last executing test programs:

23m23.823003424s ago: executing program 1 (id=2):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000)
syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @multicast2, @local, @broadcast}}}}, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = request_key(&(0x7f0000000400)='blacklist\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0xfffffffffffffff9)
request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='\x00', r1)
read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendfile(r3, r2, 0x0, 0x20000023893)

23m11.211366555s ago: executing program 1 (id=29):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, <r1=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50)
read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10)
dup3(0xffffffffffffffff, r0, 0x0)

23m10.367480186s ago: executing program 1 (id=30):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x6f4dad00}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2c8"], 0x0)
read$msr(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'veth1_to_team\x00', @link_local})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x6)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)

23m8.837288827s ago: executing program 1 (id=33):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x40)
unlink(0x0)
mount(&(0x7f0000000900)=@loop={'/dev/loop', 0x0}, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='bfs\x00', 0x1000010, 0x0)

23m2.360122565s ago: executing program 1 (id=43):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x6f4dad00}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2c8"], 0x0)
read$msr(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'veth1_to_team\x00', @link_local})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x6)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)

23m1.252542769s ago: executing program 1 (id=47):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=ANY=[], 0xdd12}], 0x1}, 0x20040851)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x200, 0x1)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r4 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x5028}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000240)=0x9, 0x4)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
chmod(&(0x7f0000000180)='./file0\x00', 0x1f1)
r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000380)="783d7044a6fd01d4", 0x8}], 0x1, 0x87f8000, 0x7, 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r6)
r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0)
r8 = syz_io_uring_setup(0x60d4, &(0x7f0000000140)={0x0, 0xa5b9, 0x80, 0x1, 0x3a, 0x0, r7}, &(0x7f0000000040), &(0x7f00000001c0))
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)

22m45.857389667s ago: executing program 32 (id=47):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=ANY=[], 0xdd12}], 0x1}, 0x20040851)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x200, 0x1)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r4 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x5028}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000240)=0x9, 0x4)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
chmod(&(0x7f0000000180)='./file0\x00', 0x1f1)
r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000380)="783d7044a6fd01d4", 0x8}], 0x1, 0x87f8000, 0x7, 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r6)
r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0)
r8 = syz_io_uring_setup(0x60d4, &(0x7f0000000140)={0x0, 0xa5b9, 0x80, 0x1, 0x3a, 0x0, r7}, &(0x7f0000000040), &(0x7f00000001c0))
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)

5m0.507212999s ago: executing program 5 (id=2614):
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @rose={'rose', 0x0}, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]})
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

4m59.827267338s ago: executing program 5 (id=2617):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @empty, 'lo\x00'}}, 0x1e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x85}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x8})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
fanotify_init(0x1, 0x8000)
r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="140000001a00077fb3e408000000000000000000349231bfbd260eb99711f55fc77ca95db4c626d88ec776c3bea051aebe1a3f8c4ba9ed79133dd6000fcd1c1a1afff11a33eff1248a7b0497e487ccd72788e629845a3ce2a3e18086f2c30570664537a6b7bac25223517ed734b0c6", 0x6f)
recvmmsg(r5, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x470af000)
copy_file_range(r7, &(0x7f00000000c0), r6, 0x0, 0x7, 0x0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x2f, 0x1, 0x8, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)={0x188, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "c2171beeecb6d89953594694eb5dea28fd2972ae863b4186daeb55918000c8895e2fbe4d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb64a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000800}, 0x10)
r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/533, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232)
socket$inet(0x2, 0x80000, 0x0)

4m51.94774375s ago: executing program 5 (id=2634):
socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$dri(&(0x7f00000000c0), 0x8101, 0xf0b41)
socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
syz_open_dev$MSR(&(0x7f0000000040), 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)

4m49.381155367s ago: executing program 5 (id=2639):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x1, 0x8010000000000084)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

4m47.126314168s ago: executing program 5 (id=2645):
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000940)=""/4096, 0x7151}], 0x1)
splice(r0, 0x0, r2, 0x0, 0x7151, 0x0)

4m45.461015252s ago: executing program 5 (id=2651):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x1e0000}, 0x18)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002400000000000f5"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x74, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x3983}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000)

4m44.988341959s ago: executing program 33 (id=2651):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x1e0000}, 0x18)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002400000000000f5"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x74, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x3983}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000)

3m49.575498045s ago: executing program 2 (id=2794):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x9, @sdr})
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x890)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000300)=0x7e)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0)

3m48.473203991s ago: executing program 2 (id=2797):
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r0])

3m48.030357037s ago: executing program 2 (id=2799):
r0 = open(0x0, 0x0, 0x100)
getdents(r0, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r4=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x11, 0x1, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r5, 0x5)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

3m45.355815605s ago: executing program 2 (id=2804):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x1, 0x8010000000000084)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

3m43.152830487s ago: executing program 2 (id=2809):
creat(&(0x7f00000005c0)='./file0\x00', 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$can_bcm(0x1d, 0x2, 0x2)
write(0xffffffffffffffff, &(0x7f0000000040)="3b000000010001", 0x7)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd0\xac\x01\x9b\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x1000f)

3m41.553119779s ago: executing program 2 (id=2813):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x3, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x70bd25, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x4, 0x1000}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x4000000)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2=0xfe800000, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

3m41.324624223s ago: executing program 34 (id=2813):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x3, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x70bd25, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x4, 0x1000}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x4000000)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2=0xfe800000, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

1m1.709795257s ago: executing program 4 (id=3133):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="01000000000000000e14608d1aeb08", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000400000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000007020020f8ffefffb703000008000000b70400000000000085000000030000009500"/71], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f00008c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000095c000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)

1m0.477071195s ago: executing program 4 (id=3135):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @empty, 'lo\x00'}}, 0x1e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x85}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x8})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
fanotify_init(0x1, 0x8000)
r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="140000001a00077fb3e408000000000000000000349231bfbd260eb99711f55fc77ca95db4c626d88ec776c3bea051aebe1a3f8c4ba9ed79", 0x38)
recvmmsg(r5, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x470af000)
copy_file_range(r7, &(0x7f00000000c0), r6, 0x0, 0x7, 0x0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x2f, 0x1, 0x8, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)={0x188, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "c2171beeecb6d89953594694eb5dea28fd2972ae863b4186daeb55918000c8895e2fbe4d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb64a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000800}, 0x10)
r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f70000000000000000070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b704bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/533, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232)
socket$inet(0x2, 0x80000, 0x0)

59.183743454s ago: executing program 4 (id=3138):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x1000400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
syz_open_dev$loop(0x0, 0x2, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
lchown(0x0, 0x0, 0xee01)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r2, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0)

57.206644623s ago: executing program 4 (id=3141):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r4, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xfcb3ae1e0968818a}, 0x8006)

56.106552708s ago: executing program 4 (id=3143):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={r1, 0x9, 0x0, [0x10000, 0x5, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0x3, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0x91a, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x5, 0xeb95, 0x1, 0x4, 0x8, 0x401, 0x40, 0x4, 0x2, 0x81df244, 0x25bcdfd2, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x90, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x4, 0xa24, 0x0, 0x3, 0x9, 0xe, 0x7, 0x9, 0x3ff, 0x8, 0x1, 0xfff, 0x6, 0x2000000, 0x5, 0x18, 0x8, 0x7ff, 0x200, 0x9147, 0x7, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x2, 0x3, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0xbe9f, 0x3, 0x3, 0x3, 0x5, 0x20e, 0x2, 0x3, 0x8000, 0xff, 0x97, 0x4, 0x7, 0x8, 0xffffffff]})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000012c0)={0xc, 0x2, {0x6, @struct={0x6, 0x4}, 0x0, 0x1, 0x1, 0xb7, 0x732a, 0x101, 0xa0, @usage=0x5, 0x6, 0xffffffff, [0xcbf5, 0x9ccc, 0x3, 0x81, 0x7fff, 0x3]}, {0x4, @usage=0x6, 0x0, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0x804, @struct={0x5, 0x6d9c}, 0x7, 0x3398, [0x1, 0x7f29, 0x6, 0x7fffffff, 0xa6, 0xf1]}, {0x0, @struct={0x4, 0x8}, r1, 0x4, 0x9, 0x9059, 0x0, 0xfff, 0x6c, @usage=0x2, 0x100, 0x81, [0x8, 0x16, 0x8, 0x2, 0x8, 0x80000001]}, {0x6, 0x8000000000000000, 0x80}})
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x0, &(0x7f0000000200)=""/116, &(0x7f0000000380)=0x74)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x4, 0x1})
io_uring_enter(r4, 0x627, 0xc1040000, 0x43, 0x0, 0x0)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9)
prlimit64(0x0, 0xe, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x33, 0x107, 0x0, 0xf000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
shutdown(r2, 0x0)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x3)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x6, 0x1, 'j'}, 0x9)

54.452534762s ago: executing program 4 (id=3147):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @empty, 'lo\x00'}}, 0x1e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x85}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x8})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
fanotify_init(0x1, 0x8000)
r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="140000001a00077fb3e408000000000000000000349231bfbd260eb99711f55fc77ca95db4c626d88ec776c3bea051aebe1a3f8c4ba9ed79", 0x38)
recvmmsg(r5, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x470af000)
copy_file_range(r7, &(0x7f00000000c0), r6, 0x0, 0x7, 0x0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x2f, 0x1, 0x8, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)={0x188, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "c2171beeecb6d89953594694eb5dea28fd2972ae863b4186daeb55918000c8895e2fbe4d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb64a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000800}, 0x10)
r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/533, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232)
socket$inet(0x2, 0x80000, 0x0)

19.297932181s ago: executing program 7 (id=3212):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

17.948002291s ago: executing program 7 (id=3213):
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES32=r3, @ANYRESDEC=r3, @ANYRESOCT=r2], 0xc8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001580)="d80000001a0081044e81f782040000000a1d08007b490d4f1e81f8d815000300ff05142603600e12080005007a010401a800160020001c4004000020035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)

16.385640313s ago: executing program 3 (id=3216):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r1, &(0x7f00000001c0)={0x0, 0x3}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x6}, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$kcm(0x25, 0x1, 0x0)

14.418263822s ago: executing program 3 (id=3218):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @empty, 'lo\x00'}}, 0x1e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x85}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x8})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
fanotify_init(0x1, 0x8000)
r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="140000001a00077fb3e408000000000000000000349231bfbd260eb99711f55fc77ca95db4c626d88ec776c3bea051aebe1a3f8c4ba9ed79133dd6000fcd1c1a1afff11a33eff1248a7b0497e487ccd72788e629845a3ce2a3e18086f2c305706645", 0x62)
recvmmsg(r5, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x470af000)
copy_file_range(r7, &(0x7f00000000c0), r6, 0x0, 0x7, 0x0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x2f, 0x1, 0x8, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)={0x188, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "c2171beeecb6d89953594694eb5dea28fd2972ae863b4186daeb55918000c8895e2fbe4d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb64a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000800}, 0x10)
r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/533, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232)
socket$inet(0x2, 0x80000, 0x0)

14.174547195s ago: executing program 6 (id=3219):
openat$ipvs(0xffffffffffffff9c, &(0x7f0000001c80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000007c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0)

12.824639015s ago: executing program 0 (id=3220):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="01000000000000000e14608d1aeb08", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000400"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000007020020f8ffefffb703000008000000b70400000000000085000000030000009500"/71], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f00008c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000095c000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)

12.773334635s ago: executing program 6 (id=3221):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
io_setup(0x956, &(0x7f0000000000)=<r4=>0x0)
io_destroy(r4)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0x4000000000000002, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bind$inet6(r5, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000140)="24000000010006", 0x7)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)

12.52083892s ago: executing program 7 (id=3222):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000300)={'gre0\x00', 0x600})

9.370183955s ago: executing program 0 (id=3223):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000035c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

9.146727719s ago: executing program 6 (id=3224):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e700070122b30409050c0200020103400905df02"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="00031a0000000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="200b06"], 0x0, 0x0, 0x0, 0x0})

9.117712499s ago: executing program 0 (id=3225):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe8000000000000000000000000000aafe8000000000000227bfa7b09303960e2f"], 0xfdef)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66)

9.117032289s ago: executing program 7 (id=3226):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xe9}}]}}]}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x18)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r6, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0)
ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000340)=""/98)
connect$ax25(r6, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB="000000d122821e8ca4f7ad9061ae97fdff900100", @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000001bb0e2354accae11b51e1ed2c846390000b702b703000000efff008500000083000000bf0900000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

9.04259622s ago: executing program 3 (id=3227):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r1, &(0x7f00000001c0)={0x0, 0x3}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x6}, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$kcm(0x25, 0x1, 0x0)

7.409686103s ago: executing program 3 (id=3228):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSBRKP(r3, 0x5425, 0x55)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a2666343392fda11504800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x14, r6, 0x303, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x80)

5.5452304s ago: executing program 6 (id=3229):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x180, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x4, 0x1, 0x20, @mcast1, @mcast1, 0x1, 0x1, 0xfffff000, 0x400}})
sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}}, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

3.704009967s ago: executing program 3 (id=3230):
syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket(0x10, 0x3, 0x6)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x4d)
syz_emit_vhci(0x0, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x1, 0xfffffffd, 0x1000, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x890)
r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000300)=0x7e)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)

3.680685997s ago: executing program 7 (id=3231):
unshare(0xa000400)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000240)={0x21, 0x24, 0x17, 0x11, 0x9, 0xc, 0x5, 0x61, 0x1})

3.625351098s ago: executing program 6 (id=3232):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="01000000000000000e14608d1aeb08", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000400"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000007020020f8ffefffb703000008000000b70400000000000085000000030000009500"/71], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f00008c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000095c000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)

3.542957839s ago: executing program 0 (id=3233):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe)

2.353338486s ago: executing program 6 (id=3234):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
io_setup(0x956, &(0x7f0000000000)=<r4=>0x0)
io_destroy(r4)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0x4000000000000002, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bind$inet6(r5, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000140)="24000000010006", 0x7)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)

2.193630549s ago: executing program 7 (id=3235):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x27)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
r6 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00')
lseek(r6, 0x8, 0x0)
getsockname$packet(r6, &(0x7f0000000100), &(0x7f0000000280)=0x14)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r7, 0x52b242d)
request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, r7)
sendmsg$can_bcm(r5, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000002c0)={&(0x7f0000000cc0)={0x4, 0x10, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x6, 0x0, 0x0, 0x0, "c6e83912ce2150c0"}}, 0x48}, 0x2, 0x0, 0x0, 0x4000080}, 0x20000080)
connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c)

2.193010619s ago: executing program 3 (id=3236):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @empty, 'lo\x00'}}, 0x1e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x85}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x8})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
fanotify_init(0x1, 0x8000)
r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="140000001a00077fb3e408000000000000000000349231bfbd260eb99711f55fc77ca95db4c626d88ec776c3bea051aebe1a3f8c4ba9ed79133dd6000fcd1c1a1afff11a33eff1248a7b0497e487ccd72788e629845a3ce2a3e18086f2c305706645", 0x62)
recvmmsg(r5, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x470af000)
copy_file_range(r7, &(0x7f00000000c0), r6, 0x0, 0x7, 0x0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x2f, 0x1, 0x8, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)={0x188, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "c2171beeecb6d89953594694eb5dea28fd2972ae863b4186daeb55918000c8895e2fbe4d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb64a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000800}, 0x10)
r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/533, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232)
socket$inet(0x2, 0x80000, 0x0)

2.12706785s ago: executing program 0 (id=3237):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x2, 0x2, 0x4800020})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r7, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x20)
close_range(r4, 0xffffffffffffffff, 0x0)

0s ago: executing program 0 (id=3238):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffffff, 0x0, 0xe00c2, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r5], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r6}, &(0x7f0000000980), &(0x7f00000009c0)=r5}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r6, &(0x7f0000000680), 0x0}, 0x20)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r7, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)

kernel console output (not intermixed with test programs):

axpacket 16
[ 1067.813064][T10510] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1068.139355][T10510] usb 1-1: config 0 interface 41 has no altsetting 0
[ 1068.161904][T10510] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1068.173081][T10510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.022704][T10510] usb 1-1: Product: syz
[ 1069.041222][T10510] usb 1-1: Manufacturer: syz
[ 1069.082735][T10510] usb 1-1: SerialNumber: syz
[ 1069.172346][T13123] 9pnet_fd: Insufficient options for proto=fd
[ 1069.325787][T10510] usb 1-1: config 0 descriptor??
[ 1069.352212][T10510] usb 1-1: can't set config #0, error -71
[ 1070.097782][T10510] usb 1-1: USB disconnect, device number 43
[ 1071.097081][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2336'.
[ 1073.052805][ T4267] Bluetooth: hci1: command 0x0409 tx timeout
[ 1073.461545][T13160] vivid-000: disconnect
[ 1073.467160][T13160] vivid-000: reconnect
[ 1074.687939][T13171] 9pnet_fd: Insufficient options for proto=fd
[ 1076.530638][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2352'.
[ 1078.208665][T13195] xt_nat: multiple ranges no longer supported
[ 1081.161109][T13214] syz.0.2361 (13214): drop_caches: 2
[ 1083.164365][T13229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2366'.
[ 1085.132666][ T4267] Bluetooth: hci5: command 0x0409 tx timeout
[ 1085.514825][   T27] kauditd_printk_skb: 42 callbacks suppressed
[ 1085.514841][   T27] audit: type=1326 audit(1749896550.432:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.3.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f68f8e929 code=0x7ffc0000
[ 1085.735631][T13253] kAFS: No cell specified
[ 1085.767857][   T27] audit: type=1326 audit(1749896550.432:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.3.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f68f8e929 code=0x7ffc0000
[ 1086.632658][   T27] audit: type=1326 audit(1749896550.462:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.3.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f4f68f8e929 code=0x7ffc0000
[ 1086.892814][   T27] audit: type=1326 audit(1749896551.522:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.3.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f68f8e929 code=0x7ffc0000
[ 1086.918187][   T27] audit: type=1326 audit(1749896551.522:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.3.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f68f8e929 code=0x7ffc0000
[ 1088.501416][T13267] syz.3.2374 (13267): drop_caches: 2
[ 1090.192884][T13283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2378'.
[ 1091.254121][T13294] xt_nat: multiple ranges no longer supported
[ 1092.172663][ T4267] Bluetooth: hci1: command 0x0409 tx timeout
[ 1093.343074][T13309] 9pnet_fd: Insufficient options for proto=fd
[ 1096.039373][T13331] kAFS: No cell specified
[ 1098.247789][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2395'.
[ 1101.009060][T13375] kAFS: No cell specified
[ 1102.549419][T13389] syz.2.2410 (13389): /proc/13385/oom_adj is deprecated, please use /proc/13385/oom_score_adj instead.
[ 1104.585040][T13406] afs: Unknown parameter 'dy'
[ 1105.801252][T13417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2420'.
[ 1106.138438][ T4300] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 1106.142723][T12009] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1106.452800][T12009] usb 6-1: Using ep0 maxpacket: 8
[ 1106.481118][T12009] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1106.588677][T12009] usb 6-1: config 0 has no interfaces?
[ 1106.893999][T12009] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1106.912610][T12009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1106.912653][ T4300] usb 3-1: Using ep0 maxpacket: 8
[ 1106.920649][T12009] usb 6-1: Product: syz
[ 1106.920669][T12009] usb 6-1: Manufacturer: syz
[ 1106.920684][T12009] usb 6-1: SerialNumber: syz
[ 1106.923587][T12009] usb 6-1: config 0 descriptor??
[ 1106.972234][ T4300] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1107.017807][ T4300] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1107.044604][ T4300] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1107.071128][ T4300] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1107.084001][ T4300] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1107.097594][ T4300] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1107.107741][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1107.330813][ T4300] usb 3-1: usb_control_msg returned -32
[ 1107.336795][ T4300] usbtmc 3-1:16.0: can't read capabilities
[ 1108.087838][T13443] usbtmc 3-1:16.0: usb_control_msg returned -32
[ 1108.297537][T12009] usb 3-1: USB disconnect, device number 53
[ 1108.798056][T12009] usb 6-1: USB disconnect, device number 29
[ 1109.293217][T12009] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1109.473302][T12009] usb 6-1: device descriptor read/64, error -71
[ 1109.778601][T12009] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1109.958356][T12009] usb 6-1: device descriptor read/64, error -71
[ 1110.092897][T12009] usb usb6-port1: attempt power cycle
[ 1110.126001][ T8370] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 1110.342493][ T8370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1110.353807][ T8370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1110.364788][ T8370] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1110.375016][ T8370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1110.396096][ T8370] usb 3-1: config 0 descriptor??
[ 1110.522690][T12009] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1110.564051][T12009] usb 6-1: device descriptor read/8, error -71
[ 1110.932625][T12009] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1110.963180][T12009] usb 6-1: device descriptor read/8, error -71
[ 1110.970981][T13454] afs: Unknown parameter 'dy'
[ 1111.082803][T12009] usb usb6-port1: unable to enumerate USB device
[ 1111.274119][ T8370] usb 3-1: string descriptor 0 read error: -71
[ 1111.603016][ T8370] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #200: -71
[ 1111.619478][ T8370] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71
[ 1111.638431][ T8370] uclogic 0003:256C:006D.0012: failed probing pen v2 parameters: -71
[ 1111.658299][ T8370] uclogic 0003:256C:006D.0012: failed probing parameters: -71
[ 1111.678595][ T8370] uclogic: probe of 0003:256C:006D.0012 failed with error -71
[ 1111.691989][ T8370] usb 3-1: USB disconnect, device number 54
[ 1113.012676][T12009] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1113.443014][T12009] usb 5-1: Using ep0 maxpacket: 8
[ 1113.461126][T12009] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1113.639361][T12009] usb 5-1: config 0 has no interfaces?
[ 1113.677473][T12009] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1113.956270][T12009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1114.792690][T12009] usb 5-1: Product: syz
[ 1114.796933][T12009] usb 5-1: Manufacturer: syz
[ 1114.801955][T12009] usb 5-1: SerialNumber: syz
[ 1114.823154][T12009] usb 5-1: config 0 descriptor??
[ 1114.863554][T13489] afs: Unknown parameter 'dy'
[ 1115.348388][T13499] hub 8-0:1.0: USB hub found
[ 1115.354333][T13499] hub 8-0:1.0: 1 port detected
[ 1115.995734][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.002123][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.253141][T12009] usb 5-1: USB disconnect, device number 39
[ 1116.553325][T10510] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 1116.712780][T10510] usb 1-1: device descriptor read/64, error -71
[ 1116.983529][T10510] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 1117.132644][T10510] usb 1-1: device descriptor read/64, error -71
[ 1117.264357][T10510] usb usb1-port1: attempt power cycle
[ 1118.368686][T10510] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 1118.813473][T10510] usb 1-1: device descriptor read/8, error -71
[ 1119.477485][T10510] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1120.548699][T10510] usb 1-1: device descriptor read/8, error -71
[ 1120.672805][T10510] usb usb1-port1: unable to enumerate USB device
[ 1124.283156][ T8370] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 1124.512683][ T8370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1124.548102][ T8370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1124.583147][ T8370] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1124.668659][ T8370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1125.538412][ T8370] usb 5-1: config 0 descriptor??
[ 1127.159479][ T8370] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #200: -71
[ 1127.490443][ T8370] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71
[ 1127.509846][ T8370] uclogic 0003:256C:006D.0013: failed probing pen v2 parameters: -71
[ 1127.529883][ T8370] uclogic 0003:256C:006D.0013: failed probing parameters: -71
[ 1127.560520][ T8370] uclogic: probe of 0003:256C:006D.0013 failed with error -71
[ 1127.675661][ T8370] usb 5-1: USB disconnect, device number 40
[ 1133.457219][T13655] netlink: 'syz.2.2493': attribute type 6 has an invalid length.
[ 1134.420289][   T27] audit: type=1326 audit(1749896599.332:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.2.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b6f8e929 code=0x7ffc0000
[ 1134.480949][   T27] audit: type=1326 audit(1749896599.332:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.2.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b6f8e929 code=0x7ffc0000
[ 1134.503433][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1134.560001][   T27] audit: type=1326 audit(1749896599.332:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.2.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fb0b6f8e929 code=0x7ffc0000
[ 1134.621375][   T27] audit: type=1326 audit(1749896599.442:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.2.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b6f8e929 code=0x7ffc0000
[ 1134.655140][   T27] audit: type=1326 audit(1749896599.442:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.2.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b6f8e929 code=0x7ffc0000
[ 1138.015635][ T4257] Bluetooth: hci1: command 0x0406 tx timeout
[ 1139.243588][T13698] netlink: 'syz.4.2508': attribute type 6 has an invalid length.
[ 1139.653169][ T8370] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[ 1139.868545][ T8370] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1139.891024][ T8370] usb 4-1: config 0 has no interface number 0
[ 1139.929390][ T8370] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1139.997291][ T8370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1140.518297][ T8370] usb 4-1: config 0 descriptor??
[ 1140.614552][ T8370] usb 4-1: selecting invalid altsetting 1
[ 1140.620438][ T8370] dvb_ttusb_budget: ttusb_init_controller: error
[ 1140.679405][ T8370] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1141.046902][   T27] audit: type=1326 audit(1749896605.962:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.4.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a038e929 code=0x7ffc0000
[ 1141.070095][ T8370] DVB: Unable to find symbol cx22700_attach()
[ 1141.085411][   T27] audit: type=1326 audit(1749896606.002:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.4.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a038e929 code=0x7ffc0000
[ 1141.222741][ T8370] DVB: Unable to find symbol tda10046_attach()
[ 1141.229846][ T8370] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1141.260841][ T8370] usb 4-1: USB disconnect, device number 48
[ 1155.952593][ T4354] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1156.516101][ T4354] usb 6-1: Using ep0 maxpacket: 16
[ 1156.544320][ T4354] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1156.588218][ T4354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1156.597590][ T4354] usb 6-1: Product: syz
[ 1156.647644][ T4354] usb 6-1: Manufacturer: syz
[ 1156.658297][ T4354] usb 6-1: SerialNumber: syz
[ 1156.694737][ T4354] usb 6-1: config 0 descriptor??
[ 1156.763142][ T4354] appledisplay 6-1:0.0: Could not find int-in endpoint
[ 1156.780847][ T4354] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1157.057266][T13835] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1158.852607][T10510] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1159.148934][ T4354] usb 6-1: USB disconnect, device number 34
[ 1159.303398][T10510] usb 5-1: Using ep0 maxpacket: 8
[ 1159.312201][T10510] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1159.501861][T10510] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1159.511975][T10510] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1159.530390][T10510] usb 5-1: Product: syz
[ 1159.540458][T10510] usb 5-1: Manufacturer: syz
[ 1160.343226][T10510] usb 5-1: SerialNumber: syz
[ 1160.386933][T10510] usb 5-1: config 0 descriptor??
[ 1162.177816][ T4354] usb 5-1: USB disconnect, device number 41
[ 1165.532743][ T8370] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 1165.862774][ T8370] usb 3-1: Using ep0 maxpacket: 16
[ 1165.873105][ T8370] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1166.691706][ T8370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1166.820213][ T8370] usb 3-1: Product: syz
[ 1166.827896][ T8370] usb 3-1: Manufacturer: syz
[ 1166.838012][ T8370] usb 3-1: SerialNumber: syz
[ 1166.850220][ T8370] usb 3-1: config 0 descriptor??
[ 1168.376279][ T8370] appledisplay 3-1:0.0: Could not find int-in endpoint
[ 1168.613514][T13903] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1168.672787][T10510] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1169.784275][ T8370] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1169.843656][T10510] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1169.884796][T10510] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1169.898063][ T8370] usb 3-1: USB disconnect, device number 55
[ 1169.941108][T10510] usb 5-1: can't read configurations, error -71
[ 1170.132735][T12009] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1170.342978][T12009] usb 6-1: Using ep0 maxpacket: 8
[ 1170.381904][T12009] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1170.401890][T12009] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1170.411542][T12009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1170.420029][T12009] usb 6-1: Product: syz
[ 1170.431794][T12009] usb 6-1: Manufacturer: syz
[ 1170.440671][T12009] usb 6-1: SerialNumber: syz
[ 1170.585701][T12009] usb 6-1: config 0 descriptor??
[ 1173.257988][ T8370] usb 6-1: USB disconnect, device number 35
[ 1174.544178][T13947] overlayfs: missing 'lowerdir'
[ 1175.252890][T10510] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1175.404247][ T8370] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1175.473013][T10510] usb 1-1: Using ep0 maxpacket: 16
[ 1175.489898][T10510] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1175.523626][T10510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1175.542451][T10510] usb 1-1: Product: syz
[ 1175.548370][T10510] usb 1-1: Manufacturer: syz
[ 1175.558051][T10510] usb 1-1: SerialNumber: syz
[ 1175.577849][T10510] usb 1-1: config 0 descriptor??
[ 1175.598034][T10510] appledisplay 1-1:0.0: Could not find int-in endpoint
[ 1175.607129][T10510] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1175.744319][ T8370] usb 5-1: Using ep0 maxpacket: 16
[ 1175.764013][ T8370] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1175.782632][ T8370] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1175.804092][ T8370] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1175.822615][ T8370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1175.840856][ T8370] usb 5-1: Product: syz
[ 1175.845387][ T8370] usb 5-1: Manufacturer: syz
[ 1175.850028][ T8370] usb 5-1: SerialNumber: syz
[ 1175.874545][T13957] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1175.898750][ T8370] usb 5-1: config 0 descriptor??
[ 1177.379302][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.413455][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.461536][T10510] usb 5-1: USB disconnect, device number 44
[ 1177.639063][ T8370] usb 1-1: USB disconnect, device number 48
[ 1178.302712][T10510] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1179.512397][T10510] usb 5-1: Using ep0 maxpacket: 16
[ 1179.821914][T10510] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1179.881668][T10510] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1179.996127][T10510] usb 5-1: Product: syz
[ 1180.010062][T10510] usb 5-1: Manufacturer: syz
[ 1180.027899][T10510] usb 5-1: SerialNumber: syz
[ 1180.056720][T10510] usb 5-1: config 0 descriptor??
[ 1180.105431][T10510] appledisplay 5-1:0.0: Could not find int-in endpoint
[ 1180.147755][T10510] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1180.577639][T13995] overlayfs: missing 'lowerdir'
[ 1181.581971][ T8370] usb 5-1: USB disconnect, device number 45
[ 1183.292686][ T8370] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1186.333060][ T8370] usb 6-1: Using ep0 maxpacket: 16
[ 1186.764657][ T8370] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1187.069982][ T8370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1187.092824][ T8370] usb 6-1: Product: syz
[ 1187.097061][ T8370] usb 6-1: Manufacturer: syz
[ 1187.101696][ T8370] usb 6-1: SerialNumber: syz
[ 1187.149523][T14025] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1187.297564][ T8370] usb 6-1: config 0 descriptor??
[ 1187.330759][ T8370] appledisplay 6-1:0.0: Could not find int-in endpoint
[ 1187.418336][ T8370] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1188.239577][T12009] usb 6-1: USB disconnect, device number 36
[ 1189.614843][T14045] xt_nat: multiple ranges no longer supported
[ 1191.404449][T14066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2613'.
[ 1191.501397][T14054] [U] �
[ 1197.582762][ T8370] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 1197.794433][ T8370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1197.832414][ T8370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1197.882243][ T8370] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1197.944820][ T8370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1198.127738][ T8370] usb 1-1: config 0 descriptor??
[ 1199.143651][T14128] trusted_key: encrypted_key: insufficient parameters specified
[ 1199.163821][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2631'.
[ 1200.333155][ T8370] uclogic 0003:256C:006D.0014: interface is invalid, ignoring
[ 1200.464798][ T8370] usb 1-1: USB disconnect, device number 49
[ 1201.847268][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2635'.
[ 1205.659198][T14186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2647'.
[ 1206.345452][T14191] syz.0.2648 (14191): drop_caches: 2
[ 1207.037021][ T4909] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1207.904903][ T4267] Bluetooth: hci2: command 0x0409 tx timeout
[ 1208.720656][ T4909] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1208.788251][T14214] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1208.798693][T14214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1208.808073][T14214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1208.821316][T14214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1208.838467][T14214] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1208.853830][T14214] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1208.948394][ T4909] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1209.180414][ T4909] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1210.343807][T14211] lo speed is unknown, defaulting to 1000
[ 1210.530533][T14233] overlayfs: failed to resolve './file0': -2
[ 1210.892880][ T4267] Bluetooth: hci4: command 0x0409 tx timeout
[ 1211.459064][T14255] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2669'.
[ 1212.161806][T14211] chnl_net:caif_netlink_parms(): no params data found
[ 1212.543097][ T4267] Bluetooth: hci1: Malformed LE Event: 0x1b
[ 1212.972696][ T4267] Bluetooth: hci4: command 0x041b tx timeout
[ 1214.260612][T14211] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1214.299624][T14211] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1214.861020][T14211] device bridge_slave_0 entered promiscuous mode
[ 1215.052738][ T4267] Bluetooth: hci4: command 0x040f tx timeout
[ 1215.059828][T14211] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1215.814539][T14211] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1215.834497][T14211] device bridge_slave_1 entered promiscuous mode
[ 1216.030801][T14211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1216.324839][T14211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1216.694509][T14211] team0: Port device team_slave_0 added
[ 1216.754670][T14214] Bluetooth: hci2: Malformed LE Event: 0x1b
[ 1216.862639][T10510] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[ 1216.866560][T14211] team0: Port device team_slave_1 added
[ 1217.356297][T14214] Bluetooth: hci4: command 0x0419 tx timeout
[ 1217.582600][T10510] usb 4-1: device descriptor read/64, error -71
[ 1217.624010][T14211] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1217.631022][T14211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1217.780370][T14211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1217.822345][ T4909] device hsr_slave_0 left promiscuous mode
[ 1217.833213][ T4909] device hsr_slave_1 left promiscuous mode
[ 1217.862991][T10510] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[ 1217.892917][   T26] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1218.049602][ T4909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1218.067684][ T4909] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1218.079170][ T4909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1218.092646][   T26] usb 5-1: Using ep0 maxpacket: 16
[ 1218.101944][ T4909] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1218.106765][   T26] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1218.167676][   T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1218.176226][   T26] usb 5-1: Product: syz
[ 1218.180705][   T26] usb 5-1: Manufacturer: syz
[ 1218.186097][   T26] usb 5-1: SerialNumber: syz
[ 1218.202556][T10510] usb 4-1: device descriptor read/64, error -71
[ 1218.222441][   T26] usb 5-1: config 0 descriptor??
[ 1218.237635][   T26] appledisplay 5-1:0.0: Could not find int-in endpoint
[ 1218.326083][   T26] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1218.342766][T10510] usb usb4-port1: attempt power cycle
[ 1218.416403][ T4909] device veth1_macvtap left promiscuous mode
[ 1218.447956][ T4909] device veth0_macvtap left promiscuous mode
[ 1218.460682][ T4909] device veth1_vlan left promiscuous mode
[ 1218.574613][ T4909] device veth0_vlan left promiscuous mode
[ 1218.802757][T10510] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[ 1218.835346][T10510] usb 4-1: device descriptor read/8, error -71
[ 1219.102568][T10510] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[ 1219.144619][T10510] usb 4-1: device descriptor read/8, error -71
[ 1219.263239][T10510] usb usb4-port1: unable to enumerate USB device
[ 1219.268937][ T4909] infiniband syz!: set down
[ 1219.406190][T14334] overlayfs: failed to resolve './file0': -2
[ 1223.199421][ T4909] team0 (unregistering): Port device team_slave_1 removed
[ 1223.315726][ T4909] team0 (unregistering): Port device team_slave_0 removed
[ 1223.382952][ T4657] smc: removing ib device syz!
[ 1223.412901][ T4909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1223.511821][ T4909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1224.363686][ T4909] bond0 (unregistering): Released all slaves
[ 1224.399202][T14211] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1224.406568][T14211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1224.445231][T14211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1224.491680][T14326] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1224.595660][T14360] netlink: 'syz.3.2695': attribute type 6 has an invalid length.
[ 1224.847501][   T26] usb 5-1: USB disconnect, device number 46
[ 1224.896099][T14211] device hsr_slave_0 entered promiscuous mode
[ 1224.934937][T14211] device hsr_slave_1 entered promiscuous mode
[ 1224.964487][T14211] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1225.269845][T14211] Cannot create hsr debugfs directory
[ 1226.543209][   T26] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[ 1226.742677][   T26] usb 5-1: device descriptor read/64, error -71
[ 1227.023624][   T26] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[ 1227.202678][   T26] usb 5-1: device descriptor read/64, error -71
[ 1227.323004][   T26] usb usb5-port1: attempt power cycle
[ 1227.734571][   T26] usb 5-1: new full-speed USB device number 49 using dummy_hcd
[ 1227.750071][T14392] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2700'.
[ 1227.778956][T14392] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1227.785029][   T26] usb 5-1: device descriptor read/8, error -71
[ 1228.072780][   T26] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[ 1228.135895][   T26] usb 5-1: device descriptor read/8, error -71
[ 1228.259994][   T26] usb usb5-port1: unable to enumerate USB device
[ 1229.522025][T14211] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1229.689790][T14211] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1229.767459][T14211] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1229.828978][T14211] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1230.472674][ T4354] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1230.683901][T14211] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1230.752751][ T4354] usb 4-1: Using ep0 maxpacket: 16
[ 1230.797986][ T4354] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1230.935381][ T4354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1230.963457][ T4354] usb 4-1: Product: syz
[ 1231.018378][ T4354] usb 4-1: Manufacturer: syz
[ 1231.193678][ T4354] usb 4-1: SerialNumber: syz
[ 1231.202638][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1231.210724][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1231.240973][ T4354] usb 4-1: config 0 descriptor??
[ 1231.262878][T14211] 8021q: adding VLAN 0 to HW filter on device team0
[ 1231.285497][ T4354] appledisplay 4-1:0.0: Could not find int-in endpoint
[ 1231.304930][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1231.324522][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1231.330266][ T4354] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1231.372368][ T4657] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1231.379619][ T4657] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1231.435394][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1231.465715][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1231.501372][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1231.552824][ T4657] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1231.559989][ T4657] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1231.623452][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1231.659398][T14447] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1231.682780][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1231.709463][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1231.734343][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1231.772139][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1231.858149][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1231.876973][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1232.017099][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1232.146650][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1232.279897][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1232.414142][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1232.564698][T14211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1233.173714][ T4298] usb 4-1: USB disconnect, device number 53
[ 1233.482218][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1233.492861][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1233.529409][T14211] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1233.882650][T14441] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 1234.312969][T14441] usb 3-1: Using ep0 maxpacket: 16
[ 1234.717388][T14493] xt_nat: multiple ranges no longer supported
[ 1234.785955][T14441] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[ 1234.818146][T14441] usb 3-1: config 0 has no interface number 0
[ 1234.830742][T14441] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1235.273285][T14441] usb 3-1: config 0 interface 41 altsetting 2 has an invalid endpoint with address 0x0, skipping
[ 1235.284924][T14441] usb 3-1: config 0 interface 41 has no altsetting 0
[ 1235.323221][T14441] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1235.430118][T14441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1235.549577][T14500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2723'.
[ 1235.841937][T14441] usb 3-1: Product: syz
[ 1236.148931][T14441] usb 3-1: Manufacturer: syz
[ 1236.243060][T14441] usb 3-1: SerialNumber: syz
[ 1236.315608][T14441] usb 3-1: config 0 descriptor??
[ 1236.340552][T14478] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1236.356829][T14441] dm9601: probe of 3-1:0.41 failed with error -22
[ 1236.376813][T14441] sr9700: probe of 3-1:0.41 failed with error -22
[ 1236.636535][T14441] usb 3-1: USB disconnect, device number 56
[ 1238.567413][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1238.587836][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1238.667015][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1238.689794][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1238.731640][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1238.769205][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1238.827317][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.833741][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.845727][T14211] device veth0_vlan entered promiscuous mode
[ 1238.909864][T14211] device veth1_vlan entered promiscuous mode
[ 1238.986574][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1239.027903][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1239.060063][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1239.081861][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1239.139062][T14211] device veth0_macvtap entered promiscuous mode
[ 1239.212165][T14211] device veth1_macvtap entered promiscuous mode
[ 1239.283534][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1239.322637][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1239.349441][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1239.402753][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1239.432560][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1239.497191][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1239.555339][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1239.736908][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1239.800454][T14211] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1240.150378][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1240.165153][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1240.190042][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1240.206489][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1240.225818][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1240.284466][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1240.318621][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1240.329615][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1240.412991][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1240.465668][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1240.476361][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1240.557704][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1240.906046][T14211] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1241.001631][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1241.066784][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1241.174613][T14211] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1241.806008][T14211] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1241.841250][T14211] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1241.936912][T14211] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.052784][ T4354] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1242.132908][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1242.141182][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1242.218650][ T5960] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1242.229281][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1242.252689][ T4354] usb 4-1: Using ep0 maxpacket: 16
[ 1242.259677][ T4354] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[ 1242.260174][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1242.292397][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1242.312617][ T4354] usb 4-1: config 0 has no interface number 0
[ 1242.332598][ T4354] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1242.372915][ T4354] usb 4-1: config 0 interface 41 altsetting 2 has an invalid endpoint with address 0x0, skipping
[ 1242.394294][ T4354] usb 4-1: config 0 interface 41 has no altsetting 0
[ 1242.444520][ T4354] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1242.466870][ T4354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1242.481114][ T4354] usb 4-1: Product: syz
[ 1242.487791][ T4354] usb 4-1: Manufacturer: syz
[ 1242.492446][ T4354] usb 4-1: SerialNumber: syz
[ 1242.505355][ T4354] usb 4-1: config 0 descriptor??
[ 1242.511311][T14565] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1242.564525][T14568] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1243.361075][ T4354] dm9601: probe of 4-1:0.41 failed with error -22
[ 1243.447851][ T4354] sr9700: probe of 4-1:0.41 failed with error -22
[ 1243.572599][T14568] usb 1-1: Using ep0 maxpacket: 8
[ 1243.644629][T14568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1243.672701][T14568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1243.692599][T14568] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1243.702774][T14568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1243.713068][T14568] usb 1-1: config 0 descriptor??
[ 1243.937754][T14568] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1244.149146][T14573] iowarrior 1-1:0.0: Error -90 while submitting URB
[ 1244.157369][T14573] iowarrior 1-1:0.0: Error -90 while submitting URB
[ 1244.512815][T14568] usb 1-1: USB disconnect, device number 50
[ 1244.531947][T10308] block nbd2: Attempted send on invalid socket
[ 1244.538693][T10308] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1244.550958][T14596] hpfs: hpfs_map_sector(): read error
[ 1244.955356][   T26] usb 4-1: USB disconnect, device number 54
[ 1246.805309][T14616] 9pnet_fd: Insufficient options for proto=fd
[ 1250.632891][T14441] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1251.171399][T14441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1251.214277][T14441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1251.547416][T14441] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1251.676427][T14441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1251.811871][T14441] usb 5-1: config 0 descriptor??
[ 1252.144842][T14654] device vcan1 entered promiscuous mode
[ 1252.388240][T14665] syz.3.2762 (14665): drop_caches: 2
[ 1252.614032][T14670] 9pnet_fd: Insufficient options for proto=fd
[ 1252.870062][T14441] uclogic 0003:256C:006D.0015: interface is invalid, ignoring
[ 1253.753746][T14441] usb 5-1: USB disconnect, device number 51
[ 1260.131712][T14748] 9pnet_fd: Insufficient options for proto=fd
[ 1261.842957][T14441] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1262.071110][T14772] syz.4.2791 (14772): drop_caches: 2
[ 1262.076632][T14441] usb 7-1: Using ep0 maxpacket: 16
[ 1262.087394][T14441] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1262.120172][T14441] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1262.170890][T14441] usb 7-1: Product: syz
[ 1262.213053][T14441] usb 7-1: Manufacturer: syz
[ 1262.231828][T14441] usb 7-1: SerialNumber: syz
[ 1262.254751][T14441] usb 7-1: config 0 descriptor??
[ 1262.325245][T14441] appledisplay 7-1:0.0: Could not find int-in endpoint
[ 1262.343584][T14441] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1262.522881][T14766] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1262.952443][   T26] usb 7-1: USB disconnect, device number 2
[ 1263.662760][T14441] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1263.759577][T14791] 9pnet_fd: Insufficient options for proto=fd
[ 1263.767208][ T6190] bond0: (slave syz_tun): Releasing backup interface
[ 1263.767706][ T4267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1263.787546][ T4267] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1263.796796][ T4267] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1263.808631][ T4267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1263.816581][ T4267] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1263.826242][ T4267] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1263.854811][T14441] usb 1-1: Using ep0 maxpacket: 16
[ 1263.861905][T14441] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[ 1263.876950][T14441] usb 1-1: config 0 has no interface number 0
[ 1263.883744][T14441] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1263.894216][T14441] usb 1-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1263.904567][T14441] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1263.914823][T14441] usb 1-1: config 0 interface 41 has no altsetting 0
[ 1263.927216][T14441] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1263.946678][T14441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1263.966950][T14441] usb 1-1: Product: syz
[ 1263.971186][T14441] usb 1-1: Manufacturer: syz
[ 1263.987204][T14441] usb 1-1: SerialNumber: syz
[ 1264.028879][T14441] usb 1-1: config 0 descriptor??
[ 1264.058344][T14777] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1264.069762][T14441] dm9601: probe of 1-1:0.41 failed with error -22
[ 1264.127004][T14441] sr9700: probe of 1-1:0.41 failed with error -22
[ 1264.514816][ T4317] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1264.696269][T14788] lo speed is unknown, defaulting to 1000
[ 1265.278120][ T4317] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1265.292721][T14817] xt_nat: multiple ranges no longer supported
[ 1265.924413][ T4267] Bluetooth: hci1: command 0x0409 tx timeout
[ 1266.515364][T14823] syz.4.2802 (14823): drop_caches: 2
[ 1266.778488][T10510] usb 1-1: USB disconnect, device number 51
[ 1266.896187][ T4317] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1266.957217][T14788] chnl_net:caif_netlink_parms(): no params data found
[ 1267.058512][ T4317] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1267.372629][T10510] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1268.055801][ T4267] Bluetooth: hci1: command 0x041b tx timeout
[ 1268.074516][T14788] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1268.082271][T14788] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1268.094052][T10510] usb 1-1: Using ep0 maxpacket: 16
[ 1268.112151][T10510] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1268.121588][T10510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1268.129990][T10510] usb 1-1: Product: syz
[ 1268.607052][T14788] device bridge_slave_0 entered promiscuous mode
[ 1268.954345][T10510] usb 1-1: Manufacturer: syz
[ 1268.959015][T10510] usb 1-1: SerialNumber: syz
[ 1268.998877][T10510] usb 1-1: config 0 descriptor??
[ 1269.008202][T14788] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1269.010695][T10510] appledisplay 1-1:0.0: Could not find int-in endpoint
[ 1269.034394][T14788] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1269.056906][T10510] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1269.061552][T14788] device bridge_slave_1 entered promiscuous mode
[ 1269.287421][T14856] ax25_connect(): syz.0.2803 uses autobind, please contact jreuter@yaina.de
[ 1269.441068][T14788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1269.462388][T14830] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 1269.476806][T14856] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1269.610650][T14788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1270.013390][T14867] xt_nat: multiple ranges no longer supported
[ 1270.094018][ T4267] Bluetooth: hci1: command 0x040f tx timeout
[ 1270.426454][T10510] usb 1-1: USB disconnect, device number 52
[ 1270.848915][T14788] team0: Port device team_slave_0 added
[ 1270.874883][T14788] team0: Port device team_slave_1 added
[ 1271.063481][   T27] audit: type=1326 audit(1749896735.902:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.6.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8fb8e929 code=0x7ffc0000
[ 1271.463289][   T27] audit: type=1326 audit(1749896735.912:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.6.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8fb8e929 code=0x7ffc0000
[ 1271.592529][   T26] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1271.631931][   T27] audit: type=1326 audit(1749896735.912:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.6.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b8fb8d290 code=0x7ffc0000
[ 1271.655352][   T27] audit: type=1326 audit(1749896735.912:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.6.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8fb8e929 code=0x7ffc0000
[ 1271.678494][   T27] audit: type=1326 audit(1749896735.922:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.6.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f0b8fb8e929 code=0x7ffc0000
[ 1271.706400][   T27] audit: type=1326 audit(1749896736.602:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.6.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8fb8e929 code=0x7ffc0000
[ 1271.736214][T14788] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1271.747352][   T27] audit: type=1326 audit(1749896736.602:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.6.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8fb8e929 code=0x7ffc0000
[ 1271.774182][T14788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1271.802653][   T26] usb 5-1: Using ep0 maxpacket: 16
[ 1271.809995][   T26] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[ 1271.822576][   T26] usb 5-1: config 0 has no interface number 0
[ 1271.828765][   T26] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1271.839740][T14788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1271.867057][   T26] usb 5-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1271.877361][   T26] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1271.887678][   T26] usb 5-1: config 0 interface 41 has no altsetting 0
[ 1271.897158][   T26] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1271.906380][   T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1271.914993][   T26] usb 5-1: Product: syz
[ 1271.917574][T14788] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1271.927283][   T26] usb 5-1: Manufacturer: syz
[ 1271.934853][   T26] usb 5-1: SerialNumber: syz
[ 1271.938913][T14788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1271.953574][   T26] usb 5-1: config 0 descriptor??
[ 1271.979192][T14870] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1271.987550][T14788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1272.000015][   T26] dm9601: probe of 5-1:0.41 failed with error -22
[ 1272.008301][   T26] sr9700: probe of 5-1:0.41 failed with error -22
[ 1272.212733][T14214] Bluetooth: hci1: command 0x0419 tx timeout
[ 1272.219853][T14214] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1272.240757][T14788] device hsr_slave_0 entered promiscuous mode
[ 1272.253488][ T4257] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1272.264026][ T4257] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1272.272381][ T4257] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1272.282091][ T4257] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1272.289604][ T4257] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1272.345982][T14788] device hsr_slave_1 entered promiscuous mode
[ 1272.363088][T14788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1272.370967][T14788] Cannot create hsr debugfs directory
[ 1272.577537][T14879] lo speed is unknown, defaulting to 1000
[ 1272.713679][ T4317] IPVS: stopping master sync thread 8088 ...
[ 1273.243519][ T4317] device hsr_slave_0 left promiscuous mode
[ 1273.256251][ T4317] device hsr_slave_1 left promiscuous mode
[ 1273.268797][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1273.286450][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1273.306957][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1273.314734][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1273.371160][ T4317] device veth1_macvtap left promiscuous mode
[ 1273.381118][ T4317] device veth0_macvtap left promiscuous mode
[ 1273.403454][ T4317] device veth1_vlan left promiscuous mode
[ 1273.415812][ T4317] device veth0_vlan left promiscuous mode
[ 1273.681311][T12009] usb 5-1: USB disconnect, device number 52
[ 1274.344244][ T4257] Bluetooth: hci2: command 0x0409 tx timeout
[ 1276.412912][ T4257] Bluetooth: hci2: command 0x041b tx timeout
[ 1276.782705][ T4317] team0 (unregistering): Port device team_slave_1 removed
[ 1276.832199][ T4317] team0 (unregistering): Port device team_slave_0 removed
[ 1276.884798][ T4317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1276.940200][ T4317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1277.460496][ T4317] bond0 (unregistering): Released all slaves
[ 1277.504066][T14917] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2821'.
[ 1277.515271][T14928] netlink: 'syz.0.2824': attribute type 10 has an invalid length.
[ 1277.541864][T14928] team0: Device ipvlan1 failed to register rx_handler
[ 1278.093038][   T26] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1278.322572][   T26] usb 5-1: Using ep0 maxpacket: 16
[ 1278.343359][   T26] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[ 1278.352101][   T26] usb 5-1: config 0 has no interface number 0
[ 1278.361145][   T26] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1278.372685][   T26] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1278.383194][   T26] usb 5-1: config 0 interface 41 has no altsetting 0
[ 1278.400845][   T26] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1278.410540][   T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1278.418836][   T26] usb 5-1: Product: syz
[ 1278.423347][   T26] usb 5-1: Manufacturer: syz
[ 1278.427980][   T26] usb 5-1: SerialNumber: syz
[ 1278.442960][   T26] usb 5-1: config 0 descriptor??
[ 1278.448857][T14935] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1278.476149][T14935] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1278.492932][ T4257] Bluetooth: hci2: command 0x040f tx timeout
[ 1278.670511][T14879] chnl_net:caif_netlink_parms(): no params data found
[ 1278.760053][T14935] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1278.782889][T14935] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1279.054520][T14879] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1279.072172][T14879] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1279.225087][T14879] device bridge_slave_0 entered promiscuous mode
[ 1279.279171][   T26] Error reading MAC address
[ 1279.307891][T14935] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1280.108324][T14788] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1280.133385][T14935] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1280.162903][T14879] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1280.180465][T14879] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1280.213674][T14879] device bridge_slave_1 entered promiscuous mode
[ 1280.264119][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'.
[ 1280.273346][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'.
[ 1280.282251][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'.
[ 1280.291320][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'.
[ 1280.300380][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'.
[ 1280.309338][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'.
[ 1280.318313][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'.
[ 1280.327269][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'.
[ 1280.336243][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'.
[ 1280.394623][T14788] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1280.481459][   T26] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[ 1281.307380][ T4257] Bluetooth: hci2: command 0x0419 tx timeout
[ 1281.662244][T14879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1281.724694][T14879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1281.779969][T10510] usb 5-1: USB disconnect, device number 53
[ 1281.980642][T14788] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1282.057416][T14879] team0: Port device team_slave_0 added
[ 1282.093623][T14788] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1282.207748][T14879] team0: Port device team_slave_1 added
[ 1282.663984][T14988] 9pnet_fd: Insufficient options for proto=fd
[ 1282.708068][ T4657] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1282.751408][T14879] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1282.781394][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1282.818227][T14879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1282.830044][T14980] __nla_validate_parse: 42 callbacks suppressed
[ 1282.830060][T14980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2836'.
[ 1282.954557][ T4657] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1283.084782][T14879] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1283.091793][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1283.130671][T14879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1283.269178][ T4657] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1283.755040][T15000] input: syz0 as /devices/virtual/input/input21
[ 1283.786135][ T4657] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1284.710273][T14879] device hsr_slave_0 entered promiscuous mode
[ 1284.781309][T14879] device hsr_slave_1 entered promiscuous mode
[ 1284.810899][T14879] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1284.831689][T14879] Cannot create hsr debugfs directory
[ 1285.003145][T14788] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1285.126190][T12009] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1285.334373][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1285.380556][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1285.559839][T14788] 8021q: adding VLAN 0 to HW filter on device team0
[ 1285.961873][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1286.000161][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1286.012901][T12009] usb 7-1: Using ep0 maxpacket: 16
[ 1286.027438][T12009] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[ 1286.029754][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1286.042842][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1286.049778][T12009] usb 7-1: config 0 has no interface number 0
[ 1286.058161][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1286.067602][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1286.078318][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1286.079035][T15025] 9pnet_fd: Insufficient options for proto=fd
[ 1286.085494][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1286.086621][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1286.098778][T12009] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1286.142569][T12009] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1286.173055][T12009] usb 7-1: config 0 interface 41 has no altsetting 0
[ 1286.197489][T12009] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1286.214665][T12009] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1286.218770][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1286.252156][T12009] usb 7-1: Product: syz
[ 1286.257622][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1286.260326][T12009] usb 7-1: Manufacturer: syz
[ 1286.279084][T12009] usb 7-1: SerialNumber: syz
[ 1286.298440][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1286.328069][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1286.351020][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1286.467242][T14788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1286.485743][T12009] usb 7-1: config 0 descriptor??
[ 1286.491841][T15007] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1286.499572][T15007] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1286.534466][T14788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1287.192938][T15037] fuseblk: Bad value for 'fd'
[ 1288.361348][T12009] dm9601: probe of 7-1:0.41 failed with error -71
[ 1288.385552][T12009] sr9700: probe of 7-1:0.41 failed with error -71
[ 1288.462779][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1288.474927][T12009] usb 7-1: USB disconnect, device number 3
[ 1288.515531][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1288.540582][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1288.566072][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1288.583907][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1288.592985][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1288.610075][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1288.637541][T15039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2850'.
[ 1289.203340][T14879] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1289.224304][T14879] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1289.332275][T14879] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1289.364609][T14879] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1289.529120][   T27] audit: type=1326 audit(1749896754.442:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15049 comm="syz.0.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83498e929 code=0x7fc00000
[ 1291.126712][T15079] 9pnet_fd: Insufficient options for proto=fd
[ 1292.518463][T10510] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1292.702587][T10510] usb 7-1: Using ep0 maxpacket: 16
[ 1292.719235][T10510] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[ 1292.730615][T10510] usb 7-1: config 0 has no interface number 0
[ 1292.744451][T10510] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1292.760720][T10510] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1292.771486][T10510] usb 7-1: config 0 interface 41 has no altsetting 0
[ 1292.802252][T10510] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1292.812100][T10510] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1292.820900][T10510] usb 7-1: Product: syz
[ 1292.825506][T10510] usb 7-1: Manufacturer: syz
[ 1292.830232][T10510] usb 7-1: SerialNumber: syz
[ 1292.857592][T10510] usb 7-1: config 0 descriptor??
[ 1292.863658][T15088] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1292.871414][T15088] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1293.100019][T15088] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1293.113427][T15088] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1293.550692][T10510] Error reading MAC address
[ 1293.556636][T15088] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1293.564459][T15088] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1293.979476][T10510] sr9700 7-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[ 1294.990082][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1295.009664][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1295.046827][T14788] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1295.508466][T14879] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1295.611312][ T4345] usb 7-1: USB disconnect, device number 4
[ 1295.679891][ T4657] device hsr_slave_0 left promiscuous mode
[ 1295.761454][ T4657] device hsr_slave_1 left promiscuous mode
[ 1295.780764][ T4657] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1295.988534][ T4657] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1296.023425][ T4657] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1296.097665][ T4657] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1297.988642][ T4657] device veth1_macvtap left promiscuous mode
[ 1298.039583][ T4657] device veth0_macvtap left promiscuous mode
[ 1298.069771][ T4657] device veth1_vlan left promiscuous mode
[ 1298.109574][ T4657] device veth0_vlan left promiscuous mode
[ 1298.140674][T15145] 9pnet_fd: Insufficient options for proto=fd
[ 1300.289312][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.295828][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.567318][ T4657] team0 (unregistering): Port device team_slave_1 removed
[ 1300.630002][ T4657] team0 (unregistering): Port device team_slave_0 removed
[ 1300.680431][ T4657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1300.730542][ T4657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1301.190539][ T4657] bond0 (unregistering): Released all slaves
[ 1301.234324][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1301.248088][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1303.308610][T15182] sctp: failed to load transform for md5: -2
[ 1308.696413][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1308.706965][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1308.760051][T14879] 8021q: adding VLAN 0 to HW filter on device team0
[ 1308.866863][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1308.907356][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1308.963573][ T4402] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1308.970961][ T4402] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1309.089544][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1311.949722][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1311.961023][ T4402] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1311.968263][ T4402] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1311.979730][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1311.994155][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1312.083243][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1312.091627][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1312.218359][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1312.243409][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1312.283727][T14788] device veth0_vlan entered promiscuous mode
[ 1312.311881][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1312.344833][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1312.460352][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1312.536571][T14788] device veth1_vlan entered promiscuous mode
[ 1312.552897][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1312.561062][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1312.594343][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1312.607872][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1312.617660][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1312.626851][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1312.635764][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1312.865489][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1312.968938][T14788] device veth0_macvtap entered promiscuous mode
[ 1313.001680][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1313.039546][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1313.226447][T14788] device veth1_macvtap entered promiscuous mode
[ 1313.656438][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1314.072596][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1314.120815][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1314.258824][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1314.753741][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1314.799473][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1314.847055][T14788] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1314.877404][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1314.905899][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1314.931738][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1314.985605][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1315.024116][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1315.062958][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1315.098564][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1315.128380][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1315.189550][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1315.229169][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1315.285278][T14788] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1315.407152][T15282] xt_nat: multiple ranges no longer supported
[ 1316.166451][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1316.184905][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1316.204877][T14788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1316.218027][T14788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1316.227412][T14788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1316.245239][T14788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1316.448860][T15286] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 1317.093190][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1317.139237][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1317.402814][T14879] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1317.603333][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1317.611697][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1317.718332][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1317.769188][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1317.847152][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1318.079794][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1320.307918][T15316] syz.0.2906 (15316): drop_caches: 2
[ 1327.947171][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1327.971967][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1328.065188][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1328.113304][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1328.168912][T14879] device veth0_vlan entered promiscuous mode
[ 1328.238345][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1328.350617][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1328.629284][T14879] device veth1_vlan entered promiscuous mode
[ 1328.981482][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1329.043371][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1329.132967][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1329.158642][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1329.193960][T14879] device veth0_macvtap entered promiscuous mode
[ 1329.213957][T14879] device veth1_macvtap entered promiscuous mode
[ 1329.282328][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1329.305834][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1329.330392][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1329.344494][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1329.370683][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1329.397542][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1329.437276][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1329.458236][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1329.488992][T14879] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1329.510232][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1329.641335][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1329.842863][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1330.124113][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1330.159593][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1330.195922][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1330.227233][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1330.249407][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1330.270595][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1330.287037][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1330.422850][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1330.442385][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1330.470687][T14879] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1330.528254][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1330.539233][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1330.588293][T14879] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.639235][T14879] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.768801][T14879] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.903619][T14879] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.052707][T15294] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1332.263221][T15294] usb 5-1: Using ep0 maxpacket: 16
[ 1332.285258][T15294] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1332.324571][T15294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1332.364895][T15294] usb 5-1: Product: syz
[ 1332.377870][T15294] usb 5-1: Manufacturer: syz
[ 1332.390186][T15294] usb 5-1: SerialNumber: syz
[ 1332.424371][T15294] usb 5-1: config 0 descriptor??
[ 1332.444215][ T4257] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1332.456498][ T4257] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1332.468300][ T4257] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1332.476705][ T4257] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1332.487735][T15294] appledisplay 5-1:0.0: Could not find int-in endpoint
[ 1332.495332][T14214] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1332.496786][T15294] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1332.503186][T14214] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1332.617568][T15471] lo speed is unknown, defaulting to 1000
[ 1332.747210][ T4451] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1332.820123][T15454] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1332.943476][ T4451] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1333.042991][ T4451] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1333.053622][T14214] Bluetooth: hci4: command 0x0406 tx timeout
[ 1333.127846][ T4451] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1333.150458][T15471] chnl_net:caif_netlink_parms(): no params data found
[ 1333.298087][T15471] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1333.313015][T15471] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1333.324265][T15471] device bridge_slave_0 entered promiscuous mode
[ 1333.402917][T15471] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1333.419726][T15471] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1333.450244][T15471] device bridge_slave_1 entered promiscuous mode
[ 1333.549084][T15502] overlayfs: missing 'lowerdir'
[ 1333.562422][T15471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1333.635780][T15471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1333.792228][T15505] syz.0.2943 (15505): drop_caches: 2
[ 1334.517532][T15471] team0: Port device team_slave_0 added
[ 1334.635679][ T4267] Bluetooth: hci2: command 0x0409 tx timeout
[ 1334.721230][ T4300] usb 5-1: USB disconnect, device number 54
[ 1334.864612][T15471] team0: Port device team_slave_1 added
[ 1335.049175][T15471] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1335.060618][T15471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1335.134790][T15471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1335.242276][T15531] overlayfs: missing 'lowerdir'
[ 1335.284142][T15471] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1335.305402][T15471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1335.423234][T15471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1335.994244][T15538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2950'.
[ 1336.845776][T14214] Bluetooth: hci2: command 0x041b tx timeout
[ 1337.124663][T15544] syz.3.2954 (15544): drop_caches: 2
[ 1337.192040][T15471] device hsr_slave_0 entered promiscuous mode
[ 1337.358750][T15471] device hsr_slave_1 entered promiscuous mode
[ 1337.366211][T15471] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1337.379382][T15471] Cannot create hsr debugfs directory
[ 1338.892811][T14214] Bluetooth: hci2: command 0x040f tx timeout
[ 1338.914470][ T4345] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1338.948294][T15563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2959'.
[ 1339.142625][ T4345] usb 4-1: Using ep0 maxpacket: 16
[ 1339.161422][ T4345] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1339.194082][ T4345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1339.202152][ T4345] usb 4-1: Product: syz
[ 1339.226952][ T4345] usb 4-1: Manufacturer: syz
[ 1339.231621][ T4345] usb 4-1: SerialNumber: syz
[ 1339.240681][ T4345] usb 4-1: config 0 descriptor??
[ 1339.292361][ T4345] appledisplay 4-1:0.0: Could not find int-in endpoint
[ 1339.331032][ T4345] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1339.410026][T15574] overlayfs: missing 'lowerdir'
[ 1339.564613][T15561] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1339.613236][ T4451] device hsr_slave_0 left promiscuous mode
[ 1339.773372][ T4451] device hsr_slave_1 left promiscuous mode
[ 1339.816925][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1339.990667][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1340.157507][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1340.270577][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1340.306278][ T4451] device bridge_slave_1 left promiscuous mode
[ 1340.335435][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1340.375883][ T4451] device bridge_slave_0 left promiscuous mode
[ 1340.419134][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1340.972723][T14214] Bluetooth: hci2: command 0x0419 tx timeout
[ 1341.072875][ T4451] device veth1_macvtap left promiscuous mode
[ 1341.078991][ T4451] device veth0_macvtap left promiscuous mode
[ 1341.135195][ T4451] device veth1_vlan left promiscuous mode
[ 1341.141103][ T4451] device veth0_vlan left promiscuous mode
[ 1343.894795][ T4451] team0 (unregistering): Port device team_slave_1 removed
[ 1343.985781][ T4451] team0 (unregistering): Port device team_slave_0 removed
[ 1344.083793][ T4451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1344.183691][ T4451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1344.497698][T15638] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2972'.
[ 1345.123504][ T4451] bond0 (unregistering): Released all slaves
[ 1345.285086][T15040] usb 4-1: USB disconnect, device number 55
[ 1345.339566][T15623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2971'.
[ 1345.440443][T15645] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1345.505905][T15645] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1347.868064][ T4345] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1348.057217][ T4345] usb 4-1: Using ep0 maxpacket: 16
[ 1348.113593][ T4345] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1348.132741][ T4345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1348.141027][ T4345] usb 4-1: Product: syz
[ 1348.145820][ T4345] usb 4-1: Manufacturer: syz
[ 1348.150459][ T4345] usb 4-1: SerialNumber: syz
[ 1348.165219][ T4345] usb 4-1: config 0 descriptor??
[ 1348.196586][ T4345] appledisplay 4-1:0.0: Could not find int-in endpoint
[ 1348.204552][ T4345] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1350.831713][T15674] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1350.870111][T15679] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2984'.
[ 1351.089650][T15685] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1351.124088][ T4345] usb 4-1: USB disconnect, device number 56
[ 1351.149513][T15685] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1351.477250][T15694] program syz.6.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1353.147099][T15471] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1353.157970][T15471] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1353.179608][T15471] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1353.531805][T15471] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1353.543705][T15709] xt_nat: multiple ranges no longer supported
[ 1354.067727][T15716] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1354.067727][T15716]    program syz.4.2993 not setting count and/or reply_len properly
[ 1354.771782][T15471] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1354.785877][T15716] device vcan1 entered promiscuous mode
[ 1354.804352][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1354.814082][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1354.826370][T15471] 8021q: adding VLAN 0 to HW filter on device team0
[ 1354.839936][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1354.850947][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1354.861065][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1354.868276][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1354.888810][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1354.924597][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1354.934078][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1354.942993][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1354.950164][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1354.959130][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1354.981152][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1355.043478][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1355.161728][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1355.275087][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1355.300768][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1355.452548][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1355.491089][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1355.520384][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1355.553131][T10510] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 1355.560112][T15471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1355.762594][T10510] usb 1-1: Using ep0 maxpacket: 16
[ 1355.788370][T10510] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1355.798673][T10510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1355.803299][T15471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1355.806929][T10510] usb 1-1: Product: syz
[ 1355.820558][T10510] usb 1-1: Manufacturer: syz
[ 1355.825572][T10510] usb 1-1: SerialNumber: syz
[ 1355.843702][T10510] usb 1-1: config 0 descriptor??
[ 1355.851963][T10510] appledisplay 1-1:0.0: Could not find int-in endpoint
[ 1355.860275][T10510] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1355.892188][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1355.909107][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1356.041582][T15735] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2996'.
[ 1356.205973][T15747] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1356.222086][T15747] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1356.292763][T10510] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1356.511912][T10510] usb 5-1: Using ep0 maxpacket: 16
[ 1356.555608][T10510] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1356.564949][T10510] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1356.574410][T10510] usb 5-1: Product: syz
[ 1356.578718][T10510] usb 5-1: Manufacturer: syz
[ 1356.583679][T10510] usb 5-1: SerialNumber: syz
[ 1356.610329][T10510] usb 5-1: config 0 descriptor??
[ 1356.630165][T10510] appledisplay 5-1:0.0: Could not find int-in endpoint
[ 1356.638518][T10510] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1359.322972][T15745] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1359.383172][T15760] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1359.463099][T15040] usb 1-1: USB disconnect, device number 53
[ 1359.624243][ T4300] usb 5-1: USB disconnect, device number 55
[ 1360.316188][T15791] xt_nat: multiple ranges no longer supported
[ 1360.602381][T14214] Bluetooth: hci3: Malformed LE Event: 0x1b
[ 1361.995339][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.001715][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.013257][T15803] fuse: Bad value for 'fd'
[ 1362.642667][T14441] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1363.293037][T14441] usb 4-1: Using ep0 maxpacket: 16
[ 1363.352108][T14441] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1363.374332][T15810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3010'.
[ 1363.477988][T14441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1363.536756][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1363.545175][T14441] usb 4-1: Product: syz
[ 1363.549390][T14441] usb 4-1: Manufacturer: syz
[ 1363.565588][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1363.583285][T14441] usb 4-1: SerialNumber: syz
[ 1363.599715][T15471] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1363.619916][T14441] usb 4-1: config 0 descriptor??
[ 1363.807265][T14441] appledisplay 4-1:0.0: Could not find int-in endpoint
[ 1363.815964][T14441] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1366.885103][T15855] syz.0.3017 (15855): drop_caches: 2
[ 1369.228913][T15836] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1369.328982][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3018'.
[ 1369.338158][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3018'.
[ 1369.445095][T15294] usb 4-1: USB disconnect, device number 57
[ 1369.571077][T14214] Bluetooth: hci4: Malformed LE Event: 0x1b
[ 1370.842888][T15874] kernel read not supported for file /��7���âW)�s���!Q���fs�l{T�r�)r��O���2:"��T+͟v|�ղDvc���֠�6�x�c: (pid: 15874 comm: syz.0.3021)
[ 1370.923284][   T27] audit: type=1800 audit(1749896835.782:200): pid=15874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3021" name=A0F29C1437B3CFF8C3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=70795 res=0 errno=0
[ 1371.424096][T15880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3024'.
[ 1373.447963][T15892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3026'.
[ 1376.153768][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1376.195501][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1376.286958][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1376.307822][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1376.361522][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1376.577665][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1376.659568][T15471] device veth0_vlan entered promiscuous mode
[ 1377.781085][T15471] device veth1_vlan entered promiscuous mode
[ 1378.359628][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1378.374579][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1379.207154][T15471] device veth0_macvtap entered promiscuous mode
[ 1379.236156][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1379.268507][T15471] device veth1_macvtap entered promiscuous mode
[ 1379.362248][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1379.407382][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1379.448177][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1379.472547][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1379.502716][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1379.521075][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1379.532401][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1379.543630][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1379.557537][T15471] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1379.704083][T15942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3037'.
[ 1379.730626][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1379.916402][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1380.081712][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1380.306386][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.395817][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1380.432012][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.603882][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1380.735271][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.866530][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1381.010763][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1381.336569][T15471] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1381.348154][T15471] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1381.357040][T15471] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1381.365848][T15471] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1381.374802][T15471] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1381.747930][T15958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3042'.
[ 1381.792813][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1381.836676][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1383.124110][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1383.293561][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1383.303612][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1383.311865][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1384.412719][T15983] lo speed is unknown, defaulting to 1000
[ 1384.419937][T15983] lo speed is unknown, defaulting to 1000
[ 1384.427404][T15983] lo speed is unknown, defaulting to 1000
[ 1384.524710][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1384.538680][T15983] infiniband s
z1: set active
[ 1384.732465][T15983] infiniband s
z1: added lo
[ 1384.786335][T15983] infiniband s
z1: Couldn't open port 1
[ 1384.823189][T15983] RDS/IB: s
z1: added
[ 1384.827302][T15983] smc: adding ib device s
z1 with port count 1
[ 1384.833587][T15983] smc:    ib device s
z1 port 1 has pnetid 
[ 1384.850306][T15975] lo speed is unknown, defaulting to 1000
[ 1384.851079][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1384.910541][T15983] lo speed is unknown, defaulting to 1000
[ 1385.022945][T15983] lo speed is unknown, defaulting to 1000
[ 1385.140263][T15983] lo speed is unknown, defaulting to 1000
[ 1386.250576][T15040] lo speed is unknown, defaulting to 1000
[ 1386.414954][T15983] lo speed is unknown, defaulting to 1000
[ 1386.902649][T15988] sctp: failed to load transform for md5: -2
[ 1387.084991][T15983] lo speed is unknown, defaulting to 1000
[ 1387.355754][T15996] ceph: No mds server is up or the cluster is laggy
[ 1387.372948][T15294] libceph: connect (1)[c::]:6789 error -101
[ 1387.379108][T15294] libceph: mon0 (1)[c::]:6789 connect error
[ 1387.759914][T15294] libceph: connect (1)[c::]:6789 error -101
[ 1387.892556][T15294] libceph: mon0 (1)[c::]:6789 connect error
[ 1389.462684][T14214] Bluetooth: hci1: command 0x0406 tx timeout
[ 1391.376576][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1391.387725][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1391.396802][ T4267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1391.406604][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1391.426886][ T4267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1391.452764][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1391.508473][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3055'.
[ 1392.457642][   T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1392.752502][T14441] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1393.543278][ T4267] Bluetooth: hci0: command 0x0409 tx timeout
[ 1393.553797][T14441] usb 5-1: Using ep0 maxpacket: 8
[ 1393.790924][T16061] Bluetooth: MGMT ver 1.22
[ 1394.036128][T16047] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3056'.
[ 1394.130418][T14441] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1394.226403][T14441] usb 5-1: config 0 has no interface number 0
[ 1394.239180][T14441] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1394.271229][T14441] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1394.291525][T14441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1394.307782][   T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1394.315965][T14441] usb 5-1: config 0 descriptor??
[ 1394.340916][T14441] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1394.369955][T16037] lo speed is unknown, defaulting to 1000
[ 1394.379277][T16037] lo speed is unknown, defaulting to 1000
[ 1394.448450][T16060] sctp: failed to load transform for md5: -2
[ 1394.749188][   T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1395.628003][ T4267] Bluetooth: hci0: command 0x041b tx timeout
[ 1395.864432][T15040] usb 5-1: USB disconnect, device number 56
[ 1395.904017][   T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1397.698627][ T4267] Bluetooth: hci0: command 0x040f tx timeout
[ 1397.911249][T16037] chnl_net:caif_netlink_parms(): no params data found
[ 1400.402967][ T4267] Bluetooth: hci0: command 0x0419 tx timeout
[ 1400.632587][T16127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3070'.
[ 1400.818156][T16130] sctp: failed to load transform for md5: -2
[ 1406.816977][T16037] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1406.838185][T16037] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1406.876348][T16037] device bridge_slave_0 entered promiscuous mode
[ 1406.944774][T16037] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1406.951922][T16037] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1406.979153][T16037] device bridge_slave_1 entered promiscuous mode
[ 1408.295800][T16037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1408.310247][T16037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1408.585349][T16195] sctp: failed to load transform for md5: -2
[ 1409.309345][T16037] team0: Port device team_slave_0 added
[ 1409.365388][T16037] team0: Port device team_slave_1 added
[ 1409.892632][T15451] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[ 1410.108727][T15451] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1410.139668][T15451] usb 8-1: config 0 has no interface number 0
[ 1410.210351][T15451] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1410.271130][T15451] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1410.378243][T15451] usb 8-1: config 0 descriptor??
[ 1410.439847][T16037] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1410.463306][T15451] usb 8-1: selecting invalid altsetting 1
[ 1410.470004][T16037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1410.547858][T15451] dvb_ttusb_budget: ttusb_init_controller: error
[ 1410.592223][T15451] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1410.653246][T16037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1410.712660][T16037] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1410.736696][T16037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1411.349240][T15451] DVB: Unable to find symbol cx22700_attach()
[ 1411.365811][T16037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1412.325432][T15451] DVB: Unable to find symbol tda10046_attach()
[ 1412.331648][T15451] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1412.342289][T16037] device hsr_slave_0 entered promiscuous mode
[ 1412.429643][T16037] device hsr_slave_1 entered promiscuous mode
[ 1412.452256][T15451] usb 8-1: USB disconnect, device number 2
[ 1412.486364][T16037] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1412.567213][T16037] Cannot create hsr debugfs directory
[ 1412.680184][   T56] device hsr_slave_0 left promiscuous mode
[ 1412.693487][   T56] device hsr_slave_1 left promiscuous mode
[ 1412.700739][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1412.728077][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1412.884727][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1412.894486][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1413.754335][   T56] device veth1_macvtap left promiscuous mode
[ 1413.812529][   T56] device veth0_macvtap left promiscuous mode
[ 1413.818738][   T56] device veth1_vlan left promiscuous mode
[ 1413.853371][   T56] device veth0_vlan left promiscuous mode
[ 1414.613909][   T56] infiniband s
z1: set down
[ 1415.519797][   T56] team0 (unregistering): Port device team_slave_1 removed
[ 1415.578472][   T56] team0 (unregistering): Port device team_slave_0 removed
[ 1415.631068][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1415.685364][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1416.149320][   T56] bond0 (unregistering): Released all slaves
[ 1416.186006][ T4657] smc: removing ib device s
z1
[ 1416.217351][T15975] lo speed is unknown, defaulting to 1000
[ 1416.223981][T15040] lo speed is unknown, defaulting to 1000
[ 1416.782989][T15040] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[ 1417.077004][T15040] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1417.109149][T15040] usb 5-1: config 0 has no interface number 0
[ 1417.133241][T15040] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1417.153884][T15040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1417.209019][T15040] usb 5-1: config 0 descriptor??
[ 1417.241224][T15040] usb 5-1: selecting invalid altsetting 1
[ 1417.314889][T15040] dvb_ttusb_budget: ttusb_init_controller: error
[ 1417.321398][T15040] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1417.761719][T15040] DVB: Unable to find symbol cx22700_attach()
[ 1418.150515][T15040] DVB: Unable to find symbol tda10046_attach()
[ 1418.204812][T15040] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1418.227954][T15040] usb 5-1: USB disconnect, device number 57
[ 1419.365950][T16308] trusted_key: encrypted_key: insufficient parameters specified
[ 1419.429594][T16308] wireguard: wg1: Could not create IPv4 socket
[ 1422.612122][T16037] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1422.685670][T16037] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1422.755447][T16037] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1422.818517][T16037] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1422.942653][T15040] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[ 1423.137605][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.144250][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.169720][T15040] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1423.342868][T16037] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1423.429645][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1423.445550][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1423.490682][T16037] 8021q: adding VLAN 0 to HW filter on device team0
[ 1423.546393][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1423.585699][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1423.656573][ T4657] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1423.663853][ T4657] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1423.773763][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1423.799528][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1423.829039][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1423.866512][ T4657] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1423.873787][ T4657] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1423.892588][T15040] usb 4-1: config 0 has no interface number 0
[ 1423.898845][T15040] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1423.909620][T15040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1423.943495][T15040] usb 4-1: config 0 descriptor??
[ 1423.951443][T15040] usb 4-1: selecting invalid altsetting 1
[ 1423.959362][T15040] dvb_ttusb_budget: ttusb_init_controller: error
[ 1423.966225][T15040] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1424.010134][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1424.139317][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1424.180856][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1424.231418][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1424.315991][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1424.360915][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1424.369188][T15040] DVB: Unable to find symbol cx22700_attach()
[ 1424.402143][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1424.455512][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1424.467172][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1424.497385][T16037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1424.510146][T16037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1424.531196][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1424.542180][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1424.671295][T15040] DVB: Unable to find symbol tda10046_attach()
[ 1424.679148][T15040] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1424.734495][T15040] usb 4-1: USB disconnect, device number 58
[ 1429.921594][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1429.949421][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1430.010217][T16037] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1430.169222][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1430.208617][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1430.310678][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1430.357449][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1430.365509][   T14] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[ 1430.406747][T16037] device veth0_vlan entered promiscuous mode
[ 1430.430380][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1430.444193][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1430.487726][T16037] device veth1_vlan entered promiscuous mode
[ 1430.565203][   T14] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1430.582517][   T14] usb 4-1: config 0 has no interface number 0
[ 1430.612095][   T14] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1430.641830][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1430.796698][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1430.814816][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1431.611799][   T14] usb 4-1: config 0 descriptor??
[ 1431.666170][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1431.734862][   T14] usb 4-1: selecting invalid altsetting 1
[ 1431.761234][   T14] dvb_ttusb_budget: ttusb_init_controller: error
[ 1431.994544][T16427] syz.6.3134 (16427): drop_caches: 2
[ 1432.054469][   T14] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1432.064314][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1432.186295][T16037] device veth0_macvtap entered promiscuous mode
[ 1432.226584][T16037] device veth1_macvtap entered promiscuous mode
[ 1432.539404][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1432.616597][   T14] DVB: Unable to find symbol cx22700_attach()
[ 1432.915756][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.980158][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1433.035804][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1433.975026][   T14] DVB: Unable to find symbol tda10046_attach()
[ 1433.981604][   T14] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1433.999098][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1434.003773][   T14] usb 4-1: USB disconnect, device number 59
[ 1434.202983][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1434.233464][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1434.678356][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1434.736842][T16037] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1434.774170][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1434.825298][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1434.949967][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1435.025604][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1435.062791][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1435.111327][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1435.281765][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1435.363477][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1436.048868][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1436.061152][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1436.113907][T16037] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1436.230524][T16150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1436.240288][T16150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1436.303920][T16037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1436.341341][T16037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1436.380509][T16037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1436.420072][T16037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1437.876893][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1438.068523][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1438.266039][T16484] syz.6.3145 (16484): drop_caches: 2
[ 1438.362612][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1438.405630][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1438.502682][   T26] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[ 1438.631467][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1438.841319][   T26] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1438.859736][   T26] usb 8-1: config 0 has no interface number 0
[ 1439.019459][ T4354] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1439.034489][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1439.036969][   T26] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1439.055657][   T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1439.068154][   T26] usb 8-1: config 0 descriptor??
[ 1439.097316][   T26] usb 8-1: selecting invalid altsetting 1
[ 1439.120375][T16496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3149'.
[ 1439.129662][   T26] dvb_ttusb_budget: ttusb_init_controller: error
[ 1439.138416][   T26] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1439.265321][ T4354] usb 4-1: Using ep0 maxpacket: 16
[ 1439.280201][ T4354] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1439.335843][ T4354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1439.380192][ T4354] usb 4-1: Product: syz
[ 1439.392633][ T4354] usb 4-1: Manufacturer: syz
[ 1439.397298][ T4354] usb 4-1: SerialNumber: syz
[ 1439.433432][ T4354] usb 4-1: config 0 descriptor??
[ 1439.462234][   T26] DVB: Unable to find symbol cx22700_attach()
[ 1439.475505][ T4354] appledisplay 4-1:0.0: Could not find int-in endpoint
[ 1439.523461][ T4354] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1439.719172][T16511] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1439.736705][   T26] DVB: Unable to find symbol tda10046_attach()
[ 1439.769744][   T26] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1439.931320][   T26] usb 8-1: USB disconnect, device number 3
[ 1442.315385][ T4298] usb 4-1: USB disconnect, device number 60
[ 1444.998363][T14214] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1445.009233][ T4257] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1445.019061][ T4257] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1445.033126][ T4257] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1445.041482][ T4257] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1445.049888][ T4257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1445.743453][ T4369] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1446.041573][ T4369] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1446.309837][T16572] binder: 16570:16572 ioctl c0306201 0 returned -14
[ 1447.135633][ T4267] Bluetooth: hci3: command 0x0409 tx timeout
[ 1447.240379][ T4369] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1448.610471][ T4369] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1450.279725][ T4257] Bluetooth: hci3: command 0x041b tx timeout
[ 1451.596392][T16553] chnl_net:caif_netlink_parms(): no params data found
[ 1452.026296][T16614] syz.7.3173 (16614): drop_caches: 2
[ 1452.333196][ T4257] Bluetooth: hci3: command 0x040f tx timeout
[ 1452.761978][T16553] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1452.996858][T16553] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1453.098506][T16553] device bridge_slave_0 entered promiscuous mode
[ 1453.124836][T16553] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1453.152630][T16553] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1453.195134][T16553] device bridge_slave_1 entered promiscuous mode
[ 1454.272124][T16640] misc userio: No port type given on /dev/userio
[ 1454.280995][T16640] misc userio: The device must be registered before sending interrupts
[ 1454.435215][ T4267] Bluetooth: hci3: command 0x0419 tx timeout
[ 1454.661021][T16553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1456.252692][ T4267] Bluetooth: hci2: command 0x0406 tx timeout
[ 1456.306171][T16553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1457.713238][T16553] team0: Port device team_slave_0 added
[ 1457.958854][T16553] team0: Port device team_slave_1 added
[ 1457.994172][ T4369] IPVS: stopping master sync thread 13092 ...
[ 1458.993367][T16682] syz.6.3186 (16682): drop_caches: 2
[ 1461.739083][T16553] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1461.777611][T16553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1462.973768][T16553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1463.065479][T16553] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1463.099604][T16553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1463.188751][T16553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1464.799829][ T4369] device hsr_slave_0 left promiscuous mode
[ 1465.357911][ T4369] device hsr_slave_1 left promiscuous mode
[ 1465.413366][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1465.420922][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1465.569464][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1465.622112][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1465.662725][ T4369] device veth1_macvtap left promiscuous mode
[ 1465.668850][ T4369] device veth0_macvtap left promiscuous mode
[ 1465.676524][ T4369] device veth1_vlan left promiscuous mode
[ 1465.684663][ T4369] device veth0_vlan left promiscuous mode
[ 1466.828114][T16735] syz.0.3200 (16735): drop_caches: 2
[ 1470.169950][ T4369] team0 (unregistering): Port device team_slave_1 removed
[ 1470.239389][ T4369] team0 (unregistering): Port device team_slave_0 removed
[ 1470.298404][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1470.355815][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1470.944541][ T4369] bond0 (unregistering): Released all slaves
[ 1470.992286][T16553] device hsr_slave_0 entered promiscuous mode
[ 1470.999441][T16553] device hsr_slave_1 entered promiscuous mode
[ 1472.821728][T10510] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1473.022472][T10510] usb 1-1: Using ep0 maxpacket: 16
[ 1474.218930][T10510] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1474.238217][T10510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1474.278791][T10510] usb 1-1: Product: syz
[ 1474.304412][T10510] usb 1-1: Manufacturer: syz
[ 1474.319847][T10510] usb 1-1: SerialNumber: syz
[ 1474.347196][T10510] usb 1-1: config 0 descriptor??
[ 1474.378733][T10510] appledisplay 1-1:0.0: Could not find int-in endpoint
[ 1474.415894][T10510] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1474.444781][T16783] netlink: 'syz.7.3213': attribute type 3 has an invalid length.
[ 1474.526955][T16783] netlink: 'syz.7.3213': attribute type 28 has an invalid length.
[ 1474.572814][T16783] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3213'.
[ 1474.668472][T16553] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1474.712831][T16786] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1474.750914][T16553] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1474.805367][T16553] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1474.808547][T16774] xt_CT: No such helper "snmp"
[ 1474.868151][T16553] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1475.382883][T16553] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1475.446190][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1475.477325][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1475.521840][T16553] 8021q: adding VLAN 0 to HW filter on device team0
[ 1475.597906][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1475.638476][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1475.663312][ T4618] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1475.670476][ T4618] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1475.708441][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1475.782876][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1475.808904][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1475.837159][ T4618] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1475.844382][ T4618] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1475.881878][ T4298] usb 1-1: USB disconnect, device number 54
[ 1477.466069][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1477.670665][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1477.874341][T16553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1477.892547][T16553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1477.982627][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1478.006618][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1478.310010][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1478.608197][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1478.788339][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1479.030065][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1479.078104][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1479.123904][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1479.268125][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1479.330996][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1483.472510][T10510] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1483.512739][ T4354] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1483.732807][ T4354] usb 8-1: Using ep0 maxpacket: 16
[ 1483.759551][ T4354] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1483.893901][ T4354] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1483.989107][ T4354] usb 8-1: Product: syz
[ 1484.033759][ T4354] usb 8-1: Manufacturer: syz
[ 1484.093757][ T4354] usb 8-1: SerialNumber: syz
[ 1484.232153][ T4354] usb 8-1: config 0 descriptor??
[ 1484.355318][ T4354] appledisplay 8-1:0.0: Could not find int-in endpoint
[ 1484.450486][ T4354] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[ 1484.578158][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.585147][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.871021][T10510] usb 7-1: Using ep0 maxpacket: 16
[ 1484.890425][T10510] usb 7-1: config 8 has an invalid interface number: 39 but max is 0
[ 1484.911750][T10510] usb 7-1: config 8 has no interface number 0
[ 1484.918555][T10510] usb 7-1: config 8 interface 39 altsetting 1 has an invalid endpoint with address 0xDF, skipping
[ 1484.929676][T10510] usb 7-1: config 8 interface 39 has no altsetting 0
[ 1484.965913][T10510] usb 7-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77
[ 1484.990179][T10510] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1485.019770][T10510] usb 7-1: Product: syz
[ 1485.024485][T10510] usb 7-1: Manufacturer: syz
[ 1485.029260][T10510] usb 7-1: SerialNumber: syz
[ 1485.253342][T10510] ipheth 7-1:8.39: Unable to find endpoints
[ 1486.501073][   T14] usb 7-1: USB disconnect, device number 5
[ 1488.294854][T16852] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1488.385506][T15975] usb 8-1: USB disconnect, device number 4
[ 1488.493386][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1488.522872][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1488.542836][T16553] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1492.126852][T16889] ==================================================================
[ 1492.134998][T16889] BUG: KASAN: use-after-free in rose_get_neigh+0x17e/0x550
[ 1492.142262][T16889] Read of size 1 at addr ffff888058cb4830 by task syz.7.3235/16889
[ 1492.150192][T16889] 
[ 1492.152564][T16889] CPU: 1 PID: 16889 Comm: syz.7.3235 Not tainted 6.1.141-syzkaller #0
[ 1492.160748][T16889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1492.170938][T16889] Call Trace:
[ 1492.174250][T16889]  <TASK>
[ 1492.177217][T16889]  dump_stack_lvl+0x168/0x22e
[ 1492.181944][T16889]  ? __lock_acquire+0x7c50/0x7c50
[ 1492.187022][T16889]  ? show_regs_print_info+0x12/0x12
[ 1492.192266][T16889]  ? load_image+0x3b0/0x3b0
[ 1492.196826][T16889]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 1492.202210][T16889]  ? __virt_addr_valid+0x188/0x540
[ 1492.207355][T16889]  ? __virt_addr_valid+0x465/0x540
[ 1492.212482][T16889]  ? rose_get_neigh+0x17e/0x550
[ 1492.217341][T16889]  print_report+0xa8/0x220
[ 1492.221765][T16889]  kasan_report+0x10b/0x140
[ 1492.226310][T16889]  ? rose_get_neigh+0x17e/0x550
[ 1492.231171][T16889]  rose_get_neigh+0x17e/0x550
[ 1492.235863][T16889]  rose_connect+0x412/0x1380
[ 1492.240461][T16889]  ? aa_sk_perm+0x7e5/0x920
[ 1492.244975][T16889]  ? rose_bind+0xa90/0xa90
[ 1492.249396][T16889]  ? aa_af_perm+0x1c0/0x2b0
[ 1492.253909][T16889]  ? tomoyo_socket_connect_permission+0x195/0x280
[ 1492.260335][T16889]  ? __might_fault+0xa6/0x120
[ 1492.265020][T16889]  ? bpf_lsm_socket_connect+0x5/0x10
[ 1492.270314][T16889]  ? security_socket_connect+0x7c/0xa0
[ 1492.275793][T16889]  ? rose_bind+0xa90/0xa90
[ 1492.280213][T16889]  __sys_connect+0x389/0x410
[ 1492.284823][T16889]  ? __sys_connect_file+0x170/0x170
[ 1492.290037][T16889]  __x64_sys_connect+0x76/0x80
[ 1492.294810][T16889]  do_syscall_64+0x4c/0xa0
[ 1492.299250][T16889]  ? clear_bhb_loop+0x60/0xb0
[ 1492.303932][T16889]  ? clear_bhb_loop+0x60/0xb0
[ 1492.308612][T16889]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1492.314545][T16889] RIP: 0033:0x7fcd9b78e929
[ 1492.319006][T16889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1492.338652][T16889] RSP: 002b:00007fcd9b5ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1492.347173][T16889] RAX: ffffffffffffffda RBX: 00007fcd9b9b5fa0 RCX: 00007fcd9b78e929
[ 1492.355159][T16889] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000005
[ 1492.363147][T16889] RBP: 00007fcd9b810b39 R08: 0000000000000000 R09: 0000000000000000
[ 1492.371162][T16889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1492.379147][T16889] R13: 0000000000000000 R14: 00007fcd9b9b5fa0 R15: 00007fff088133c8
[ 1492.387229][T16889]  </TASK>
[ 1492.390260][T16889] 
[ 1492.392599][T16889] Allocated by task 21:
[ 1492.396769][T16889]  kasan_set_track+0x4b/0x70
[ 1492.401385][T16889]  __kasan_kmalloc+0x8e/0xa0
[ 1492.406001][T16889]  __kmalloc_node_track_caller+0xae/0x230
[ 1492.411760][T16889]  __alloc_skb+0x22a/0x7e0
[ 1492.416201][T16889]  __netdev_alloc_skb+0x107/0x4d0
[ 1492.421244][T16889]  __ieee80211_beacon_get+0xc48/0x1f50
[ 1492.426749][T16889]  ieee80211_beacon_get_tim+0x5b/0x4d0
[ 1492.432224][T16889]  mac80211_hwsim_beacon_tx+0x21c/0xae0
[ 1492.437795][T16889]  __iterate_interfaces+0x243/0x500
[ 1492.443012][T16889]  ieee80211_iterate_active_interfaces_atomic+0xd7/0x170
[ 1492.450056][T16889]  mac80211_hwsim_beacon+0xb7/0x1b0
[ 1492.455273][T16889]  __hrtimer_run_queues+0x554/0xd60
[ 1492.460498][T16889]  hrtimer_run_softirq+0x183/0x2a0
[ 1492.465635][T16889]  handle_softirqs+0x2a1/0x920
[ 1492.470424][T16889]  run_ksoftirqd+0x98/0xf0
[ 1492.474853][T16889]  smpboot_thread_fn+0x64a/0xa40
[ 1492.479815][T16889]  kthread+0x29d/0x330
[ 1492.483913][T16889]  ret_from_fork+0x1f/0x30
[ 1492.488347][T16889] 
[ 1492.490683][T16889] Freed by task 21:
[ 1492.494495][T16889]  kasan_set_track+0x4b/0x70
[ 1492.499108][T16889]  kasan_save_free_info+0x2d/0x50
[ 1492.504145][T16889]  ____kasan_slab_free+0x126/0x1e0
[ 1492.509283][T16889]  slab_free_freelist_hook+0x131/0x1a0
[ 1492.514761][T16889]  __kmem_cache_free+0xb6/0x1f0
[ 1492.519633][T16889]  skb_release_data+0x5db/0x7c0
[ 1492.524502][T16889]  consume_skb+0xa2/0x100
[ 1492.528852][T16889]  mac80211_hwsim_beacon_tx+0x61e/0xae0
[ 1492.534435][T16889]  __iterate_interfaces+0x243/0x500
[ 1492.539682][T16889]  ieee80211_iterate_active_interfaces_atomic+0xd7/0x170
[ 1492.546743][T16889]  mac80211_hwsim_beacon+0xb7/0x1b0
[ 1492.551967][T16889]  __hrtimer_run_queues+0x554/0xd60
[ 1492.557195][T16889]  hrtimer_run_softirq+0x183/0x2a0
[ 1492.562331][T16889]  handle_softirqs+0x2a1/0x920
[ 1492.567145][T16889]  run_ksoftirqd+0x98/0xf0
[ 1492.571579][T16889]  smpboot_thread_fn+0x64a/0xa40
[ 1492.576727][T16889]  kthread+0x29d/0x330
[ 1492.580836][T16889]  ret_from_fork+0x1f/0x30
[ 1492.585290][T16889] 
[ 1492.587628][T16889] Last potentially related work creation:
[ 1492.593356][T16889]  kasan_save_stack+0x3a/0x60
[ 1492.598067][T16889]  __kasan_record_aux_stack+0xb2/0xc0
[ 1492.603471][T16889]  call_rcu+0x14b/0x970
[ 1492.607659][T16889]  __ip6_del_rt+0xf1/0x150
[ 1492.612099][T16889]  ip6_del_rt+0xb0/0xf0
[ 1492.616273][T16889]  __ipv6_ifa_notify+0x81d/0xdb0
[ 1492.621229][T16889]  addrconf_ifdown+0xe9a/0x1a10
[ 1492.626124][T16889]  addrconf_notify+0x405/0xf40
[ 1492.630906][T16889]  raw_notifier_call_chain+0xcb/0x160
[ 1492.636303][T16889]  dev_close_many+0x28d/0x400
[ 1492.640992][T16889]  unregister_netdevice_many+0x471/0x1840
[ 1492.646731][T16889]  default_device_exit_batch+0x9c3/0xa50
[ 1492.652401][T16889]  cleanup_net+0x77b/0xb80
[ 1492.656836][T16889]  process_one_work+0x898/0x1160
[ 1492.661822][T16889]  worker_thread+0xaa2/0x1250
[ 1492.666508][T16889]  kthread+0x29d/0x330
[ 1492.670601][T16889]  ret_from_fork+0x1f/0x30
[ 1492.675035][T16889] 
[ 1492.677368][T16889] The buggy address belongs to the object at ffff888058cb4800
[ 1492.677368][T16889]  which belongs to the cache kmalloc-512 of size 512
[ 1492.691434][T16889] The buggy address is located 48 bytes inside of
[ 1492.691434][T16889]  512-byte region [ffff888058cb4800, ffff888058cb4a00)
[ 1492.704658][T16889] 
[ 1492.706991][T16889] The buggy address belongs to the physical page:
[ 1492.713421][T16889] page:ffffea0001632d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888058cb6000 pfn:0x58cb4
[ 1492.724887][T16889] head:ffffea0001632d00 order:2 compound_mapcount:0 compound_pincount:0
[ 1492.733217][T16889] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1492.741221][T16889] raw: 00fff00000010200 ffffea00015ebf08 ffffea000159aa08 ffff888017441c80
[ 1492.749842][T16889] raw: ffff888058cb6000 000000000010000d 00000001ffffffff 0000000000000000
[ 1492.758522][T16889] page dumped because: kasan: bad access detected
[ 1492.764940][T16889] page_owner tracks the page as allocated
[ 1492.770680][T16889] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4256, tgid 4256 (syz-executor), ts 79144388576, free_ts 79144054420
[ 1492.792070][T16889]  post_alloc_hook+0x173/0x1a0
[ 1492.796868][T16889]  get_page_from_freelist+0x1a26/0x1ac0
[ 1492.802430][T16889]  __alloc_pages+0x1df/0x4e0
[ 1492.807057][T16889]  alloc_slab_page+0x5d/0x160
[ 1492.811748][T16889]  new_slab+0x87/0x2c0
[ 1492.815836][T16889]  ___slab_alloc+0xbc6/0x1220
[ 1492.820531][T16889]  __kmem_cache_alloc_node+0x1a0/0x260
[ 1492.826012][T16889]  __kmalloc+0xa0/0x240
[ 1492.830181][T16889]  __register_sysctl_table+0x96c/0xe70
[ 1492.835660][T16889]  neigh_sysctl_register+0x993/0xa70
[ 1492.840961][T16889]  addrconf_sysctl_register+0xac/0x1b0
[ 1492.846438][T16889]  ipv6_add_dev+0xbe0/0x1120
[ 1492.851040][T16889]  addrconf_notify+0x634/0xf40
[ 1492.855825][T16889]  raw_notifier_call_chain+0xcb/0x160
[ 1492.861219][T16889]  register_netdevice+0x1600/0x1aa0
[ 1492.866438][T16889]  veth_newlink+0x592/0xbe0
[ 1492.870960][T16889] page last free stack trace:
[ 1492.875639][T16889]  free_unref_page_prepare+0x8b4/0x9a0
[ 1492.881124][T16889]  free_unref_page+0x2e/0x3f0
[ 1492.885848][T16889]  __stack_depot_save+0x435/0x460
[ 1492.890897][T16889]  kasan_set_track+0x60/0x70
[ 1492.895513][T16889]  __kasan_slab_alloc+0x6b/0x80
[ 1492.900389][T16889]  slab_post_alloc_hook+0x4b/0x480
[ 1492.905520][T16889]  kmem_cache_alloc+0x123/0x2f0
[ 1492.910392][T16889]  debug_objects_fill_pool+0x34a/0x650
[ 1492.915865][T16889]  __debug_object_init+0x29/0x420
[ 1492.920902][T16889]  init_timer_key+0x3e/0x320
[ 1492.925516][T16889]  ip_mc_init_dev+0x8d/0x1d0
[ 1492.930119][T16889]  inetdev_init+0x35b/0x4f0
[ 1492.934639][T16889]  inetdev_event+0x270/0x1410
[ 1492.939336][T16889]  raw_notifier_call_chain+0xcb/0x160
[ 1492.944721][T16889]  register_netdevice+0x1600/0x1aa0
[ 1492.949937][T16889]  veth_newlink+0x592/0xbe0
[ 1492.954463][T16889] 
[ 1492.956791][T16889] Memory state around the buggy address:
[ 1492.962425][T16889]  ffff888058cb4700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1492.970495][T16889]  ffff888058cb4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1492.978582][T16889] >ffff888058cb4800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1492.986652][T16889]                                      ^
[ 1492.992297][T16889]  ffff888058cb4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1493.000371][T16889]  ffff888058cb4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1493.008441][T16889] ==================================================================
[ 1493.016617][T16889] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1493.023841][T16889] CPU: 1 PID: 16889 Comm: syz.7.3235 Not tainted 6.1.141-syzkaller #0
[ 1493.032031][T16889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1493.042124][T16889] Call Trace:
[ 1493.045435][T16889]  <TASK>
[ 1493.048398][T16889]  dump_stack_lvl+0x168/0x22e
[ 1493.053120][T16889]  ? memcpy+0x3c/0x60
[ 1493.057134][T16889]  ? show_regs_print_info+0x12/0x12
[ 1493.062361][T16889]  ? load_image+0x3b0/0x3b0
[ 1493.066904][T16889]  panic+0x2c9/0x710
[ 1493.070836][T16889]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1493.077032][T16889]  ? bpf_jit_dump+0xd0/0xd0
[ 1493.081593][T16889]  ? _raw_spin_unlock_irqrestore+0xa5/0x100
[ 1493.087541][T16889]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 1493.093485][T16889]  ? _raw_spin_unlock+0x40/0x40
[ 1493.098389][T16889]  check_panic_on_warn+0x80/0xa0
[ 1493.103381][T16889]  ? rose_get_neigh+0x17e/0x550
[ 1493.108271][T16889]  end_report+0x66/0x110
[ 1493.112576][T16889]  kasan_report+0x118/0x140
[ 1493.117140][T16889]  ? rose_get_neigh+0x17e/0x550
[ 1493.122044][T16889]  rose_get_neigh+0x17e/0x550
[ 1493.126767][T16889]  rose_connect+0x412/0x1380
[ 1493.131401][T16889]  ? aa_sk_perm+0x7e5/0x920
[ 1493.135949][T16889]  ? rose_bind+0xa90/0xa90
[ 1493.140406][T16889]  ? aa_af_perm+0x1c0/0x2b0
[ 1493.144955][T16889]  ? tomoyo_socket_connect_permission+0x195/0x280
[ 1493.151432][T16889]  ? __might_fault+0xa6/0x120
[ 1493.156161][T16889]  ? bpf_lsm_socket_connect+0x5/0x10
[ 1493.161485][T16889]  ? security_socket_connect+0x7c/0xa0
[ 1493.166971][T16889]  ? rose_bind+0xa90/0xa90
[ 1493.171420][T16889]  __sys_connect+0x389/0x410
[ 1493.176042][T16889]  ? __sys_connect_file+0x170/0x170
[ 1493.181298][T16889]  __x64_sys_connect+0x76/0x80
[ 1493.186087][T16889]  do_syscall_64+0x4c/0xa0
[ 1493.190518][T16889]  ? clear_bhb_loop+0x60/0xb0
[ 1493.195213][T16889]  ? clear_bhb_loop+0x60/0xb0
[ 1493.199917][T16889]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1493.205834][T16889] RIP: 0033:0x7fcd9b78e929
[ 1493.210267][T16889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1493.229900][T16889] RSP: 002b:00007fcd9b5ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1493.238324][T16889] RAX: ffffffffffffffda RBX: 00007fcd9b9b5fa0 RCX: 00007fcd9b78e929
[ 1493.246321][T16889] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000005
[ 1493.254308][T16889] RBP: 00007fcd9b810b39 R08: 0000000000000000 R09: 0000000000000000
[ 1493.262291][T16889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1493.270269][T16889] R13: 0000000000000000 R14: 00007fcd9b9b5fa0 R15: 00007fff088133c8
[ 1493.278265][T16889]  </TASK>
[ 1493.281633][T16889] Kernel Offset: disabled
[ 1493.285970][T16889] Rebooting in 86400 seconds..