7fe9d1091fc115323cf5fca57bb2f5d5c2cb030028ffafc3a6d0e26c46c33c68a3bd722d32a0717c6a6647a9752a0770a25ea9b1ac529a017573c63560a2342d5c3045869ad6e8c7c6ebe895b2495db3c74a97255789cba936126b43cbd7a251523a6daafd8cd700565119ed29061de300476f5dd180d3a12f097d2d08a2f6168e7f4f7ab856af3a9d6d5ac5c79d1ed498c9301888bfe6fc638a1412ee7c804f55faf54acb92b13d0f9729ba8bdd09086f46f6ca58f9393f0a798cb9abf1d4b37c74631ce083906bd96000f98dddde39abf2b9cfd6fa6273741785cabe5775ea3fcb579c14332bf45508a92a86ce0e8b2433894a24c5a6906edfd5701dd3e685efcc1c495e8b4c044ea8b4a7e0ec53f1edde2275692cbec5b94e12ecf2fd282a483e7369e33e69c075efc4f281973f382cb58b556d5f72b2aad2fad6386819e0ae73d8dd4ac5d2244d3ced08b3c1f8e2a941125f9c19dbd5b14a2710c7553987926b4a7fbff73f3d1e45002886a1ba4504e0d0e0c63441092ebb5dd2289145e7cdc62c04dab7985a76dd8f3b436ff4401ea947fa3c19d6c884d2cc0e4e90d25c3ab34160162cca8e7af77acac5a4856cc9f4b86789c5d6830976322c370f39ad275a093eba9be5b1b022eb6557ca23a6d7d4cbf2e070ba7933eb4edfeae24ec785d398ca4362dc10681add35a9fad817d4dcf38188600fb4745e1a6f2e12a38b72bd4b2f17e187cf3995009d9e2fc7477465ef481ab8b5f22e43b599524e1b80203e1977f10c92b63b914c252408eb61c1c085e6fbe035ff60392dfb178015ef08e615e363585719d380c09458f15a97e22154b833700d2024d2d5f454e5ec78cb7acb3121b24c17cbaef0a2c3bc2afc52966c737e6fbae60e00b246ecc20a5e02760e038037b0ac6f7665d2fd2f02e7467777d85775b90ecd3d13f0dd779c5171642fe1d124e09db36c687f58ab439aa6d2d898e9e2d501a1e63b464068f6d7a7379fb5f361c52cd423645c3355f339f496b7dbbf8e3c14ba2d4ff3084ee0b225274f84488fab57e78eb1157d08b7e791b6eb208a2a5f409b7d2dcbb12a492e11c926be133a9d1f4c9d19a64d381b12d26988a32950209249c54fab8e72e243bbd882d0ccaa238e522f3d43773187c773d90df071537f06cdc05c0a7d99f32b2c195d991a27d48b070964b4ca260b3922923139a809e8c5f9a8f1de673f764964fe6ab2437f745bc8d87ab5e1a8d6d956edf0345ee0780566dd9ae2a0ebe6733bde2cfa37148ecb7c62f2e95b7c6a4c9e501710b05b1f54c29e299a064abb46c6b1d559461384c3ccfbacfa91e7da7d2fd49132d606f051988f2920f446a10fc1e85cadfab8771765e9356af3e832f58ced783dc000209b929358e8b3f14a689262fc8fff5c6d218b9d1e58302ab39dffa64f65f19bd316024d54b8da371648f26f37961322c930b083e9bea7967eca51b586e5426cdca7433e0e01d1b4342ba776b218ba1887ca63418724ee5794f469e28ef78ac51bae577aa10e2725c6f80c9b0ca451524d64e721aaf5060556b0c707209ae6f92adb49e9227892c76db17df76dc2481a30d9215bf9468f0d2f86ebaf5347846af972a39f7e72cc03fd29f7187064e241f096b397b303beea8c4ca834c0abfb2fe6e78f6902ce0ab3f31b031e29712fd4b90cbddb3effa48f95aef2d1afd78733ab49bed81fb09aab9d4d25c1deb5e57f48c4c53fd77d40ebff8e856c7263cf074a0f2ef5f8e7fc83f3bbb071c77b979d9ae1da6a4e05f3bcef60843777f9f2084c66b6f1043a4609ff4e01648b4ff2b07dbc0b9c9232f5aaeae90bc4736bffe4235559c1735cea5a660e3d4ac27e2311491693cafadbfda7a8bfdad824b767d17b22bcfe04a833f657643ee1670b12f3ecdf0be52bb78b30ddad8ac2862d2e7bb28eff654e75a7304e84c2902edfad20974928e703c8c5cae27f84e68011eb983bc223e7aaa5d502f07342c33223132e8e8604"], 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)

8.726940745s ago: executing program 4 (id=152):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
r2 = syz_open_dev$vim2m(0x0, 0xa848, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0)
syz_open_procfs(0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r6=>0x0, <r7=>0x0})
mq_timedsend(0xffffffffffffffff, &(0x7f00000002c0)="891234ab76bde71c2dae8c1ffc185378a70a9aec974832a68aae986dd68a57e08986234253d99817ddd7b2eba1a3bb19a2bec63829eacc6da0c6e9ee055f1aff56b3cf1b8109b74c6fa33e51a8b6b96fee4809a6616f37be78218c52620055140ac7fc8bc500b8096cda893e3f2a20ebbc49508c16a9a108f4d6fc2a0da81c3585be72be06ddf442a71f431fd14edcb8925e", 0x92, 0xffff, &(0x7f0000000240)={r6, r7+10000000})
r8 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmat(r8, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmctl$IPC_RMID(r8, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)

7.000439605s ago: executing program 0 (id=158):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
ppoll(&(0x7f0000000040)=[{r0, 0x8041}], 0x1, 0x0, 0x0, 0x0)
write$ppp(r0, &(0x7f0000000200)="bc72", 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)

6.768010413s ago: executing program 2 (id=159):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0)

6.686796076s ago: executing program 3 (id=160):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "20100000"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
syncfs(0xffffffffffffffff)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000040)=[{0xd, 0x2801, 0xfe, &(0x7f0000002700)="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"}], 0x1})
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000)

6.338040558s ago: executing program 2 (id=162):
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x400000, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x260)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0x9362, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r1, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb)

6.301520299s ago: executing program 1 (id=163):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$l2tp6(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000008010800000000000000000a00000805000300060000000900010073797a31000000002700010073797a310000000014000480080007400000000c08000640000000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x1)
sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x10, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000280)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)}}], 0x2, 0x4000014)
recvmmsg(r0, &(0x7f0000007900), 0x847, 0x10162, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0xfffffffd, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x3, &(0x7f0000000080)=0x5, 0x6, 0x1)
r7 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x4})

6.118088826s ago: executing program 2 (id=164):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xc0002009})
openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x74)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100), 0x10)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
recvmmsg(r6, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

5.914715853s ago: executing program 0 (id=165):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)

4.614571559s ago: executing program 0 (id=166):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_TSC(0x1a, 0x3)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
connect$inet6(r3, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000002280)=[{{&(0x7f0000000200)=@tipc=@id, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000540)=""/144, 0x90}, 0x997}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/24, 0x18}, {0x0}], 0x2, &(0x7f0000000a80)=""/163, 0xa3}, 0x484}, {{&(0x7f0000000b40)=@qipcrtr, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/112, 0x70}, {&(0x7f0000000c40)=""/47, 0x2f}, {&(0x7f0000000c80)=""/228, 0xe4}], 0x3, &(0x7f0000000dc0)=""/115, 0x73}, 0x5}, {{&(0x7f0000000e40)=@isdn, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000ec0)=""/166, 0xa6}, {&(0x7f0000001040)=""/91, 0x5b}, {&(0x7f00000010c0)=""/130, 0x82}, {&(0x7f0000001e40)=""/75, 0x4b}, {&(0x7f0000001200)=""/129, 0x81}], 0x5, &(0x7f0000001340)=""/206, 0xce}, 0x5}, {{&(0x7f00000014c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001540)=""/135, 0x87}, {&(0x7f0000001600)=""/106, 0x6a}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/4096, 0x1000}], 0x4}, 0x3}, {{&(0x7f0000001680)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000001940)=""/19, 0x13}, 0x9}], 0x6, 0x40002003, 0x0)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020)
syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
setregid(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

4.141670235s ago: executing program 4 (id=167):
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x100000000)
inotify_init()
userfaultfd(0x80001)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x53c6)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000140)=0x1)
ptrace$cont(0x1f, r0, 0x7, 0x100)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000380)={0x6, 0x9dc8, 0x0, 0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2)
close_range(r5, 0xffffffffffffffff, 0x0)

3.031142484s ago: executing program 4 (id=168):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x242, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2)
close_range(r4, 0xffffffffffffffff, 0x0)

2.950760987s ago: executing program 3 (id=169):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0xb4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x84, 0x2, [@TCA_BASIC_EMATCHES={0x80, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x60, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x2e, 0x3, [@TCF_META_TYPE_VAR="95f8c36bdf895239", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="eb193bc9b405", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="89bd4352", @TCF_META_TYPE_VAR="f7d10e2e77", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="af0076"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="6d022e699470", @TCF_META_TYPE_VAR="7e1ea93f4e98", @TCF_META_TYPE_VAR="2e5d1699"]}]}}]}]}]}}]}, 0xb4}}, 0x0)

2.576586129s ago: executing program 3 (id=170):
socket$packet(0x11, 0x2, 0x300)
r0 = syz_init_net_socket$netrom(0x6, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x1ffffd, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x3, 0x400, 0x9, 0x7d, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1b, 0xb, 0x16, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00')
read$FUSE(r5, &(0x7f0000003f80)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x7fff, 0x9, 0xfffff801, 0x10, 0xd, "07056b66d288c6a8271b542f1a8ad7f5a8b371"})
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x10, 0x2, 0x10)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r7 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00'})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0xf8, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x40c11)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

2.080659527s ago: executing program 1 (id=171):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8)
r0 = socket$kcm(0x23, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r0, 0x800)
accept4(r0, 0x0, 0x0, 0x80000)
r2 = socket$kcm(0x2, 0xa, 0x2)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000009900)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="ea004de6bb3b417a4fd5a2ef8032905b060a5f3a733534", 0x17}], 0x1, 0x0, 0x0, 0x4011}], 0x1, 0x2004001)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)

2.066620357s ago: executing program 4 (id=172):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0)

1.946044222s ago: executing program 2 (id=173):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

1.373085252s ago: executing program 2 (id=174):
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x260)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0x9362, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r1, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb)

1.328867433s ago: executing program 3 (id=175):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
ppoll(&(0x7f0000000040)=[{r0, 0x8041}], 0x1, 0x0, 0x0, 0x0)
write$ppp(r0, &(0x7f0000000200)="bc72", 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)

1.285151525s ago: executing program 0 (id=176):
socket$packet(0x11, 0x2, 0x300)
r0 = syz_init_net_socket$netrom(0x6, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x600c81, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x178, 0x24, 0xd0f, 0x1ffbfd, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x3, 0x400, 0x9, 0x7d, 0x105, 0x86a4, 0xc40, 0x7fffffff, 0xfffffff9, 0x1f, 0xb, 0x16, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb0000000000000009e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acdf902703c7bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x3}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00')
read$FUSE(r5, &(0x7f0000003f80)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x7fff, 0x9, 0xfffff801, 0x10, 0xd, "07056b66d288c6a8271b542f1a8ad7f5a8b371"})
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x10, 0x2, 0x10)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r7 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00'})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="20002abd7000fbdbdf25040000003400068008000300ac1414bb060001000a000000060001000a000000080003000a010101080006001800000008000600080000000c0006800500020001000000340001800500020080000000050002000700000008000700", @ANYRES32=r4, @ANYBLOB="050002000900000008000300e0000002080003007f000001400006800600010006000000080006001c000000060005004e210000060005004e21000014000400fc0100000000000080000000000000000800070029c23226fb0be882b05a2cc838fc246018aead7e026752b901fdea1b4ea1328b3caee0279d9d041967a1561e08eb323c9dd4a80eec6405a528e899e9dac78ad8ff441c60d69e1d5f63cd8731afacd5ea94f6baa4bbb66e8a31ff0161121a4595fc2c709fa648ff02eee609e13d80eedfee1319932f971c205a990a0097dcd63249252431f17cef8e406bba", @ANYRES32=r4, @ANYBLOB="3000068005000200040000000800060002000000060001000800000014000400fe8000"/47], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x40c11)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

1.267644005s ago: executing program 1 (id=177):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

1.210358177s ago: executing program 2 (id=178):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x14)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000000))
bind$netrom(0xffffffffffffffff, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0xfffffffe, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x5, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x4, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0xf, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x2, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0xffffffff, 0x0, 0x401, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000000040))
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
close(0x3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}])
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000f165f9a4f8573edc51743b3fe6de488aef95682261001907c36dd3d680e712c1473ff8e9d773180e9cd920a091bede5e43479cb2f6da50b1fa233fc5b098a210c54d66865a6f0afefd87178917f4a434dfc92e06f04570047953dbf3ecf3548f25cbe2090940f7409d5b7233fac074a2dd21b6070ca40245cb0d"], 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @random="18c45d9979c9", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe, 0x0, 0x8000}}}}}}, 0x0)
mmap$IORING_OFF_SQES(&(0x7f00006c1000/0x1000)=nil, 0x1000, 0x200000d, 0x4971, 0xffffffffffffffff, 0x10000000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x41}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000003bc0)=""/4085, 0xff5}, {&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000040)=""/126, 0x7e}, {&(0x7f00000000c0)=""/44, 0x2c}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x4, 0x2120, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0)

1.1151588s ago: executing program 4 (id=179):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

603.995638ms ago: executing program 1 (id=180):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0xb4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x84, 0x2, [@TCA_BASIC_EMATCHES={0x80, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x60, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x2e, 0x3, [@TCF_META_TYPE_VAR="95f8c36bdf895239", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="eb193bc9b405", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="89bd4352", @TCF_META_TYPE_VAR="f7d10e2e77", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="af0076"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="6d022e699470", @TCF_META_TYPE_VAR="7e1ea93f4e98", @TCF_META_TYPE_VAR="2e5d1699"]}]}}]}]}]}}]}, 0xb4}}, 0x0)

354.708647ms ago: executing program 4 (id=181):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$l2tp6(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000008010800000000000000000a00000805000300060000000900010073797a31000000002700010073797a310000000014000480080007400000000c08000640000000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x1)
sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x10, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000280)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)}}], 0x2, 0x4000014)
recvmmsg(r0, &(0x7f0000007900), 0x847, 0x10162, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0xfffffffd, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x3, &(0x7f0000000080)=0x5, 0x6, 0x1)
r7 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x4})

330.861768ms ago: executing program 3 (id=182):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x242, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2)
close_range(r4, 0xffffffffffffffff, 0x0)

253.104421ms ago: executing program 1 (id=183):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xe}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000208", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

215.570882ms ago: executing program 0 (id=184):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030328bd7000f90000000a00000008000300", @ANYRES32=r1], 0x1c}}, 0x0)

30.325079ms ago: executing program 0 (id=185):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

0s ago: executing program 1 (id=186):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180))
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x7, "ce89e2f6dc23280f3be1c3beb29b120a53da1f680736ab6e075471aa9b26acd4"})
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts.
[   64.481403][ T4255] cgroup: Unknown subsys name 'net'
[   64.617815][ T4255] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   65.928567][ T4255] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   67.810906][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.818528][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   67.827786][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.837853][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.847238][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   67.855730][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.864165][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   67.867930][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   67.874294][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.880710][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   67.887465][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.894850][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   67.902695][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   67.908412][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   67.917631][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.930101][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   67.938738][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.946351][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   67.954410][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   67.960271][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   67.962876][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   67.970184][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   67.977263][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   67.984076][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.991650][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   67.998483][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   68.011594][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.020190][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   68.051770][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   68.060031][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   68.468909][ T4275] chnl_net:caif_netlink_parms(): no params data found
[   68.541687][ T4269] chnl_net:caif_netlink_parms(): no params data found
[   68.562537][ T4280] chnl_net:caif_netlink_parms(): no params data found
[   68.599400][ T4274] chnl_net:caif_netlink_parms(): no params data found
[   68.631657][ T4268] chnl_net:caif_netlink_parms(): no params data found
[   68.680561][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.687709][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.696907][ T4275] device bridge_slave_0 entered promiscuous mode
[   68.727905][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.735213][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.743845][ T4275] device bridge_slave_1 entered promiscuous mode
[   68.777970][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.785437][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.796342][ T4280] device bridge_slave_0 entered promiscuous mode
[   68.834907][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.842160][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.850080][ T4280] device bridge_slave_1 entered promiscuous mode
[   68.865829][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.873013][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.881131][ T4269] device bridge_slave_0 entered promiscuous mode
[   68.908926][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.919232][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.926683][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.934717][ T4269] device bridge_slave_1 entered promiscuous mode
[   68.948129][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.956020][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.964242][ T4274] device bridge_slave_0 entered promiscuous mode
[   68.977405][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.984903][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.992989][ T4274] device bridge_slave_1 entered promiscuous mode
[   69.001546][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.019919][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.037673][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.081427][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.088566][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.097193][ T4268] device bridge_slave_0 entered promiscuous mode
[   69.111944][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.123336][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.139080][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.146573][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.154975][ T4268] device bridge_slave_1 entered promiscuous mode
[   69.167282][ T4275] team0: Port device team_slave_0 added
[   69.178110][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.189181][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.208434][ T4280] team0: Port device team_slave_0 added
[   69.231608][ T4275] team0: Port device team_slave_1 added
[   69.239114][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.260694][ T4280] team0: Port device team_slave_1 added
[   69.273405][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.295056][ T4274] team0: Port device team_slave_0 added
[   69.324694][ T4269] team0: Port device team_slave_0 added
[   69.335520][ T4269] team0: Port device team_slave_1 added
[   69.343913][ T4274] team0: Port device team_slave_1 added
[   69.375699][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.382888][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.409202][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.434835][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.442022][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.468491][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.492353][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.499489][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.526063][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.539064][ T4268] team0: Port device team_slave_0 added
[   69.545831][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.556011][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.585227][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.612961][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.620050][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.646341][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.657956][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.665723][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.692122][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.707125][ T4268] team0: Port device team_slave_1 added
[   69.719430][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.726660][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.752789][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.775742][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.782922][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.809078][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.848429][ T4275] device hsr_slave_0 entered promiscuous mode
[   69.855546][ T4275] device hsr_slave_1 entered promiscuous mode
[   69.869644][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.876888][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.903492][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.939939][ T4280] device hsr_slave_0 entered promiscuous mode
[   69.948391][ T4280] device hsr_slave_1 entered promiscuous mode
[   69.955906][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   69.963761][ T4280] Cannot create hsr debugfs directory
[   69.970057][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.977130][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.006461][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.075421][ T4269] device hsr_slave_0 entered promiscuous mode
[   70.082069][ T4284] Bluetooth: hci4: command 0x0409 tx timeout
[   70.082213][ T4286] Bluetooth: hci3: command 0x0409 tx timeout
[   70.088291][ T4284] Bluetooth: hci1: command 0x0409 tx timeout
[   70.095102][ T4285] Bluetooth: hci0: command 0x0409 tx timeout
[   70.106448][ T4273] Bluetooth: hci2: command 0x0409 tx timeout
[   70.114607][ T4269] device hsr_slave_1 entered promiscuous mode
[   70.121437][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.129274][ T4269] Cannot create hsr debugfs directory
[   70.140734][ T4274] device hsr_slave_0 entered promiscuous mode
[   70.147564][ T4274] device hsr_slave_1 entered promiscuous mode
[   70.154667][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.163439][ T4274] Cannot create hsr debugfs directory
[   70.232666][ T4268] device hsr_slave_0 entered promiscuous mode
[   70.239504][ T4268] device hsr_slave_1 entered promiscuous mode
[   70.246399][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.255493][ T4268] Cannot create hsr debugfs directory
[   70.555011][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.577115][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.598097][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.616239][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   70.654955][ T4269] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   70.677874][ T4269] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   70.688412][ T4269] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.706376][ T4269] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   70.778252][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   70.787270][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   70.799673][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   70.827685][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   70.883685][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.907047][ T4268] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   70.916880][ T4268] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   70.939514][ T4275] 8021q: adding VLAN 0 to HW filter on device team0
[   70.959112][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   70.968993][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   70.979138][ T4268] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   71.012866][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.024324][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.034441][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.042068][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.053636][ T4268] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   71.077584][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.086379][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.097441][ T4280] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   71.123942][ T4280] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   71.132629][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.144548][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.155309][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.162745][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.196182][ T4280] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   71.209208][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.222834][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.230821][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.238764][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.254045][ T4269] 8021q: adding VLAN 0 to HW filter on device team0
[   71.263148][ T4280] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   71.277358][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.288786][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   71.297606][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.306454][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.327890][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.344580][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   71.356259][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.368648][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   71.381240][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.390304][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.399470][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.406673][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.415235][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.426675][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.435438][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.442570][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.451430][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.461800][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.471199][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.479539][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.487994][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.496125][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.536581][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.554850][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.564810][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.575290][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   71.585705][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   71.604918][ T4274] 8021q: adding VLAN 0 to HW filter on device team0
[   71.633037][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.651108][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.670749][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.679701][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.692882][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.701773][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.710660][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.719032][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.744508][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.755404][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.765079][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.772491][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.783078][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.814995][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.826056][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.835849][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.847799][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[   71.849376][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.854741][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[   71.861365][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.908495][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.943612][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.954092][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.996886][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.005753][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.022667][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.031453][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.042127][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.052213][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.062599][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.072678][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.083110][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.092531][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.113738][ T4268] 8021q: adding VLAN 0 to HW filter on device team0
[   72.137684][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.160786][ T4284] Bluetooth: hci1: command 0x041b tx timeout
[   72.161803][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.166930][ T4284] Bluetooth: hci0: command 0x041b tx timeout
[   72.180697][ T4273] Bluetooth: hci3: command 0x041b tx timeout
[   72.180829][ T4285] Bluetooth: hci2: command 0x041b tx timeout
[   72.186683][ T4273] Bluetooth: hci4: command 0x041b tx timeout
[   72.205717][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.230955][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.265918][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.275430][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.295079][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.348011][ T4280] 8021q: adding VLAN 0 to HW filter on device team0
[   72.365910][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.376871][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.393384][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.400621][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.411837][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.421481][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.430042][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.437284][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.445259][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.454660][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.464288][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.472573][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.486767][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.523743][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.544822][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.558872][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.569376][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.578806][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.588616][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.598080][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.605295][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.614615][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.627264][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.638413][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.645901][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.676902][ T4268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   72.687867][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.702898][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.713577][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.722434][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.730989][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.738461][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.747569][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.756933][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.765964][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.775489][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.784466][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.793059][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.813593][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.849009][ T4275] device veth0_vlan entered promiscuous mode
[   72.870975][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.878801][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.888506][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.904255][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.917052][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.927237][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.936513][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.946128][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.955985][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.965851][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.975056][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.984266][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.993567][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.002426][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   73.025716][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.045440][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.054957][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.066786][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.093957][ T4275] device veth1_vlan entered promiscuous mode
[   73.116585][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.148442][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   73.175564][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   73.190346][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.226502][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.308887][ T4274] device veth0_vlan entered promiscuous mode
[   73.337045][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.346808][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.356002][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.365170][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.374317][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.382793][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.394294][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.404307][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.422481][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.435119][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.462858][ T4275] device veth0_macvtap entered promiscuous mode
[   73.478992][ T4269] device veth0_vlan entered promiscuous mode
[   73.489715][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.498403][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.508332][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.518056][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.527916][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.537485][ T4274] device veth1_vlan entered promiscuous mode
[   73.563004][ T4275] device veth1_macvtap entered promiscuous mode
[   73.585701][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.602367][ T4269] device veth1_vlan entered promiscuous mode
[   73.637628][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.665695][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.676045][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.695840][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.731388][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.742542][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.752378][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.762441][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.772768][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.782143][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.791080][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.798831][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.807968][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.817018][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.825626][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.834087][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.852495][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.863650][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.874449][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.883935][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.898588][ T4274] device veth0_macvtap entered promiscuous mode
[   73.924258][ T4268] device veth0_vlan entered promiscuous mode
[   73.936393][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.961302][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.980891][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.000863][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.022107][ T4274] device veth1_macvtap entered promiscuous mode
[   74.058132][ T4269] device veth0_macvtap entered promiscuous mode
[   74.075512][ T4268] device veth1_vlan entered promiscuous mode
[   74.112905][ T4269] device veth1_macvtap entered promiscuous mode
[   74.173170][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.199949][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.214904][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.229713][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.240735][ T4273] Bluetooth: hci2: command 0x040f tx timeout
[   74.240775][ T4273] Bluetooth: hci3: command 0x040f tx timeout
[   74.240798][ T4273] Bluetooth: hci1: command 0x040f tx timeout
[   74.250660][ T4284] Bluetooth: hci0: command 0x040f tx timeout
[   74.266070][ T4273] Bluetooth: hci4: command 0x040f tx timeout
[   74.272386][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.282358][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.293795][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.311433][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.321607][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.332270][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.341548][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.349690][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.358937][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.367560][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.376774][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.386182][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.395396][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.405651][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.417676][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.432645][ T4268] device veth0_macvtap entered promiscuous mode
[   74.444328][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.456763][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.468459][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.482685][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.495126][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.506565][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.517523][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.530621][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.552212][ T4268] device veth1_macvtap entered promiscuous mode
[   74.565807][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.583757][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.592648][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.602297][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.613508][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.623500][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.634300][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.660035][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.669204][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.678872][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.711912][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.721442][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.730723][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.739531][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.771327][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.791348][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.841468][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.849526][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.860119][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.893704][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.904414][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.914440][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.925571][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.935617][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.946203][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.957768][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.987940][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.998995][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.007722][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.016154][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.027589][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.052570][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.069572][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.079204][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.091965][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.102714][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.114027][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.125038][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.136415][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.148264][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.158106][ T4280] device veth0_vlan entered promiscuous mode
[   75.182152][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.208069][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.218178][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.227664][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.243746][ T4268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.256399][ T4268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.266867][ T4268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.276965][ T4268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.318576][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.340127][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.365561][ T4280] device veth1_vlan entered promiscuous mode
[   75.409634][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   75.424768][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.467153][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.490183][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.515309][ T4358] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   75.539701][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.540516][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.547846][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.575268][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.591908][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   75.612453][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.624285][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.636635][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.657246][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.698707][   T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.741852][ T4280] device veth0_macvtap entered promiscuous mode
[   75.770973][ T4280] device veth1_macvtap entered promiscuous mode
[   75.837246][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.841345][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.876518][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.914376][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.950114][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.981197][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.991911][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.004128][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.033378][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.071391][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.111920][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.142335][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.150932][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.159051][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.179641][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.226097][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.276970][ T4369] input: syz0 as /devices/virtual/input/input5
[   76.353214][ T4284] Bluetooth: hci0: command 0x0419 tx timeout
[   76.359573][ T4284] Bluetooth: hci4: command 0x0419 tx timeout
[   76.366227][ T4284] Bluetooth: hci1: command 0x0419 tx timeout
[   76.373919][ T4284] Bluetooth: hci3: command 0x0419 tx timeout
[   76.380502][ T4273] Bluetooth: hci2: command 0x0419 tx timeout
[   77.282373][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.344906][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.379478][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.431592][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.483183][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.523882][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.555387][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.574956][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.594629][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.889771][    C0] sched: RT throttling activated
[   77.913944][ T4377] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6'.
[   77.954409][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.975668][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.007461][ T4280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.029402][ T4280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.075357][ T4280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.124667][ T4280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.190063][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.224506][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.237408][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.349013][ T4380] comedi comedi0: Minor 3 could not be opened
[   78.489828][    T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!!
[   78.519824][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!!
[   78.529796][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!!
[   78.539781][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!!
[   78.549791][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!!
[   78.561904][ T4385] loop0: detected capacity change from 0 to 16
[   78.579795][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[   78.589792][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[   78.599790][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[   78.609785][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[   78.619792][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[   79.659500][ T4385] erofs: (device loop0): mounted with root inode @ nid 36.
[   79.846092][   T26] audit: type=1326 audit(1775117705.771:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4388 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182159c819 code=0x7ffc0000
[   79.909146][ T4391] process 'syz.3.4' launched './file2' with NULL argv: empty string added
[   79.938703][   T26] audit: type=1326 audit(1775117705.811:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4388 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f182159c819 code=0x7ffc0000
[   80.002653][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.056742][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.105354][   T26] audit: type=1326 audit(1775117705.811:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4388 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182159c819 code=0x7ffc0000
[   80.208410][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.296371][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.318977][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.395163][ T4406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'.
[   80.415786][   T26] audit: type=1326 audit(1775117705.811:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4388 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f182159c819 code=0x7ffc0000
[   80.441042][   T26] audit: type=1326 audit(1775117706.351:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4388 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182159c819 code=0x7ffc0000
[   80.464317][   T26] audit: type=1326 audit(1775117706.351:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4388 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182159c819 code=0x7ffc0000
[   80.502173][   T26] audit: type=1326 audit(1775117706.361:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4388 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f182159c819 code=0x7ffc0000
[   80.566460][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.747388][   T26] audit: type=1326 audit(1775117706.501:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4388 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182159c819 code=0x7ffc0000
[   80.916420][   T26] audit: type=1326 audit(1775117706.501:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4388 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182159c819 code=0x7ffc0000
[   81.003237][ T4406] 9pnet: Could not find request transport: vir4io
[   82.081877][  T128] cfg80211: failed to load regulatory.db
[   82.275769][   T26] audit: type=1326 audit(1775117708.201:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda2d9c819 code=0x7ffc0000
[   82.362092][ T4423] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   82.373926][ T4423] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   82.511338][ T4432] netlink: 'syz.0.16': attribute type 6 has an invalid length.
[   83.233822][ T4423] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   83.963528][ T4442] Zero length message leads to an empty skb
[   84.605399][ T4449] capability: warning: `syz.3.20' uses deprecated v2 capabilities in a way that may be insecure
[   84.891904][ T4455] loop0: detected capacity change from 0 to 16
[   84.990963][ T4455] erofs: (device loop0): mounted with root inode @ nid 36.
[   87.701033][ T4455] syz.0.23: attempt to access beyond end of device
[   87.701033][ T4455] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16
[   87.884159][   T26] kauditd_printk_skb: 10 callbacks suppressed
[   87.884175][   T26] audit: type=1800 audit(1775117713.811:22): pid=4455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="file2" dev="loop0" ino=89 res=0 errno=0
[   88.193384][   T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   88.379867][   T14] usb 5-1: Using ep0 maxpacket: 8
[   88.425518][   T14] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   88.449846][   T14] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   88.512004][   T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   88.550896][   T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   88.591932][   T14] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   88.662043][   T14] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   88.704045][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.011931][   T14] usb 5-1: usb_control_msg returned -32
[   89.017839][   T14] usbtmc 5-1:16.0: can't read capabilities
[   89.156450][   T14] usb 5-1: USB disconnect, device number 2
[   90.334954][ T4488] syz.0.35 uses obsolete (PF_INET,SOCK_PACKET)
[   90.909938][   T14] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   92.291685][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.313152][   T14] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   92.336972][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.360201][   T14] usb 3-1: config 0 descriptor??
[   92.378656][   T14] hub 3-1:0.0: bad descriptor, ignoring hub
[   92.390509][   T14] hub: probe of 3-1:0.0 failed with error -5
[   92.416020][   T14] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   93.006372][ T4439] Set syz1 is full, maxelem 65536 reached
[   93.785110][   T14] usb 3-1: USB disconnect, device number 2
[   95.160513][   T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   95.418179][ T4522] tty tty22: ldisc open failed (-12), clearing slot 21
[   95.460549][   T22] usb 5-1: Using ep0 maxpacket: 32
[   95.936534][   T22] usb 5-1: unable to read config index 0 descriptor/start: -71
[   96.818672][   T22] usb 5-1: can't read configurations, error -71
[   97.094415][ T4545] loop2: detected capacity change from 0 to 16
[   97.495259][ T4545] erofs: (device loop2): mounted with root inode @ nid 36.
[   97.948236][ T4549] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[   98.281060][ T4549] random: crng reseeded on system resumption
[   98.467307][ T4553] autofs4:pid:4553:autofs_fill_super: called with bogus options
[   98.723095][ T4560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'.
[   98.759888][ T4560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.54'.
[  100.710888][ T4585] netlink: 112 bytes leftover after parsing attributes in process `syz.3.62'.
[  100.822039][   T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  101.009886][   T14] usb 2-1: Using ep0 maxpacket: 32
[  101.730563][   T14] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  101.739690][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.759359][   T14] usb 2-1: config 0 descriptor??
[  101.952639][ T4596] loop0: detected capacity change from 0 to 16
[  101.970836][   T14] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  102.024262][ T4596] erofs: (device loop0): mounted with root inode @ nid 36.
[  102.066075][   T14] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  102.136073][   T14] dib0700: firmware download failed at 7 with -22
[  102.610460][   T41] usb 2-1: USB disconnect, device number 2
[  104.027433][ T4609] 9pnet_virtio: no channels available for device syz
[  104.793482][ T4628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'.
[  105.150693][ T4633] netlink: 112 bytes leftover after parsing attributes in process `syz.3.75'.
[  105.367883][ T4639] device bond_slave_0 entered promiscuous mode
[  105.374647][ T4639] device bond_slave_1 entered promiscuous mode
[  105.459946][   T22] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  105.643868][ T4644] netlink: 'syz.1.73': attribute type 4 has an invalid length.
[  105.667644][ T4645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.77'.
[  105.709891][   T22] usb 5-1: Using ep0 maxpacket: 32
[  105.907315][   T22] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  105.926302][ T4648] netlink: 'syz.1.73': attribute type 4 has an invalid length.
[  105.939879][   T22] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  105.966466][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.980441][ T4652] tipc: Started in network mode
[  105.994430][   T22] usb 5-1: Product: syz
[  105.998956][   T22] usb 5-1: Manufacturer: syz
[  106.007737][ T4652] tipc: Node identity ac14140f, cluster identity 4711
[  106.037253][   T22] usb 5-1: SerialNumber: syz
[  106.044722][ T4652] tipc: New replicast peer: 255.255.255.255
[  106.056044][ T4652] tipc: Enabled bearer <udp:syz2>, priority 10
[  106.108179][   T22] snd-ua101 5-1:1.1: invalid format type
[  106.129559][   T22] snd-ua101 5-1:1.0: invalid num_altsetting
[  106.657620][ T4664] mmap: syz.2.80 (4664) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  107.701317][   T14] tipc: Node number set to 2886997007
[  108.524582][ T4673] binder: 4672:4673 unknown command 1074553619
[  108.543510][ T4673] binder: 4672:4673 ioctl c0306201 200000000540 returned -22
[  108.780227][   T14] usb 5-1: USB disconnect, device number 5
[  108.974481][ T4678] loop0: detected capacity change from 0 to 16
[  108.993221][ T4678] erofs: (device loop0): mounted with root inode @ nid 36.
[  109.060639][ T4680] netlink: 112 bytes leftover after parsing attributes in process `syz.4.87'.
[  109.079910][ T4681] device bond_slave_0 entered promiscuous mode
[  109.086288][ T4681] device bond_slave_1 entered promiscuous mode
[  110.235275][ T4696] loop0: detected capacity change from 0 to 16
[  110.259252][ T4696] erofs: (device loop0): mounted with root inode @ nid 36.
[  110.271696][ T4696] syz.0.94: attempt to access beyond end of device
[  110.271696][ T4696] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  110.299429][ T4696] syz.0.94: attempt to access beyond end of device
[  110.299429][ T4696] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16
[  110.317106][ T4696] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  110.332902][ T4696] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  110.344599][ T4696] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  110.357522][   T26] audit: type=1800 audit(1775117736.261:23): pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.94" name="file2" dev="loop0" ino=89 res=0 errno=0
[  110.504865][ T4696] syz.0.94 (4696) used greatest stack depth: 20208 bytes left
[  111.102161][ T4694] sctp: failed to load transform for md5: -2
[  111.476920][ T4718] loop4: detected capacity change from 0 to 16
[  111.502603][ T4718] erofs: (device loop4): mounted with root inode @ nid 36.
[  111.788026][ T4727] device bond_slave_0 entered promiscuous mode
[  111.794543][ T4727] device bond_slave_1 entered promiscuous mode
[  112.129493][ T4736] netlink: 'syz.3.106': attribute type 6 has an invalid length.
[  112.393977][ T4728] tipc: Started in network mode
[  112.400056][ T4728] tipc: Node identity ac14140f, cluster identity 4711
[  112.651473][ T4728] tipc: New replicast peer: 255.255.255.255
[  112.689717][ T4728] tipc: Enabled bearer <udp:syz2>, priority 10
[  112.856308][ T4758] loop3: detected capacity change from 0 to 16
[  112.868771][ T4758] erofs: (device loop3): mounted with root inode @ nid 36.
[  113.181123][ T4764] device bond_slave_0 entered promiscuous mode
[  113.187423][ T4764] device bond_slave_1 entered promiscuous mode
[  113.700809][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  113.762372][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  113.804857][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  113.841533][ T4770] device bridge_slave_0 left promiscuous mode
[  113.883007][ T4770] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.926656][ T4770] device bridge_slave_1 left promiscuous mode
[  113.965309][ T4770] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.009162][ T4770] bond0: (slave bond_slave_0): Releasing backup interface
[  114.063235][ T4770] device bond_slave_0 left promiscuous mode
[  114.178162][ T4770] bond0: (slave bond_slave_1): Releasing backup interface
[  114.239704][ T4770] device bond_slave_1 left promiscuous mode
[  114.411848][ T4770] team0: Port device team_slave_0 removed
[  114.604390][ T4792] loop2: detected capacity change from 0 to 16
[  114.730145][ T4792] erofs: (device loop2): mounted with root inode @ nid 36.
[  114.796299][ T4770] team0: Port device team_slave_1 removed
[  114.834012][ T4770] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.848889][ T4770] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.866789][ T4770] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.895794][ T4770] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.985826][ T4769] netlink: 'syz.4.117': attribute type 10 has an invalid length.
[  115.023593][ T4769] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.087360][ T4769] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  115.146675][ T4315] tipc: Node number set to 2886997007
[  115.162376][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  115.468489][ T4809] netlink: 112 bytes leftover after parsing attributes in process `syz.4.128'.
[  115.684766][ T4807] netlink: 40 bytes leftover after parsing attributes in process `syz.2.127'.
[  116.774958][ T4829] netlink: 32 bytes leftover after parsing attributes in process `syz.0.133'.
[  118.226532][ T4842] netlink: 112 bytes leftover after parsing attributes in process `syz.4.139'.
[  118.315738][ T4829] tipc: Started in network mode
[  118.322115][ T4829] tipc: Node identity ac14140f, cluster identity 4711
[  118.335961][ T4829] tipc: New replicast peer: 255.255.255.255
[  118.382040][ T4829] tipc: Enabled bearer <udp:syz2>, priority 10
[  119.460748][   T41] tipc: Node number set to 2886997007
[  119.770398][ T4857] Bluetooth: MGMT ver 1.22
[  121.775579][ T4875] netlink: 68 bytes leftover after parsing attributes in process `syz.3.146'.
[  122.148124][ T4879] misc userio: No port type given on /dev/userio
[  124.558793][ T4882] netlink: 'syz.2.151': attribute type 1 has an invalid length.
[  124.731691][ T4887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.151'.
[  124.755226][ T4887] bond1: (slave bridge1): making interface the new active one
[  124.778781][ T4887] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  124.837454][ T4882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.151'.
[  125.289260][ T4901] netlink: 'syz.2.155': attribute type 6 has an invalid length.
[  126.296972][ T4910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'.
[  126.324280][ T4910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.156'.
[  127.029859][   T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  127.139545][ T4928] netlink: 32 bytes leftover after parsing attributes in process `syz.1.163'.
[  127.260084][   T14] usb 4-1: Using ep0 maxpacket: 32
[  127.267865][   T14] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  127.424415][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.256673][   T14] usb 4-1: config 0 descriptor??
[  128.271654][ T4928] tipc: Started in network mode
[  128.290143][ T4928] tipc: Node identity ac14140f, cluster identity 4711
[  128.298945][ T4928] tipc: New replicast peer: 255.255.255.255
[  128.313888][ T4928] tipc: Enabled bearer <udp:syz2>, priority 10
[  128.488310][   T14] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  128.504323][   T14] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  128.543144][   T14] dib0700: firmware download failed at 7 with -22
[  128.781694][ T4941] loop0: detected capacity change from 0 to 16
[  128.871450][ T4941] erofs: (device loop0): mounted with root inode @ nid 36.
[  128.967325][ T4941] syz.0.166: attempt to access beyond end of device
[  128.967325][ T4941] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  129.037334][ T4941] syz.0.166: attempt to access beyond end of device
[  129.037334][ T4941] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16
[  129.053550][ T4941] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  129.065130][   T26] audit: type=1800 audit(1775117754.991:24): pid=4941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.166" name="file2" dev="loop0" ino=89 res=0 errno=0
[  129.258095][   T14] usb 4-1: USB disconnect, device number 2
[  129.440143][ T4315] tipc: Node number set to 2886997007
[  130.345058][ T4952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'.
[  130.409361][ T4954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.169'.
[  131.528066][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.860407][ T4971] autofs4:pid:4971:autofs_fill_super: called with bogus options
[  132.568491][ T4316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.586549][ T4374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.640347][  T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.652877][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.665952][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.677091][ T4314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.686826][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'.
[  132.739861][ T4990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.180'.
[  133.282934][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  133.322770][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  133.552497][    C1] ------------[ cut here ]------------
[  133.558436][    C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1233/0x1600
[  133.568387][    C1] Modules linked in:
[  133.572350][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[  133.579392][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  133.589516][    C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  133.595924][    C1] Code: 24 4c 89 e7 e8 8e 2e 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 a9 8f d1 f7 0f 0b e9 f6 f7 ff ff e8 9d 8f d1 f7 <0f> 0b e9 48 fb ff ff e8 91 8f d1 f7 48 c7 c7 90 dc fa 8d 4c 89 e6
[  133.615712][    C1] RSP: 0018:ffffc900001e0a30 EFLAGS: 00010246
[  133.621857][    C1] RAX: ffffffff89b0e4f3 RBX: ffffffff89b0d2f6 RCX: ffff888017739dc0
[  133.629902][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  133.637909][    C1] RBP: 0000000000000000 R08: ffff888017739dc0 R09: 0000000000000003
[  133.646124][    C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88802976a228
[  133.654164][    C1] R13: dffffc0000000000 R14: ffff88802976a760 R15: ffff8880587f3424
[  133.662218][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  133.671225][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  133.677847][    C1] CR2: 00007fbda2de9f00 CR3: 000000007b5cd000 CR4: 00000000003506e0
[  133.685884][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  133.693923][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  133.702075][    C1] Call Trace:
[  133.705389][    C1]  <IRQ>
[  133.708250][    C1]  ? __ieee80211_beacon_get+0x36/0x1600
[  133.713867][    C1]  ieee80211_beacon_get_tim+0x63/0x4e0
[  133.719352][    C1]  mac80211_hwsim_beacon_tx+0x21c/0xae0
[  133.724962][    C1]  ? read_lock_is_recursive+0x10/0x10
[  133.730491][    C1]  __iterate_interfaces+0x243/0x500
[  133.735805][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  133.742109][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[  133.749330][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  133.755637][    C1]  ieee80211_iterate_active_interfaces_atomic+0xd7/0x170
[  133.762826][    C1]  mac80211_hwsim_beacon+0xb7/0x1b0
[  133.768160][    C1]  __hrtimer_run_queues+0x54a/0xd50
[  133.773525][    C1]  ? hw_scan_work+0xf50/0xf50
[  133.778508][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  133.784102][    C1]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  133.790289][    C1]  hrtimer_run_softirq+0x183/0x2a0
[  133.796167][    C1]  handle_softirqs+0x2a1/0x930
[  133.801051][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  133.806088][    C1]  ? do_softirq+0x210/0x210
[  133.810781][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  133.816037][    C1]  __irq_exit_rcu+0x13b/0x230
[  133.821017][    C1]  ? irq_exit_rcu+0x20/0x20
[  133.825833][    C1]  irq_exit_rcu+0x5/0x20
[  133.830449][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  133.836146][    C1]  </IRQ>
[  133.839096][    C1]  <TASK>
[  133.842094][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  133.848112][    C1] RIP: 0010:default_idle+0xb/0x10
[  133.853269][    C1] Code: 48 89 df e8 47 c2 9b f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 57 eb 4e 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[  133.873139][    C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6
[  133.879253][    C1] RAX: 3c0d1ffa07202400 RBX: ffffffff8a37c257 RCX: 3c0d1ffa07202400
[  133.887302][    C1] RDX: 0000000000000001 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20
[  133.895342][    C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01
[  133.903453][    C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000
[  133.911479][    C1] R13: dffffc0000000000 R14: ffff888017739dc0 R15: 1ffff9200002efc8
[  133.919484][    C1]  ? default_idle_call+0x77/0xc0
[  133.924503][    C1]  default_idle_call+0x84/0xc0
[  133.929294][    C1]  do_idle+0x3a2/0x680
[  133.933451][    C1]  ? idle_inject_timer_fn+0x60/0x60
[  133.938696][    C1]  ? do_idle+0x66b/0x680
[  133.943010][    C1]  cpu_startup_entry+0x3f/0x60
[  133.947997][    C1]  start_secondary+0xe4/0xf0
[  133.952689][    C1]  secondary_startup_64_no_verify+0xcf/0xdb
[  133.958645][    C1]  </TASK>
[  133.961735][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  133.969048][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[  133.976523][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  133.986588][    C1] Call Trace:
[  133.989886][    C1]  <IRQ>
[  133.992761][    C1]  dump_stack_lvl+0x188/0x24e
[  133.997470][    C1]  ? memcpy+0x3c/0x60
[  134.001467][    C1]  ? show_regs_print_info+0x12/0x12
[  134.006682][    C1]  ? load_image+0x400/0x400
[  134.011214][    C1]  panic+0x2e5/0x730
[  134.015305][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  134.020005][    C1]  ? secondary_startup_64_no_verify+0xcf/0xdb
[  134.026127][    C1]  __warn+0x2f8/0x4f0
[  134.030137][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  134.035983][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  134.041876][    C1]  report_bug+0x2ba/0x4f0
[  134.046324][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  134.052079][    C1]  handle_bug+0x3a/0x70
[  134.056343][    C1]  exc_invalid_op+0x16/0x40
[  134.060951][    C1]  asm_exc_invalid_op+0x16/0x20
[  134.066113][    C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  134.072560][    C1] Code: 24 4c 89 e7 e8 8e 2e 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 a9 8f d1 f7 0f 0b e9 f6 f7 ff ff e8 9d 8f d1 f7 <0f> 0b e9 48 fb ff ff e8 91 8f d1 f7 48 c7 c7 90 dc fa 8d 4c 89 e6
[  134.092552][    C1] RSP: 0018:ffffc900001e0a30 EFLAGS: 00010246
[  134.098751][    C1] RAX: ffffffff89b0e4f3 RBX: ffffffff89b0d2f6 RCX: ffff888017739dc0
[  134.106850][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  134.114858][    C1] RBP: 0000000000000000 R08: ffff888017739dc0 R09: 0000000000000003
[  134.122844][    C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88802976a228
[  134.130828][    C1] R13: dffffc0000000000 R14: ffff88802976a760 R15: ffff8880587f3424
[  134.138833][    C1]  ? __ieee80211_beacon_get+0x36/0x1600
[  134.144408][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  134.150256][    C1]  ? __ieee80211_beacon_get+0x36/0x1600
[  134.155906][    C1]  ieee80211_beacon_get_tim+0x63/0x4e0
[  134.161427][    C1]  mac80211_hwsim_beacon_tx+0x21c/0xae0
[  134.167002][    C1]  ? read_lock_is_recursive+0x10/0x10
[  134.172424][    C1]  __iterate_interfaces+0x243/0x500
[  134.177656][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  134.184063][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[  134.191378][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  134.197666][    C1]  ieee80211_iterate_active_interfaces_atomic+0xd7/0x170
[  134.204738][    C1]  mac80211_hwsim_beacon+0xb7/0x1b0
[  134.209979][    C1]  __hrtimer_run_queues+0x54a/0xd50
[  134.215296][    C1]  ? hw_scan_work+0xf50/0xf50
[  134.220453][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  134.225583][    C1]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  134.231769][    C1]  hrtimer_run_softirq+0x183/0x2a0
[  134.237080][    C1]  handle_softirqs+0x2a1/0x930
[  134.241867][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  134.246828][    C1]  ? do_softirq+0x210/0x210
[  134.251345][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  134.256556][    C1]  __irq_exit_rcu+0x13b/0x230
[  134.261254][    C1]  ? irq_exit_rcu+0x20/0x20
[  134.265799][    C1]  irq_exit_rcu+0x5/0x20
[  134.270233][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  134.275971][    C1]  </IRQ>
[  134.278916][    C1]  <TASK>
[  134.281959][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  134.288150][    C1] RIP: 0010:default_idle+0xb/0x10
[  134.293449][    C1] Code: 48 89 df e8 47 c2 9b f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 57 eb 4e 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[  134.313180][    C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6
[  134.319614][    C1] RAX: 3c0d1ffa07202400 RBX: ffffffff8a37c257 RCX: 3c0d1ffa07202400
[  134.320415][ T4314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.335855][    C1] RDX: 0000000000000001 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20
[  134.343940][    C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01
[  134.352018][    C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000
[  134.360016][    C1] R13: dffffc0000000000 R14: ffff888017739dc0 R15: 1ffff9200002efc8
[  134.368264][    C1]  ? default_idle_call+0x77/0xc0
[  134.373247][    C1]  default_idle_call+0x84/0xc0
[  134.378049][    C1]  do_idle+0x3a2/0x680
[  134.382226][    C1]  ? idle_inject_timer_fn+0x60/0x60
[  134.387467][    C1]  ? do_idle+0x66b/0x680
[  134.391822][    C1]  cpu_startup_entry+0x3f/0x60
[  134.396690][    C1]  start_secondary+0xe4/0xf0
[  134.401337][    C1]  secondary_startup_64_no_verify+0xcf/0xdb
[  134.407616][    C1]  </TASK>
[  134.411134][    C1] Kernel Offset: disabled
[  134.415521][    C1] Rebooting in 86400 seconds..