last executing test programs:

17m26.5216749s ago: executing program 2 (id=3):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x40)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB])
chdir(&(0x7f0000000340)='./file0\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
chdir(&(0x7f0000000180)='./file0\x00')

17m25.631197103s ago: executing program 2 (id=7):
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x20048814)
write$sndseq(0xffffffffffffffff, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x3, 0xfd}, {0xa}, @raw32={[0x5, 0x5, 0x9]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x4}, {}, {0x5}, @quote={{0x6, 0x73}, 0x401}}, {0x4, 0x0, 0xfe, 0x0, @tick=0x100, {}, {}, @connect={{0x5, 0x5f}, {0x2, 0xf}}}], 0x54)
ioctl$I2C_RDWR(r0, 0x707, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0)

17m23.934106628s ago: executing program 2 (id=9):
r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xe0, 0x6, 0xfffffffffffffffe, 0xf, 0x10003, 0x41, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000024c0))

17m22.665549555s ago: executing program 2 (id=12):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1)
syz_open_procfs$namespace(0x0, &(0x7f0000000740)='ns/ipc\x00')
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
syz_emit_ethernet(0x194, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r6)
keyctl$KEYCTL_MOVE(0x1e, r7, r7, r6, 0x1)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
fsetxattr$security_capability(r8, &(0x7f0000000080), 0x0, 0x0, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xe3, 0x8}, {0x6, 0xfffe, 0x49c, 0x8}}}}, 0x15)
syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000080))

17m22.429997196s ago: executing program 4 (id=13):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00'})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf251100000008000300"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4020804)

17m19.857981889s ago: executing program 4 (id=16):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x4, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740)="01978c1c2cc4b9004d8c4deb4fcffe21aead3de21ade811d2298738aebec76650ec01a668da31d90352fe6a28d60887f03f6cc990debd7581deb98e1ee8d1ebd9fb1664d704ccb614f3a729491d05ec6e2d470e01b64bea7660359aa3b7bcea3be8e", 0x62, 0x10}, {0x3, 0xe, &(0x7f0000000840)='connmark\x00', &(0x7f0000000880)="3ac464101d90ab5cddcb8c9dc5e1dc21b6565b646537e5a114870a9c8f754c80752823f9ca14accc54f101f0a4c409ed41a469ff8a786510b49d05bd2ed9af612a362e04e137fd89750a55303f30c9505122d3673e4baf03ca8eb6", 0x5b, 0x16}, {0x1, 0x4, 0x0, &(0x7f0000000940), 0x0, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', 0x0, 0x0, 0x20}]})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), 0xffffffffffffffff)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5b, 0x14, {{'cmac(aes)\x00'}, 0x78, 0x0, "3509fe8fd57fd44aa5074c50bc700e"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x154}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
accept4(r1, 0x0, 0x0, 0x800)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

17m18.555184168s ago: executing program 4 (id=19):
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x20048814)
write$sndseq(0xffffffffffffffff, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x3, 0xfd}, {0xa}, @raw32={[0x5, 0x5, 0x9]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x4}, {}, {0x5}, @quote={{0x6, 0x73}, 0x401}}, {0x4, 0x0, 0xfe, 0x0, @tick=0x100, {}, {}, @connect={{0x5, 0x5f}, {0x2, 0xf}}}], 0x54)
ioctl$I2C_RDWR(r0, 0x707, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0)

17m16.818754729s ago: executing program 4 (id=21):
r0 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002})
setrlimit(0xb, &(0x7f0000000200)={0x4, 0x101})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x33}})
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36)
ioctl$KVM_CAP_PTP_KVM(r5, 0x4068aea3, &(0x7f00000003c0))

17m15.073049228s ago: executing program 4 (id=22):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xe0, 0x6, 0xfffffffffffffffe, 0xf, 0x10003, 0x41, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17m13.8044336s ago: executing program 4 (id=24):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
eventfd(0x5)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendto(r0, &(0x7f0000000740)="50fbdf12a30d", 0x6, 0x4008044, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e517", 0x59, 0x0, 0x0, 0x0)

17m2.982681187s ago: executing program 32 (id=11):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r7, 0x8008330e, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000008, 0x2010, 0xffffffffffffffff, 0x8000000)
r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd=r6, 0x9, &(0x7f0000000040)=""/103, 0x67, 0x1a, 0x1})
creat(&(0x7f0000000100)='./file0\x00', 0x104)

16m59.265412101s ago: executing program 33 (id=12):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1)
syz_open_procfs$namespace(0x0, &(0x7f0000000740)='ns/ipc\x00')
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
syz_emit_ethernet(0x194, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r6)
keyctl$KEYCTL_MOVE(0x1e, r7, r7, r6, 0x1)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
fsetxattr$security_capability(r8, &(0x7f0000000080), 0x0, 0x0, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xe3, 0x8}, {0x6, 0xfffe, 0x49c, 0x8}}}}, 0x15)
syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000080))

16m57.770249719s ago: executing program 34 (id=24):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
eventfd(0x5)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendto(r0, &(0x7f0000000740)="50fbdf12a30d", 0x6, 0x4008044, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e517", 0x59, 0x0, 0x0, 0x0)

15m8.663525695s ago: executing program 3 (id=148):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffe, 0x3c8098e1, 0x401, 0xfffc, 0x101, 0x0, 0x0, 0x0, 0x10, 0x9}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x20)
sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0xa, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x121}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x81)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}])

15m2.567123875s ago: executing program 3 (id=151):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x58, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3ff}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40084)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0xa00}, 0x8800)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r7, @ANYBLOB="0000000000000000c31800000001000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

15m1.182864034s ago: executing program 3 (id=153):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
listen(0xffffffffffffffff, 0xfff)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff004)

14m59.139990728s ago: executing program 3 (id=155):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x18, 0x0, 0x34, {0x0, @empty, @remote}}}], 0x18}}], 0x1, 0x40000)

14m57.903474194s ago: executing program 3 (id=156):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

14m56.306470682s ago: executing program 3 (id=158):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup3(r0, r5, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40)
ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000000)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}})

14m38.464474902s ago: executing program 35 (id=158):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup3(r0, r5, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40)
ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000000)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}})

9m36.716758734s ago: executing program 0 (id=398):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x4004af07, &(0x7f00000036c0)={&(0x7f0000003680), 0x0, 0xc95, 0x0, 0xffff, 0x7, 0xd, 0x4, 0x4bf})

9m36.142787238s ago: executing program 0 (id=399):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10c32900000000dbdf253700000008005700020000000800342b675bd3758e792c34cc5bf858e26599e2cb3688532661feb890f64900270002000000a75f59d89d3639214e59f560db111da535aced570a3768b9995bbd315f65ade2"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000005c0))
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
socket$kcm(0x10, 0x3, 0x10)

9m31.32693775s ago: executing program 0 (id=401):
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0)
socket$netlink(0x10, 0x3, 0x10)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x128202)
ioctl$LOOP_CHANGE_FD(r0, 0x4c09, 0xffffffffffffffff)
ioctl$TCFLSH(0xffffffffffffffff, 0x800455ca, 0x2)
unshare(0x6e000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0xa, 0x2, 0x3a)

9m23.246494452s ago: executing program 0 (id=409):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x80, 0x700, 0xc, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x8065, 0x0, 0x2, 0x2f, 0x0, @empty, @broadcast}}}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0xff7, 0x0, &(0x7f0000001700)=""/4087, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x1, 0x401, 0x7fffffff, 0x0, [{0x7, 0x2, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x1, 0xb3, 0x81, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x6, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x0, 0x36, 0x89, '\x00', 0x80}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x3, '\x00', 0x4}, {0xc, 0xc, 0x5, '\x00', 0x8}, {0x8, 0x10, 0x8c, '\x00', 0x7}, {0x0, 0xc0, 0x7, '\x00', 0xb}, {0x48, 0x2, 0xf6, '\x00', 0x2}, {0x83, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x40, 0xfa, '\x00', 0x5}, {0x1, 0x4, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x89, 0x2, '\x00', 0xff}]}})
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00')
read$FUSE(r6, &(0x7f0000003f80)={0x2020}, 0x2020)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000002180)=ANY=[@ANYBLOB="0000080600000a"], 0x11fe)

9m19.133092264s ago: executing program 0 (id=411):
r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0xb81, 0x80, 0x8002, 0x25f}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_open_dev$I2C(0x0, 0x1, 0x2603)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x2}})
io_uring_enter(r0, 0x6e2, 0x620, 0x1, 0x0, 0x0)

9m14.984986303s ago: executing program 0 (id=414):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000)
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[], 0x50)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r7 = syz_clone(0x0, 0x0, 0x14, 0x0, 0x0, 0x0)
ptrace(0x8, r7)
ptrace(0x4207, r7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

8m59.591431899s ago: executing program 36 (id=414):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000)
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[], 0x50)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r7 = syz_clone(0x0, 0x0, 0x14, 0x0, 0x0, 0x0)
ptrace(0x8, r7)
ptrace(0x4207, r7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

8m40.065316099s ago: executing program 8 (id=433):
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0xf9a6, 0x4069a064, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7}}, 0x50)
read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000300)={0x10, 0xfffffffffffffffe, r2}, 0x10)

8m39.347199818s ago: executing program 8 (id=434):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3d}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x38130d1, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff)
bind$rds(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]})
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000))
syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaefbbbbbbbbbb810074857b9e65ac4a001f0c0000e4ceb56c"], 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
io_setup(0x6, &(0x7f0000001000)=<r3=>0x0)
io_getevents(r3, 0x3, 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f0000001140))
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
sched_getaffinity(r0, 0x8, &(0x7f0000000280))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
connect$can_bcm(r4, &(0x7f0000001ff0), 0x10)

8m37.481208964s ago: executing program 8 (id=435):
r0 = socket$packet(0x11, 0xa, 0x300)
r1 = socket$inet(0x2, 0x2, 0x1)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
sendfile(r0, r3, &(0x7f0000000080)=0x2, 0xd)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$udambuf(0xffffff9c, &(0x7f00000000c0), 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0x4018aee3, &(0x7f0000000180))
writev(r3, &(0x7f00000005c0), 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x40800)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x30, r2, 0x0)
r9 = dup(r2)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000100)={0x2, 0x4, 0x6})
r10 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2)
ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000080)={"5381d6dc", 0x2, 0x9, 0x1, 0x3fe, 0x7, "9ad7f18bee5970ebb85649ef55e24c", '\x00', "00000003", "a88bb21f", ["5c294bd54bdbcc454ec4fe2a", "1e823e1929dad85f7c58b964", "0cefddcd3a6e078d00c07b4e", "faf2b69f1b22666ad990e013"]})
ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x0, 0x5, 0x0, 0x2, 0x7, '\x00', "249e4502", "9e068dd9", '\x00', ["fdffcf89171100bb08844f10", "d78cb8b0ff00000000fc00", "00eeeefffffff700c00500", "000000000000000400"]})
write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd86)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='bridge_slave_0\x00', 0x10)

8m31.360713275s ago: executing program 8 (id=436):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

8m30.838408154s ago: executing program 8 (id=437):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3d}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]})
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000))
io_setup(0x6, &(0x7f0000001000))
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10)

8m23.442578465s ago: executing program 8 (id=438):
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="20000000150a0102000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808)

8m7.935903754s ago: executing program 37 (id=438):
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="20000000150a0102000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808)

7m15.903127193s ago: executing program 1 (id=439):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0)
r1 = syz_io_uring_setup(0x494, &(0x7f00000001c0)={0x0, 0x8d8b, 0x800, 0x8000, 0x40000250}, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r0, 0x8006, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x31e7, 0x4c3, 0x43, 0x0, 0x0)

7m14.954808126s ago: executing program 1 (id=440):
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1000, 0x30}, &(0x7f0000000040)=0xc)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40010)
syz_emit_ethernet(0xfc6, &(0x7f0000001000)=ANY=[], 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002f40), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e)
syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00')

7m9.663660688s ago: executing program 1 (id=441):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3d}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x38130d1, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff)
bind$rds(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]})
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000))
syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaefbbbbbbbbbb810074857b9e65ac4a001f0c0000e4ceb56c"], 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
io_setup(0x6, &(0x7f0000001000)=<r5=>0x0)
io_getevents(r5, 0x3, 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f0000001140))
ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0)
sched_getaffinity(r0, 0x8, &(0x7f0000000280))
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
connect$can_bcm(r6, &(0x7f0000001ff0), 0x10)

7m8.869875723s ago: executing program 1 (id=442):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0)
recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)

7m7.884655041s ago: executing program 1 (id=443):
syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x1, 0x80800)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x4000, r3})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
dup(0xffffffffffffffff)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

7m6.322103401s ago: executing program 1 (id=444):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3d}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]})
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000))
io_setup(0x6, &(0x7f0000001000))
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10)

6m50.006379492s ago: executing program 38 (id=444):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3d}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]})
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000))
io_setup(0x6, &(0x7f0000001000))
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10)

6m44.623695095s ago: executing program 7 (id=34):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
fsopen(0x0, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
unshare(0x6a040000)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
kexec_load(0x0, 0x0, &(0x7f0000000000), 0x320000)

6m27.434908097s ago: executing program 39 (id=34):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
fsopen(0x0, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
unshare(0x6a040000)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
kexec_load(0x0, 0x0, &(0x7f0000000000), 0x320000)

10.964460709s ago: executing program 9 (id=959):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x4, 0x2, 0x1, 0x0, @irqchip={0x1, 0x3}}]})

10.071663536s ago: executing program 9 (id=961):
syz_open_dev$sg(0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB, @ANYRES32], 0x90}}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x1000000, 0x0, 0x318, 0x1, 0x24}, 0x9c)
r5 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c)

9.843473393s ago: executing program 6 (id=962):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35)
r1 = eventfd2(0x5, 0x81001)
ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x4000, r1})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r3, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(r3, 0x22d0, 0x20, 0x0, 0x0, 0x0)

7.756289479s ago: executing program 5 (id=963):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x3, 0x5}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x0, 0x61, 0x61, 0x0, 0x61]}}, 0x0, 0x48}, 0x28)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001)
r1 = dup(r0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x15, 0x200, 0x70bd28, 0x25dfdbff, {0xf, 0x7c}}, 0x14}}, 0x4800c001)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0x7, "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", 0x8, 0x2, 0x6, 0x2, 0x3, 0x6, 0x7}}}, 0x128)

7.162097153s ago: executing program 5 (id=964):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socket(0x18, 0x800, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x7a)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

7.088813679s ago: executing program 6 (id=965):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x66, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback={0xff00000000000000}, @loopback}}}}}}}, 0x0)

7.053348047s ago: executing program 9 (id=966):
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x20048814)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x4919, 0x0)

5.503499762s ago: executing program 6 (id=967):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

5.160574997s ago: executing program 9 (id=968):
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x40004)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
preadv(r0, 0x0, 0x0, 0x800000, 0x63)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x5, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
ioctl$HIDIOCSUSAGES(r3, 0x501c4814, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x8400, 0x40000}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x20000000)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=@bridge_newneigh={0x5c, 0x1c, 0x8, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, r7, 0x40, 0xc5, 0xb}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x7}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_CACHEINFO={0x14, 0x3, {0xc8c, 0x81, 0xa, 0x4}}, @NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NDA_IFINDEX={0x8}, @NDA_DST_IPV4={0x8, 0x1, @private=0xa010102}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40)

4.927832468s ago: executing program 5 (id=969):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000240)={0x81, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0)

3.880345545s ago: executing program 6 (id=970):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
pselect6(0x40, &(0x7f0000000040)={0x9, 0xffffffffffff7fff, 0xa38, 0xdd43, 0x2, 0x800, 0x4a, 0x5}, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)
recvmmsg(r0, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0)

3.560233608s ago: executing program 5 (id=971):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x106, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
eventfd2(0x5, 0x81001)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x4, 0x1, 0x2000000}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28)
r0 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0)

2.495156118s ago: executing program 6 (id=972):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x3, 0x5}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x0, 0x61, 0x61, 0x0, 0x61]}}, 0x0, 0x48}, 0x28)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001)
r1 = dup(r0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x15, 0x200, 0x70bd28, 0x25dfdbff, {0xf, 0x7c}}, 0x14}}, 0x4800c001)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0x7, "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", 0x8, 0x2, 0x6, 0x2, 0x3, 0x6, 0x7}}}, 0x128)

1.723257967s ago: executing program 6 (id=973):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35)
r1 = eventfd2(0x5, 0x81001)
ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x4000, r1})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r3, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(r3, 0x22d0, 0x20, 0x0, 0x0, 0x0)

1.47025221s ago: executing program 5 (id=974):
syz_open_dev$sg(0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB, @ANYRES32], 0x90}}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x1000000, 0x0, 0x318, 0x1, 0x24}, 0x9c)
r5 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c)

1.41055229s ago: executing program 9 (id=975):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x66, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback={0xff00000000000000}, @loopback}}}}}}}, 0x0)

145.381914ms ago: executing program 9 (id=976):
r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x40)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x45, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x400, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_ifreq(r4, 0x8923, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_io_uring_setup(0x838, &(0x7f00000000c0)={0x0, 0x1998, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4)
r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r8, 0x40026f33, &(0x7f0000000100)=0x808c)
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r8, 0x40026f34, &(0x7f0000000040)=0x808c)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x18, 0x0, @fd, 0x0, 0x0, 0x0, 0x1})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0xb1}}]}, 0x28}}, 0x0)
r10 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r10, 0x80086303, 0x0)
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

0s ago: executing program 5 (id=977):
r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x40)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x45, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x400, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_ifreq(r4, 0x8923, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r5, 0x80086303, &(0x7f0000000180))
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

g state
[  802.228555][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  802.383405][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state
[  802.391143][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state
[  802.500185][ T8680] chnl_net:caif_netlink_parms(): no params data found
[  802.600969][   T12] hsr_slave_0: left promiscuous mode
[  802.613616][   T12] hsr_slave_1: left promiscuous mode
[  802.625243][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  802.646722][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  802.677924][   T12] veth0_macvtap: left promiscuous mode
[  802.685308][   T12] veth1_vlan: left promiscuous mode
[  802.695796][   T12] veth0_vlan: left promiscuous mode
[  803.009818][   T49] Bluetooth: hci2: command tx timeout
[  803.172041][   T49] Bluetooth: hci0: command tx timeout
[  803.526882][   T12] team0 (unregistering): Port device team_slave_1 removed
[  803.587266][   T12] team0 (unregistering): Port device team_slave_0 removed
[  804.481685][ T8523] veth0_macvtap: entered promiscuous mode
[  804.771975][ T8523] veth1_macvtap: entered promiscuous mode
[  805.090851][   T49] Bluetooth: hci2: command tx timeout
[  805.253384][   T49] Bluetooth: hci0: command tx timeout
[  805.380269][ T8606] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  805.572103][ T8606] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  805.697439][ T8606] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  805.902904][ T8606] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  806.017566][ T8523] batman_adv: batadv0: Interface activated: batadv_slave_0
[  806.158785][ T8680] bridge0: port 1(bridge_slave_0) entered blocking state
[  806.179084][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.187349][ T8680] bridge_slave_0: entered allmulticast mode
[  806.223014][ T8680] bridge_slave_0: entered promiscuous mode
[  806.310374][ T8680] bridge0: port 2(bridge_slave_1) entered blocking state
[  806.322226][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state
[  806.350055][ T8680] bridge_slave_1: entered allmulticast mode
[  806.360906][ T8680] bridge_slave_1: entered promiscuous mode
[  806.604949][ T8523] batman_adv: batadv0: Interface activated: batadv_slave_1
[  806.954832][ T8680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  807.008894][ T8680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  807.048614][  T158] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  807.108670][ T8699] chnl_net:caif_netlink_parms(): no params data found
[  807.170025][   T49] Bluetooth: hci2: command tx timeout
[  807.326731][  T158] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  807.348759][  T158] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  807.493812][ T8680] team0: Port device team_slave_0 added
[  807.516865][ T8680] team0: Port device team_slave_1 added
[  807.523454][   T35] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  807.871810][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_0
[  807.878973][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.973183][ T8680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  808.008847][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_1
[  808.039656][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  808.098399][ T8680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  808.173757][   T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.346453][   T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.558981][   T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.848503][   T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  809.022146][ T8680] hsr_slave_0: entered promiscuous mode
[  809.044180][ T8680] hsr_slave_1: entered promiscuous mode
[  809.072907][ T8680] debugfs: 'hsr0' already exists in 'hsr'
[  809.078850][ T8680] Cannot create hsr debugfs directory
[  809.180297][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state
[  809.187862][ T8699] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.220361][ T8699] bridge_slave_0: entered allmulticast mode
[  809.244319][ T8699] bridge_slave_0: entered promiscuous mode
[  809.251991][   T49] Bluetooth: hci2: command tx timeout
[  809.394531][ T8699] bridge0: port 2(bridge_slave_1) entered blocking state
[  809.404926][ T8699] bridge0: port 2(bridge_slave_1) entered disabled state
[  809.425986][ T8699] bridge_slave_1: entered allmulticast mode
[  809.437607][ T8699] bridge_slave_1: entered promiscuous mode
[  809.894306][ T8563] 8021q: adding VLAN 0 to HW filter on device batadv0
[  809.960479][ T8699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  810.008293][ T8699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  810.656163][ T8699] team0: Port device team_slave_0 added
[  810.804569][   T12] bridge_slave_1: left allmulticast mode
[  810.826379][   T12] bridge_slave_1: left promiscuous mode
[  810.865117][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  810.890970][   T12] bridge_slave_0: left allmulticast mode
[  810.896842][   T12] bridge_slave_0: left promiscuous mode
[  810.930272][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  810.973287][   T12] bridge_slave_1: left allmulticast mode
[  810.979206][   T12] bridge_slave_1: left promiscuous mode
[  810.996448][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.050947][   T12] bridge_slave_0: left allmulticast mode
[  811.056832][   T12] bridge_slave_0: left promiscuous mode
[  811.094284][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  811.754288][ T5781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  811.777341][ T5781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  811.790518][ T5781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  811.812436][ T5781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  811.869648][ T5781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  812.343982][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  812.369011][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  812.399029][   T12] bond0 (unregistering): Released all slaves
[  812.725691][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  812.755385][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  812.801334][   T12] bond0 (unregistering): Released all slaves
[  812.841069][ T8699] team0: Port device team_slave_1 added
[  813.301655][ T8699] batman_adv: batadv0: Adding interface: batadv_slave_0
[  813.308726][ T8699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  813.347106][ T8699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  813.438779][ T8699] batman_adv: batadv0: Adding interface: batadv_slave_1
[  813.446480][ T8699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  813.473254][ T8699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  813.906677][ T8699] hsr_slave_0: entered promiscuous mode
[  813.915961][ T8699] hsr_slave_1: entered promiscuous mode
[  813.925137][ T8699] debugfs: 'hsr0' already exists in 'hsr'
[  813.931179][ T8699] Cannot create hsr debugfs directory
[  813.953707][ T8606] 8021q: adding VLAN 0 to HW filter on device bond0
[  813.982264][ T5781] Bluetooth: hci5: command tx timeout
[  813.993603][   T12] hsr_slave_0: left promiscuous mode
[  814.003567][   T12] hsr_slave_1: left promiscuous mode
[  814.011474][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  814.023189][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  814.044851][   T12] hsr_slave_0: left promiscuous mode
[  814.057747][   T12] hsr_slave_1: left promiscuous mode
[  814.066038][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  814.084756][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  814.096507][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  814.107508][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  814.138882][   T12] veth1_vlan: left promiscuous mode
[  814.144532][   T12] veth0_vlan: left promiscuous mode
[  814.152133][   T12] veth1_macvtap: left promiscuous mode
[  814.157760][   T12] veth0_macvtap: left promiscuous mode
[  814.168612][   T12] veth1_vlan: left promiscuous mode
[  814.174478][   T12] veth0_vlan: left promiscuous mode
[  814.914491][   T12] team0 (unregistering): Port device team_slave_1 removed
[  814.974525][   T12] team0 (unregistering): Port device team_slave_0 removed
[  815.455477][   T12] team0 (unregistering): Port device team_slave_1 removed
[  815.482273][   T12] team0 (unregistering): Port device team_slave_0 removed
[  816.051603][ T5781] Bluetooth: hci5: command tx timeout
[  816.365567][ T8606] 8021q: adding VLAN 0 to HW filter on device team0
[  816.490375][ T8563] veth0_vlan: entered promiscuous mode
[  816.545800][ T7608] bridge0: port 1(bridge_slave_0) entered blocking state
[  816.553419][ T7608] bridge0: port 1(bridge_slave_0) entered forwarding state
[  816.847873][ T7608] bridge0: port 2(bridge_slave_1) entered blocking state
[  816.855440][ T7608] bridge0: port 2(bridge_slave_1) entered forwarding state
[  817.038173][ T8563] veth1_vlan: entered promiscuous mode
[  817.094929][ T8680] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  817.201524][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.216309][ T8680] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  817.272350][ T8792] chnl_net:caif_netlink_parms(): no params data found
[  817.358407][ T8680] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  817.408449][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.513239][ T8680] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  817.728437][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.902867][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  818.130108][ T5781] Bluetooth: hci5: command tx timeout
[  818.284966][ T8699] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  818.356130][ T8699] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  818.483848][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  818.491393][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  818.688813][ T8699] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  818.711295][ T8563] veth0_macvtap: entered promiscuous mode
[  818.806210][ T8699] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  818.978592][ T8792] bridge0: port 1(bridge_slave_0) entered blocking state
[  819.022732][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state
[  819.048590][ T8792] bridge_slave_0: entered allmulticast mode
[  819.061089][ T8792] bridge_slave_0: entered promiscuous mode
[  819.103871][   T12] bridge_slave_1: left allmulticast mode
[  819.110717][   T12] bridge_slave_1: left promiscuous mode
[  819.117361][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  819.137433][   T12] bridge_slave_0: left allmulticast mode
[  819.143435][   T12] bridge_slave_0: left promiscuous mode
[  819.150156][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  819.488812][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  819.505333][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  819.525820][   T12] bond0 (unregistering): Released all slaves
[  819.566184][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state
[  819.575890][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state
[  819.585300][ T8792] bridge_slave_1: entered allmulticast mode
[  819.597406][ T8792] bridge_slave_1: entered promiscuous mode
[  819.612938][ T8563] veth1_macvtap: entered promiscuous mode
[  819.748239][   T12] hsr_slave_0: left promiscuous mode
[  819.756531][   T12] hsr_slave_1: left promiscuous mode
[  819.769189][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  819.778612][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  819.788730][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  819.796734][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  819.817980][   T12] veth1_macvtap: left promiscuous mode
[  819.823830][   T12] veth0_macvtap: left promiscuous mode
[  819.830263][   T12] veth1_vlan: left promiscuous mode
[  819.835842][   T12] veth0_vlan: left promiscuous mode
[  820.209640][ T5781] Bluetooth: hci5: command tx timeout
[  820.431591][   T12] team0 (unregistering): Port device team_slave_1 removed
[  820.457226][   T12] team0 (unregistering): Port device team_slave_0 removed
[  820.925713][ T8792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  820.968741][ T8792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  821.097203][ T8792] team0: Port device team_slave_0 added
[  821.138766][ T8792] team0: Port device team_slave_1 added
[  821.162879][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_0
[  821.341239][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  821.348383][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  821.377046][ T8792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  821.403979][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_1
[  821.468881][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  821.477025][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  821.513039][ T8792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  821.550905][ T8606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  821.558949][  T158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  821.568575][  T158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  821.699603][  T158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  821.927253][   T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  821.987914][ T8792] hsr_slave_0: entered promiscuous mode
[  822.019109][ T8792] hsr_slave_1: entered promiscuous mode
[  822.036154][ T8792] debugfs: 'hsr0' already exists in 'hsr'
[  822.042339][ T8792] Cannot create hsr debugfs directory
[  822.241987][ T8680] 8021q: adding VLAN 0 to HW filter on device bond0
[  822.749717][ T8680] 8021q: adding VLAN 0 to HW filter on device team0
[  823.050344][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.057878][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[  823.171527][ T8699] 8021q: adding VLAN 0 to HW filter on device bond0
[  823.246824][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  823.254484][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[  823.425583][ T8699] 8021q: adding VLAN 0 to HW filter on device team0
[  823.593320][  T158] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.600905][  T158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  823.706852][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  823.714390][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[  824.114290][ T8606] veth0_vlan: entered promiscuous mode
[  824.323036][ T8606] veth1_vlan: entered promiscuous mode
[  824.612066][ T8792] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  824.695147][ T8792] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  824.768984][ T8792] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  824.841995][ T8792] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  825.164847][ T8606] veth0_macvtap: entered promiscuous mode
[  825.290053][ T8606] veth1_macvtap: entered promiscuous mode
[  825.655515][ T8606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  825.826647][ T8606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  825.979447][   T84] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  825.993291][   T35] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  826.041151][ T8699] 8021q: adding VLAN 0 to HW filter on device batadv0
[  826.100112][   T35] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  826.163887][   T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  826.556653][ T8680] 8021q: adding VLAN 0 to HW filter on device batadv0
[  826.580779][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  826.588838][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  826.994486][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  827.012168][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  827.118598][ T8792] 8021q: adding VLAN 0 to HW filter on device bond0
[  827.425854][ T8792] 8021q: adding VLAN 0 to HW filter on device team0
[  827.559506][ T7608] bridge0: port 1(bridge_slave_0) entered blocking state
[  827.567023][ T7608] bridge0: port 1(bridge_slave_0) entered forwarding state
[  827.727075][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  827.734772][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  829.238283][ T8699] veth0_vlan: entered promiscuous mode
[  830.258277][ T8699] veth1_vlan: entered promiscuous mode
[  830.602393][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  830.602739][   T29] audit: type=1326 audit(1774523931.747:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.1.440" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708ef6c code=0x0
[  833.382805][ T8680] veth0_vlan: entered promiscuous mode
[  833.624347][ T8680] veth1_vlan: entered promiscuous mode
[  833.768265][ T8699] veth0_macvtap: entered promiscuous mode
[  833.884961][ T8699] veth1_macvtap: entered promiscuous mode
[  834.208939][ T8792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  834.287232][   T29] audit: type=1326 audit(1774523935.407:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  834.338277][   T29] audit: type=1326 audit(1774523935.407:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  834.413827][   T29] audit: type=1326 audit(1774523935.407:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  834.505878][ T8680] veth0_macvtap: entered promiscuous mode
[  834.582356][   T29] audit: type=1326 audit(1774523935.407:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  834.730896][   T29] audit: type=1326 audit(1774523935.417:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  834.773101][ T8680] veth1_macvtap: entered promiscuous mode
[  834.805716][ T8699] batman_adv: batadv0: Interface activated: batadv_slave_0
[  834.823647][   T29] audit: type=1326 audit(1774523935.417:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71c5cab code=0x7ffc0000
[  834.908605][   T29] audit: type=1326 audit(1774523935.417:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  834.933797][ T8699] batman_adv: batadv0: Interface activated: batadv_slave_1
[  834.999518][   T29] audit: type=1326 audit(1774523935.417:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  835.069499][   T29] audit: type=1326 audit(1774523935.417:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  835.165254][  T143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  835.192521][  T143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  835.322535][   T56] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  835.357810][   T56] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  835.434159][ T8680] batman_adv: batadv0: Interface activated: batadv_slave_0
[  835.631457][ T8680] batman_adv: batadv0: Interface activated: batadv_slave_1
[  835.816394][ T1104] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  835.859693][ T1104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  835.907194][ T1131] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  836.005513][ T1131] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  837.205969][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  837.271194][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.857202][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  837.888033][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  838.731971][   T29] kauditd_printk_skb: 23 callbacks suppressed
[  838.732048][   T29] audit: type=1326 audit(1774523939.887:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  838.857555][   T29] audit: type=1326 audit(1774523939.887:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  838.945783][   T29] audit: type=1326 audit(1774523939.917:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  839.039921][   T29] audit: type=1326 audit(1774523939.917:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  839.148662][   T29] audit: type=1326 audit(1774523939.917:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  839.286808][   T29] audit: type=1326 audit(1774523939.917:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  839.377385][ T8792] veth0_vlan: entered promiscuous mode
[  839.426704][   T29] audit: type=1326 audit(1774523939.917:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  839.507985][   T29] audit: type=1326 audit(1774523939.917:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  839.623181][   T29] audit: type=1326 audit(1774523939.927:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  839.671274][ T8792] veth1_vlan: entered promiscuous mode
[  839.712168][   T29] audit: type=1326 audit(1774523939.927:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000
[  840.412764][ T8934] ptrace attach of "./syz-executor exec"[8606] was attempted by ""[8934]
[  840.432823][ T8792] veth0_macvtap: entered promiscuous mode
[  840.602337][ T8792] veth1_macvtap: entered promiscuous mode
[  841.028481][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  841.216783][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  841.336675][ T1093] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  841.525590][ T1093] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  841.568707][ T1093] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  841.627313][ T1093] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  844.265479][ T8970] netlink: 204 bytes leftover after parsing attributes in process `syz.9.449'.
[  845.239881][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  845.248034][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  845.915742][  T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  845.966848][  T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  846.138579][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  846.169531][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  846.430080][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  846.438129][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  847.231641][ T8990] netdevsim netdevsim9: Direct firmware load for  failed with error -2
[  847.310203][ T8990] netdevsim netdevsim9: Falling back to sysfs fallback for: 
[  848.394956][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30'.
[  848.521016][ T9001] random: crng reseeded on system resumption
[  851.348751][   T29] kauditd_printk_skb: 33 callbacks suppressed
[  851.348819][   T29] audit: type=1326 audit(1774523952.307:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.9.452" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f25f6c code=0x0
[  854.509477][   T29] audit: type=1326 audit(1774523955.657:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.9.456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000
[  854.739678][   T29] audit: type=1326 audit(1774523955.657:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.9.456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000
[  854.924443][   T29] audit: type=1326 audit(1774523955.657:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.9.456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f25f6c code=0x7ffc0000
[  855.189932][   T29] audit: type=1326 audit(1774523955.657:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.9.456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000
[  855.330964][   T29] audit: type=1326 audit(1774523955.657:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.9.456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000
[  855.449737][   T29] audit: type=1326 audit(1774523955.657:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.9.456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7125cab code=0x7ffc0000
[  855.599996][   T29] audit: type=1326 audit(1774523955.657:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.9.456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000
[  855.627474][   T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  855.640077][   T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  855.658146][   T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  855.671636][   T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  855.690555][   T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  855.704138][ T9031] netlink: 55 bytes leftover after parsing attributes in process `syz.6.458'.
[  855.783336][   T29] audit: type=1326 audit(1774523955.657:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.9.456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000
[  855.806073][   T29] audit: type=1326 audit(1774523955.657:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.9.456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f25f6c code=0x7ffc0000
[  855.840723][ T9031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  855.848130][ T9031] IPv6: NLM_F_CREATE should be set when creating new route
[  855.904465][ T9033] IPv6: sit1: Disabled Multicast RS
[  855.957683][ T9033] sit1: entered allmulticast mode
[  856.558543][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  856.609809][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  857.289729][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  857.297815][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  857.922224][ T9048] netdevsim netdevsim6: Direct firmware load for  failed with error -2
[  857.979927][   T49] Bluetooth: hci4: command tx timeout
[  858.114451][ T9048] netdevsim netdevsim6: Falling back to sysfs fallback for: 
[  860.069749][   T49] Bluetooth: hci4: command tx timeout
[  862.112502][ T9066] random: crng reseeded on system resumption
[  862.157246][   T49] Bluetooth: hci4: command tx timeout
[  864.376610][   T49] Bluetooth: hci4: command tx timeout
[  866.517313][ T9034] chnl_net:caif_netlink_parms(): no params data found
[  873.278628][   T29] kauditd_printk_skb: 23 callbacks suppressed
[  873.278717][   T29] audit: type=1326 audit(1774523973.467:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.6.464" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f26f6c code=0x0
[  875.803368][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  876.924583][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.414854][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.801295][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  878.690302][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.750520][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state
[  878.830611][ T9034] bridge_slave_0: entered allmulticast mode
[  878.943061][ T9034] bridge_slave_0: entered promiscuous mode
[  879.094411][ T9034] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.160225][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.168112][ T9034] bridge_slave_1: entered allmulticast mode
[  879.192597][ T9106] overlayfs: missing 'lowerdir'
[  879.197980][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  879.213987][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  879.234806][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  879.288998][ T9034] bridge_slave_1: entered promiscuous mode
[  879.321365][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  879.345022][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  879.912755][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  879.922071][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  880.014015][ T9034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  880.285308][ T9034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  880.489112][   T13] bridge_slave_1: left allmulticast mode
[  880.540800][   T13] bridge_slave_1: left promiscuous mode
[  880.573715][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  880.625620][   T13] bridge_slave_0: left allmulticast mode
[  880.633524][   T13] bridge_slave_0: left promiscuous mode
[  880.656759][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  881.410407][ T5781] Bluetooth: hci1: command tx timeout
[  882.274329][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  882.375052][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  882.420626][   T13] bond0 (unregistering): Released all slaves
[  882.773095][ T9034] team0: Port device team_slave_0 added
[  882.894461][ T9118] random: crng reseeded on system resumption
[  883.490469][ T5781] Bluetooth: hci1: command tx timeout
[  883.638035][ T9034] team0: Port device team_slave_1 added
[  884.720158][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_0
[  884.727339][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  884.835774][ T9034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  885.115245][   T13] hsr_slave_0: left promiscuous mode
[  885.206626][   T13] hsr_slave_1: left promiscuous mode
[  885.249760][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  885.257380][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  885.330950][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  885.338575][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  885.446722][   T13] veth1_macvtap: left promiscuous mode
[  885.455042][   T13] veth0_macvtap: left promiscuous mode
[  885.477403][   T13] veth1_vlan: left promiscuous mode
[  885.499186][   T13] veth0_vlan: left promiscuous mode
[  885.571843][ T5781] Bluetooth: hci1: command tx timeout
[  887.650043][ T5781] Bluetooth: hci1: command tx timeout
[  888.150592][   T13] team0 (unregistering): Port device team_slave_1 removed
[  888.261971][   T13] team0 (unregistering): Port device team_slave_0 removed
[  889.704983][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_1
[  889.741774][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  889.919653][ T9034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  891.164899][ T9034] hsr_slave_0: entered promiscuous mode
[  891.225705][ T9034] hsr_slave_1: entered promiscuous mode
[  891.433221][ T9162] random: crng reseeded on system resumption
[  899.750132][ T1104] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.201018][ T1104] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.658344][ T1104] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.837760][ T9187] mkiss: ax0: crc mode is auto.
[  900.885650][ T1104] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.534719][ T9107] chnl_net:caif_netlink_parms(): no params data found
[  902.049868][ T7289] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  902.305640][ T7289] usb 7-1: config 0 has no interfaces?
[  902.384728][ T7289] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  902.409847][ T7289] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.418112][ T7289] usb 7-1: Product: syz
[  902.453892][ T7289] usb 7-1: Manufacturer: syz
[  902.458747][ T7289] usb 7-1: SerialNumber: syz
[  902.512251][ T7289] usb 7-1: config 0 descriptor??
[  903.400806][ T9209] IPv6: sit1: Disabled Multicast RS
[  903.451700][ T9209] sit1: entered allmulticast mode
[  904.665267][ T1104] bridge_slave_1: left allmulticast mode
[  904.690780][ T1104] bridge_slave_1: left promiscuous mode
[  904.697497][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.780255][ T1104] bridge_slave_0: left allmulticast mode
[  904.786205][ T1104] bridge_slave_0: left promiscuous mode
[  904.818071][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state
[  905.051720][   T29] audit: type=1326 audit(1774524006.207:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000
[  905.125615][   T29] audit: type=1326 audit(1774524006.237:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000
[  905.197438][ T9221] process 'syz.5.493' launched './file2' with NULL argv: empty string added
[  905.248006][   T29] audit: type=1326 audit(1774524006.347:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f64f6c code=0x7ffc0000
[  905.377361][   T29] audit: type=1326 audit(1774524006.347:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000
[  905.451344][   T29] audit: type=1326 audit(1774524006.347:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000
[  905.504761][   T29] audit: type=1326 audit(1774524006.347:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f64f6c code=0x7ffc0000
[  905.533719][   T29] audit: type=1326 audit(1774524006.467:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000
[  905.669525][   T29] audit: type=1326 audit(1774524006.467:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000
[  905.902530][   T29] audit: type=1326 audit(1774524006.537:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf7f64f6c code=0x7ffc0000
[  906.051567][   T29] audit: type=1326 audit(1774524006.537:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000
[  906.450646][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  906.714040][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  906.805905][ T1104] bond0 (unregistering): Released all slaves
[  907.578583][   T49] Bluetooth: hci3: command 0x0406 tx timeout
[  907.990262][ T9107] bridge0: port 1(bridge_slave_0) entered blocking state
[  907.997835][ T9107] bridge0: port 1(bridge_slave_0) entered disabled state
[  908.043196][ T9107] bridge_slave_0: entered allmulticast mode
[  908.062661][ T9241] No control pipe specified
[  908.125703][ T9107] bridge_slave_0: entered promiscuous mode
[  908.170374][ T9107] bridge0: port 2(bridge_slave_1) entered blocking state
[  908.212694][ T9107] bridge0: port 2(bridge_slave_1) entered disabled state
[  908.242665][ T9107] bridge_slave_1: entered allmulticast mode
[  908.283391][ T9107] bridge_slave_1: entered promiscuous mode
[  909.384400][ T9107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  909.511570][ T1104] hsr_slave_0: left promiscuous mode
[  909.533226][ T1104] hsr_slave_1: left promiscuous mode
[  909.552741][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  909.573684][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  909.608755][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  909.618752][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  909.739078][ T1104] veth1_macvtap: left promiscuous mode
[  909.755095][ T1104] veth0_macvtap: left promiscuous mode
[  909.765686][ T1104] veth1_vlan: left promiscuous mode
[  909.773366][ T1104] veth0_vlan: left promiscuous mode
[  911.313378][ T1104] team0 (unregistering): Port device team_slave_1 removed
[  911.403950][ T1104] team0 (unregistering): Port device team_slave_0 removed
[  912.017965][ T9107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  912.036944][ T9249] netdevsim netdevsim9: Direct firmware load for þ failed with error -2
[  912.058317][ T9034] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  912.070789][ T9249] netdevsim netdevsim9: Falling back to sysfs fallback for: þ
[  912.334581][ T9034] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  912.459800][ T8245] usb 7-1: USB disconnect, device number 2
[  912.717664][ T9034] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  912.926044][ T9107] team0: Port device team_slave_0 added
[  913.005790][ T9034] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  913.158885][ T9107] team0: Port device team_slave_1 added
[  913.625060][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_0
[  913.692924][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  913.788259][ T9107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  913.869851][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_1
[  913.914255][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  914.079447][ T9107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  914.598902][ T9275] IPv6: sit1: Disabled Multicast RS
[  914.611312][ T9275] sit1: entered allmulticast mode
[  915.026010][ T9107] hsr_slave_0: entered promiscuous mode
[  915.074422][ T9107] hsr_slave_1: entered promiscuous mode
[  915.122858][ T9107] debugfs: 'hsr0' already exists in 'hsr'
[  915.159463][ T9107] Cannot create hsr debugfs directory
[  915.282383][ T9277] syzkaller0: entered promiscuous mode
[  915.288102][ T9277] syzkaller0: entered allmulticast mode
[  915.705523][   T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  915.723408][   T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  915.734203][   T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  915.750110][   T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  915.777245][   T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  915.850922][ T9287] overlayfs: missing 'lowerdir'
[  917.288752][ T9298] af_packet: tpacket_rcv: packet too big, clamped from 7192 to 3942. macoff=106
[  917.890632][   T49] Bluetooth: hci5: command tx timeout
[  918.214452][ T9298] syz.5.506 (9298) used greatest stack depth: 2576 bytes left
[  918.873085][ T9311] random: crng reseeded on system resumption
[  919.969916][   T49] Bluetooth: hci5: command tx timeout
[  920.431941][ T9319] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10)
[  920.438824][ T9319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  920.491970][ T9319] vhci_hcd vhci_hcd.0: Device attached
[  920.543953][ T9324] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(13)
[  920.550853][ T9324] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  920.581234][ T9324] vhci_hcd vhci_hcd.0: Device attached
[  920.662737][ T9319] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(15)
[  920.669649][ T9319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  920.724472][ T9328] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(12)
[  920.731343][ T9328] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  920.797558][ T5305] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[  920.799642][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  920.888606][   T29] audit: type=1326 audit(1774524021.927:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="syz.9.512" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f25f6c code=0x0
[  921.022184][ T9319] vhci_hcd vhci_hcd.0: Device attached
[  921.040527][ T9328] vhci_hcd vhci_hcd.0: Device attached
[  921.092921][ T9319] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(20)
[  921.099805][ T9319] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  921.231005][ T9319] vhci_hcd vhci_hcd.0: Device attached
[  921.265331][ T9324] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  921.635770][ T9319] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(26)
[  921.642649][ T9319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  921.975817][ T9319] vhci_hcd vhci_hcd.0: Device attached
[  922.050378][   T49] Bluetooth: hci5: command tx timeout
[  922.405675][ T9328] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  923.009649][ T9340] vhci_hcd: connection closed
[  923.024975][   T57] vhci_hcd vhci_hcd.6: stop threads
[  923.086884][   T57] vhci_hcd vhci_hcd.6: release socket
[  923.119904][ T9337] vhci_hcd: connection closed
[  923.141636][ T9329] vhci_hcd: connection closed
[  923.144695][ T9331] vhci_hcd: connection closed
[  923.153133][ T9325] vhci_hcd: connection closed
[  923.191670][   T57] vhci_hcd vhci_hcd.6: disconnect device
[  923.205037][ T9321] vhci_hcd: connection reset by peer
[  923.338977][   T57] vhci_hcd vhci_hcd.6: stop threads
[  923.487537][   T57] vhci_hcd vhci_hcd.6: release socket
[  923.882771][   T57] vhci_hcd vhci_hcd.6: disconnect device
[  923.895357][   T57] vhci_hcd vhci_hcd.6: stop threads
[  923.917085][   T57] vhci_hcd vhci_hcd.6: release socket
[  924.024854][   T57] vhci_hcd vhci_hcd.6: disconnect device
[  924.130011][   T49] Bluetooth: hci5: command tx timeout
[  924.172943][   T57] vhci_hcd vhci_hcd.6: stop threads
[  924.243224][   T57] vhci_hcd vhci_hcd.6: release socket
[  924.329097][   T57] vhci_hcd vhci_hcd.6: disconnect device
[  924.351366][   T57] vhci_hcd vhci_hcd.6: stop threads
[  924.365463][   T57] vhci_hcd vhci_hcd.6: release socket
[  924.376383][ T9107] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  924.585313][   T57] vhci_hcd vhci_hcd.6: disconnect device
[  924.750919][   T57] vhci_hcd vhci_hcd.6: stop threads
[  924.770071][   T57] vhci_hcd vhci_hcd.6: release socket
[  924.823979][   T57] vhci_hcd vhci_hcd.6: disconnect device
[  924.902965][ T9107] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  925.072718][ T9107] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  925.181438][ T9286] chnl_net:caif_netlink_parms(): no params data found
[  925.283810][ T9107] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  926.040158][ T5305] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  926.369991][ T7608] bridge_slave_1: left allmulticast mode
[  926.375913][ T7608] bridge_slave_1: left promiscuous mode
[  926.440969][ T7608] bridge0: port 2(bridge_slave_1) entered disabled state
[  926.490785][ T7608] bridge_slave_0: left allmulticast mode
[  926.496666][ T7608] bridge_slave_0: left promiscuous mode
[  926.546407][ T7608] bridge0: port 1(bridge_slave_0) entered disabled state
[  927.326439][ T7608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  927.411845][ T7608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  927.527268][ T9378] random: crng reseeded on system resumption
[  927.697844][ T7608] bond0 (unregistering): Released all slaves
[  928.350643][ T5781] Bluetooth: hci2: command 0x0406 tx timeout
[  928.752642][ T7608] hsr_slave_0: left promiscuous mode
[  928.799915][ T7608] hsr_slave_1: left promiscuous mode
[  928.808384][ T7608] batman_adv: batadv0: Removing interface: batadv_slave_0
[  928.899067][ T7608] batman_adv: batadv0: Removing interface: batadv_slave_1
[  929.768119][ T9386] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10)
[  929.775014][ T9386] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  929.814182][ T9386] vhci_hcd vhci_hcd.0: Device attached
[  929.996796][ T9389] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(13)
[  930.003650][ T9389] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  930.331423][   T29] audit: type=1326 audit(1774524031.427:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9382 comm="syz.9.521" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f25f6c code=0x0
[  930.618480][ T5305] usb 45-1: new low-speed USB device number 3 using vhci_hcd
[  930.644972][ T9389] vhci_hcd vhci_hcd.0: Device attached
[  930.660477][ T9386] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(12)
[  930.667356][ T9386] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  930.708408][ T9394] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(18)
[  930.715281][ T9394] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  930.766189][ T9386] vhci_hcd vhci_hcd.0: Device attached
[  930.927000][ T9394] vhci_hcd vhci_hcd.0: Device attached
[  931.588431][ T9386] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(17)
[  931.595317][ T9386] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  931.684358][ T9386] vhci_hcd vhci_hcd.0: Device attached
[  931.802076][ T9389] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  932.143679][ T9386] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  932.170456][ T7608] team0 (unregistering): Port device team_slave_1 removed
[  932.293794][ T9394] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(27)
[  932.300666][ T9394] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  932.700283][ T9394] vhci_hcd vhci_hcd.0: Device attached
[  933.134575][ T7608] team0 (unregistering): Port device team_slave_0 removed
[  933.931449][ T9387] vhci_hcd: connection reset by peer
[  933.937311][ T9396] vhci_hcd: connection closed
[  933.985830][ T9393] vhci_hcd: connection closed
[  933.991132][ T9400] vhci_hcd: connection closed
[  933.996458][ T9390] vhci_hcd: connection closed
[  934.006711][ T9402] vhci_hcd: connection closed
[  934.068195][ T1131] vhci_hcd vhci_hcd.6: stop threads
[  934.129592][ T1131] vhci_hcd vhci_hcd.6: release socket
[  934.209857][ T1131] vhci_hcd vhci_hcd.6: disconnect device
[  934.238977][ T1131] vhci_hcd vhci_hcd.6: stop threads
[  934.277924][ T1131] vhci_hcd vhci_hcd.6: release socket
[  934.330794][ T1131] vhci_hcd vhci_hcd.6: disconnect device
[  934.352173][ T1131] vhci_hcd vhci_hcd.6: stop threads
[  934.409644][ T1131] vhci_hcd vhci_hcd.6: release socket
[  934.424520][ T1131] vhci_hcd vhci_hcd.6: disconnect device
[  934.490648][ T1131] vhci_hcd vhci_hcd.6: stop threads
[  934.589384][ T1131] vhci_hcd vhci_hcd.6: release socket
[  934.610665][ T1131] vhci_hcd vhci_hcd.6: disconnect device
[  934.629155][ T1131] vhci_hcd vhci_hcd.6: stop threads
[  934.636399][ T1131] vhci_hcd vhci_hcd.6: release socket
[  936.789945][ T5305] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  937.601741][ T1131] vhci_hcd vhci_hcd.6: disconnect device
[  939.597476][ T1131] vhci_hcd vhci_hcd.6: stop threads
[  939.668128][ T1131] vhci_hcd vhci_hcd.6: release socket
[  939.765242][ T1131] vhci_hcd vhci_hcd.6: disconnect device
[  941.585450][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  941.642533][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  942.711091][ T9286] bridge0: port 1(bridge_slave_0) entered blocking state
[  942.770009][ T9286] bridge0: port 1(bridge_slave_0) entered disabled state
[  942.792401][ T9423] netlink: 28 bytes leftover after parsing attributes in process `syz.5.526'.
[  942.844848][ T9286] bridge_slave_0: entered allmulticast mode
[  942.917843][ T9423] netlink: 36 bytes leftover after parsing attributes in process `syz.5.526'.
[  943.052310][ T9286] bridge_slave_0: entered promiscuous mode
[  943.089440][ T9286] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.111369][ T9286] bridge0: port 2(bridge_slave_1) entered disabled state
[  943.119149][ T9286] bridge_slave_1: entered allmulticast mode
[  943.266362][ T9286] bridge_slave_1: entered promiscuous mode
[  943.975355][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  944.024673][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  944.043628][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  944.075957][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  944.088659][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  944.231018][ T9436] random: crng reseeded on system resumption
[  944.950519][ T9286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  944.977307][ T9286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  945.271924][ T9286] team0: Port device team_slave_0 added
[  945.356845][ T9286] team0: Port device team_slave_1 added
[  946.128582][ T9286] batman_adv: batadv0: Adding interface: batadv_slave_0
[  946.130112][ T5781] Bluetooth: hci4: command tx timeout
[  946.274984][ T9286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  946.753203][ T9286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  947.040239][ T9286] batman_adv: batadv0: Adding interface: batadv_slave_1
[  947.047459][ T9286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  947.177161][ T9286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  948.209711][ T5781] Bluetooth: hci4: command tx timeout
[  949.451614][ T9286] hsr_slave_0: entered promiscuous mode
[  949.482829][ T9286] hsr_slave_1: entered promiscuous mode
[  950.352229][ T5781] Bluetooth: hci4: command tx timeout
[  950.445697][   T29] audit: type=1326 audit(1774524051.277:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz.5.538" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64f6c code=0x0
[  952.469909][ T5781] Bluetooth: hci4: command tx timeout
[  953.111307][ T9492] netlink: 28 bytes leftover after parsing attributes in process `syz.5.539'.
[  953.229618][ T9492] netlink: 36 bytes leftover after parsing attributes in process `syz.5.539'.
[  953.713072][ T9499] random: crng reseeded on system resumption
[  955.803097][ T9432] chnl_net:caif_netlink_parms(): no params data found
[  958.309972][   T29] audit: type=1326 audit(1774524059.337:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9525 comm="syz.9.547" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f25f6c code=0x0
[  959.663463][ T1093] bridge_slave_1: left allmulticast mode
[  959.683518][ T1093] bridge_slave_1: left promiscuous mode
[  959.704990][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state
[  959.788528][ T1093] bridge_slave_0: left allmulticast mode
[  959.797747][ T1093] bridge_slave_0: left promiscuous mode
[  959.811202][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state
[  960.957706][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  961.016862][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  961.033379][ T1093] bond0 (unregistering): Released all slaves
[  961.500790][ T1093] hsr_slave_0: left promiscuous mode
[  961.594760][ T1093] hsr_slave_1: left promiscuous mode
[  961.620478][ T9562] random: crng reseeded on system resumption
[  961.693039][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0
[  961.886218][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1
[  962.715010][ T9570] netlink: 28 bytes leftover after parsing attributes in process `syz.6.553'.
[  962.825857][ T9570] netlink: 36 bytes leftover after parsing attributes in process `syz.6.553'.
[  963.801725][ T1093] team0 (unregistering): Port device team_slave_1 removed
[  964.141826][ T1093] team0 (unregistering): Port device team_slave_0 removed
[  964.680505][ T9587] fuse: Bad value for 'fd'
[  964.801287][ T9590] netlink: 620 bytes leftover after parsing attributes in process `syz.5.557'.
[  966.817233][ T9432] bridge0: port 1(bridge_slave_0) entered blocking state
[  966.855177][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state
[  967.049857][ T9432] bridge_slave_0: entered allmulticast mode
[  968.819664][   T29] audit: type=1326 audit(1774524068.527:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.9.558" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f25f6c code=0x0
[  968.890839][ T9432] bridge_slave_0: entered promiscuous mode
[  969.168716][ T9432] bridge0: port 2(bridge_slave_1) entered blocking state
[  969.218059][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state
[  969.343227][ T9432] bridge_slave_1: entered allmulticast mode
[  969.413206][ T9432] bridge_slave_1: entered promiscuous mode
[  970.079004][ T9432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  970.112742][ T9616] random: crng reseeded on system resumption
[  970.197796][ T9432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  971.228518][ T9286] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  971.353639][ T9286] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  971.503989][ T9432] team0: Port device team_slave_0 added
[  971.584641][ T9432] team0: Port device team_slave_1 added
[  971.617288][ T9286] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  971.685739][ T9286] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  971.945440][ T9634] fuse: Bad value for 'fd'
[  972.198919][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_0
[  972.221989][ T9637] overlayfs: missing 'lowerdir'
[  972.227819][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  972.286462][ T9432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  972.325852][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_1
[  972.350289][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  972.466713][ T9432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  972.568407][ T9641] netlink: 28 bytes leftover after parsing attributes in process `syz.6.568'.
[  972.641252][ T9641] netlink: 36 bytes leftover after parsing attributes in process `syz.6.568'.
[  974.064438][ T9432] hsr_slave_0: entered promiscuous mode
[  975.242072][ T9432] hsr_slave_1: entered promiscuous mode
[  975.271885][ T9432] debugfs: 'hsr0' already exists in 'hsr'
[  975.307009][ T9432] Cannot create hsr debugfs directory
[  975.972950][   T29] audit: type=1326 audit(1774524077.107:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.9.570" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f25f6c code=0x0
[  978.851529][ T9665] random: crng reseeded on system resumption
[  979.980139][   T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  980.001427][   T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  980.011397][   T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  980.045305][   T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  980.057742][   T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  980.856670][ T9688] fuse: Bad value for 'fd'
[  981.678638][ T9695] overlayfs: missing 'lowerdir'
[  982.135042][ T5781] Bluetooth: hci1: command tx timeout
[  982.474710][ T9704] netlink: 28 bytes leftover after parsing attributes in process `syz.9.580'.
[  982.485120][ T9704] netlink: 36 bytes leftover after parsing attributes in process `syz.9.580'.
[  984.220227][ T5781] Bluetooth: hci1: command tx timeout
[  985.398718][ T9432] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  985.958077][ T9432] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  986.255484][   T29] audit: type=1326 audit(1774524087.247:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.5.581" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64f6c code=0x0
[  986.303012][ T5781] Bluetooth: hci1: command tx timeout
[  986.900519][ T9674] chnl_net:caif_netlink_parms(): no params data found
[  988.027233][ T9432] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  988.121880][ T9432] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  988.370374][ T5781] Bluetooth: hci1: command tx timeout
[  988.885232][ T9724] random: crng reseeded on system resumption
[  990.995084][  T131] bridge_slave_1: left allmulticast mode
[  991.019843][  T131] bridge_slave_1: left promiscuous mode
[  991.070536][  T131] bridge0: port 2(bridge_slave_1) entered disabled state
[  991.135930][  T131] bridge_slave_0: left allmulticast mode
[  991.156471][  T131] bridge_slave_0: left promiscuous mode
[  991.190631][  T131] bridge0: port 1(bridge_slave_0) entered disabled state
[  991.460624][ T9751] overlayfs: missing 'lowerdir'
[  991.806383][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.9.591'.
[  991.815587][ T9756] netlink: 36 bytes leftover after parsing attributes in process `syz.9.591'.
[  992.078078][  T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  992.195768][  T131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  992.257308][  T131] bond0 (unregistering): Released all slaves
[  992.931072][  T131] hsr_slave_0: left promiscuous mode
[  992.950081][  T131] hsr_slave_1: left promiscuous mode
[  992.971744][  T131] batman_adv: batadv0: Removing interface: batadv_slave_0
[  993.007572][  T131] batman_adv: batadv0: Removing interface: batadv_slave_1
[  994.055377][ T9776] random: crng reseeded on system resumption
[  994.861931][  T131] team0 (unregistering): Port device team_slave_1 removed
[  995.103977][  T131] team0 (unregistering): Port device team_slave_0 removed
[  996.042937][   T29] audit: type=1326 audit(1774524097.047:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.9.596" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f25f6c code=0x0
[  998.051132][ T9674] bridge0: port 1(bridge_slave_0) entered blocking state
[  998.212611][ T9674] bridge0: port 1(bridge_slave_0) entered disabled state
[  998.507349][ T9674] bridge_slave_0: entered allmulticast mode
[  999.201383][ T9674] bridge_slave_0: entered promiscuous mode
[  999.727521][ T9794] syzkaller0: entered promiscuous mode
[  999.749128][ T9794] syzkaller0: entered allmulticast mode
[  999.787164][ T9674] bridge0: port 2(bridge_slave_1) entered blocking state
[  999.808134][ T9674] bridge0: port 2(bridge_slave_1) entered disabled state
[  999.830507][ T9674] bridge_slave_1: entered allmulticast mode
[  999.858322][ T9674] bridge_slave_1: entered promiscuous mode
[ 1000.303743][ T9674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1000.728601][ T9817] netlink: 28 bytes leftover after parsing attributes in process `syz.6.602'.
[ 1000.737869][ T9817] netlink: 36 bytes leftover after parsing attributes in process `syz.6.602'.
[ 1000.974152][ T9674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1001.692103][ T9674] team0: Port device team_slave_0 added
[ 1001.813947][ T9674] team0: Port device team_slave_1 added
[ 1001.827654][   T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1001.837446][   T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1001.851597][   T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1001.865834][   T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1001.892570][   T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1002.134389][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1002.159846][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1002.229719][ T9674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1002.284443][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1002.322261][ T9829] overlayfs: missing 'lowerdir'
[ 1002.329694][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1002.455521][ T9674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1002.790887][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1002.851120][ T9837] random: crng reseeded on system resumption
[ 1002.944556][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1003.937258][ T9674] hsr_slave_0: entered promiscuous mode
[ 1003.990144][   T49] Bluetooth: hci5: command tx timeout
[ 1004.002938][ T9674] hsr_slave_1: entered promiscuous mode
[ 1004.183068][   T29] audit: type=1326 audit(1774524105.337:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.5.608" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64f6c code=0x0
[ 1006.054052][   T49] Bluetooth: hci5: command tx timeout
[ 1006.454847][ T9861] syzkaller0: entered promiscuous mode
[ 1006.470068][ T9861] syzkaller0: entered allmulticast mode
[ 1006.484507][ T9868] netlink: 28 bytes leftover after parsing attributes in process `syz.6.613'.
[ 1006.493941][ T9868] netlink: 36 bytes leftover after parsing attributes in process `syz.6.613'.
[ 1007.850978][ T9880] overlayfs: missing 'lowerdir'
[ 1008.050995][ T9884] random: crng reseeded on system resumption
[ 1008.144140][   T49] Bluetooth: hci5: command tx timeout
[ 1009.636866][   T29] audit: type=1326 audit(1774524110.787:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.5.619" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64f6c code=0x0
[ 1009.833633][ T9826] chnl_net:caif_netlink_parms(): no params data found
[ 1010.210214][   T49] Bluetooth: hci5: command tx timeout
[ 1010.734718][  T150] bridge_slave_1: left allmulticast mode
[ 1010.744523][  T150] bridge_slave_1: left promiscuous mode
[ 1010.814241][  T150] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1010.874293][  T150] bridge_slave_0: left allmulticast mode
[ 1010.906978][  T150] bridge_slave_0: left promiscuous mode
[ 1010.964156][  T150] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1011.178340][ T9914] netlink: 28 bytes leftover after parsing attributes in process `syz.5.623'.
[ 1011.188973][ T9914] netlink: 36 bytes leftover after parsing attributes in process `syz.5.623'.
[ 1013.141578][  T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1013.241610][ T9931] random: crng reseeded on system resumption
[ 1013.977157][  T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1014.179566][  T150] bond0 (unregistering): Released all slaves
[ 1014.917918][  T150] hsr_slave_0: left promiscuous mode
[ 1014.954707][  T150] hsr_slave_1: left promiscuous mode
[ 1014.965008][  T150] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1014.976847][  T150] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1015.089804][ T9941] overlayfs: missing 'lowerdir'
[ 1016.007541][  T150] team0 (unregistering): Port device team_slave_1 removed
[ 1016.119984][  T150] team0 (unregistering): Port device team_slave_0 removed
[ 1016.154682][   T29] audit: type=1326 audit(1774524117.307:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9947 comm="syz.5.631" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64f6c code=0x0
[ 1017.267848][ T9674] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1017.434304][ T9674] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1017.575822][ T9962] random: crng reseeded on system resumption
[ 1018.374283][ T9674] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1018.413599][ T9826] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1018.423424][ T9826] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1018.431480][ T9826] bridge_slave_0: entered allmulticast mode
[ 1018.441969][ T9826] bridge_slave_0: entered promiscuous mode
[ 1018.474184][ T9674] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1018.539652][ T9826] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1018.580870][ T9826] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1018.588654][ T9826] bridge_slave_1: entered allmulticast mode
[ 1018.718889][ T9826] bridge_slave_1: entered promiscuous mode
[ 1019.110887][ T9970] netlink: 28 bytes leftover after parsing attributes in process `syz.9.636'.
[ 1019.121162][ T9970] netlink: 36 bytes leftover after parsing attributes in process `syz.9.636'.
[ 1020.805515][ T9826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1020.996666][ T9826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1021.559042][ T9826] team0: Port device team_slave_0 added
[ 1021.604162][ T9989] overlayfs: missing 'lowerdir'
[ 1021.685313][ T9826] team0: Port device team_slave_1 added
[ 1022.188472][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1022.224808][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1022.346408][ T9826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1022.405672][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1022.435307][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1022.531778][   T29] audit: type=1326 audit(1774524123.677:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9998 comm="syz.5.643" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64f6c code=0x0
[ 1022.553724][ T9826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1024.057368][ T9826] hsr_slave_0: entered promiscuous mode
[ 1024.145702][T10014] random: crng reseeded on system resumption
[ 1024.397632][ T9826] hsr_slave_1: entered promiscuous mode
[ 1024.631948][ T9826] debugfs: 'hsr0' already exists in 'hsr'
[ 1024.756201][ T9826] Cannot create hsr debugfs directory
[ 1025.426882][ T9674] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1025.684365][T10023] netlink: 28 bytes leftover after parsing attributes in process `syz.6.647'.
[ 1025.695339][T10023] netlink: 36 bytes leftover after parsing attributes in process `syz.6.647'.
[ 1028.172473][T10029] fuse: Bad value for 'fd'
[ 1028.385586][ T9674] 8021q: adding VLAN 0 to HW filter on device team0
[ 1028.411169][T10030] overlayfs: missing 'lowerdir'
[ 1028.766863][ T9804] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1028.774531][ T9804] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1029.235701][ T9804] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1029.243317][ T9804] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1029.658292][   T29] audit: type=1326 audit(1774524130.787:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10038 comm="syz.5.653" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64f6c code=0x0
[ 1031.706753][T10056] random: crng reseeded on system resumption
[ 1033.361393][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.9.659'.
[ 1033.433357][T10069] fuse: Bad value for 'fd'
[ 1033.455634][T10067] netlink: 36 bytes leftover after parsing attributes in process `syz.9.659'.
[ 1033.945026][ T9826] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1034.034603][ T9826] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1034.317623][ T9826] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1034.331112][T10077] overlayfs: missing 'lowerdir'
[ 1034.506526][ T9826] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1035.396302][ T9674] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1040.101459][ T9826] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1040.366975][ T9826] 8021q: adding VLAN 0 to HW filter on device team0
[ 1040.509844][  T158] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1040.517537][  T158] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1040.620675][T10108] random: crng reseeded on system resumption
[ 1041.130942][  T131] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1041.138482][  T131] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1041.459788][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1041.481001][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1041.501460][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1041.539575][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1041.560512][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1042.298376][T10121] fuse: Bad value for 'fd'
[ 1042.559554][T10123] netlink: 28 bytes leftover after parsing attributes in process `syz.9.671'.
[ 1042.651343][T10123] netlink: 36 bytes leftover after parsing attributes in process `syz.9.671'.
[ 1043.630053][T10134] overlayfs: missing 'lowerdir'
[ 1043.649709][ T5781] Bluetooth: hci4: command tx timeout
[ 1045.741771][ T5781] Bluetooth: hci4: command tx timeout
[ 1047.812319][ T5781] Bluetooth: hci4: command tx timeout
[ 1049.464779][T10112] chnl_net:caif_netlink_parms(): no params data found
[ 1049.899871][ T5781] Bluetooth: hci4: command tx timeout
[ 1050.140536][T10162] random: crng reseeded on system resumption
[ 1050.425891][T10167] fuse: Bad value for 'fd'
[ 1051.584025][ T9826] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1052.661522][T10193] netlink: 28 bytes leftover after parsing attributes in process `syz.9.684'.
[ 1052.809959][T10193] netlink: 36 bytes leftover after parsing attributes in process `syz.9.684'.
[ 1052.854605][ T9804] bridge_slave_1: left allmulticast mode
[ 1052.935413][ T9804] bridge_slave_1: left promiscuous mode
[ 1052.970570][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1053.044110][ T9804] bridge_slave_0: left allmulticast mode
[ 1053.077484][ T9804] bridge_slave_0: left promiscuous mode
[ 1053.196353][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1055.315555][ T9804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1055.507406][ T9804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1055.534146][ T9804] bond0 (unregistering): Released all slaves
[ 1055.667227][T10112] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1055.726832][T10112] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1055.756011][T10112] bridge_slave_0: entered allmulticast mode
[ 1055.815443][T10112] bridge_slave_0: entered promiscuous mode
[ 1055.874075][T10112] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1055.909989][T10112] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1055.917559][T10112] bridge_slave_1: entered allmulticast mode
[ 1055.993249][T10112] bridge_slave_1: entered promiscuous mode
[ 1056.270829][ T9804] hsr_slave_0: left promiscuous mode
[ 1056.369721][ T9804] hsr_slave_1: left promiscuous mode
[ 1056.416282][ T9804] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1056.490776][ T9804] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1056.970580][T10222] random: crng reseeded on system resumption
[ 1058.525235][ T9804] team0 (unregistering): Port device team_slave_1 removed
[ 1058.637861][ T9804] team0 (unregistering): Port device team_slave_0 removed
[ 1059.576736][T10238] overlayfs: missing 'lowerdir'
[ 1059.811213][T10112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1059.923510][T10112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1060.227394][T10245] netlink: 28 bytes leftover after parsing attributes in process `syz.5.698'.
[ 1060.237572][T10245] netlink: 36 bytes leftover after parsing attributes in process `syz.5.698'.
[ 1061.565867][T10253] random: crng reseeded on system resumption
[ 1063.037790][T10112] team0: Port device team_slave_0 added
[ 1063.214616][T10112] team0: Port device team_slave_1 added
[ 1063.680897][T10112] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1063.688148][T10112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1063.824474][T10112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1063.925768][T10112] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1063.949324][T10112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1064.063812][T10112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1064.239260][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1064.246713][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1064.803801][T10112] hsr_slave_0: entered promiscuous mode
[ 1064.844428][T10112] hsr_slave_1: entered promiscuous mode
[ 1064.923784][   T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1064.938952][   T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1064.948749][   T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1064.964612][   T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1065.039474][   T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1067.089671][   T49] Bluetooth: hci1: command tx timeout
[ 1067.106340][T10284] overlayfs: missing 'lowerdir'
[ 1068.104866][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.9.709'.
[ 1068.115158][T10293] netlink: 36 bytes leftover after parsing attributes in process `syz.9.709'.
[ 1068.412143][T10295] random: crng reseeded on system resumption
[ 1069.219023][   T49] Bluetooth: hci1: command tx timeout
[ 1069.937222][T10272] chnl_net:caif_netlink_parms(): no params data found
[ 1071.275353][   T49] Bluetooth: hci1: command tx timeout
[ 1072.054778][T10112] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1072.258968][T10112] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1072.461139][T10112] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1072.636281][T10112] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1072.880321][T10324] overlayfs: missing 'lowerdir'
[ 1073.110386][T10330] random: crng reseeded on system resumption
[ 1073.283551][   T56] bridge_slave_1: left allmulticast mode
[ 1073.338680][   T49] Bluetooth: hci1: command tx timeout
[ 1073.399966][   T56] bridge_slave_1: left promiscuous mode
[ 1073.406943][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1073.564485][   T56] bridge_slave_0: left allmulticast mode
[ 1073.596450][   T56] bridge_slave_0: left promiscuous mode
[ 1073.610870][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1074.363709][T10337] netlink: 28 bytes leftover after parsing attributes in process `syz.5.721'.
[ 1074.373786][T10337] netlink: 36 bytes leftover after parsing attributes in process `syz.5.721'.
[ 1074.542962][T10339] fuse: Bad value for 'fd'
[ 1076.018892][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1076.097463][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1076.124410][   T56] bond0 (unregistering): Released all slaves
[ 1077.833367][   T56] hsr_slave_0: left promiscuous mode
[ 1077.842327][   T56] hsr_slave_1: left promiscuous mode
[ 1077.858768][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1077.911741][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1079.345708][   T56] team0 (unregistering): Port device team_slave_1 removed
[ 1079.453946][   T56] team0 (unregistering): Port device team_slave_0 removed
[ 1079.765774][T10362] random: crng reseeded on system resumption
[ 1080.287800][T10364] overlayfs: missing 'lowerdir'
[ 1080.594167][T10272] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1080.606391][T10272] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1080.616832][T10272] bridge_slave_0: entered allmulticast mode
[ 1080.662987][T10272] bridge_slave_0: entered promiscuous mode
[ 1080.778018][T10350] IPv6: sit1: Disabled Multicast RS
[ 1080.825426][T10350] sit1: entered allmulticast mode
[ 1081.000981][T10272] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1081.008580][T10272] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1081.037285][T10272] bridge_slave_1: entered allmulticast mode
[ 1081.077812][T10272] bridge_slave_1: entered promiscuous mode
[ 1081.654553][T10370] netlink: 28 bytes leftover after parsing attributes in process `syz.9.733'.
[ 1081.668637][T10370] netlink: 36 bytes leftover after parsing attributes in process `syz.9.733'.
[ 1083.545486][T10272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1084.984483][T10272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1085.016119][   T29] audit: type=1326 audit(1774524186.037:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10367 comm="syz.5.732" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64f6c code=0x0
[ 1085.516606][T10272] team0: Port device team_slave_0 added
[ 1085.721752][T10272] team0: Port device team_slave_1 added
[ 1086.007759][T10272] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1086.017873][T10272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1086.046919][T10272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1086.125918][T10272] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1086.136552][T10272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1086.169097][T10272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1086.410572][T10112] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1086.838300][T10112] 8021q: adding VLAN 0 to HW filter on device team0
[ 1086.854261][T10393] overlayfs: missing 'lowerdir'
[ 1086.967913][T10272] hsr_slave_0: entered promiscuous mode
[ 1086.994437][T10272] hsr_slave_1: entered promiscuous mode
[ 1087.036544][T10272] debugfs: 'hsr0' already exists in 'hsr'
[ 1087.044162][T10272] Cannot create hsr debugfs directory
[ 1087.384641][ T9067] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1087.392590][ T9067] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1087.576713][T10397] random: crng reseeded on system resumption
[ 1087.943366][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1087.951167][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1088.895568][T10404] netlink: 28 bytes leftover after parsing attributes in process `syz.9.743'.
[ 1088.907233][T10404] netlink: 36 bytes leftover after parsing attributes in process `syz.9.743'.
[ 1093.439425][   T29] audit: type=1326 audit(1774524194.567:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.5.745" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64f6c code=0x0
[ 1095.872870][T10426] overlayfs: missing 'lowerdir'
[ 1096.126087][T10272] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1096.329053][T10272] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1096.441757][T10272] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1096.612110][T10272] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1096.748530][T10112] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1096.968836][T10435] random: crng reseeded on system resumption
[ 1098.483748][T10112] veth0_vlan: entered promiscuous mode
[ 1098.548229][T10442] netlink: 28 bytes leftover after parsing attributes in process `syz.9.754'.
[ 1098.558441][T10442] netlink: 36 bytes leftover after parsing attributes in process `syz.9.754'.
[ 1100.211501][T10272] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1100.274586][T10272] 8021q: adding VLAN 0 to HW filter on device team0
[ 1100.404496][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1100.412198][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1100.530095][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1100.537794][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1103.555934][   T29] audit: type=1326 audit(1774524204.687:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.5.757" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64f6c code=0x0
[ 1105.555653][ T5781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1105.568731][ T5781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1105.581173][ T5781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1105.617380][ T5781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1105.643462][ T5781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1105.886050][T10463] overlayfs: missing 'lowerdir'
[ 1106.919506][T10473] random: crng reseeded on system resumption
[ 1107.311104][T10477] netlink: 28 bytes leftover after parsing attributes in process `syz.6.764'.
[ 1107.323603][T10477] netlink: 36 bytes leftover after parsing attributes in process `syz.6.764'.
[ 1107.733494][ T5781] Bluetooth: hci5: command tx timeout
[ 1108.772978][T10480] syzkaller0: entered promiscuous mode
[ 1108.779308][T10480] syzkaller0: entered allmulticast mode
[ 1108.988964][T10272] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1109.820186][ T5781] Bluetooth: hci5: command tx timeout
[ 1111.663884][   T29] audit: type=1326 audit(1774524212.807:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.9.768" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f25f6c code=0x0
[ 1111.891733][ T5781] Bluetooth: hci5: command tx timeout
[ 1113.972123][ T5781] Bluetooth: hci5: command tx timeout
[ 1114.288920][T10507] overlayfs: missing 'lowerdir'
[ 1114.590818][ T9804] bridge_slave_1: left allmulticast mode
[ 1114.677322][ T9804] bridge_slave_1: left promiscuous mode
[ 1114.868609][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1115.293830][ T9804] bridge_slave_0: left allmulticast mode
[ 1115.301780][ T9804] bridge_slave_0: left promiscuous mode
[ 1115.308562][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1116.104489][T10515] random: crng reseeded on system resumption
[ 1116.423242][ T9804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1116.481961][ T9804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1116.508059][ T9804] bond0 (unregistering): Released all slaves
[ 1116.625547][T10460] chnl_net:caif_netlink_parms(): no params data found
[ 1116.754465][T10521] netlink: 28 bytes leftover after parsing attributes in process `syz.9.775'.
[ 1116.764865][T10521] netlink: 36 bytes leftover after parsing attributes in process `syz.9.775'.
[ 1118.398522][ T9804] hsr_slave_0: left promiscuous mode
[ 1118.425461][ T9804] hsr_slave_1: left promiscuous mode
[ 1118.467056][ T9804] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1118.487635][ T9804] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1118.521582][ T9804] veth0_vlan: left promiscuous mode
[ 1121.510998][   T29] audit: type=1326 audit(1774524222.527:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.6.779" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f26f6c code=0x0
[ 1123.604781][ T9804] team0 (unregistering): Port device team_slave_1 removed
[ 1123.727428][ T9804] team0 (unregistering): Port device team_slave_0 removed
[ 1124.112459][T10553] overlayfs: missing 'lowerdir'
[ 1125.471012][   T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1125.491317][   T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1125.504293][   T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1125.530599][   T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1125.543482][   T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1125.673293][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1125.685181][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1125.865740][T10562] random: crng reseeded on system resumption
[ 1126.602804][T10569] random: crng reseeded on system resumption
[ 1127.128574][T10575] netlink: 28 bytes leftover after parsing attributes in process `syz.6.785'.
[ 1127.142961][T10575] netlink: 36 bytes leftover after parsing attributes in process `syz.6.785'.
[ 1127.656302][   T49] Bluetooth: hci4: command tx timeout
[ 1129.313106][T10460] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1129.340182][T10460] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1129.405827][T10460] bridge_slave_0: entered allmulticast mode
[ 1129.452999][T10460] bridge_slave_0: entered promiscuous mode
[ 1129.586010][T10460] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1129.631008][T10460] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1129.658134][T10460] bridge_slave_1: entered allmulticast mode
[ 1129.703371][T10460] bridge_slave_1: entered promiscuous mode
[ 1129.729893][ T5781] Bluetooth: hci4: command tx timeout
[ 1130.115448][T10460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1130.225685][T10460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1130.469617][   T29] audit: type=1326 audit(1774524231.597:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10590 comm="syz.9.789" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f25f6c code=0x0
[ 1131.078015][T10460] team0: Port device team_slave_0 added
[ 1131.358954][T10460] team0: Port device team_slave_1 added
[ 1131.819843][ T5781] Bluetooth: hci4: command tx timeout
[ 1132.574984][T10460] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1132.589448][T10460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1132.710606][T10460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1132.941218][T10460] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1132.948386][T10460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1133.090463][T10460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1133.653030][T10616] overlayfs: failed to resolve './file0': -2
[ 1133.900392][ T5781] Bluetooth: hci4: command tx timeout
[ 1134.009698][T10460] hsr_slave_0: entered promiscuous mode
[ 1134.051972][T10460] hsr_slave_1: entered promiscuous mode
[ 1134.098297][T10559] chnl_net:caif_netlink_parms(): no params data found
[ 1134.558833][T10630] random: crng reseeded on system resumption
[ 1134.641071][T10631] netlink: 28 bytes leftover after parsing attributes in process `syz.5.796'.
[ 1134.652545][T10631] netlink: 36 bytes leftover after parsing attributes in process `syz.5.796'.
[ 1135.678371][T10622] syzkaller0: entered promiscuous mode
[ 1135.692740][T10622] syzkaller0: entered allmulticast mode
[ 1137.349889][ T7608] bridge_slave_1: left allmulticast mode
[ 1137.355766][ T7608] bridge_slave_1: left promiscuous mode
[ 1137.408284][ T7608] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1137.461197][ T7608] bridge_slave_0: left allmulticast mode
[ 1137.467074][ T7608] bridge_slave_0: left promiscuous mode
[ 1137.524923][ T7608] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1137.546310][   T29] audit: type=1326 audit(1774524238.697:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.9.799" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f25f6c code=0x0
[ 1139.420295][ T7608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1139.481196][ T7608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1139.516718][ T7608] bond0 (unregistering): Released all slaves
[ 1139.524763][T10664] netlink: 620 bytes leftover after parsing attributes in process `syz.6.803'.
[ 1140.019802][ T7608] hsr_slave_0: left promiscuous mode
[ 1140.069361][ T7608] hsr_slave_1: left promiscuous mode
[ 1140.149699][ T7608] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1140.193897][ T7608] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1140.522872][T10672] random: crng reseeded on system resumption
[ 1141.666725][T10676] netlink: 28 bytes leftover after parsing attributes in process `syz.5.806'.
[ 1141.709610][T10676] netlink: 36 bytes leftover after parsing attributes in process `syz.5.806'.
[ 1142.847970][ T7608] team0 (unregistering): Port device team_slave_1 removed
[ 1142.939566][ T7608] team0 (unregistering): Port device team_slave_0 removed
[ 1144.310479][T10559] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1144.328644][T10559] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1144.346940][T10559] bridge_slave_0: entered allmulticast mode
[ 1144.400999][T10559] bridge_slave_0: entered promiscuous mode
[ 1144.743831][T10704] fuse: Bad value for 'group_id'
[ 1144.753791][T10559] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1144.784544][T10559] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1144.794549][T10704] fuse: Bad value for 'group_id'
[ 1144.810303][T10559] bridge_slave_1: entered allmulticast mode
[ 1144.856867][T10559] bridge_slave_1: entered promiscuous mode
[ 1145.607843][   T29] audit: type=1326 audit(1774524246.757:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.6.812" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f26f6c code=0x0
[ 1145.656766][T10559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1145.843897][T10559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1146.119990][T10715] netlink: 620 bytes leftover after parsing attributes in process `syz.5.813'.
[ 1146.348084][T10559] team0: Port device team_slave_0 added
[ 1147.033790][T10559] team0: Port device team_slave_1 added
[ 1149.104845][T10726] random: crng reseeded on system resumption
[ 1149.593269][T10559] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1149.603667][T10559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1149.641349][T10727] netlink: 28 bytes leftover after parsing attributes in process `syz.5.816'.
[ 1149.740674][T10727] netlink: 36 bytes leftover after parsing attributes in process `syz.5.816'.
[ 1149.811706][T10559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1149.928048][T10559] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1149.963797][T10559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1150.049629][T10559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1150.159333][   T30] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1150.359508][   T30] usb 10-1: Using ep0 maxpacket: 16
[ 1150.423812][   T30] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1150.491834][   T30] usb 10-1: unable to read config index 0 descriptor/start: -71
[ 1150.500741][   T30] usb 10-1: can't read configurations, error -71
[ 1150.742371][T10559] hsr_slave_0: entered promiscuous mode
[ 1150.774027][T10559] hsr_slave_1: entered promiscuous mode
[ 1150.832071][T10559] debugfs: 'hsr0' already exists in 'hsr'
[ 1150.847933][T10559] Cannot create hsr debugfs directory
[ 1151.017766][T10460] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1151.329349][T10460] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1151.523161][T10744] syzkaller0: entered promiscuous mode
[ 1151.529753][T10744] syzkaller0: entered allmulticast mode
[ 1151.672914][T10751] fuse: Bad value for 'group_id'
[ 1151.689509][T10751] fuse: Bad value for 'group_id'
[ 1152.359385][T10460] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1152.681713][T10460] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1153.349345][   T29] audit: type=1326 audit(1774524254.487:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.6.823" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f26f6c code=0x0
[ 1154.762077][T10782] random: crng reseeded on system resumption
[ 1154.995272][T10783] netlink: 28 bytes leftover after parsing attributes in process `syz.5.827'.
[ 1155.030411][T10783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.827'.
[ 1155.429569][   T30] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1155.709654][   T30] usb 7-1: Using ep0 maxpacket: 16
[ 1155.838467][   T30] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1155.904166][   T30] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1155.976987][   T30] usb 7-1: can't read configurations, error -71
[ 1156.468774][T10460] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1156.899082][T10796] fuse: Bad value for 'group_id'
[ 1156.929690][T10796] fuse: Bad value for 'group_id'
[ 1157.103367][T10460] 8021q: adding VLAN 0 to HW filter on device team0
[ 1157.208834][T10559] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1157.369899][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1157.377695][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1157.475637][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1157.483333][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1157.636568][T10559] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1157.879572][T10559] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1158.404947][T10805] syzkaller0: entered promiscuous mode
[ 1158.433299][T10805] syzkaller0: entered allmulticast mode
[ 1158.510012][T10559] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1160.069385][   T29] audit: type=1326 audit(1774524261.207:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.9.836" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f25f6c code=0x0
[ 1160.348995][T10836] random: crng reseeded on system resumption
[ 1160.470439][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1160.731520][   T10] usb 6-1: Using ep0 maxpacket: 16
[ 1160.974298][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1160.993374][   T10] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1161.003896][   T10] usb 6-1: can't read configurations, error -71
[ 1161.410856][T10844] netlink: 28 bytes leftover after parsing attributes in process `syz.9.839'.
[ 1161.421135][T10844] netlink: 36 bytes leftover after parsing attributes in process `syz.9.839'.
[ 1162.836889][T10559] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1163.161273][T10559] 8021q: adding VLAN 0 to HW filter on device team0
[ 1163.265045][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1163.272752][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1163.374289][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1163.381965][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1165.248110][   T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1165.270692][   T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1165.294020][   T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1165.310336][   T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1165.341285][   T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1165.898857][T10874] syzkaller0: entered promiscuous mode
[ 1165.920955][T10874] syzkaller0: entered allmulticast mode
[ 1166.474502][   T29] audit: type=1326 audit(1774524267.607:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.9.847" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f25f6c code=0x0
[ 1166.623177][T10887] netlink: 28 bytes leftover after parsing attributes in process `syz.5.848'.
[ 1166.633849][T10887] netlink: 36 bytes leftover after parsing attributes in process `syz.5.848'.
[ 1167.636395][   T49] Bluetooth: hci1: command tx timeout
[ 1168.720114][ T8245] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1168.902581][ T8245] usb 10-1: Using ep0 maxpacket: 16
[ 1168.988389][ T8245] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1169.034858][ T8245] usb 10-1: unable to read config index 0 descriptor/start: -71
[ 1169.066719][ T8245] usb 10-1: can't read configurations, error -71
[ 1169.654676][   T49] Bluetooth: hci1: command tx timeout
[ 1170.180087][T10559] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1170.429825][T10906] IPv6: sit1: Disabled Multicast RS
[ 1170.474406][T10906] sit1: entered allmulticast mode
[ 1171.730623][   T49] Bluetooth: hci1: command tx timeout
[ 1171.737315][ T7608] bridge_slave_1: left allmulticast mode
[ 1171.743984][ T7608] bridge_slave_1: left promiscuous mode
[ 1171.760635][ T7608] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1171.870891][ T7608] bridge_slave_0: left allmulticast mode
[ 1171.876775][ T7608] bridge_slave_0: left promiscuous mode
[ 1171.962879][ T7608] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1172.745315][   T29] audit: type=1326 audit(1774524273.897:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.6.858" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f26f6c code=0x0
[ 1173.144838][ T7608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1173.178163][ T7608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1173.214557][ T7608] bond0 (unregistering): Released all slaves
[ 1173.439895][T10871] chnl_net:caif_netlink_parms(): no params data found
[ 1173.765239][ T7608] hsr_slave_0: left promiscuous mode
[ 1173.819403][   T49] Bluetooth: hci1: command tx timeout
[ 1173.880480][ T7608] hsr_slave_1: left promiscuous mode
[ 1173.888787][ T7608] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1174.032871][ T7608] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1174.237165][T10943] netlink: 28 bytes leftover after parsing attributes in process `syz.9.859'.
[ 1174.249344][T10943] netlink: 36 bytes leftover after parsing attributes in process `syz.9.859'.
[ 1175.044773][T10954] random: crng reseeded on system resumption
[ 1176.379814][ T7608] team0 (unregistering): Port device team_slave_1 removed
[ 1176.451712][ T7608] team0 (unregistering): Port device team_slave_0 removed
[ 1178.080075][T10961] IPv6: sit1: Disabled Multicast RS
[ 1178.192139][T10961] sit1: entered allmulticast mode
[ 1178.716229][T10559] veth0_vlan: entered promiscuous mode
[ 1178.969946][T10559] veth1_vlan: entered promiscuous mode
[ 1179.656825][T10559] veth0_macvtap: entered promiscuous mode
[ 1180.256725][T10871] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1180.265351][T10871] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1180.286530][T10871] bridge_slave_0: entered allmulticast mode
[ 1180.302550][T10871] bridge_slave_0: entered promiscuous mode
[ 1180.390363][T10871] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1180.429921][T10871] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1180.437705][T10871] bridge_slave_1: entered allmulticast mode
[ 1180.502159][T10871] bridge_slave_1: entered promiscuous mode
[ 1180.554851][T10559] veth1_macvtap: entered promiscuous mode
[ 1182.718182][T10871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1183.320414][T10871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1184.483330][   T29] audit: type=1326 audit(1774524285.407:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10988 comm="syz.6.869" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f26f6c code=0x0
[ 1184.837922][T11000] random: crng reseeded on system resumption
[ 1184.989661][T10559] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1185.106488][T10871] team0: Port device team_slave_0 added
[ 1185.185326][T10871] team0: Port device team_slave_1 added
[ 1185.630420][T10871] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1185.637592][T10871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1185.792836][T10871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1185.874290][T11010] netlink: 28 bytes leftover after parsing attributes in process `syz.9.872'.
[ 1185.883639][T11010] netlink: 36 bytes leftover after parsing attributes in process `syz.9.872'.
[ 1185.949946][T10871] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1185.969907][T10871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1186.105114][T10871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1186.197200][T11008] IPv6: sit1: Disabled Multicast RS
[ 1186.247318][T11008] sit1: entered allmulticast mode
[ 1187.155452][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1187.162376][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1187.311143][ T5781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1187.341183][ T5781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1187.364780][ T5781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1187.387468][ T5781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1187.407157][ T5781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1187.877165][T10871] hsr_slave_0: entered promiscuous mode
[ 1187.954301][T10871] hsr_slave_1: entered promiscuous mode
[ 1189.489794][ T5781] Bluetooth: hci5: command tx timeout
[ 1189.638074][T11041] random: crng reseeded on system resumption
[ 1191.021396][T11057] Bluetooth: MGMT ver 1.23
[ 1191.569757][ T5781] Bluetooth: hci5: command tx timeout
[ 1191.732798][T11063] netlink: 28 bytes leftover after parsing attributes in process `syz.5.884'.
[ 1191.742374][T11063] netlink: 36 bytes leftover after parsing attributes in process `syz.5.884'.
[ 1193.345788][  T131] bridge_slave_1: left allmulticast mode
[ 1193.359290][  T131] bridge_slave_1: left promiscuous mode
[ 1193.386691][  T131] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1193.460363][  T131] bridge_slave_0: left allmulticast mode
[ 1193.466255][  T131] bridge_slave_0: left promiscuous mode
[ 1193.521419][  T131] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1193.747351][ T5781] Bluetooth: hci5: command tx timeout
[ 1195.147089][  T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1195.267705][  T131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1195.369251][  T131] bond0 (unregistering): Released all slaves
[ 1195.434462][T11023] chnl_net:caif_netlink_parms(): no params data found
[ 1195.809688][ T5781] Bluetooth: hci5: command tx timeout
[ 1195.866963][  T131] hsr_slave_0: left promiscuous mode
[ 1195.909676][  T131] hsr_slave_1: left promiscuous mode
[ 1195.932592][  T131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1196.001056][  T131] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1196.019755][  T131] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1196.091004][  T131] veth1_macvtap: left promiscuous mode
[ 1196.096755][  T131] veth0_macvtap: left promiscuous mode
[ 1196.125878][  T131] veth1_vlan: left promiscuous mode
[ 1196.139703][  T131] veth0_vlan: left promiscuous mode
[ 1197.976901][  T131] team0 (unregistering): Port device team_slave_1 removed
[ 1198.059670][  T131] team0 (unregistering): Port device team_slave_0 removed
[ 1198.687195][T10871] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1198.832001][T10871] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1198.944514][T10871] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1199.256243][T10871] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1199.568474][T11104] random: crng reseeded on system resumption
[ 1200.800019][T11117] netlink: 28 bytes leftover after parsing attributes in process `syz.6.893'.
[ 1200.872476][T11117] netlink: 36 bytes leftover after parsing attributes in process `syz.6.893'.
[ 1201.467096][T11023] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1201.530086][T11023] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1201.618764][T11023] bridge_slave_0: entered allmulticast mode
[ 1201.654286][T11023] bridge_slave_0: entered promiscuous mode
[ 1201.695795][T11023] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1201.705488][T11023] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1201.714614][T11023] bridge_slave_1: entered allmulticast mode
[ 1201.784156][T11023] bridge_slave_1: entered promiscuous mode
[ 1202.772012][T11023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1202.881280][T11023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1203.452649][T10871] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1203.517294][T11023] team0: Port device team_slave_0 added
[ 1203.587022][T11023] team0: Port device team_slave_1 added
[ 1203.985034][T11023] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1204.075933][T11023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1204.401492][T11023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1204.483773][T10871] 8021q: adding VLAN 0 to HW filter on device team0
[ 1204.520899][T11023] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1204.565527][T11023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1204.679619][T11023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1205.316292][  T131] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1205.324043][  T131] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1205.477043][  T131] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1205.484899][  T131] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1205.715199][T11023] hsr_slave_0: entered promiscuous mode
[ 1205.790861][T11023] hsr_slave_1: entered promiscuous mode
[ 1205.900380][T11023] debugfs: 'hsr0' already exists in 'hsr'
[ 1205.928148][T11023] Cannot create hsr debugfs directory
[ 1211.965220][T11157] random: crng reseeded on system resumption
[ 1219.075479][T11174] netlink: 28 bytes leftover after parsing attributes in process `syz.6.904'.
[ 1219.170081][T11174] netlink: 36 bytes leftover after parsing attributes in process `syz.6.904'.
[ 1221.890663][T11197] netlink: 55 bytes leftover after parsing attributes in process `syz.5.909'.
[ 1221.933656][T11197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1221.941355][T11197] IPv6: NLM_F_CREATE should be set when creating new route
[ 1221.966019][T11196] IPv6: sit1: Disabled Multicast RS
[ 1222.015412][T11196] sit1: entered allmulticast mode
[ 1222.592719][T10871] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1222.635957][T11023] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1222.741355][T11023] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1222.986544][T11023] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1223.053476][T11023] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1223.112733][T11209] random: crng reseeded on system resumption
[ 1224.991489][T11023] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1225.309009][T11023] 8021q: adding VLAN 0 to HW filter on device team0
[ 1225.608917][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1225.616593][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1225.811200][ T9799] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1225.818889][ T9799] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1226.391141][T11233] netlink: 28 bytes leftover after parsing attributes in process `syz.9.916'.
[ 1226.529418][T11233] netlink: 36 bytes leftover after parsing attributes in process `syz.9.916'.
[ 1226.551128][T11239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1226.561532][T11239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1226.574135][T11239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1226.593594][T11239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1226.613320][T11239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1227.833858][T11246] netlink: 55 bytes leftover after parsing attributes in process `syz.5.919'.
[ 1227.919867][T11246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1228.066813][T11245] IPv6: sit1: Disabled Multicast RS
[ 1228.166545][T11245] sit1: entered allmulticast mode
[ 1228.699426][T11239] Bluetooth: hci4: command tx timeout
[ 1229.298483][T11263] random: crng reseeded on system resumption
[ 1230.751106][T11269] syzkaller0: entered promiscuous mode
[ 1230.756824][T11269] syzkaller0: entered allmulticast mode
[ 1230.771949][T11239] Bluetooth: hci4: command tx timeout
[ 1231.803582][T11023] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1232.337726][T11237] chnl_net:caif_netlink_parms(): no params data found
[ 1232.629385][   T35] bridge_slave_1: left allmulticast mode
[ 1232.635272][   T35] bridge_slave_1: left promiscuous mode
[ 1232.851133][T11239] Bluetooth: hci4: command tx timeout
[ 1232.881039][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1233.044175][   T35] bridge_slave_0: left allmulticast mode
[ 1233.068221][T11303] netlink: 28 bytes leftover after parsing attributes in process `syz.5.928'.
[ 1233.088396][   T35] bridge_slave_0: left promiscuous mode
[ 1233.111170][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1233.140602][T11303] netlink: 36 bytes leftover after parsing attributes in process `syz.5.928'.
[ 1234.081373][T11313] netlink: 55 bytes leftover after parsing attributes in process `syz.6.930'.
[ 1234.096629][T11313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1234.397142][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1234.443403][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1234.490839][   T35] bond0 (unregistering): Released all slaves
[ 1234.654651][T11309] IPv6: sit1: Disabled Multicast RS
[ 1234.684970][T11309] sit1: entered allmulticast mode
[ 1234.941490][T11239] Bluetooth: hci4: command tx timeout
[ 1235.336298][   T35] hsr_slave_0: left promiscuous mode
[ 1235.402454][   T35] hsr_slave_1: left promiscuous mode
[ 1235.417334][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1235.468454][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1235.514381][T11324] random: crng reseeded on system resumption
[ 1236.443719][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.935'.
[ 1237.964323][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1238.272151][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1239.594433][T11355] netlink: 28 bytes leftover after parsing attributes in process `syz.9.940'.
[ 1239.682226][T11355] netlink: 36 bytes leftover after parsing attributes in process `syz.9.940'.
[ 1241.680016][T11237] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1241.688490][T11237] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1241.732197][T11237] bridge_slave_0: entered allmulticast mode
[ 1241.802969][T11237] bridge_slave_0: entered promiscuous mode
[ 1241.831562][T11376] fuse: Bad value for 'fd'
[ 1241.914817][T11374] IPv6: sit1: Disabled Multicast RS
[ 1241.932975][T11374] sit1: entered allmulticast mode
[ 1241.985398][T11237] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1241.996292][T11237] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1242.017636][T11237] bridge_slave_1: entered allmulticast mode
[ 1242.063072][T11237] bridge_slave_1: entered promiscuous mode
[ 1242.593184][T11237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1242.785659][T11237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1243.087181][T11384] random: crng reseeded on system resumption
[ 1243.334661][T11237] team0: Port device team_slave_0 added
[ 1243.438348][T11237] team0: Port device team_slave_1 added
[ 1243.601917][T11023] veth0_vlan: entered promiscuous mode
[ 1243.854199][T11237] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1243.869412][T11237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1243.991075][T11237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1244.055169][T11237] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1244.109253][T11237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1244.205611][T11237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1244.322628][T11023] veth1_vlan: entered promiscuous mode
[ 1244.815625][T11237] hsr_slave_0: entered promiscuous mode
[ 1244.851945][T11237] hsr_slave_1: entered promiscuous mode
[ 1247.007750][T11416] netlink: 28 bytes leftover after parsing attributes in process `syz.5.951'.
[ 1247.104038][T11416] netlink: 36 bytes leftover after parsing attributes in process `syz.5.951'.
[ 1248.556967][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1248.569446][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1248.611003][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1248.680774][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1248.702688][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1248.731400][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1248.778842][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1249.315856][T11425] IPv6: sit1: Disabled Multicast RS
[ 1249.396473][T11425] sit1: entered allmulticast mode
[ 1250.677676][T11440] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1250.744179][T11237] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1250.830392][T11440] random: crng reseeded on system resumption
[ 1250.846304][T11237] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1250.929509][ T5781] Bluetooth: hci1: command tx timeout
[ 1251.104968][T11237] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1251.184215][T11237] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1253.014667][ T5781] Bluetooth: hci1: command tx timeout
[ 1253.785021][T11421] chnl_net:caif_netlink_parms(): no params data found
[ 1254.162164][T11474] netlink: 28 bytes leftover after parsing attributes in process `syz.9.961'.
[ 1254.171631][T11474] netlink: 36 bytes leftover after parsing attributes in process `syz.9.961'.
[ 1254.714567][   T56] bridge_slave_1: left allmulticast mode
[ 1254.721775][   T56] bridge_slave_1: left promiscuous mode
[ 1254.732718][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1254.849005][   T56] bridge_slave_0: left allmulticast mode
[ 1254.865065][   T56] bridge_slave_0: left promiscuous mode
[ 1254.920644][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1255.090174][ T5781] Bluetooth: hci1: command tx timeout
[ 1256.011280][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1256.110228][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1256.158403][   T56] bond0 (unregistering): Released all slaves
[ 1256.927000][   T56] hsr_slave_0: left promiscuous mode
[ 1257.022880][   T56] hsr_slave_1: left promiscuous mode
[ 1257.151571][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1257.169699][ T5781] Bluetooth: hci1: command tx timeout
[ 1257.342124][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1257.860386][   T56] veth1_vlan: left promiscuous mode
[ 1257.865850][   T56] veth0_vlan: left promiscuous mode
[ 1260.265602][   T56] team0 (unregistering): Port device team_slave_1 removed
[ 1260.328384][   T56] team0 (unregistering): Port device team_slave_0 removed
[ 1261.535149][T11237] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1261.797969][T11237] 8021q: adding VLAN 0 to HW filter on device team0
[ 1262.228612][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1262.236259][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1262.398407][T11421] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1262.478981][T11421] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1262.539382][T11421] bridge_slave_0: entered allmulticast mode
[ 1262.593203][T11421] bridge_slave_0: entered promiscuous mode
[ 1262.626073][T11530] netlink: 28 bytes leftover after parsing attributes in process `syz.5.974'.
[ 1262.635356][T11530] netlink: 36 bytes leftover after parsing attributes in process `syz.5.974'.
[ 1262.792374][T11421] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1262.848289][T11421] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1262.915572][T11421] bridge_slave_1: entered allmulticast mode
[ 1263.030510][T11421] bridge_slave_1: entered promiscuous mode
[ 1263.692273][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1263.700023][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1263.854445][T11541] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1263.869507][T11541] =====================================================
[ 1263.877021][T11541] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290
[ 1263.885141][T11541]  dvbdmx_release_ts_feed+0x198/0x290
[ 1263.890965][T11541]  dvb_dmxdev_add_pid+0xacc/0xb50
[ 1263.896197][T11541]  dvb_demux_do_ioctl+0x78b/0xc80
[ 1263.901553][T11541]  dvb_usercopy+0x263/0x500
[ 1263.906496][T11541]  dvb_demux_ioctl+0x46/0x70
[ 1263.915217][T11541]  __ia32_compat_sys_ioctl+0x7f9/0x1270
[ 1263.921246][T11541]  ia32_sys_call+0x2854/0x4360
[ 1263.926310][T11541]  __do_fast_syscall_32+0x17f/0x3f0
[ 1263.931987][T11541]  do_fast_syscall_32+0x37/0x80
[ 1263.937045][T11541]  do_SYSENTER_32+0x1f/0x30
[ 1263.941921][T11541]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1263.952333][T11541] 
[ 1263.954795][T11541] Uninit was created at:
[ 1263.961170][T11541]  __alloc_frozen_pages_noprof+0x6f7/0x1020
[ 1263.967319][T11541]  alloc_pages_mpol+0x328/0x860
[ 1263.972632][T11541]  alloc_pages_noprof+0x101/0x280
[ 1263.977838][T11541]  __vmalloc_node_range_noprof+0xa97/0x2d80
[ 1263.984352][T11541]  __vmalloc_noprof+0x128/0x1f0
[ 1263.989535][T11541]  vmalloc_array_noprof+0x48/0x80
[ 1263.994889][T11541]  dvb_dmx_init+0x121/0x930
[ 1263.999775][T11541]  vidtv_bridge_probe+0x1b1f/0x2690
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1264.005428][T11541]  platform_probe+0x213/0x370
[ 1264.005728][T11541]  really_probe+0x4d5/0xe40
[ 1264.005837][T11541]  __driver_probe_device+0x25e/0x370
[ 1264.006049][T11541]  driver_probe_device+0x70/0x8f0
[ 1264.006165][T11541]  __driver_attach+0x541/0xaa0
[ 1264.006345][T11541]  bus_for_each_dev+0x33b/0x580
[ 1264.006491][T11541]  driver_attach+0x51/0x70
[ 1264.006654][T11541]  bus_add_driver+0x54f/0xdb0
[ 1264.006789][T11541]  driver_register+0x42e/0x6a0
[ 1264.006905][T11541]  __platform_driver_register+0x65/0x80
[ 1264.007078][T11541]  vidtv_bridge_init+0x73/0x100
[ 1264.007332][T11541]  do_one_initcall+0x237/0xbb0
[ 1264.007483][T11541]  do_initcall_level+0x157/0x350
[ 1264.007632][T11541]  do_initcalls+0x176/0x310
[ 1264.007732][T11541]  do_basic_setup+0x1d/0x30
[ 1264.007833][T11541]  kernel_init_freeable+0x213/0x460
[ 1264.007949][T11541]  kernel_init+0x2f/0x5e0
[ 1264.008131][T11541]  ret_from_fork+0x20f/0x910
[ 1264.008306][T11541]  ret_from_fork_asm+0x1a/0x30
[ 1264.008473][T11541] 
[ 1264.008546][T11541] CPU: 0 UID: 0 PID: 11541 Comm: syz.9.976 Not tainted syzkaller #0 PREEMPT(full) 
[ 1264.008674][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1264.008743][T11541] =====================================================
[ 1264.008791][T11541] Disabling lock debugging due to kernel taint
[ 1264.115985][T11421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1264.127416][T11541] Kernel panic - not syncing: kmsan.panic set ...
[ 1264.127518][T11541] CPU: 1 UID: 0 PID: 11541 Comm: syz.9.976 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[ 1264.127681][T11541] Tainted: [B]=BAD_PAGE
[ 1264.127728][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1264.127813][T11541] Call Trace:
[ 1264.127861][T11541]  <TASK>
[ 1264.127892][T11541]  __dump_stack+0x26/0x30
[ 1264.127996][T11541]  dump_stack_lvl+0x50/0x1c0
[ 1264.128090][T11541]  ? dump_stack+0x12/0x25
[ 1264.128186][T11541]  dump_stack+0x1e/0x25
[ 1264.128274][T11541]  vpanic+0x7b4/0x1430
[ 1264.128398][T11541]  panic+0x15d/0x160
[ 1264.128532][T11541]  kmsan_report+0x31a/0x320
[ 1264.128653][T11541]  ? __msan_warning+0x1b/0x30
[ 1264.128755][T11541]  ? dvbdmx_release_ts_feed+0x198/0x290
[ 1264.128862][T11541]  ? dvb_dmxdev_add_pid+0xacc/0xb50
[ 1264.128948][T11541]  ? dvb_demux_do_ioctl+0x78b/0xc80
[ 1264.129031][T11541]  ? dvb_usercopy+0x263/0x500
[ 1264.129224][T11541]  ? dvb_demux_ioctl+0x46/0x70
[ 1264.129340][T11541]  ? __ia32_compat_sys_ioctl+0x7f9/0x1270
[ 1264.129520][T11541]  ? ia32_sys_call+0x2854/0x4360
[ 1264.129636][T11541]  ? __do_fast_syscall_32+0x17f/0x3f0
[ 1264.129812][T11541]  ? do_fast_syscall_32+0x37/0x80
[ 1264.129967][T11541]  ? do_SYSENTER_32+0x1f/0x30
[ 1264.130114][T11541]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1264.130291][T11541]  ? kmsan_get_metadata+0xf1/0x160
[ 1264.130480][T11541]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1264.130658][T11541]  ? kmsan_get_metadata+0xf1/0x160
[ 1264.130854][T11541]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1264.131062][T11541]  ? preempt_schedule_common+0x5b/0x80
[ 1264.131191][T11541]  ? preempt_schedule+0x30/0x40
[ 1264.131310][T11541]  ? preempt_schedule_thunk+0x16/0x30
[ 1264.131451][T11541]  ? _raw_spin_unlock_irq+0x47/0x50
[ 1264.131638][T11541]  ? kmsan_get_metadata+0x146/0x160
[ 1264.131848][T11541]  __msan_warning+0x1b/0x30
[ 1264.132014][T11541]  dvbdmx_release_ts_feed+0x198/0x290
[ 1264.132188][T11541]  dvb_dmxdev_add_pid+0xacc/0xb50
[ 1264.132322][T11541]  ? __pfx_dvbdmx_release_ts_feed+0x10/0x10
[ 1264.132521][T11541]  dvb_demux_do_ioctl+0x78b/0xc80
[ 1264.132668][T11541]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 1264.132815][T11541]  dvb_usercopy+0x263/0x500
[ 1264.133003][T11541]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 1264.133180][T11541]  ? kmsan_get_metadata+0xf1/0x160
[ 1264.133377][T11541]  dvb_demux_ioctl+0x46/0x70
[ 1264.133501][T11541]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[ 1264.133631][T11541]  __ia32_compat_sys_ioctl+0x7f9/0x1270
[ 1264.133825][T11541]  ? fpregs_restore_userregs+0x213/0x3e0
[ 1264.134063][T11541]  ? kmsan_get_metadata+0xf1/0x160
[ 1264.134250][T11541]  ? kmsan_get_metadata+0xf1/0x160
[ 1264.134458][T11541]  ia32_sys_call+0x2854/0x4360
[ 1264.134576][T11541]  __do_fast_syscall_32+0x17f/0x3f0
[ 1264.134756][T11541]  do_fast_syscall_32+0x37/0x80
[ 1264.134923][T11541]  do_SYSENTER_32+0x1f/0x30
[ 1264.135071][T11541]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1264.135250][T11541] RIP: 0023:0xf7f25f6c
[ 1264.135337][T11541] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 1264.135459][T11541] RSP: 002b:00000000f53a450c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1264.135577][T11541] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000040026f33
[ 1264.135661][T11541] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000
[ 1264.135735][T11541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1264.135814][T11541] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1264.135889][T11541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1264.136002][T11541]  </TASK>
[ 1264.136825][T11541] Kernel Offset: disabled