last executing test programs:

18m39.017336025s ago: executing program 32 (id=75):
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0)
lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r5 = dup(r4)
getsockname$packet(r5, 0x0, 0x0)
bind$alg(r3, 0x0, 0x0)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
accept$alg(r3, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, 0x0)
ioctl$FE_READ_SIGNAL_STRENGTH(0xffffffffffffffff, 0x80026f47, 0x0)

17m52.680966257s ago: executing program 33 (id=122):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000062554014"], 0x14}}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f0000000000), 0x101, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = syz_clone(0x30303600, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getregset(0x4204, r1, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40283)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000140)=ANY=[])
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
setrlimit(0x8, &(0x7f00000000c0)={0x3, 0x6})
write(r4, &(0x7f0000000680)="1c00000021002551071c0165ff00fc0202000000000001000000000c", 0x1c)

14m15.974976824s ago: executing program 34 (id=328):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x11e)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='on\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0)
pwrite64(r3, &(0x7f0000000200), 0x0, 0x1a0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r5, &(0x7f0000000180)='0', 0x1)
pwrite64(r4, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1a0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000100)=0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x30}}, 0x0)
r7 = socket$kcm(0x2, 0x3, 0x2)
r8 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x5e5e, 0xc00, 0x1, 0x11}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
close(r7)
io_uring_enter(r8, 0x215e, 0x4d74, 0x4, 0x0, 0x0)

11m44.285147455s ago: executing program 0 (id=509):
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r1 = syz_open_dev$loop(0x0, 0x0, 0x4002)
syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0xe10c, 0x4005, 0x0, 0x40, 0x0, 0x0}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0, &(0x7f0000000440)=<r4=>0x0)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000))
r5 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
openat$mice(0xffffff9c, &(0x7f0000000040), 0x41)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e1b, 0x80000040, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}, 0x1c)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2e, &(0x7f0000000080)=0x200004, 0x4)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000540)}})
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00')
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendfile(r7, r6, 0x0, 0xffffffff)
socket$nl_rdma(0x10, 0x3, 0x14)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18)
getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, 0x0, 0x0)
connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r11, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001300010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="073000000904000008001300", @ANYRES32=0x0, @ANYBLOB="6763efe48edd4b47d6442b14d6a1e52bb6ceb40697e06680d7c23ab85e965fd3b9b6d788b0cd4d074b020db1091184e17f311f68d963c757d6948719b9100dff66ed6d19c73ac66dec5bc5dc4fd328ff26bdef73d1aee164d3fe9b83fa538ecc786fc87d60d7377dfbcd9586a44ff032eed345702857d82b01683db0fb7703e65e62e19856e7915e623c5a31f72c07b879167a5f287022d7ed88ba1ce18d99e6f53e02"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

11m40.494123211s ago: executing program 0 (id=502):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r1 = socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg(r5, 0x0, 0x10040800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800)
ioctl$sock_SIOCINQ(r5, 0x541b, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x22, 0x30, &(0x7f0000000400)="f0821c123d981a1a2e7c613e359b3c0a3f3931fe41f06994eb8829966685c85e19aa", &(0x7f00000003c0)="553f2fb5dc93400d8a309712cda62e76f49bae896d8d802404394f0fdef2c2527415389d423ee2ccb489cdd5fc2e1df7"}, 0xb)

11m37.290706181s ago: executing program 0 (id=516):
r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setuid(0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
listen(0xffffffffffffffff, 0x5)
r5 = eventfd2(0x0, 0x0)
io_setup(0x4, &(0x7f0000000080)=<r6=>0x0)
io_pgetevents(r6, 0x2, 0x0, 0x0, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

11m34.495759962s ago: executing program 35 (id=496):
r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setuid(0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
r4 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
listen(0xffffffffffffffff, 0x5)
r5 = eventfd2(0x0, 0x0)
io_setup(0x4, &(0x7f0000000080)=<r6=>0x0)
io_pgetevents(r6, 0x2, 0x0, 0x0, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

11m34.481385302s ago: executing program 0 (id=510):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000062554014"], 0x14}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@deltfilter={0x1048, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x9, 0xb}, {0x4, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1018, 0x2, [@TCA_BASIC_POLICE={0x1014, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x101795ff, 0x8749, 0x7, 0x2, 0x1, 0x6, 0x5, 0xffff7649, 0x3, 0x5, 0x4, 0x2, 0x10008, 0x5, 0x7, 0x519, 0x3, 0x1, 0xa, 0x4, 0xa7, 0x9, 0x3, 0x26, 0x5, 0x1, 0x13bc, 0xf, 0x8, 0x5, 0x3, 0xff, 0x4, 0x6, 0xf, 0x0, 0x3, 0x63c4000, 0x7, 0x9, 0x7f, 0x9, 0x8, 0xfffffffb, 0x5, 0x2, 0x5, 0x7d3, 0x7, 0x5, 0x5ce, 0x8, 0x9, 0x10000, 0xff000, 0x1, 0x8, 0x101, 0x10000, 0x79, 0xfffffff1, 0x9, 0x2, 0x80000001, 0x3, 0x8, 0x7f, 0x2, 0xfffffff7, 0x2, 0x3, 0x101, 0x3, 0xc, 0x2, 0x6, 0xb2da, 0xc, 0x6, 0x6504, 0xfffffff7, 0x7, 0x3ff, 0x7, 0x7, 0x3, 0x6, 0x6, 0xfffffff7, 0xd, 0x7, 0x18, 0xfff, 0x0, 0x7, 0x0, 0x95a8, 0x0, 0xc636, 0x0, 0x3, 0x6, 0x5, 0x63, 0x6, 0xfffffffe, 0xf5, 0xb, 0x2, 0x5, 0x9, 0x4, 0x3, 0x3, 0x2b, 0x2, 0x4, 0x3, 0x3, 0x3, 0x0, 0x533, 0xfffffffb, 0x200, 0x9, 0xfffffffe, 0x81, 0x100, 0x7, 0x3, 0xa, 0x4, 0x8, 0x101, 0x2, 0x5, 0x1, 0x9, 0xffffff97, 0x3ff, 0x2, 0x9, 0x87, 0x0, 0x6, 0x0, 0x72e, 0x2, 0x10fd, 0xfffffff7, 0x7, 0x9, 0x8, 0x2, 0x5, 0x4, 0xfffffc21, 0x5, 0x7114, 0x5, 0x557, 0x3ce, 0x3b9a, 0x2, 0xb, 0x10001, 0xd2, 0x10001, 0xfffffffe, 0x3, 0x800, 0x3, 0x5ee7, 0x123, 0x80000001, 0x4, 0x800, 0x8000, 0x1, 0x7f, 0x12000, 0x4, 0x81, 0x7, 0x200, 0x8f, 0x80000001, 0xaf4, 0x81, 0xa8b2, 0x2, 0x0, 0x9311, 0x1ff, 0x7ff, 0x8, 0x5a68, 0x4c07, 0xfffffff7, 0x1, 0x4, 0x383d, 0x1, 0xf, 0x1, 0x3, 0x8552, 0x1, 0xffff, 0xfffffff8, 0x9, 0x101, 0xd, 0xa, 0x7, 0x7f, 0x7, 0x8, 0x9, 0xc988, 0x10001, 0xf2e3, 0x10, 0x1, 0xe1, 0x86e, 0x9cf, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x2, 0xb36f, 0x8, 0x1042, 0x0, 0xffffffff, 0xef, 0x10001, 0x0, 0x6, 0x0, 0x3, 0xffffffff, 0x7, 0x43, 0x1000, 0x6, 0x8, 0x7, 0xe, 0x0, 0x7, 0xe, 0x7d]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0x1, 0x10001, 0x8, 0x8, 0xac1f, 0x5, 0xbf3, 0x4, 0x6ea, 0x1, 0x5, 0xdd2, 0x9, 0x7, 0x3, 0x8, 0x189d, 0x5, 0x4, 0x7, 0x9, 0xb, 0x6, 0x5, 0x3, 0x5, 0x1, 0x2, 0x0, 0x5, 0x7, 0x89588710, 0x9, 0x7, 0x0, 0x8, 0xfffffff7, 0x5, 0x244b, 0x7fff, 0x81, 0x7, 0xd, 0x101, 0x1, 0x5, 0x686, 0x3e1, 0x4, 0x10, 0x2, 0x7, 0xd619, 0xb9, 0x400, 0x54d1, 0x7, 0x4, 0x6, 0x6, 0x1, 0x74, 0x3, 0x10, 0x7, 0xd4f, 0x5, 0x3, 0x1, 0x0, 0x93b, 0x1, 0x5, 0xffff, 0x6, 0x4, 0x96, 0xb7d2, 0x10000, 0x8, 0x0, 0x0, 0x5, 0x31bd, 0x2, 0x7, 0xffff, 0xfffffffd, 0x5, 0xfffffff9, 0x2, 0x4265, 0x0, 0x7fff, 0xc14, 0x1d, 0x6, 0x0, 0x8, 0x10001, 0x10, 0x2, 0x7fffffff, 0x8, 0x0, 0x6, 0x3, 0x4823, 0x8, 0x101, 0x3, 0x5, 0x0, 0x5, 0x3, 0x6a2b, 0x8, 0xce, 0x5, 0x0, 0x8, 0x9, 0x3, 0x9b, 0x8000, 0x2, 0x9, 0x3, 0xfffff242, 0x9, 0x81, 0x8, 0x81, 0x81, 0xeb, 0x1ceb, 0xe, 0x1, 0x1, 0x777a8d85, 0x9, 0x6, 0x3, 0x1, 0x4deda6ef, 0x0, 0x3, 0x3, 0x6, 0x3, 0x3, 0x568, 0x34, 0x61, 0x4, 0x1000, 0x8, 0x1, 0x0, 0x5, 0x5, 0xa3, 0x5, 0x4b02, 0x7, 0x9, 0xffffffdb, 0xf, 0x8d6, 0xffffffff, 0x8, 0xf4, 0x3, 0x3, 0x6b7, 0x5, 0x7f, 0x80000001, 0x6, 0x3, 0xc371, 0xfffffff7, 0x2, 0x5, 0x7fff, 0x4, 0xffffff81, 0x3, 0x3, 0x2, 0x6, 0x1ff, 0x6, 0xffff, 0x40, 0x8c, 0x2, 0x2, 0x1, 0x2, 0x3, 0x8001, 0x0, 0x10000, 0x7, 0x400, 0x9, 0x5, 0x7, 0x6, 0x36d3, 0x401, 0x1830, 0x8, 0x8, 0x0, 0x436, 0x9, 0x1, 0xae6, 0x7, 0x3, 0x401, 0x1, 0x8000, 0x0, 0x6, 0x0, 0x2, 0x9, 0x4, 0x1, 0xfffffdd6, 0x4, 0x0, 0x7, 0x9, 0x6, 0x2, 0x4, 0xfffffffe, 0x7, 0x0, 0x200, 0x5, 0xfffffffd, 0x5, 0x6, 0x4, 0x2, 0x7f, 0x2, 0xf, 0xc]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x8001, 0x3fec, 0x9, 0xc84, 0x3, 0x4, 0x4, 0x7, 0x7f, 0xaa, 0x6, 0x0, 0x4, 0x9, 0x1, 0x8, 0x3ff, 0x5, 0x3ff, 0x1, 0x1, 0x3, 0x180, 0x2, 0xcec, 0x60000000, 0xa6d, 0x0, 0x4, 0x4, 0x5, 0xb50, 0xcb5, 0x3ff, 0x80, 0x6, 0x8, 0xffff, 0xff, 0x7, 0x8, 0x9, 0x80, 0x7, 0xe, 0x0, 0x30, 0x6276, 0x0, 0x88b, 0xd, 0x100, 0x0, 0x100, 0x0, 0x5, 0x4, 0x309a, 0xf0a3, 0x3, 0x4, 0x0, 0x6, 0x0, 0x100, 0x8, 0xffffffff, 0x2, 0xf4c9, 0x5, 0x8, 0xc26, 0x6, 0x8, 0x8, 0x9, 0x401, 0x6, 0x7c, 0x1, 0xfffffff8, 0x6, 0x7, 0x0, 0x4, 0xffff, 0xf, 0x81, 0x5, 0x1, 0x1, 0x7fff, 0x9, 0xffff, 0x7, 0xa7, 0x9, 0x3cc, 0xf, 0x6, 0x2d20, 0x2, 0x9, 0x6c, 0xfff, 0x0, 0x1, 0x6, 0x1, 0xd, 0xffffffff, 0x7, 0x9, 0x6, 0xfffffffd, 0x1ff, 0xc, 0x1ff, 0x401, 0x74bb, 0x2, 0xee, 0x4, 0xf, 0x0, 0x3, 0x10001, 0x7, 0x3, 0x0, 0x3, 0xbf, 0x4, 0x9b7, 0x2, 0x34, 0x5, 0x8001, 0x2, 0x5c, 0x1, 0x800, 0x1, 0x4f, 0x6, 0x400, 0x81, 0x1, 0x7, 0x6, 0x9a, 0x13, 0x1, 0x129, 0x4, 0x8, 0x5ed, 0x2f, 0xcb0, 0x4db0, 0x2, 0x1000, 0xbfa, 0x8, 0xfff, 0x10001, 0x2, 0xffffffff, 0x2, 0xda, 0x1, 0xf90, 0x3, 0x0, 0x2, 0x9, 0x9, 0xffff, 0x0, 0x196, 0x10, 0x8, 0x8, 0xe26, 0x0, 0x80, 0x7ff, 0xf00000, 0x6, 0x0, 0x3ff, 0x0, 0x8, 0x8, 0x9, 0x57, 0x4, 0x9, 0xa, 0x2ff, 0x8, 0xb6b8, 0x4a2, 0x0, 0x9, 0x2, 0x6, 0x7, 0xff, 0x800, 0x7, 0x60, 0x8, 0x7, 0x4, 0xffffffff, 0x6, 0x3, 0x0, 0xb, 0x5, 0x1f, 0xff, 0x7ff, 0x61, 0x7, 0x9, 0x5, 0xd42, 0x36ce, 0x0, 0xfffffff8, 0x4, 0x9, 0x8000, 0x8, 0x0, 0x3, 0xff, 0x0, 0x400, 0x7f, 0x5, 0x7, 0x16a5, 0x43f, 0x4f6a, 0xfffff001, 0x0, 0x2, 0x10, 0x14, 0x1, 0x7, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x6, 0x7, 0x6, 0x6, 0x3, 0x9, 0xffffff2a, 0x3, 0x100, 0x10000, 0x6, 0xd4b4, 0x1, 0x9, 0xb0, 0x8c, 0x101, 0x4, 0x0, 0x7f, 0x34, 0xffff, 0x6, 0x7fffffff, 0x10, 0x1, 0x1000, 0x10, 0x5, 0xffffffc0, 0x7, 0x2, 0x8, 0x8, 0x40, 0x2, 0xfffffff7, 0x32e841a5, 0xa, 0x40, 0x4, 0x22, 0xfffffffd, 0x8, 0xfffffff8, 0x80000000, 0x8001, 0x80000001, 0x1ff, 0xfffffffa, 0x7ca, 0x1c, 0x4c, 0x7ff, 0x0, 0x6, 0x3, 0x3e, 0x0, 0xd27c, 0x5da6, 0x9, 0xccb, 0x6, 0xffff, 0x0, 0xe, 0xeb, 0x7, 0x68, 0x6, 0x7, 0xff, 0x2, 0xd8f6, 0x7ff, 0x3ff, 0x2, 0xb2, 0x8, 0xffff, 0x990, 0xffffffff, 0x3d35, 0x8, 0x9, 0x5, 0xfffffffe, 0x1, 0xffffffff, 0x8, 0x200, 0x80000000, 0x40, 0x3e, 0xfffffffd, 0x7f0, 0xfffffffb, 0x8, 0x2, 0xb3ad, 0x13e, 0x6, 0x100, 0x0, 0x8, 0x2, 0x8, 0x7fff, 0xffffffff, 0xfffffff3, 0x1, 0x4167, 0xff, 0x6, 0x8, 0xfffffbff, 0x2, 0x0, 0x7, 0xc, 0xea, 0x7fff, 0x4, 0x3, 0xfffffff6, 0x8, 0x1, 0x3, 0xff, 0x40, 0x8, 0x8, 0xd74, 0x4, 0x30, 0x6, 0x1, 0x5, 0x9, 0x7ff, 0x7, 0x1, 0x3, 0xe, 0x3800, 0x1, 0x1, 0x7ff, 0x8, 0x3, 0x6, 0x4e43, 0x9015, 0x6, 0x558a0ebb, 0x1, 0x7, 0x6, 0xaf9, 0x7, 0xfffffff7, 0xffffffff, 0x9, 0x2, 0x144, 0x5, 0x7ff, 0x1, 0xfffe, 0x47f, 0x2, 0xfffffff6, 0x64, 0x7be, 0xe14, 0x4, 0x10000000, 0x8, 0x9, 0x5, 0x1ff2, 0x40, 0xf, 0xeb77, 0x2, 0x7, 0xbd7c, 0x4, 0x9, 0x4, 0xe, 0x8, 0xffffffff, 0x4, 0x3ff80000, 0x0, 0xd78d, 0x7f, 0x8, 0x4, 0x2, 0x5, 0x3, 0x1, 0x35, 0x401, 0x0, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1, 0x1ff, 0x7, 0x8, 0x26c4, 0x7fff, 0x394d, 0x7, 0x8, 0x5, 0x1, 0x4, 0x1, 0x8000, 0xe, 0x9, 0x7, 0x1, 0xfffffffb, 0x6, 0x2, 0x8, 0x2f, 0x6, 0x10000, 0x3, 0x218, 0x7ff, 0x80, 0x5, 0x0, 0x0, 0xfff, 0x5, 0x0, 0x704f1bb1, 0x8, 0x5, 0x8, 0xee4, 0xffffffff, 0xfffeffff]}]}]}}]}, 0x1048}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f0000000000), 0x101, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = syz_clone(0x30303600, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getregset(0x4204, r1, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40283)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000140)=ANY=[])
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
setrlimit(0x8, &(0x7f00000000c0)={0x3, 0x6})
write(r4, &(0x7f0000000680)="1c00000021002551071c0165ff00fc0202000000000001000000000c", 0x1c)

11m23.387648823s ago: executing program 0 (id=520):
openat$sndseq(0xffffff9c, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, 0x0, 0x0, 0x2}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r6, &(0x7f0000000300), 0x0}, 0x20)
ioctl$TCGETA(r4, 0x5405, 0xfffffffffffffffe)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
mount(&(0x7f0000000100)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x2180420, 0x0)

11m21.709962145s ago: executing program 0 (id=523):
socket$inet6(0xa, 0x2, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffd, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x9, 0x3, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x4, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff})
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x82)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r2, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102)
write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000280), 0x100000000, 0x0)

11m6.501677699s ago: executing program 36 (id=523):
socket$inet6(0xa, 0x2, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffd, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x9, 0x3, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x4, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff})
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x82)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r2, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102)
write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000280), 0x100000000, 0x0)

6m12.917370899s ago: executing program 8 (id=2268):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000)

6m12.732277324s ago: executing program 8 (id=2272):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x40000)

6m12.402122532s ago: executing program 8 (id=2274):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

6m12.266650716s ago: executing program 8 (id=2277):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0)

6m12.06582579s ago: executing program 8 (id=2279):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00')
read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write(r1, &(0x7f0000000800)='1', 0x1)

6m11.778093248s ago: executing program 8 (id=2282):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r2, &(0x7f0000000040)="06", 0x1)
sendfile(r2, r2, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1})

6m11.444923297s ago: executing program 37 (id=2282):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r2, &(0x7f0000000040)="06", 0x1)
sendfile(r2, r2, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1})

6m10.314276625s ago: executing program 6 (id=2297):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0x101546, 0x0)
fsetxattr(r0, &(0x7f0000000400)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x1)

6m9.894419416s ago: executing program 6 (id=2300):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2000000c})
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001})

6m9.534975155s ago: executing program 6 (id=2304):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x5}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x0, 0x1000}}]}]}}}]}, 0x64}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c)

6m8.493975001s ago: executing program 6 (id=2311):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2125099, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
ppoll(&(0x7f00000000c0)=[{r0, 0x208}, {r0, 0x18c}], 0x2, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ramfs\x00', 0x10010, 0x0)

6m8.203319158s ago: executing program 6 (id=2314):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100))
r1 = syz_open_pts(r0, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl(r2, 0x8914, &(0x7f0000000400)="736c300000000000000000000000000001")
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000803)=0xc0)

6m7.602204573s ago: executing program 6 (id=2317):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/220, 0xdc}], 0x1)
shutdown(r1, 0x2)
io_setup(0xcf, &(0x7f0000000040))
eventfd(0xfffffffd)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

6m7.180482264s ago: executing program 38 (id=2317):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/220, 0xdc}], 0x1)
shutdown(r1, 0x2)
io_setup(0xcf, &(0x7f0000000040))
eventfd(0xfffffffd)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

2m46.132130909s ago: executing program 9 (id=3632):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000600)={0x7, 0x0, [{0x4, 0x0, 0x0, 0x6, 0x9e}, {0x0, 0x1, 0x0, 0x0, 0x9f86}, {0x5e2796afef1a2f31, 0xffffffff, 0xb, 0x9, 0x1, 0x80000001, 0x8}, {0x2, 0xfffffffe, 0x7, 0x8, 0x3, 0x110, 0x3}, {0x80000008, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x1}, {0xc0000000, 0x0, 0x3, 0x6b0, 0x823, 0xa5, 0x8000}, {0x40000001, 0x1, 0x4, 0xc, 0xff, 0x9, 0x7}]})
r4 = socket$nl_route(0x10, 0x3, 0x0)
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(r0, r4, 0x0)

2m45.727889779s ago: executing program 9 (id=3625):
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

2m43.012288247s ago: executing program 9 (id=3633):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
socket$packet(0x11, 0x2, 0x300)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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")
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
fcntl$dupfd(r0, 0x0, r0)
socket$tipc(0x1e, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000100), 0x800)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

2m42.617411197s ago: executing program 9 (id=3636):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0)

2m39.170317734s ago: executing program 9 (id=3648):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

2m36.067838163s ago: executing program 9 (id=3650):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_disconnect(r0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x503, 0xffffffff, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000010}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1002, 0x80000000}})
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)

2m21.008069193s ago: executing program 39 (id=3650):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_disconnect(r0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x503, 0xffffffff, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000010}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1002, 0x80000000}})
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)

1m59.371037779s ago: executing program 7 (id=3762):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x2, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0)

1m58.482929171s ago: executing program 7 (id=3766):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

1m57.194280514s ago: executing program 7 (id=3768):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400074100000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m55.052102638s ago: executing program 7 (id=3774):
r0 = socket$kcm(0x21, 0x2, 0x2)
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x82020000)
setsockopt$sock_attach_bpf(r0, 0x110, 0x7, 0x0, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

1m54.56769675s ago: executing program 7 (id=3775):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f}, &(0x7f0000000000)=0x40)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)

1m54.207404059s ago: executing program 7 (id=3777):
writev(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mknod$loop(0x0, 0xfff, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fchdir(r1)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0)

1m38.977808964s ago: executing program 40 (id=3777):
writev(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mknod$loop(0x0, 0xfff, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fchdir(r1)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0)

1m14.16893643s ago: executing program 4 (id=3865):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

1m13.068356168s ago: executing program 4 (id=3868):
socket(0x10, 0x3, 0x0)
r0 = getpgid(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0)
setns(r2, 0x66020000)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000040)='.\x00', 0x2)

1m11.763242641s ago: executing program 4 (id=3871):
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902"], 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_io_uring_setup(0x7a31, &(0x7f0000000080)={0x0, 0x4e36, 0x800, 0x1, 0x2fe}, &(0x7f0000000280), 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000f82000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\"P\x00')
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000694000/0x3000)=nil, 0x3000)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

1m10.19955721s ago: executing program 4 (id=3876):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000010900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="20000000150a0102"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)

1m7.780640571s ago: executing program 4 (id=3880):
open_tree(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r1, &(0x7f0000000080)=""/1, 0x1)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000)
munlockall()
r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m3.606963447s ago: executing program 4 (id=3890):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)

48.132046658s ago: executing program 41 (id=3890):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)

12.71359643s ago: executing program 2 (id=4001):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9462, 0x0, 0x0, 0x0, 0x58b}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x7, 0xa, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xaf}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0xff1, &(0x7f0000001cc0)=""/4081, 0x41100, 0x22}, 0x94)

11.633126187s ago: executing program 3 (id=4003):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@noblock_validity}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)

11.541785329s ago: executing program 2 (id=4004):
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x200)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0)

10.892252745s ago: executing program 5 (id=4006):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x1214040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r3, 0x104, 0x0)
getdents64(r3, 0xfffffffffffffffe, 0x0)

9.832378663s ago: executing program 5 (id=4007):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
getrlimit(0x9, &(0x7f00000002c0))
syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000140)='./file0\x00', 0x81c04a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d9, &(0x7f0000000580)="$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")
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

7.92088142s ago: executing program 1 (id=4008):
socket$unix(0x1, 0x2, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)
accept(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$unix(0x1, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x10000000003, 0x3, 0x8000000000000000, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0)

7.844168952s ago: executing program 2 (id=4009):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000003780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40085)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r3, @ANYBLOB="08000200"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
socket$kcm(0x11, 0x3, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

7.586053029s ago: executing program 2 (id=4010):
syz_create_resource$binfmt(0x0)
syz_create_resource$binfmt(0x0)
r0 = getpgid(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x192509b, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

7.585184569s ago: executing program 3 (id=4011):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, 0x0, 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c1", 0x23}, {&(0x7f0000000b80)="0d4842ef613cd072", 0x8}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.292345536s ago: executing program 5 (id=4012):
open(0x0, 0x4827e, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000200), 0x0, 0x2000000}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), &(0x7f0000002740), 0x800, r3}, 0x38)

7.283073786s ago: executing program 2 (id=4021):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x183001, 0x0)
r1 = epoll_create1(0x80000)
epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0xfbb, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x5f0}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {0x0, 0xe}, {0x1, 0xa}, {0x7, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x8, 0x4c, 0x9, 0x4, 0xfffffe01, 0x200}, [@TCA_NETEM_LOSS={0x2c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0x0, 0x872f, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9b, 0x9, 0x2, 0x75dc0b07}}]}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20010094}, 0xc050)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

7.11990314s ago: executing program 3 (id=4013):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = timerfd_create(0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040005}, 0x8800)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
read(r0, &(0x7f0000000240)=""/123, 0x7b)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x5dd889b3, 0x0, 0x0, 0x4000, 0x0, 0x100, 0x10001, 0xa, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x0, 0x3, 0x4000000000000000})

5.859131232s ago: executing program 5 (id=4014):
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_pidfd_open(r0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

5.829587463s ago: executing program 1 (id=4015):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f)
keyctl$revoke(0x3, r3)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x3f00000000000000)

4.551071735s ago: executing program 1 (id=4016):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5f, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1fe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c8}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000000, 0x6, 0x401}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004)
r8 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="2c548f2664234aea5882c40b008c", 0xe}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045)

4.550015005s ago: executing program 5 (id=4017):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f00000006c0)={0x0, 0x2c01, @ioapic={0x100010000, 0x101, 0x0, 0x2, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xaf}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xfc, 0x0, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x2, 0xb, '\x00', 0xfe}, {0xf, 0x0, 0x6}, {0x1, 0x4, 0x8, '\x00', 0x13}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x8, 0x4, 0x1, '\x00', 0x6}, {0x80, 0x6, 0x6, '\x00', 0x48}, {0x5, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x4, '\x00', 0x6}, {0xd, 0x7, 0x7, '\x00', 0x86}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x7, 0x81, '\x00', 0xb}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x8, 0x5, '\x00', 0x9}, {0x1, 0x9, 0x9, '\x00', 0x81}, {0xf9, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240))
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001e00)="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", 0x2ef}], 0x1}}], 0x1, 0x0)

4.202618704s ago: executing program 2 (id=4018):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xfffffcfc}, {0x4, @none, "40fef9efea518310c08b43e129089545c3e0aa1efb7d8b596ca666fcc6708b522b3c9119a043e367cc516feeb5111c81ed0ec0d07a09fa4a87c8864243feafdda0b1cc5a90c30c418c6efba5a292260168aed3433e5d6ab31ea56a25d4128d6d5f655c1cfd6eb54de914bda77d156fdcc5af2ea3aba9931216ff400a2413fe2fecb6705a038be6cdb6b05fb299a8616745294ce08982b15dc949d9665a4dda0a1ab9d0a9c2b723682bfa0c4f45d91aab4187fa00169f3289dc02a678a1ab6ae10b3240209aa5fc1706f8d7963e878950f20ad175cae28a0081b981924902ac89ced3d6493f0bac5f5a20b640fd2e09d1368a9b37cf451e1f"}}}, 0x102)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x10)

3.96319931s ago: executing program 1 (id=4019):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = userfaultfd(0x80801)
close(r3)
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})

3.943011071s ago: executing program 3 (id=4020):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dvmrp1\x00'})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100"], 0x7)
write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x89, &(0x7f0000000740)={@broadcast, @link_local, @val={@val={0x88a8, 0x6, 0x1, 0x4}, {0x8100, 0x4, 0x1, 0x4}}, {@llc={0x4, {@llc={0x4, 0x8e, 't', "0d0516aeaa549521c595adf511ac81d18fd2c29ba46bd668d8dba041df1207f81076e5a4566cb1227940a748f33eae01bfe2b9751e42057cbd22c7aaa418c81ecf2a21b62012f3a6a6e8f09c2e61b3ca6fb8415434fd5ab13de871678eac7f535af21240b5778e311753c356c755a814"}}}}}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp\x00')
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0)
openat$cgroup_type(r2, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}}, 0x4000050)

2.329858501s ago: executing program 1 (id=4022):
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0)
write(r3, &(0x7f0000000540)="28217e5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9f", 0x5c)

1.299448137s ago: executing program 1 (id=4023):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)={0x1, 0x0, [{0xa, 0x3b38, 0x0, 0x523, 0x7fffffff}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.299026467s ago: executing program 5 (id=4024):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
userfaultfd(0x80801)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1010c2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.298702167s ago: executing program 3 (id=4025):
open(0x0, 0x4827e, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000200), 0x0, 0x2000000}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), &(0x7f0000002740), 0x800, r3}, 0x38)

0s ago: executing program 3 (id=4026):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

3742][  T127] usb 8-1: USB disconnect, device number 28
[ 1021.374624][ T4842] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1021.517134][T16017] bridge0: port 3(veth0) entered blocking state
[ 1021.524384][T16017] bridge0: port 3(veth0) entered disabled state
[ 1021.557199][T16017] device veth0 entered promiscuous mode
[ 1021.575707][T16017] bridge0: port 3(veth0) entered blocking state
[ 1021.582156][T16017] bridge0: port 3(veth0) entered forwarding state
[ 1021.736968][T16019] bridge0: port 4(veth1) entered blocking state
[ 1021.743388][T16019] bridge0: port 4(veth1) entered disabled state
[ 1021.789111][T16019] device veth1 entered promiscuous mode
[ 1021.814026][T16019] bridge0: port 4(veth1) entered blocking state
[ 1021.820447][T16019] bridge0: port 4(veth1) entered forwarding state
[ 1022.189845][T16030] device bond1 entered promiscuous mode
[ 1023.113691][   T26] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[ 1023.209500][T16068] bridge0: port 3(veth0) entered blocking state
[ 1023.224564][T16068] bridge0: port 3(veth0) entered disabled state
[ 1023.297027][T16068] device veth0 entered promiscuous mode
[ 1023.303629][   T26] usb 8-1: Using ep0 maxpacket: 32
[ 1023.314243][   T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1023.334350][T16068] bridge0: port 3(veth0) entered blocking state
[ 1023.340788][T16068] bridge0: port 3(veth0) entered forwarding state
[ 1023.366414][   T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1023.384123][T16070] bridge0: port 4(veth1) entered blocking state
[ 1023.400763][   T26] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1023.436350][T16070] bridge0: port 4(veth1) entered disabled state
[ 1023.443986][   T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.475009][T16070] device veth1 entered promiscuous mode
[ 1023.481120][T16070] bridge0: port 4(veth1) entered blocking state
[ 1023.487689][T16070] bridge0: port 4(veth1) entered forwarding state
[ 1023.495591][   T26] usb 8-1: config 0 descriptor??
[ 1023.526521][   T26] hub 8-1:0.0: USB hub found
[ 1023.572045][T11952] device hsr_slave_0 left promiscuous mode
[ 1023.592783][T11952] device hsr_slave_1 left promiscuous mode
[ 1023.625054][T11952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1023.650842][T11952] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1023.684839][T11952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1023.705087][   T26] hub 8-1:0.0: 1 port detected
[ 1023.706199][T11952] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1023.769008][T11952] device bridge_slave_1 left promiscuous mode
[ 1023.801247][T11952] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1023.830825][T11952] device bridge_slave_0 left promiscuous mode
[ 1023.858225][T11952] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1024.045023][T11952] device veth1_macvtap left promiscuous mode
[ 1024.073691][T11952] device veth0_macvtap left promiscuous mode
[ 1024.079884][T11952] device veth1_vlan left promiscuous mode
[ 1024.144188][T11952] device veth0_vlan left promiscuous mode
[ 1024.351132][ T4377] hub 8-1:0.0: activate --> -90
[ 1024.795213][ T4317] usb 8-1: USB disconnect, device number 29
[ 1025.173621][ T4377] usb 8-1-port1: config error
[ 1025.330790][T11952] team0 (unregistering): Port device team_slave_1 removed
[ 1025.440774][T11952] team0 (unregistering): Port device team_slave_0 removed
[ 1025.561467][T11952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1025.644647][T11952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1026.465239][T11952] team0 (unregistering): Port device dummy0 removed
[ 1026.649023][T11952] bond0 (unregistering): Released all slaves
[ 1026.878056][T16096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3129'.
[ 1026.909684][T16098] bridge0: port 1(erspan0) entered blocking state
[ 1026.923813][T16098] bridge0: port 1(erspan0) entered disabled state
[ 1026.942363][T16098] device erspan0 entered promiscuous mode
[ 1026.952227][T16098] bridge0: port 1(erspan0) entered blocking state
[ 1026.958889][T16098] bridge0: port 1(erspan0) entered forwarding state
[ 1027.015828][ T3933] mac80211_hwsim hwsim23 wlan2: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1027.511250][   T27] audit: type=1800 audit(1786181221.978:126): pid=16132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3139" name="zoned" dev="configfs" ino=82526 res=0 errno=0
[ 1027.589998][   T27] audit: type=1800 audit(1786181221.978:127): pid=16132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3139" name="memory_backed" dev="configfs" ino=82527 res=0 errno=0
[ 1027.733790][   T27] audit: type=1800 audit(1786181221.978:128): pid=16132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3139" name="power" dev="configfs" ino=82528 res=0 errno=0
[ 1028.052880][T16132] null_blk: disk nullb1 created
[ 1029.043730][    C0] batman_adv: batadv0: Local translation table size (156) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[ 1029.123824][ T4842] wlan1: Trigger new scan to find an IBSS to join
[ 1029.597865][T16199] overlayfs: failed to clone upperpath
[ 1029.775936][T16202] lo: Caught tx_queue_len zero misconfig
[ 1029.857884][T16204] bridge0: port 3(veth0) entered blocking state
[ 1029.874319][T16204] bridge0: port 3(veth0) entered disabled state
[ 1029.883278][T16204] device veth0 entered promiscuous mode
[ 1029.957586][T16204] bridge0: port 4(veth1) entered blocking state
[ 1030.003792][T16204] bridge0: port 4(veth1) entered disabled state
[ 1030.061051][T16204] device veth1 entered promiscuous mode
[ 1031.119211][T16240] overlayfs: failed to clone lowerpath
[ 1031.419689][T16255] MTD: Couldn't look up './dev/mtdblock0': -2
[ 1031.642086][T16263] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1032.083870][ T4375] wlan1: Trigger new scan to find an IBSS to join
[ 1032.977693][T16312] netlink: 'syz.4.3194': attribute type 39 has an invalid length.
[ 1033.145594][   T27] audit: type=1804 audit(1786181227.608:129): pid=16316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3195" name="bus" dev="ramfs" ino=83029 res=1 errno=0
[ 1033.293323][   T27] audit: type=1804 audit(1786181227.758:130): pid=16320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3195" name="bus" dev="ramfs" ino=83029 res=1 errno=0
[ 1033.863122][T16337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1034.183921][T16351] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3204'.
[ 1034.229537][T16351] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1035.126952][ T4869] wlan1: Trigger new scan to find an IBSS to join
[ 1036.015077][T16400] binder_alloc: 16399: binder_alloc_buf size 8 failed, no address space
[ 1036.045444][T16400] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0)
[ 1036.265789][ T4855] wlan1: Creating new IBSS network, BSSID 92:87:ae:40:0e:89
[ 1036.279115][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan2: link becomes ready
[ 1037.124481][T16435] netlink: 'syz.7.3230': attribute type 4 has an invalid length.
[ 1037.545298][T16455] MTD: Couldn't look up './dev/mtdblock0': -2
[ 1037.906797][T16469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3240'.
[ 1038.069405][T16469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3240'.
[ 1038.536502][T16492] device ip6gretap1 entered promiscuous mode
[ 1038.542718][T16492] bond1: (slave ip6gretap1): no link monitoring support
[ 1038.559321][T16492] bond1: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details
[ 1038.628178][T16492] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1040.390042][T16526] lo: Caught tx_queue_len zero misconfig
[ 1040.446798][T16525] device-mapper: table: 248:0: zero-length target
[ 1040.473732][T16525] device-mapper: ioctl: error adding target to table
[ 1040.739096][T16540] kvm: vcpu 0: requested 52352 ns lapic timer period limited to 200000 ns
[ 1041.373765][ T4288] Bluetooth: hci1: command 0x0406 tx timeout
[ 1041.818285][ T4318] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS
[ 1041.842436][ T4318] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS
[ 1041.919078][ T4318] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off
[ 1041.963621][ T4318] i801_smbus 0000:00:01.3: PCI INT A: no GSI
[ 1041.969836][ T4318] i801_smbus 0000:00:01.3: SMBus base address uninitialized, upgrade BIOS
[ 1042.062684][ T4318] ACPI: \_SB_.LNKA: Enabled at IRQ 11
[ 1042.071774][ T4318] i801_smbus 0000:00:05.0: SMBus base address uninitialized, upgrade BIOS
[ 1042.146819][ T4318] i801_smbus 0000:00:06.0: SMBus base address uninitialized, upgrade BIOS
[ 1042.194344][  T127] i801_smbus 0000:00:01.3: SMBus base address uninitialized, upgrade BIOS
[ 1043.135115][T16608] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3279'.
[ 1043.182003][T16608] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[ 1043.213661][T16608] infiniband syz2: set active
[ 1043.235349][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1043.249898][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1043.262256][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1043.274114][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1043.285948][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1043.297843][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1043.309644][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1043.321653][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1043.333555][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1043.345456][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1044.287798][T16633] netlink: 'syz.9.3287': attribute type 1 has an invalid length.
[ 1044.495523][T16633] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1044.648706][T16637] bond2: (slave ip6gretap1): making interface the new active one
[ 1044.690477][T16637] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1044.746407][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[ 1046.483675][ T4282] Bluetooth: hci4: command 0x0406 tx timeout
[ 1047.568938][T16685] device macvlan2 entered promiscuous mode
[ 1047.639553][T16685] bond2: (slave macvlan2): Opening slave failed
[ 1048.294423][    C1] net_ratelimit: 2215 callbacks suppressed
[ 1048.294446][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1048.312058][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1048.323761][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1048.335564][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1048.348183][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1048.359797][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1048.371335][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1048.383644][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1048.396044][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1048.407787][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1048.424629][ T4853] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1049.375726][T16727] MTD: Couldn't look up './dev/mtdblock0': -2
[ 1050.770594][T16760] batman_adv: batadv0: Adding interface: dummy0
[ 1050.811839][   T27] audit: type=1804 audit(1786181245.278:131): pid=16757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3320" name="/newroot/147/file0" dev="fuse" ino=1 res=1 errno=0
[ 1050.868130][T16760] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1050.965531][T16760] batman_adv: batadv0: Interface activated: dummy0
[ 1051.318731][T16764] device geneve2 entered promiscuous mode
[ 1051.355145][T16764] batman_adv: batadv0: Adding interface: geneve2
[ 1051.378466][T16764] batman_adv: batadv0: Interface activated: geneve2
[ 1052.784010][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3332'.
[ 1053.305084][    C1] net_ratelimit: 2198 callbacks suppressed
[ 1053.305105][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1053.322877][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1053.335619][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1053.347391][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1053.359178][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1053.371925][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1053.378054][ T4855] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1053.564711][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1053.576541][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1053.589721][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1053.601636][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1055.233599][ T6650] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[ 1055.449119][ T6650] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1055.482209][ T6650] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.552212][T16870] overlayfs: failed to clone upperpath
[ 1055.830574][T16874] overlayfs: failed to clone upperpath
[ 1056.181152][T16887] overlayfs: failed to clone upperpath
[ 1056.593806][ T6650] [drm] Initialized gud 1.0.0 20200422 for 8-1:1.0 on minor 2
[ 1056.961987][ T6650] gud 8-1:1.0: [drm] Cannot find any crtc or sizes
[ 1057.446270][ T6650] gud 8-1:1.0: [drm] Cannot find any crtc or sizes
[ 1057.651761][ T6650] usb 8-1: USB disconnect, device number 30
[ 1058.313742][    C1] net_ratelimit: 2328 callbacks suppressed
[ 1058.313765][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1058.331537][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1058.344824][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1058.356628][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1058.434290][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1058.446079][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1058.457924][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1058.470614][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1058.483394][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1058.495298][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1059.017141][T16941] qfq: no options
[ 1059.854009][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1059.860406][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1059.876368][   T22] kworker/dying (22) used greatest stack depth: 20160 bytes left
[ 1060.111384][T16967] overlayfs: failed to clone upperpath
[ 1061.577199][T16992] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1062.050372][T17008] netlink: 'syz.7.3391': attribute type 10 has an invalid length.
[ 1062.154379][T17008] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1063.327476][    C1] net_ratelimit: 2068 callbacks suppressed
[ 1063.327501][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1063.345256][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1063.358081][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1063.369969][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1063.381765][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1063.394595][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1063.407521][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1063.419376][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1063.432684][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1063.444551][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1067.417569][T17088] netlink: 'syz.4.3414': attribute type 1 has an invalid length.
[ 1067.620051][T17088] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1067.750783][T17092] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[ 1068.045410][T17088] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1068.319305][T17106] device syzkaller0 entered promiscuous mode
[ 1068.335036][    C1] net_ratelimit: 836 callbacks suppressed
[ 1068.335058][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1068.352801][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1068.367246][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1068.379194][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1068.391168][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1068.403153][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1068.417010][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1068.428998][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1068.442110][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1068.454048][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1069.365301][ T4433] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1073.347115][    C1] net_ratelimit: 3609 callbacks suppressed
[ 1073.347138][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1073.364939][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1073.376647][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1073.388930][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1073.401226][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1073.412919][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1073.424870][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1073.437167][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1073.448733][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1073.460294][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1077.923691][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3421'.
[ 1077.997756][T17182] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1078.353942][    C1] net_ratelimit: 5115 callbacks suppressed
[ 1078.353962][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1078.372873][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1078.384760][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1078.397165][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1078.410266][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1078.422203][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1078.581168][T17197] kvm: pic: level sensitive irq not supported
[ 1078.581654][T17197] kvm: pic: single mode not supported
[ 1078.588524][T17197] kvm: pic: level sensitive irq not supported
[ 1078.624796][T17197] kvm: pic: level sensitive irq not supported
[ 1078.638233][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1078.656457][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1078.670540][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1078.682517][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1078.704596][T17197] kvm: pic: single mode not supported
[ 1078.704620][T17197] kvm: pic: level sensitive irq not supported
[ 1078.715914][T17197] kvm: pic: single mode not supported
[ 1078.753701][T17197] kvm: pic: single mode not supported
[ 1078.759245][T17197] kvm: pic: level sensitive irq not supported
[ 1078.796085][T17197] kvm: pic: level sensitive irq not supported
[ 1078.813655][T17197] kvm: pic: single mode not supported
[ 1079.502934][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3448'.
[ 1080.258039][ T4842] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1081.204984][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3457'.
[ 1081.535349][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3460'.
[ 1082.356740][T17290] tipc: Failed to remove unknown binding: 66,0,0/0:4098502356/4098502358
[ 1082.413250][T17290] tipc: Failed to remove unknown binding: 66,0,0/0:4098502356/4098502357
[ 1082.462185][T17290] tipc: Failed to remove unknown binding: 66,0,0/0:4098502356/4098502358
[ 1082.554049][T17290] tipc: Failed to remove unknown binding: 66,0,0/0:4098502356/4098502357
[ 1084.063613][T17309] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1084.106478][    C1] net_ratelimit: 1511 callbacks suppressed
[ 1084.106497][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1084.125577][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1084.137458][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1084.149857][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1084.162906][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1084.174812][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1084.186932][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1084.198824][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1084.212370][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1084.262671][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1084.608286][T17321] device vlan3 entered promiscuous mode
[ 1084.693513][T17329] netlink: 'syz.9.3479': attribute type 1 has an invalid length.
[ 1084.799769][T17329] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1084.917896][T17336] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1084.975779][T17336] bond3: (slave bond4): Enslaving as a backup interface with a down link
[ 1085.016876][T17342] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[ 1085.365363][T11956] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1085.835998][T17357] futex_wake_op: syz.9.3484 tries to shift op by 144; fix this program
[ 1087.041539][T17369] device wlan1 entered promiscuous mode
[ 1089.115141][    C1] net_ratelimit: 1554 callbacks suppressed
[ 1089.115166][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1089.132980][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1089.144936][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1089.156801][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1089.170161][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1089.182029][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1089.194836][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1089.206699][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1089.218484][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1089.231362][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1090.506618][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3496'.
[ 1093.025067][T17450] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3507'.
[ 1093.070186][T17450] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3507'.
[ 1094.124630][    C1] net_ratelimit: 1660 callbacks suppressed
[ 1094.124654][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1094.142308][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1094.154014][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1094.166675][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1094.179464][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1094.191248][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1094.203458][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1094.216226][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1094.228001][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1094.239915][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1096.822660][ T4282] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[ 1099.330792][    C1] net_ratelimit: 836 callbacks suppressed
[ 1099.330849][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1099.348744][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1099.361261][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1099.373798][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1099.385562][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1099.397673][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1099.409978][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1099.421758][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1099.433534][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1099.445232][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1101.363693][ T4303] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1102.130859][T17591] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3538'.
[ 1102.371549][T17592] bond1: (slave bridge2): Enslaving as an active interface with an up link
[ 1102.398603][T17591] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3538'.
[ 1102.527213][T17591] device bond1 entered promiscuous mode
[ 1102.553262][T17591] device bridge2 entered promiscuous mode
[ 1102.587921][T17591] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1103.410346][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3546'.
[ 1104.411025][    C1] net_ratelimit: 1526 callbacks suppressed
[ 1104.411046][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1104.429343][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1104.441588][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1104.453182][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1104.465074][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1104.477290][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1104.488879][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1104.500445][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1104.512037][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1104.524816][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1108.152584][   T27] audit: type=1326 audit(1786181302.618:132): auid=4294967295 uid=1982771711 gid=0 ses=4294967295 subj=unconfined pid=17673 comm="syz.7.3561" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f935bd9e0d9 code=0x0
[ 1109.429087][    C1] net_ratelimit: 402 callbacks suppressed
[ 1109.429109][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1109.446737][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1109.459328][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1109.471043][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1109.482832][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1109.495560][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1109.509138][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1109.520919][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1109.533136][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1109.774861][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1110.517217][T17711] netlink: 'syz.9.3568': attribute type 1 has an invalid length.
[ 1112.254793][ T4871] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1112.979277][ T4377] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1113.347632][ T4377] usb 4-1: Using ep0 maxpacket: 8
[ 1113.525051][ T4377] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1113.543476][ T4377] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1113.593878][ T4377] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1113.636676][ T4377] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1113.703495][ T4377] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1113.712637][ T4377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1113.815585][ T4377] hub 4-1:1.0: bad descriptor, ignoring hub
[ 1113.821604][ T4377] hub: probe of 4-1:1.0 failed with error -5
[ 1113.858554][ T4377] cdc_wdm 4-1:1.0: skipping garbage
[ 1113.863922][ T4377] cdc_wdm 4-1:1.0: skipping garbage
[ 1113.897728][ T4377] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1113.923546][ T4377] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1114.378548][T17758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1115.034942][    C1] net_ratelimit: 1652 callbacks suppressed
[ 1115.034965][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1115.052732][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1115.065868][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1115.077617][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1115.090159][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1115.101922][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1115.113683][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1115.126486][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1115.139201][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1115.150986][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1115.214259][T17758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1115.214798][T17762] binder: BINDER_SET_CONTEXT_MGR already set
[ 1115.255983][T17762] binder: 17761:17762 ioctl 4018620d 200000000040 returned -16
[ 1115.323717][ T6650] usb 4-1: Failed to suspend device, error -71
[ 1115.341903][ T4377] usb 4-1: USB disconnect, device number 7
[ 1116.491897][T17793] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1117.444570][T17808] netlink: 'syz.4.3592': attribute type 1 has an invalid length.
[ 1117.694171][T17808] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1117.926943][T17814] bond4: (slave ip6gretap2): making interface the new active one
[ 1119.097099][T17814] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link
[ 1119.144933][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[ 1119.165393][ T4303] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1119.189372][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3593'.
[ 1120.043820][    C1] net_ratelimit: 1298 callbacks suppressed
[ 1120.043842][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1120.061524][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1120.074084][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1120.086609][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1120.098291][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1120.110009][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1120.121668][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1120.134698][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1120.146442][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1120.158963][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1120.400820][T17845] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3603'.
[ 1120.798576][T17855] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1121.276013][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1121.282464][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1121.705672][T17883] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1123.185609][T17905] device vlan6 entered promiscuous mode
[ 1123.221745][T17905] device vlan5 entered promiscuous mode
[ 1123.499788][T17911] fuse: Bad value for 'fd'
[ 1123.528129][T17912] overlayfs: failed to clone upperpath
[ 1125.053551][    C1] net_ratelimit: 1422 callbacks suppressed
[ 1125.053570][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1125.072265][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1125.084120][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1125.095881][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1125.107665][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1125.120720][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1125.132390][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1125.144895][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1125.156606][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1125.411913][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1130.095273][    C1] net_ratelimit: 521 callbacks suppressed
[ 1130.095297][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1130.113075][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1130.125385][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1130.138207][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1130.150065][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1130.161899][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1130.173815][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1130.187227][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1130.199017][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1130.211800][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1130.374215][T17957] futex_wake_op: syz.9.3648 tries to shift op by 144; fix this program
[ 1130.447608][T17959] netlink: 'syz.7.3639': attribute type 1 has an invalid length.
[ 1130.500735][T17959] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1130.715849][T17959] bond2: (slave ip6gretap1): making interface the new active one
[ 1130.781966][T17959] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1130.830694][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[ 1133.195006][T17989] bridge0: port 5(vxlan0) entered blocking state
[ 1133.239337][T17989] bridge0: port 5(vxlan0) entered disabled state
[ 1133.272195][T17989] device vxlan0 entered promiscuous mode
[ 1133.379715][ T4845] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1133.788126][T18005] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6407] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[18005]
[ 1133.857393][ T4322] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1134.749281][ T4322] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00
[ 1134.759472][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1135.102473][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3652'.
[ 1135.151793][    C1] net_ratelimit: 1506 callbacks suppressed
[ 1135.151815][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1135.169443][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1135.182031][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1135.193851][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1135.206484][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1135.219235][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1135.231933][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1135.243698][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1135.255847][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1135.268547][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1136.636112][ T4322] r8152-cfgselector 4-1: reset high-speed USB device number 8 using dummy_hcd
[ 1136.983494][ T4322] r8152-cfgselector 4-1: device descriptor read/64, error -32
[ 1137.446295][ T4322] r8152-cfgselector 4-1: reset high-speed USB device number 8 using dummy_hcd
[ 1137.793551][    C1] bridge0: topology change detected, propagating
[ 1137.804455][    C1] bridge0: port 4(veth1) entered blocking state
[ 1138.601750][ T4322] r8152-cfgselector 4-1: device descriptor read/64, error -32
[ 1139.598149][ T7155] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[ 1139.793790][ T7155] usb 8-1: Using ep0 maxpacket: 16
[ 1139.805518][ T7155] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1139.828943][ T7155] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1139.840119][ T7155] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[ 1139.851298][ T7155] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1139.859745][ T7155] usb 8-1: SerialNumber: syz
[ 1139.891320][ T7155] usb 8-1: 0:2 : does not exist
[ 1140.075192][ T4322] r8152 4-1:1.0: USB reset failed, errno=-19
[ 1140.119479][ T4322] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1140.153655][    C1] net_ratelimit: 1438 callbacks suppressed
[ 1140.153674][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1140.171315][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1140.184279][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1140.196028][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1140.209247][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1140.221161][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1140.233962][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1140.245709][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1140.258328][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1140.270088][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1140.285692][ T4322] r8152-cfgselector 4-1: USB disconnect, device number 8
[ 1140.320189][T18051] netlink: 'syz.1.3665': attribute type 11 has an invalid length.
[ 1140.329215][T18051] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3665'.
[ 1140.734829][ T7155] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[ 1140.844597][ T7155] usb 8-1: USB disconnect, device number 31
[ 1140.876896][T17996] udevd[17996]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1141.003333][T18074] input: syz0 as /devices/virtual/input/input26
[ 1144.041038][ T4322] libceph: connect (1)127.0.0.1:8080 error -101
[ 1144.047986][ T4322] libceph: mon0 (1)127.0.0.1:8080 connect error
[ 1144.274227][T11954] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1144.392147][ T4322] libceph: connect (1)127.0.0.1:8080 error -101
[ 1144.419781][ T4322] libceph: mon0 (1)127.0.0.1:8080 connect error
[ 1144.658407][ T7155] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1144.788013][T18088] ceph: No mds server is up or the cluster is laggy
[ 1144.863587][ T7155] usb 4-1: Using ep0 maxpacket: 32
[ 1144.872187][ T7155] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1144.901936][ T7155] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1144.931410][ T7155] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1144.951601][ T7155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1144.994054][ T7155] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1145.022222][ T7155] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1145.066200][ T7155] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1145.089484][ T7155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1145.106971][ T7155] usb 4-1: config 0 descriptor??
[ 1145.183053][    C1] net_ratelimit: 1344 callbacks suppressed
[ 1145.183075][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1145.200851][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1145.213655][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1145.225410][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1145.238308][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1145.250052][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1145.262830][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1145.274651][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1145.287310][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1145.300906][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1145.325518][ T7155] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1145.363864][ T7155] usb 4-1: USB disconnect, device number 9
[ 1145.382329][ T7155] usblp0: removed
[ 1145.993789][ T7155] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1146.237904][ T7155] usb 4-1: Using ep0 maxpacket: 32
[ 1146.265577][ T7155] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1146.311812][ T7155] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1146.425536][ T7155] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1146.445235][ T7155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1146.465971][ T7155] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1146.493606][ T7155] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1146.543525][ T7155] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1146.573312][ T7155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1146.642637][ T7155] usb 4-1: config 0 descriptor??
[ 1146.867879][ T7155] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1147.285853][    C0] usblp0: nonzero read bulk status received: -71
[ 1147.301349][T18102] usblp0: error -71 reading from printer
[ 1147.390640][   T26] usb 4-1: USB disconnect, device number 10
[ 1147.673121][T18101] usblp0: removed
[ 1150.050500][T18177] netlink: 'syz.3.3703': attribute type 1 has an invalid length.
[ 1150.199683][    C1] net_ratelimit: 1282 callbacks suppressed
[ 1150.199713][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1150.217475][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1150.230052][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1150.241748][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1150.248567][T18177] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1150.256971][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1150.271459][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1150.284194][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1150.296029][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1150.308686][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1150.320418][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1150.346310][T18179] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[ 1150.518412][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1150.531794][ T4275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1150.542020][ T4275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1150.550122][ T4275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1150.560479][ T4275] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1150.565967][T18180] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link
[ 1150.569001][ T4275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1150.996664][ T4275] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1151.013886][ T4275] Bluetooth: hci1: Injecting HCI hardware error event
[ 1151.026995][ T4282] Bluetooth: hci1: hardware error 0x00
[ 1151.199463][T18189] netlink: 'syz.1.3706': attribute type 1 has an invalid length.
[ 1151.334594][ T4375] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1151.795304][T18193] device bond1 entered promiscuous mode
[ 1151.825382][T18193] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1152.111748][T18195] device bridge1 entered promiscuous mode
[ 1152.124424][T18195] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[ 1152.647197][ T4275] Bluetooth: hci5: command 0x0409 tx timeout
[ 1152.779943][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[ 1152.960507][T18197] device bridge2 entered promiscuous mode
[ 1152.974868][T18197] bond1: (slave bridge2): Enslaving as a backup interface with a down link
[ 1153.187711][T18213] ffs_data_put(): freeing
[ 1153.222407][ T4282] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1153.834725][T18227] fuse: Bad value for 'fd'
[ 1153.972398][T18182] chnl_net:caif_netlink_parms(): no params data found
[ 1154.300839][T18238] overlayfs: failed to clone upperpath
[ 1154.380556][T18182] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1154.422631][T18182] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1154.461396][T18182] device bridge_slave_0 entered promiscuous mode
[ 1154.486004][T18182] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1154.517683][T18182] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1154.540908][T18182] device bridge_slave_1 entered promiscuous mode
[ 1154.645990][T18182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1154.732353][T18182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1154.763617][ T4282] Bluetooth: hci5: command 0x041b tx timeout
[ 1154.901811][T18182] team0: Port device team_slave_0 added
[ 1154.949850][T18182] team0: Port device team_slave_1 added
[ 1155.057553][T18182] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1155.064912][T18182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1155.203699][    C1] net_ratelimit: 2051 callbacks suppressed
[ 1155.203731][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1155.222249][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1155.233995][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1155.246664][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1155.258414][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1155.263992][T18182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1155.273342][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1155.291920][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1155.304573][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1155.319611][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1155.332645][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1155.486449][T18182] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1155.515340][T18182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1156.581846][T18182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1156.798099][T18182] device hsr_slave_0 entered promiscuous mode
[ 1156.808403][ T4288] Bluetooth: hci5: command 0x040f tx timeout
[ 1156.837927][T18182] device hsr_slave_1 entered promiscuous mode
[ 1156.934756][T18182] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1156.942413][T18182] Cannot create hsr debugfs directory
[ 1157.391157][T18264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3726'.
[ 1158.962987][ T4288] Bluetooth: hci5: command 0x0419 tx timeout
[ 1159.871337][T18294] overlayfs: failed to clone lowerpath
[ 1160.214316][    C1] net_ratelimit: 863 callbacks suppressed
[ 1160.214337][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1160.231856][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1160.253063][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1160.264976][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1160.277617][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1160.289342][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1160.302006][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1160.313852][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1160.326418][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1160.338220][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1161.975528][T18329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3739'.
[ 1164.182860][T18373] netlink: 'syz.1.3746': attribute type 10 has an invalid length.
[ 1164.386048][T18373] bond0: (slave wlan1): Enslaving as an active interface with a down link
[ 1165.497063][    C1] net_ratelimit: 1142 callbacks suppressed
[ 1165.497084][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1165.514683][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1165.527357][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1165.539119][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1165.556991][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1165.568752][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1165.581445][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1165.593206][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1165.606878][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1165.618625][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1167.104715][ T4874] wlan1: Trigger new scan to find an IBSS to join
[ 1167.131294][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3752'.
[ 1167.681883][T18408] bond0: (slave syz_tun): Releasing backup interface
[ 1168.127891][T18182] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1168.188655][T18182] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1168.272234][T18182] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1168.357589][T18182] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1168.600082][T10558] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1168.960364][T18435] No such timeout policy "syz1"
[ 1169.775852][T18182] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1169.806570][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1169.844385][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1169.901887][T18182] 8021q: adding VLAN 0 to HW filter on device team0
[ 1169.920381][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1169.947449][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1169.969334][T10558] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1169.976584][T10558] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1170.063672][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1170.078922][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1170.101146][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1170.130733][T10558] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1170.137986][T10558] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1170.187558][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1170.248854][T18452] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3761'.
[ 1170.286298][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1170.298611][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1170.356116][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1170.439540][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1170.456177][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1170.476833][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1170.511227][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1170.523111][    C1] net_ratelimit: 1108 callbacks suppressed
[ 1170.523132][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1170.540824][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1170.554259][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1170.565999][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1170.578944][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1170.590734][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1170.604133][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1170.615861][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1170.640925][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1170.650314][T18455] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) !
[ 1170.651208][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1170.670040][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1170.714287][T18457] device syzkaller0 entered promiscuous mode
[ 1170.737441][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1170.750864][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1170.771452][T18182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1172.225264][T11956] wlan1: Trigger new scan to find an IBSS to join
[ 1172.698791][T18485] netlink: 'syz.7.3768': attribute type 1 has an invalid length.
[ 1173.946085][T18485] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1174.031820][T18490] bond3: (slave geneve2): making interface the new active one
[ 1174.099461][T18490] bond3: (slave geneve2): Enslaving as an active interface with an up link
[ 1174.142592][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[ 1174.868995][ T4857] wlan1: Creating new IBSS network, BSSID ca:fa:c0:c8:69:5e
[ 1174.897268][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1174.933534][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1174.948730][T18182] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1175.055359][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1175.081745][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1175.132743][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1175.148098][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1175.170654][T18182] device veth0_vlan entered promiscuous mode
[ 1175.392166][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1175.400936][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1175.448925][T18182] device veth1_vlan entered promiscuous mode
[ 1175.709582][    C1] net_ratelimit: 566 callbacks suppressed
[ 1175.709606][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1175.727203][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1175.740882][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1175.752635][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1175.764598][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1175.777697][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1175.789389][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1175.802744][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1175.814578][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1175.826264][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1176.060663][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1176.090879][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1176.135544][T18182] device veth0_macvtap entered promiscuous mode
[ 1176.329876][T18531] batman_adv: batadv0: Interface deactivated: dummy0
[ 1176.337336][T18531] batman_adv: batadv0: Removing interface: dummy0
[ 1176.344873][T18531] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1176.352394][T18531] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1176.388700][T18531] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1176.417928][T18531] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1178.096282][T18182] device veth1_macvtap entered promiscuous mode
[ 1178.128747][T11960] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1178.154506][T11960] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1178.181868][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3782'.
[ 1178.196024][T18552] Process accounting resumed
[ 1178.506536][T18182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1178.517318][T18182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.537890][T18182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1178.612464][T18182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.771410][T18182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1178.901903][T18182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.055646][T18182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1179.183986][T18182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.285138][T18182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1179.313567][T18182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.333204][T18182] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1179.369842][T18558] netlink: 'syz.1.3785': attribute type 1 has an invalid length.
[ 1179.426198][T10558] bond0: (slave wlan1): link status definitely up, 0 Mbps full duplex
[ 1179.472416][T11961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1179.519069][T11961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1179.538316][T18182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1179.558713][T18182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.588558][T18182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1179.608540][T18182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.696665][T18182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1179.717625][T18182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.736756][T18182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1179.758016][T18182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.775227][T18182] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1179.804490][T18182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.832779][T18182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.861450][T18182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.893000][T18182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1180.612251][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1180.654583][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1180.714480][    C1] net_ratelimit: 681 callbacks suppressed
[ 1180.714498][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1180.733778][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1180.744465][T18571] device geneve2 entered promiscuous mode
[ 1180.746309][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1180.762505][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1180.775089][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1180.786957][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1180.819216][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1180.832631][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1180.844467][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1180.856173][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1181.049572][ T4874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1181.068030][ T4874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1181.134741][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1181.184875][T10558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1181.193771][T10558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1181.227220][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1181.262566][T18591] fuse: Unknown parameter 'group_i'
[ 1181.496640][   T27] audit: type=1800 audit(1786181375.966:133): pid=18596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3699" name="addr_trtype" dev="configfs" ino=90186 res=0 errno=0
[ 1181.559371][T18596] nvmet_rdma: enabling port 1 (127.0.0.1:44)
[ 1181.577638][   T27] audit: type=1800 audit(1786181375.986:134): pid=18596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3699" name="addr_adrfam" dev="configfs" ino=90187 res=0 errno=0
[ 1181.677535][   T27] audit: type=1800 audit(1786181375.996:135): pid=18596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3699" name="addr_traddr" dev="configfs" ino=90188 res=0 errno=0
[ 1181.912378][   T27] audit: type=1800 audit(1786181375.996:136): pid=18596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3699" name="addr_trsvcid" dev="configfs" ino=90189 res=0 errno=0
[ 1182.841404][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.847902][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1183.292329][ T4874] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1186.157115][    C1] net_ratelimit: 1524 callbacks suppressed
[ 1186.157136][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1186.175537][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1186.187304][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1186.199960][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1186.211690][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1186.223521][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1186.236638][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1186.248327][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1186.275647][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1186.288615][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1188.813501][T18686] netlink: 'syz.3.3808': attribute type 4 has an invalid length.
[ 1188.821340][T18686] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3808'.
[ 1189.023875][T18691] lo speed is unknown, defaulting to 1000
[ 1189.466342][T18693] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3805'.
[ 1189.521178][T18691] lo speed is unknown, defaulting to 1000
[ 1189.674863][T18691] lo speed is unknown, defaulting to 1000
[ 1189.755626][T18699] CIFS: Attempting to mount \\::1\share
[ 1189.797595][T18699] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1189.855148][T18691] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1189.917220][T18699] CIFS: VFS: cifs_mount failed w/return code = -101
[ 1189.994121][T18701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1190.113564][T18691] lo speed is unknown, defaulting to 1000
[ 1190.163372][T18691] lo speed is unknown, defaulting to 1000
[ 1190.176190][T18691] lo speed is unknown, defaulting to 1000
[ 1190.183075][T18691] lo speed is unknown, defaulting to 1000
[ 1190.211592][T18691] lo speed is unknown, defaulting to 1000
[ 1190.254653][T18691] lo speed is unknown, defaulting to 1000
[ 1190.261538][T18691] lo speed is unknown, defaulting to 1000
[ 1190.291947][T18691] lo speed is unknown, defaulting to 1000
[ 1190.474231][T18710] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[ 1190.764907][T18710] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[ 1190.875876][T18710] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[ 1191.318775][    C1] net_ratelimit: 1244 callbacks suppressed
[ 1191.318798][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1191.336547][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1191.349128][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1191.361784][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1191.373584][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1191.386163][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1191.397878][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1191.409566][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1191.422537][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1191.434287][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1191.822705][T18710] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[ 1191.899442][T18710] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[ 1191.996620][T18710] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[ 1192.019602][   T26] tipc: Node number set to 94
[ 1192.105439][T18720] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1192.260434][T18739] fuse: Bad value for 'fd'
[ 1192.330246][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1192.343654][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1192.406532][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1192.416724][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1192.426846][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1192.434318][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1194.623590][ T4288] Bluetooth: hci0: command 0x0409 tx timeout
[ 1194.694804][T18740] lo speed is unknown, defaulting to 1000
[ 1194.712187][T18761] device bond_slave_0 entered promiscuous mode
[ 1194.719407][T18761] device bond_slave_1 entered promiscuous mode
[ 1194.725840][T18761] device wlan1 entered promiscuous mode
[ 1194.967036][T18773] futex_wake_op: syz.4.3825 tries to shift op by 144; fix this program
[ 1195.100227][T18761] device vlan7 entered promiscuous mode
[ 1195.452654][T18761] device bond0 entered promiscuous mode
[ 1196.624475][    C1] net_ratelimit: 692 callbacks suppressed
[ 1196.624498][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1196.642037][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1196.654630][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1196.666342][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1196.678949][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1196.691676][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1196.703474][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1196.716026][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1196.727771][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1196.739558][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1196.765809][ T4288] Bluetooth: hci0: command 0x041b tx timeout
[ 1198.074526][T18793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3830'.
[ 1198.814663][T18740] chnl_net:caif_netlink_parms(): no params data found
[ 1198.842479][ T4288] Bluetooth: hci0: command 0x040f tx timeout
[ 1199.196004][T18740] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1199.241651][T18740] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1199.303572][T18740] device bridge_slave_0 entered promiscuous mode
[ 1199.349309][T18740] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1199.388329][T18740] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1199.416765][T18740] device bridge_slave_1 entered promiscuous mode
[ 1199.557877][T18740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1199.760769][T18740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1200.477763][T18740] team0: Port device team_slave_0 added
[ 1200.598995][T18740] team0: Port device team_slave_1 added
[ 1200.903558][ T4288] Bluetooth: hci0: command 0x0419 tx timeout
[ 1200.941984][T18740] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1200.992754][T18740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1201.134673][T18740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1201.185648][T18740] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1201.192670][T18740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1201.224316][ T4845] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1201.343460][T18740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1201.642525][    C1] net_ratelimit: 2508 callbacks suppressed
[ 1201.642546][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1201.661186][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1201.672947][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1201.684753][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1201.697486][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1201.709166][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1201.721441][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1201.733917][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1201.745676][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1201.757905][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1201.890890][T11958] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1201.999536][T18740] device hsr_slave_0 entered promiscuous mode
[ 1202.061943][T18740] device hsr_slave_1 entered promiscuous mode
[ 1202.084254][T18740] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1202.725374][T18740] Cannot create hsr debugfs directory
[ 1204.434611][   T27] audit: type=1326 audit(1786181398.886:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18854 comm="syz.4.3844" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b4d79e0d9 code=0x0
[ 1204.653867][T18740] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1204.876246][T18855] device syzkaller0 entered promiscuous mode
[ 1205.024921][T18859] tipc: Started in network mode
[ 1205.090984][T18859] tipc: Node identity 52c455792cac, cluster identity 4711
[ 1205.309457][T18859] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1205.393771][ T4845] wlan1: Trigger new scan to find an IBSS to join
[ 1205.548505][T11958] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1205.704220][T18853] tipc: Resetting bearer <eth:syzkaller0>
[ 1206.565646][T18853] tipc: Disabling bearer <eth:syzkaller0>
[ 1206.653525][    T7] tipc: Node number set to 2120766841
[ 1206.775373][    C1] net_ratelimit: 884 callbacks suppressed
[ 1206.775393][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1206.793979][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1206.805729][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1206.818813][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1206.830594][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1206.842409][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1206.855015][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1206.866868][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1206.879734][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1206.892467][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1209.892855][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3854'.
[ 1210.757455][T11958] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1210.985793][T18740] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1211.561461][T18962] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3857'.
[ 1211.793255][    C1] net_ratelimit: 1297 callbacks suppressed
[ 1211.793276][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1211.811048][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1211.822837][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1211.835440][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1211.847243][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1211.859881][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1211.872562][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1211.880349][T18966] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3857'.
[ 1211.884900][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1211.905733][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1211.917520][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1211.965679][T18966] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3857'.
[ 1212.164647][T18889] wlan1: Trigger new scan to find an IBSS to join
[ 1213.255984][T18977] netlink: 'syz.2.3859': attribute type 4 has an invalid length.
[ 1213.263863][T18977] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3859'.
[ 1213.734771][T18983] CIFS: Attempting to mount \\127.0.0.1\share
[ 1213.854527][T18992] netlink: 'syz.1.3863': attribute type 1 has an invalid length.
[ 1214.044811][T18983] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1214.091458][T18983] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1214.139169][T18992] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1214.305750][T11958] bond0: (slave netdevsim0): Releasing backup interface
[ 1214.360107][T11958] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1214.536672][T18740] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1214.591469][T18994] device vlan7 entered promiscuous mode
[ 1214.608641][T18994] device bond2 entered promiscuous mode
[ 1214.705849][T18997] bond2: (slave bridge3): making interface the new active one
[ 1214.850400][T18997] device bridge3 entered promiscuous mode
[ 1215.004238][T18997] bond2: (slave bridge3): Enslaving as an active interface with an up link
[ 1215.059093][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[ 1215.073724][T18889] wlan1: Creating new IBSS network, BSSID ca:a6:63:e1:f9:a6
[ 1215.093049][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan7: link becomes ready
[ 1215.290047][T18889] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1215.320566][T19011] siw: device registration error -23
[ 1217.405707][    C1] net_ratelimit: 979 callbacks suppressed
[ 1217.405729][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1217.424127][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1217.436051][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1217.448567][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1217.460263][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1217.472081][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1217.484731][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1217.496462][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1217.509061][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1217.521615][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1217.584967][T19032] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3870'.
[ 1217.670632][T19036] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1218.095693][T19047] mac80211_hwsim hwsim6 wlan99: renamed from wlan0
[ 1220.380888][T19169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3876'.
[ 1220.392516][T19169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3876'.
[ 1221.436252][T19173] fuse: Bad value for 'fd'
[ 1222.541110][    C1] net_ratelimit: 711 callbacks suppressed
[ 1222.541137][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1222.558796][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1222.571709][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1222.583761][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1222.595798][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1222.608670][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1222.620503][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1222.633269][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1222.645941][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1222.657663][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1222.683809][T19191] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3881'.
[ 1223.299694][T18740] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1224.822685][T19227] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1224.856633][T19227] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[ 1224.987439][T19227] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[ 1225.084847][T19227] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[ 1225.108680][T19227] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[ 1225.215850][T19227] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[ 1225.261169][T19227] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[ 1225.880627][T19242] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1226.959694][T19257] netlink: 'syz.1.3893': attribute type 1 has an invalid length.
[ 1226.979318][T19252] netlink: 'syz.1.3893': attribute type 1 has an invalid length.
[ 1227.267727][T19266] overlayfs: failed to clone lowerpath
[ 1227.604097][    C1] net_ratelimit: 1875 callbacks suppressed
[ 1227.604121][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1227.622022][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1227.634901][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1227.647740][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1227.659603][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1227.672287][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1227.684050][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1227.695789][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1227.708485][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1227.720262][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1229.043651][T19294] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[ 1229.056034][T19294] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1229.496201][T18740] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1229.667223][T18740] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1230.011053][T18740] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1230.035000][T18740] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1230.125405][T19300] overlayfs: failed to clone upperpath
[ 1233.900611][T18915] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1233.943817][T18740] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1233.961971][T18911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1233.982493][T18911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1234.127838][T18740] 8021q: adding VLAN 0 to HW filter on device team0
[ 1234.157340][    C1] net_ratelimit: 120 callbacks suppressed
[ 1234.157362][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1234.175688][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1234.187612][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1234.200182][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1234.212086][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1234.223874][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1234.236468][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1234.248210][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1234.249990][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1234.275386][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1234.288442][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1234.313958][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1234.343972][T18915] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1234.351215][T18915] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1234.566260][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1234.619849][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1234.688789][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1234.698238][T18915] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1234.705644][T18915] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1234.734011][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1234.779072][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1234.794815][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1234.839234][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1234.862858][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1234.923196][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1234.954587][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1234.973739][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1235.002602][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1235.035425][T18740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1235.065038][T18740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1235.103962][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1235.121716][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1235.978351][T19343] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4280] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[19343]
[ 1236.964035][T11958] bond2: (slave ip6gretap1): Releasing active interface
[ 1237.067886][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1237.081358][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1237.110361][T18740] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1237.356951][T19363] overlayfs: failed to clone lowerpath
[ 1237.736426][T19370] CIFS: Attempting to mount \\127.0.0.1\share
[ 1239.117335][T19370] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1239.145556][T19370] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1239.229872][    C1] net_ratelimit: 1476 callbacks suppressed
[ 1239.229892][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1239.248007][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1239.261127][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1239.274118][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1239.286077][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1239.298886][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1239.310895][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1239.322637][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1239.335771][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1239.347572][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1239.714353][T18909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1239.734298][T18909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1240.135913][T18927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1240.179830][T18927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1240.293319][T18740] device veth0_vlan entered promiscuous mode
[ 1240.355121][T18927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1240.450541][T18927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1240.510846][T18740] device veth1_vlan entered promiscuous mode
[ 1240.671093][T18928] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1240.702719][T18928] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1240.725021][T18928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1240.748448][T18928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1241.296652][T18740] device veth0_macvtap entered promiscuous mode
[ 1241.369393][T18740] device veth1_macvtap entered promiscuous mode
[ 1241.456405][T18740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.473473][T18740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.493546][T18740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.578993][T18740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.613069][T18740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.647726][T18740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.715604][T18740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.758141][T18740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.786836][T18740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1242.007918][T18740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1242.043024][T18740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1242.713530][T18740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1242.775608][T18740] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1242.851892][T18740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1242.933009][T18740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1242.961180][T18740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1242.976796][T18740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1243.048099][T18740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1243.099694][T18740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1243.116054][T18740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1243.170610][T18740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1243.189199][T18740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1243.206239][T18740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1243.248469][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1243.273251][T18740] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1243.313600][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1243.324873][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1243.333061][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1243.341219][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1243.951785][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1244.036311][T18927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1244.121268][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1244.127735][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1244.160822][T18927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1244.194168][T18927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1244.237138][T18927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1244.251890][    C1] net_ratelimit: 905 callbacks suppressed
[ 1244.251924][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1244.269518][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1244.280941][T18740] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1244.284323][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1244.301419][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1244.313223][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1244.318884][T18740] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1244.327951][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1244.345195][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1244.347252][T18740] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1244.359805][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1244.378188][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1244.387806][T19455] futex_wake_op: syz.3.3930 tries to shift op by 144; fix this program
[ 1244.390929][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1244.526955][T18740] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1246.294216][ T4288] Bluetooth: hci3: command 0x0409 tx timeout
[ 1247.833840][T19443] lo speed is unknown, defaulting to 1000
[ 1249.065056][T18889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1249.072970][T18889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1249.100764][ T4288] Bluetooth: hci3: command 0x041b tx timeout
[ 1249.121556][T18928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1249.129773][T18926] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1249.129789][T18927] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1249.193657][T18928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1249.201337][T18926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1249.259559][T18889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1249.274667][    C1] net_ratelimit: 534 callbacks suppressed
[ 1249.274690][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1249.292296][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1249.305729][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1249.317568][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1249.329387][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1249.342217][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1249.354044][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1249.366843][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1249.379572][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1249.391452][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1251.135706][ T4288] Bluetooth: hci3: command 0x040f tx timeout
[ 1251.697251][T19443] chnl_net:caif_netlink_parms(): no params data found
[ 1252.063255][T19518] fuse: Bad value for 'fd'
[ 1252.809903][T19443] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1252.817744][T19443] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1252.847521][T19443] device bridge_slave_0 entered promiscuous mode
[ 1252.961934][T19443] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1252.969985][T19443] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1252.979199][T19443] device bridge_slave_1 entered promiscuous mode
[ 1253.214470][ T4288] Bluetooth: hci3: command 0x0419 tx timeout
[ 1253.482012][T19443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1253.934755][T19443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1253.953622][T19536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3944'.
[ 1254.690850][    C1] net_ratelimit: 784 callbacks suppressed
[ 1254.690873][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1254.708661][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1254.720407][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1254.732992][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1254.744742][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1254.757371][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1254.769904][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1254.781647][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1254.794285][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1254.806015][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1254.895351][T19443] team0: Port device team_slave_0 added
[ 1255.044070][T19443] team0: Port device team_slave_1 added
[ 1255.104149][T19443] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1255.121281][T19443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1255.171949][T19443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1255.194134][T19443] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1255.201176][T19443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1255.249570][T19443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1256.703066][T19566] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3948'.
[ 1257.277769][T19443] device hsr_slave_0 entered promiscuous mode
[ 1257.343745][T19443] device hsr_slave_1 entered promiscuous mode
[ 1257.416267][T19443] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1257.443997][T19443] Cannot create hsr debugfs directory
[ 1257.465166][T19580] netlink: 'syz.2.3954': attribute type 1 has an invalid length.
[ 1257.552459][T19580] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1257.649331][T19584] device bridge1 entered promiscuous mode
[ 1257.663632][T19584] bond1: (slave bridge1): making interface the new active one
[ 1257.674383][T19584] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 1257.736518][T19589] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[ 1257.848725][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[ 1259.770218][    C1] net_ratelimit: 727 callbacks suppressed
[ 1259.770242][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1259.787853][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1259.799723][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1259.812314][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1259.824179][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1259.836795][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1259.849395][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1259.861120][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1259.873791][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1259.885495][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1260.406714][T19622] Bluetooth: MGMT ver 1.22
[ 1262.358157][T19646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3968'.
[ 1263.640279][T19657] lo speed is unknown, defaulting to 1000
[ 1264.925183][    C1] net_ratelimit: 876 callbacks suppressed
[ 1264.925208][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1264.942980][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1264.955653][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1264.967468][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1264.979187][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1264.991776][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1265.003512][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1265.016159][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1265.028819][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1265.040578][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1265.271781][ T4303] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1267.906571][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3983'.
[ 1267.919041][T19708] device erspan1 entered promiscuous mode
[ 1269.933488][    C1] net_ratelimit: 886 callbacks suppressed
[ 1269.933509][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1269.951982][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1269.965747][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1269.977893][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1269.989515][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1270.002174][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1270.013983][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1270.026361][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1270.038933][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1270.050622][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1271.293228][T19743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1273.673267][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3995'.
[ 1274.811076][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3995'.
[ 1274.836511][T19778] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1274.845499][T19778] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1274.854314][T19778] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1274.863051][T19778] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1274.945253][    C1] net_ratelimit: 501 callbacks suppressed
[ 1274.945277][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1274.963711][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1274.976115][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1274.989021][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1275.000737][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1275.012302][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1275.024637][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1275.036163][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1275.048924][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1275.064028][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1275.221883][T19784] netlink: 'syz.2.3995': attribute type 10 has an invalid length.
[ 1275.300841][T19784] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1276.887382][ T4275] Bluetooth: hci5: command 0x0406 tx timeout
[ 1278.127959][T19819] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1278.491990][ T4288] Bluetooth: hci4: command 0x201b tx timeout
[ 1280.183632][T19822] netlink: 'syz.1.4005': attribute type 10 has an invalid length.
[ 1280.195313][    C1] net_ratelimit: 998 callbacks suppressed
[ 1280.195328][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1280.213202][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1280.224788][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1280.236871][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1280.248371][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1280.259891][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1280.272086][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1280.283746][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1280.296103][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1280.309129][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1281.514997][T19835] No such timeout policy "syz1"
[ 1282.483972][ T4865] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1282.533289][ T4874] bond0: (slave wlan1): link status definitely down, disabling slave
[ 1285.204060][    C1] net_ratelimit: 694 callbacks suppressed
[ 1285.204077][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1285.222252][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1285.233910][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1285.246608][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1285.258252][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1285.270452][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[ 1285.282915][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1285.294509][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1285.306777][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[ 1285.319004][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1289.619992][T19914] ==================================================================
[ 1289.628140][T19914] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240
[ 1289.637120][T19914] Read of size 2 at addr ffff888023bb2dfb by task syz.3.4026/19914
[ 1289.645143][T19914] 
[ 1289.647532][T19914] CPU: 0 PID: 19914 Comm: syz.3.4026 Not tainted syzkaller #0
[ 1289.655029][T19914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1289.665310][T19914] Call Trace:
[ 1289.668640][T19914]  <TASK>
[ 1289.671606][T19914]  dump_stack_lvl+0x188/0x24e
[ 1289.676351][T19914]  ? __lock_acquire+0x7c40/0x7c40
[ 1289.681454][T19914]  ? show_regs_print_info+0x12/0x12
[ 1289.686682][T19914]  ? load_image+0x410/0x410
[ 1289.691473][T19914]  ? _raw_spin_lock_irqsave+0xbc/0x100
[ 1289.697000][T19914]  ? __virt_addr_valid+0x188/0x540
[ 1289.702162][T19914]  ? __virt_addr_valid+0x467/0x540
[ 1289.707293][T19914]  ? ieee80211_monitor_select_queue+0x23a/0x240
[ 1289.713615][T19914]  print_report+0xa8/0x210
[ 1289.718088][T19914]  kasan_report+0x10b/0x140
[ 1289.722657][T19914]  ? ieee80211_monitor_select_queue+0x23a/0x240
[ 1289.728951][T19914]  ieee80211_monitor_select_queue+0x23a/0x240
[ 1289.735070][T19914]  ? ieee80211_activate_links_work+0x60/0x60
[ 1289.741089][T19914]  netdev_core_pick_tx+0x12c/0x360
[ 1289.746290][T19914]  __dev_queue_xmit+0xb45/0x3810
[ 1289.751255][T19914]  ? __dev_queue_xmit+0x281/0x3810
[ 1289.756385][T19914]  ? netdev_core_pick_tx+0x360/0x360
[ 1289.761688][T19914]  ? virtio_net_hdr_to_skb+0x787/0x12a0
[ 1289.767254][T19914]  ? packet_extra_vlan_len_allowed+0x200/0x200
[ 1289.773440][T19914]  packet_sendmsg+0x3b95/0x4de0
[ 1289.778311][T19914]  ? aa_sk_perm+0x950/0x950
[ 1289.782886][T19914]  ? stack_trace_save+0xf0/0xf0
[ 1289.787885][T19914]  ? __might_sleep+0xd0/0xd0
[ 1289.792511][T19914]  ? verify_lock_unused+0x140/0x140
[ 1289.797754][T19914]  ? aa_sk_perm+0x81f/0x950
[ 1289.802301][T19914]  ? aa_af_perm+0x340/0x340
[ 1289.806842][T19914]  ? packet_getsockopt+0x980/0x980
[ 1289.811982][T19914]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1289.817699][T19914]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1289.823074][T19914]  ? security_socket_sendmsg+0x7c/0xa0
[ 1289.828698][T19914]  ? packet_getsockopt+0x980/0x980
[ 1289.833861][T19914]  ____sys_sendmsg+0x5ed/0x9a0
[ 1289.838720][T19914]  ? __sys_sendmsg_sock+0x30/0x30
[ 1289.843780][T19914]  ? __import_iovec+0x306/0x510
[ 1289.848756][T19914]  ? import_iovec+0x6f/0xa0
[ 1289.853324][T19914]  ___sys_sendmsg+0x2a2/0x360
[ 1289.858173][T19914]  ? __lock_acquire+0x7c40/0x7c40
[ 1289.863248][T19914]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1289.868091][T19914]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1289.872970][T19914]  ? __x64_sys_sendmsg+0x80/0x80
[ 1289.877951][T19914]  ? lockdep_hardirqs_on+0x94/0x140
[ 1289.883171][T19914]  do_syscall_64+0x4c/0xa0
[ 1289.887609][T19914]  ? clear_bhb_loop+0x60/0xb0
[ 1289.892356][T19914]  ? clear_bhb_loop+0x60/0xb0
[ 1289.897066][T19914]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1289.902985][T19914] RIP: 0033:0x7fa01419e0d9
[ 1289.907429][T19914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1289.927217][T19914] RSP: 002b:00007fa01508e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1289.935721][T19914] RAX: ffffffffffffffda RBX: 00007fa014426180 RCX: 00007fa01419e0d9
[ 1289.943719][T19914] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[ 1289.952612][T19914] RBP: 00007fa014235024 R08: 0000000000000000 R09: 0000000000000000
[ 1289.960664][T19914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1289.968796][T19914] R13: 00007fa014426218 R14: 00007fa014426180 R15: 00007ffdb735f4b8
[ 1289.976795][T19914]  </TASK>
[ 1289.979828][T19914] 
[ 1289.982157][T19914] Allocated by task 11954:
[ 1289.986604][T19914]  kasan_set_track+0x4b/0x70
[ 1289.991213][T19914]  __kasan_kmalloc+0x8e/0xa0
[ 1289.995850][T19914]  __kmalloc_node_track_caller+0xb0/0x240
[ 1290.001733][T19914]  __alloc_skb+0x226/0x7d0
[ 1290.006201][T19914]  nsim_dev_trap_report_work+0x24f/0xa80
[ 1290.012053][T19914]  process_one_work+0x8ab/0x1160
[ 1290.017461][T19914]  worker_thread+0xaf5/0x12a0
[ 1290.022181][T19914]  kthread+0x29d/0x330
[ 1290.026280][T19914]  ret_from_fork+0x1f/0x30
[ 1290.030748][T19914] 
[ 1290.033170][T19914] Freed by task 11954:
[ 1290.037241][T19914]  kasan_set_track+0x4b/0x70
[ 1290.041954][T19914]  kasan_save_free_info+0x27/0x40
[ 1290.047076][T19914]  ____kasan_slab_free+0x126/0x1f0
[ 1290.052336][T19914]  slab_free_freelist_hook+0x133/0x1b0
[ 1290.057827][T19914]  __kmem_cache_free+0xb6/0x200
[ 1290.062693][T19914]  skb_release_data+0x5e9/0x7e0
[ 1290.067562][T19914]  consume_skb+0xa2/0x100
[ 1290.071901][T19914]  nsim_dev_trap_report_work+0x71f/0xa80
[ 1290.077550][T19914]  process_one_work+0x8ab/0x1160
[ 1290.082519][T19914]  worker_thread+0xaf5/0x12a0
[ 1290.087237][T19914]  kthread+0x29d/0x330
[ 1290.091324][T19914]  ret_from_fork+0x1f/0x30
[ 1290.096653][T19914] 
[ 1290.098983][T19914] The buggy address belongs to the object at ffff888023bb2000
[ 1290.098983][T19914]  which belongs to the cache kmalloc-4k of size 4096
[ 1290.113580][T19914] The buggy address is located 3579 bytes inside of
[ 1290.113580][T19914]  4096-byte region [ffff888023bb2000, ffff888023bb3000)
[ 1290.127048][T19914] 
[ 1290.129375][T19914] The buggy address belongs to the physical page:
[ 1290.135849][T19914] page:ffffea00008eec00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23bb0
[ 1290.146096][T19914] head:ffffea00008eec00 order:3 compound_mapcount:0 compound_pincount:0
[ 1290.154438][T19914] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1290.162463][T19914] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017442140
[ 1290.171062][T19914] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[ 1290.179651][T19914] page dumped because: kasan: bad access detected
[ 1290.186080][T19914] page_owner tracks the page as allocated
[ 1290.191979][T19914] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3687, tgid 3687 (v4l_id), ts 37598551727, free_ts 37564084905
[ 1290.212137][T19914]  post_alloc_hook+0x173/0x1a0
[ 1290.217002][T19914]  get_page_from_freelist+0x206b/0x2180
[ 1290.222580][T19914]  __alloc_pages+0x1ec/0x4f0
[ 1290.227210][T19914]  alloc_slab_page+0x5d/0x180
[ 1290.231928][T19914]  new_slab+0x87/0x2d0
[ 1290.236115][T19914]  ___slab_alloc+0xbc5/0x1240
[ 1290.240816][T19914]  __kmem_cache_alloc_node+0x126/0x270
[ 1290.246297][T19914]  __kmalloc+0xa3/0x240
[ 1290.250489][T19914]  tomoyo_realpath_from_path+0xe2/0x5c0
[ 1290.256125][T19914]  tomoyo_path_perm+0x26f/0x610
[ 1290.260995][T19914]  security_inode_getattr+0xcf/0x120
[ 1290.266292][T19914]  vfs_getattr+0x26/0x3a0
[ 1290.270724][T19914]  __x64_sys_newfstat+0x13d/0x220
[ 1290.275764][T19914]  do_syscall_64+0x4c/0xa0
[ 1290.280266][T19914]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1290.286205][T19914] page last free stack trace:
[ 1290.290973][T19914]  free_unref_page_prepare+0x8e5/0x9e0
[ 1290.296453][T19914]  free_unref_page+0x2e/0x3f0
[ 1290.301141][T19914]  qlist_free_all+0x76/0xe0
[ 1290.305655][T19914]  kasan_quarantine_reduce+0x144/0x160
[ 1290.311122][T19914]  __kasan_slab_alloc+0x1e/0x80
[ 1290.315980][T19914]  slab_post_alloc_hook+0x4b/0x490
[ 1290.321093][T19914]  kmem_cache_alloc+0x18b/0x2f0
[ 1290.326057][T19914]  mas_alloc_nodes+0x2ec/0x880
[ 1290.330830][T19914]  mas_preallocate+0x162/0x3b0
[ 1290.335600][T19914]  do_mas_align_munmap+0x239/0x12d0
[ 1290.340894][T19914]  do_mas_munmap+0x240/0x2b0
[ 1290.345498][T19914]  mmap_region+0x7ab/0x1c50
[ 1290.350037][T19914]  do_mmap+0x9ce/0x10d0
[ 1290.354197][T19914]  vm_mmap_pgoff+0x1c1/0x2d0
[ 1290.358868][T19914]  ksys_mmap_pgoff+0x4bf/0x720
[ 1290.363640][T19914]  do_syscall_64+0x4c/0xa0
[ 1290.368083][T19914] 
[ 1290.370520][T19914] Memory state around the buggy address:
[ 1290.376153][T19914]  ffff888023bb2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1290.384226][T19914]  ffff888023bb2d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1290.392478][T19914] >ffff888023bb2d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1290.400545][T19914]                                                                 ^
[ 1290.408542][T19914]  ffff888023bb2e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1290.416733][T19914]  ffff888023bb2e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1290.424811][T19914] ==================================================================
[ 1290.433028][T19914] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1290.440266][T19914] CPU: 0 PID: 19914 Comm: syz.3.4026 Not tainted syzkaller #0
[ 1290.447759][T19914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1290.457816][T19914] Call Trace:
[ 1290.461101][T19914]  <TASK>
[ 1290.464051][T19914]  dump_stack_lvl+0x188/0x24e
[ 1290.468781][T19914]  ? memcpy+0x3c/0x60
[ 1290.472788][T19914]  ? show_regs_print_info+0x12/0x12
[ 1290.478014][T19914]  ? load_image+0x410/0x410
[ 1290.482579][T19914]  panic+0x2d3/0x710
[ 1290.486508][T19914]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1290.492703][T19914]  ? bpf_jit_dump+0xd0/0xd0
[ 1290.497253][T19914]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[ 1290.503173][T19914]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1290.509097][T19914]  ? _raw_spin_unlock+0x40/0x40
[ 1290.513983][T19914]  check_panic_on_warn+0x80/0xa0
[ 1290.519003][T19914]  ? ieee80211_monitor_select_queue+0x23a/0x240
[ 1290.525284][T19914]  end_report+0x66/0x110
[ 1290.529567][T19914]  kasan_report+0x118/0x140
[ 1290.534107][T19914]  ? ieee80211_monitor_select_queue+0x23a/0x240
[ 1290.540377][T19914]  ieee80211_monitor_select_queue+0x23a/0x240
[ 1290.546762][T19914]  ? ieee80211_activate_links_work+0x60/0x60
[ 1290.552784][T19914]  netdev_core_pick_tx+0x12c/0x360
[ 1290.557927][T19914]  __dev_queue_xmit+0xb45/0x3810
[ 1290.562886][T19914]  ? __dev_queue_xmit+0x281/0x3810
[ 1290.568021][T19914]  ? netdev_core_pick_tx+0x360/0x360
[ 1290.573377][T19914]  ? virtio_net_hdr_to_skb+0x787/0x12a0
[ 1290.579092][T19914]  ? packet_extra_vlan_len_allowed+0x200/0x200
[ 1290.585287][T19914]  packet_sendmsg+0x3b95/0x4de0
[ 1290.590170][T19914]  ? aa_sk_perm+0x950/0x950
[ 1290.594727][T19914]  ? stack_trace_save+0xf0/0xf0
[ 1290.599626][T19914]  ? __might_sleep+0xd0/0xd0
[ 1290.604251][T19914]  ? verify_lock_unused+0x140/0x140
[ 1290.609577][T19914]  ? aa_sk_perm+0x81f/0x950
[ 1290.614205][T19914]  ? aa_af_perm+0x340/0x340
[ 1290.618740][T19914]  ? packet_getsockopt+0x980/0x980
[ 1290.624395][T19914]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1290.629988][T19914]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1290.635296][T19914]  ? security_socket_sendmsg+0x7c/0xa0
[ 1290.640779][T19914]  ? packet_getsockopt+0x980/0x980
[ 1290.645916][T19914]  ____sys_sendmsg+0x5ed/0x9a0
[ 1290.650750][T19914]  ? __sys_sendmsg_sock+0x30/0x30
[ 1290.655794][T19914]  ? __import_iovec+0x306/0x510
[ 1290.660663][T19914]  ? import_iovec+0x6f/0xa0
[ 1290.665181][T19914]  ___sys_sendmsg+0x2a2/0x360
[ 1290.669973][T19914]  ? __lock_acquire+0x7c40/0x7c40
[ 1290.675019][T19914]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1290.679820][T19914]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1290.684689][T19914]  ? __x64_sys_sendmsg+0x80/0x80
[ 1290.689677][T19914]  ? lockdep_hardirqs_on+0x94/0x140
[ 1290.694923][T19914]  do_syscall_64+0x4c/0xa0
[ 1290.699381][T19914]  ? clear_bhb_loop+0x60/0xb0
[ 1290.704093][T19914]  ? clear_bhb_loop+0x60/0xb0
[ 1290.708802][T19914]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1290.714712][T19914] RIP: 0033:0x7fa01419e0d9
[ 1290.719137][T19914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1290.738777][T19914] RSP: 002b:00007fa01508e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1290.747310][T19914] RAX: ffffffffffffffda RBX: 00007fa014426180 RCX: 00007fa01419e0d9
[ 1290.755302][T19914] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[ 1290.763581][T19914] RBP: 00007fa014235024 R08: 0000000000000000 R09: 0000000000000000
[ 1290.771569][T19914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1290.779552][T19914] R13: 00007fa014426218 R14: 00007fa014426180 R15: 00007ffdb735f4b8
[ 1290.787551][T19914]  </TASK>
[ 1290.791210][T19914] Kernel Offset: disabled
[ 1290.795560][T19914] Rebooting in 86400 seconds..