last executing test programs:

13m32.056542676s ago: executing program 0 (id=646):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r2, &(0x7f00000006c0)=0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
socket(0x1e, 0x4, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
socket$inet(0x2b, 0x801, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x8, 0x4)

13m16.106221626s ago: executing program 32 (id=646):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r2, &(0x7f00000006c0)=0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
socket(0x1e, 0x4, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
socket$inet(0x2b, 0x801, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x8, 0x4)

9m21.769166776s ago: executing program 4 (id=1043):
syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x300043)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1,'])
openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0)

9m19.987296211s ago: executing program 4 (id=1048):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r2, &(0x7f00000006c0)=0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
socket(0x1e, 0x4, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r6 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x20000014}, 0x2c)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x8, 0x4)

9m18.83660463s ago: executing program 4 (id=1049):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180062)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f00000003c0)=0x7)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r7, 0x0, 0x40000)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/warn_count', 0x20003, 0x18b)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}})
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0xe)

9m17.488479894s ago: executing program 4 (id=1054):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b14, 0x0)

9m11.590382423s ago: executing program 4 (id=1064):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180062)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f00000003c0)=0x7)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r7, 0x0, 0x40000)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/warn_count', 0x20003, 0x18b)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}})
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0xe)

9m6.269252996s ago: executing program 4 (id=1068):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r2, &(0x7f00000006c0)=0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
socket(0x1e, 0x4, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r6 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x20000014}, 0x2c)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x8, 0x4)

8m49.227081305s ago: executing program 33 (id=1068):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r2, &(0x7f00000006c0)=0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
socket(0x1e, 0x4, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r6 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x20000014}, 0x2c)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x8, 0x4)

7m29.594431709s ago: executing program 6 (id=1211):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b14, 0x0)

7m23.98882747s ago: executing program 6 (id=1217):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x2000000000000018, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000ff0100005c0000d804b103bc56650000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800)
fanotify_init(0x4, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10})
io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]})
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe)
listen(r2, 0x0)

7m21.555930851s ago: executing program 6 (id=1224):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(0x0, &(0x7f00000006c0)=0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
socket(0x1e, 0x4, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r5 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x20000014}, 0x2c)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x8, 0x4)

7m13.032778666s ago: executing program 6 (id=1234):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\n\x00\x00\x00\a\x00\x00'], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7m12.709418224s ago: executing program 6 (id=1236):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000)
fanotify_mark(0xffffffffffffffff, 0x105, 0x40009965, 0xffffffffffffffff, 0x0)

7m9.69764271s ago: executing program 6 (id=1239):
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000640)='30 ', 0x3)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0)
write(r1, &(0x7f0000000740)='30\n\x00', 0x3)

6m53.808044724s ago: executing program 34 (id=1239):
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000640)='30 ', 0x3)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0)
write(r1, &(0x7f0000000740)='30\n\x00', 0x3)

6m35.379194488s ago: executing program 5 (id=1287):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)

6m34.238330267s ago: executing program 5 (id=1290):
syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x300043)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1,'])
openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0)

6m27.769041399s ago: executing program 5 (id=1298):
r0 = socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@getnetconf={0x14, 0x52, 0x800, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
r6 = socket(0x2a, 0x2, 0x5)
connect$inet6(r6, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c)
close_range(r5, 0xffffffffffffffff, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000240)={0x6, 0x5, 0x0, 0x7ff, @vifc_lcl_addr=@multicast1, @multicast1}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x1, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r8, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES16=r8, @ANYRESOCT=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r11, 0x4)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000100", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x3, 0x0, 0x0, 0xf, 0x0, 0x7}]}, {0x0, [0x30, 0x30]}}, 0x0, 0x28, 0x0, 0x9}, 0x28)

6m25.561682874s ago: executing program 5 (id=1302):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x2000000000000018, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000ff0100005c0000d804b103bc56650000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800)
fanotify_init(0x4, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10})
io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]})
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe)
listen(r2, 0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xbe0fd63fc648614b})
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84)

6m24.293783306s ago: executing program 5 (id=1304):
syz_open_dev$sndpcmc(0x0, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x300, 0xffffffff, 0x98, 0x188, 0x0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0xffffffff, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {0xff}, 0x6, 0x0, 0x32}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x7468, 0x99e, 0x1}}, @common=@addrtype={{0x30}, {0x10, 0xc0, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'geneve1\x00', 'wlan1\x00', {}, {}, 0x21}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x0, [], 0x0, 0x2}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x3b2fe5ff, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)

6m21.973252464s ago: executing program 5 (id=1306):
r0 = socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
ptrace$pokeuser(0x6, 0x0, 0x9, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@getnetconf={0x14, 0x52, 0x800, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
r5 = socket(0x2a, 0x2, 0x5)
connect$inet6(r5, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000240)={0x6, 0x5, 0x0, 0x7ff, @vifc_lcl_addr=@multicast1, @multicast1}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x1, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r7, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r7, @ANYRESOCT=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r10, 0x4)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000100", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x3, 0x0, 0x0, 0xf, 0x0, 0x7}]}, {0x0, [0x30, 0x30]}}, 0x0, 0x28, 0x0, 0x9}, 0x28)

6m5.84805733s ago: executing program 35 (id=1306):
r0 = socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
ptrace$pokeuser(0x6, 0x0, 0x9, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@getnetconf={0x14, 0x52, 0x800, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
r5 = socket(0x2a, 0x2, 0x5)
connect$inet6(r5, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000240)={0x6, 0x5, 0x0, 0x7ff, @vifc_lcl_addr=@multicast1, @multicast1}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x1, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r7, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r7, @ANYRESOCT=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r10, 0x4)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000100", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x3, 0x0, 0x0, 0xf, 0x0, 0x7}]}, {0x0, [0x30, 0x30]}}, 0x0, 0x28, 0x0, 0x9}, 0x28)

3m54.998305809s ago: executing program 2 (id=1494):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0xd)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000000c0), 0x6, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getpgrp(r0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
unshare(0x6a040000)

3m52.034042963s ago: executing program 2 (id=1498):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_clone3(&(0x7f0000014600)={0x1000000, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040))

3m44.689940858s ago: executing program 2 (id=1506):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0xd)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000000c0), 0x6, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getpgrp(r0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
unshare(0x6a040000)

3m36.398134537s ago: executing program 2 (id=1517):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0)

3m32.530213234s ago: executing program 2 (id=1520):
socketpair$unix(0x1, 0x2, 0x0, 0x0)

3m32.031605956s ago: executing program 2 (id=1522):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
setns(0xc9, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010700"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24000004)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'})
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r5 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r6, &(0x7f0000000340)={0xa, 0x4e24, 0x103, @empty}, 0x1c)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/icmp\x00')
preadv(r7, &(0x7f0000000440)=[{&(0x7f0000000640)=""/156, 0x9c}], 0x1, 0x14, 0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
openat$vga_arbiter(0xffffff9c, 0x0, 0x10000, 0x0)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0)
ioctl$COMEDI_CMD(r9, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0})
read(r9, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ffff2bbd7000fcdbdf2503000003"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000)

3m30.833297496s ago: executing program 36 (id=1522):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
setns(0xc9, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010700"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24000004)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'})
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r5 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r6, &(0x7f0000000340)={0xa, 0x4e24, 0x103, @empty}, 0x1c)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/icmp\x00')
preadv(r7, &(0x7f0000000440)=[{&(0x7f0000000640)=""/156, 0x9c}], 0x1, 0x14, 0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
openat$vga_arbiter(0xffffff9c, 0x0, 0x10000, 0x0)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0)
ioctl$COMEDI_CMD(r9, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0})
read(r9, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ffff2bbd7000fcdbdf2503000003"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000)

2m35.414760009s ago: executing program 3 (id=1581):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, &(0x7f0000000280)})
r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22000)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff})
syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8)

2m28.682523168s ago: executing program 3 (id=1587):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0)
io_setup(0xfffffffd, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4)
r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)

2m24.562095182s ago: executing program 3 (id=1593):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x14, 0x2, 0x6, 0x801, 0xe4340000}, 0x14}}, 0x2)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x5, 0x2, {0x1, 0x1}, {0x38, 0x6}, @period={0x58, 0x6, 0x9, 0xc2, 0xd, {0x7, 0x9, 0x1, 0x7fff}, 0x0, &(0x7f0000000080)}})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

2m24.402802876s ago: executing program 3 (id=1594):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$describe(0x6, 0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x200000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)

2m23.533305357s ago: executing program 3 (id=1595):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, &(0x7f0000000280)})
r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22000)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff})
syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8)

2m21.893626229s ago: executing program 3 (id=1596):
socket$packet(0x11, 0x2, 0x300)
r0 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000e40), 0x20000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
getsockopt$inet_buf(r1, 0x0, 0x29, 0x0, &(0x7f0000695ffc))

2m6.384221939s ago: executing program 37 (id=1596):
socket$packet(0x11, 0x2, 0x300)
r0 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000e40), 0x20000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
getsockopt$inet_buf(r1, 0x0, 0x29, 0x0, &(0x7f0000695ffc))

14.368827669s ago: executing program 1 (id=1736):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x2d, &(0x7f0000000280)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10007}, 0x94)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = dup(r2)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r3})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, r2, 0x0)
memfd_secret(0x0)

9.910568055s ago: executing program 9 (id=1740):
syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000000)=0x5, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe2$9p(0x0, 0x4000)
shutdown(r1, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r3, &(0x7f0000000100)=""/9, 0xfffffd87)
write$tun(r3, 0x0, 0xffe)
socket(0x11, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000180)=@qipcrtr, 0x80, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000003ec0)=[{0x0}, {0x0}, {&(0x7f0000003a80)=""/9, 0x9}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x1}], 0x2, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x150)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x9, @loopback, 0x5}, 0x1c)
pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
mount(&(0x7f0000000080)=@filename='proc\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000180)='0 2000000000 0\n', 0xf)
syz_open_dev$vcsa(&(0x7f00000000c0), 0x1, 0x2)

9.866041225s ago: executing program 1 (id=1741):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004040)

9.578612263s ago: executing program 1 (id=1742):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x46, 0x0, &(0x7f0000000800)="6b786c3b9253e57dd3222f7bdf590c15fe2cd73d83faeb3753d54733014b954c26944bb547f5bf05da7efe4751e0ac70b9deeaa3477f7fc9cf201f2326d3574fe4f8d4d37c1b"})

8.862188361s ago: executing program 1 (id=1743):
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5000000008d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6d49cba517b0563c14fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0xfffffffffffffd8a, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000003080), 0xce4, r2}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'})

8.855505271s ago: executing program 9 (id=1744):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x2000000000000018, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000ff0100005c0000d804b103bc56650000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800)
fanotify_init(0x4, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10})
io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]})
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xbe0fd63fc648614b})
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84)

7.621758813s ago: executing program 1 (id=1745):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fanotify_mark(0xffffffffffffffff, 0x105, 0x40009965, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7.597664834s ago: executing program 9 (id=1746):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vim2m(0x0, 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r2, &(0x7f00000006c0)=0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
socket(0x1e, 0x4, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r6 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x20000014}, 0x2c)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x8, 0x4)

7.455797198s ago: executing program 0 (id=1612):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000002a40)={0x1, @pix_mp={0x6, 0x401, 0x32314258, 0x2, 0x0, [{0xff7e, 0xfffff2d0}, {0x1, 0x40}, {0xb, 0x9}, {0x0, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0x6}, {0xfffff7e0, 0x9fa}], 0x40, 0x4, 0x3, 0x1, 0x2}})

6.364838366s ago: executing program 0 (id=1747):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0)
r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x52f, r4)
mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r5, 0x10d, 0x21}, 0x0, &(0x7f0000000780)="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"/269, 0x0)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r3)

5.183981316s ago: executing program 0 (id=1748):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
connect$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x10, 0x0, 0x1, 0x5, 0x6, @multicast}, 0x14)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)

3.647002496s ago: executing program 1 (id=1749):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xfffffee2)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
listen(r3, 0xfffd)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

3.130628359s ago: executing program 9 (id=1750):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000800)="6b786c3b9253e57dd3222f7bdf590c15fe2cd73d83faeb3753d54733014b954c26944bb547f5bf05da7efe4751e0ac70b9deeaa3477f7fc9cf201f2326d3574fe4f8d4d37c1bc67d4c371d"})

2.921659945s ago: executing program 9 (id=1751):
open(0x0, 0x41893e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r4, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004040)
openat$kvm(0xffffffffffffff9c, 0x0, 0x201, 0x0)

1.323343836s ago: executing program 9 (id=1752):
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000003080), 0xce4, r2}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'})

1.318466456s ago: executing program 0 (id=1753):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x2000000000000018, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000ff0100005c0000d804b103bc56650000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800)
fanotify_init(0x4, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
getpid()
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10})
io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]})
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xbe0fd63fc648614b})
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84)

0s ago: executing program 0 (id=1754):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r0, {0x2}}, './file0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003540)={'wlan0\x00'})
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @empty, 0x5}, 0x1c)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000640)={{0x8, 0x4, 0xfff, 0xcf, 'syz0\x00', 0x8d20}, 0x3, 0x1a3, 0x1, 0xffffffffffffffff, 0x1, 0x9, 'syz1\x00', &(0x7f00000001c0)=['/dev/video#\x00'], 0xc})
ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
preadv(r5, 0x0, 0x0, 0x10001, 0x80)
ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000})

kernel console output (not intermixed with test programs):

): hsr0: link becomes ready
[  911.957308][ T4286] Bluetooth: hci2: command 0x0409 tx timeout
[  912.806740][T10457] chnl_net:caif_netlink_parms(): no params data found
[  913.254856][T10457] bridge0: port 1(bridge_slave_0) entered blocking state
[  913.268109][T10457] bridge0: port 1(bridge_slave_0) entered disabled state
[  914.662725][ T4286] Bluetooth: hci2: command 0x041b tx timeout
[  914.695477][T10457] device bridge_slave_0 entered promiscuous mode
[  914.789149][T10457] bridge0: port 2(bridge_slave_1) entered blocking state
[  914.796508][T10457] bridge0: port 2(bridge_slave_1) entered disabled state
[  914.805357][T10457] device bridge_slave_1 entered promiscuous mode
[  914.836596][T10457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  914.950882][T10457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  914.986384][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  914.998433][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  915.494370][T10126] 8021q: adding VLAN 0 to HW filter on device batadv0
[  915.692424][T10457] team0: Port device team_slave_0 added
[  915.745766][T10457] team0: Port device team_slave_1 added
[  916.077856][T10457] batman_adv: batadv0: Adding interface: batadv_slave_0
[  916.106424][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  916.490073][T10457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  916.758445][ T4286] Bluetooth: hci2: command 0x040f tx timeout
[  917.027807][T10457] batman_adv: batadv0: Adding interface: batadv_slave_1
[  917.034800][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  917.087284][T10457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  917.381644][T10457] device hsr_slave_0 entered promiscuous mode
[  917.434870][T10457] device hsr_slave_1 entered promiscuous mode
[  918.857139][ T4286] Bluetooth: hci2: command 0x0419 tx timeout
[  918.927877][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  918.982132][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  919.004759][T10562] syz.3.1435: attempt to access beyond end of device
[  919.004759][T10562] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[  919.072081][ T4372] device hsr_slave_0 left promiscuous mode
[  919.110735][ T4372] device hsr_slave_1 left promiscuous mode
[  919.640821][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[  919.719214][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[  919.840442][ T4372] device bridge_slave_1 left promiscuous mode
[  919.895674][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[  920.039049][ T4372] device bridge_slave_0 left promiscuous mode
[  920.075906][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[  921.619426][T10568] binfmt_misc: register: failed to install interpreter file ./file2
[  921.636820][ T4372] device veth0_vlan left promiscuous mode
[  922.744997][ T4291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  922.755441][ T4291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  922.764828][ T4294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  922.774286][ T4294] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  922.809375][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  922.822723][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  924.067984][ T4372] team0 (unregistering): Port device team_slave_1 removed
[  925.760151][ T4291] Bluetooth: hci5: command 0x0409 tx timeout
[  925.944614][ T4372] team0 (unregistering): Port device team_slave_0 removed
[  926.073318][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  926.360750][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  927.216049][ T4372] bond0 (unregistering): Released all slaves
[  927.361485][T10593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  927.371275][T10593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  927.379027][T10593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  927.507769][T10600] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1443'.
[  929.107035][ T4291] Bluetooth: hci5: command 0x041b tx timeout
[  931.157241][ T4291] Bluetooth: hci5: command 0x040f tx timeout
[  931.226823][T10580] chnl_net:caif_netlink_parms(): no params data found
[  931.481902][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  931.488375][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  931.960056][T10580] bridge0: port 1(bridge_slave_0) entered blocking state
[  931.967660][T10580] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.976085][T10580] device bridge_slave_0 entered promiscuous mode
[  931.985769][T10580] bridge0: port 2(bridge_slave_1) entered blocking state
[  931.993314][T10580] bridge0: port 2(bridge_slave_1) entered disabled state
[  932.002040][T10580] device bridge_slave_1 entered promiscuous mode
[  932.032784][T10580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  932.050231][T10580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  932.106113][T10580] team0: Port device team_slave_0 added
[  932.123973][T10580] team0: Port device team_slave_1 added
[  932.967683][T10580] batman_adv: batadv0: Adding interface: batadv_slave_0
[  932.974700][T10580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  933.000753][T10580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  933.059524][T10580] batman_adv: batadv0: Adding interface: batadv_slave_1
[  933.066617][T10580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  933.093757][T10580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  933.189412][T10580] device hsr_slave_0 entered promiscuous mode
[  933.247396][ T4291] Bluetooth: hci5: command 0x0419 tx timeout
[  933.345140][T10580] device hsr_slave_1 entered promiscuous mode
[  935.177335][T10580] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  935.195854][T10580] Cannot create hsr debugfs directory
[  936.919112][  T127] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  936.953624][T10457] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  938.574478][  T127] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  938.623151][  T127] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  938.647121][  T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.219660][T10678] tmpfs: Unknown parameter 'usrquota'
[  940.054029][T10457] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  940.098920][T10457] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  940.157560][T10457] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  940.661110][T10457] 8021q: adding VLAN 0 to HW filter on device bond0
[  940.816948][  T127] usb 2-1: can't set config #1, error -71
[  940.835477][  T127] usb 2-1: USB disconnect, device number 58
[  940.924267][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  940.957926][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  941.595067][T10457] 8021q: adding VLAN 0 to HW filter on device team0
[  941.996877][T10691] netlink: 'syz.2.1455': attribute type 19 has an invalid length.
[  942.852749][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  943.657842][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  944.488000][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state
[  944.495334][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state
[  944.535773][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  944.568013][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  944.577336][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  944.588397][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state
[  944.595572][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state
[  944.604926][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  944.625478][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  944.684823][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  946.168710][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  948.455244][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  948.512943][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  948.595068][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  948.638648][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  948.674012][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  948.826654][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  948.852026][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  948.880617][T10457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  950.004585][T10580] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  950.889343][ T4372] device hsr_slave_0 left promiscuous mode
[  950.917764][ T4372] device hsr_slave_1 left promiscuous mode
[  950.997489][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[  951.051314][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[  951.099838][ T4372] device bridge_slave_1 left promiscuous mode
[  951.106161][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[  951.159764][ T4372] device bridge_slave_0 left promiscuous mode
[  951.166043][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[  957.871118][ T4367] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  957.938428][ T4372] team0 (unregistering): Port device team_slave_1 removed
[  958.083677][ T4367] usb 3-1: device descriptor read/64, error -71
[  958.142288][ T4372] team0 (unregistering): Port device team_slave_0 removed
[  958.407076][ T4367] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  959.091592][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  959.187154][ T4367] usb 3-1: device descriptor read/64, error -71
[  959.298773][ T4367] usb usb3-port1: attempt power cycle
[  959.501676][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  959.727512][ T4367] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  959.781752][ T4367] usb 3-1: device descriptor read/8, error -71
[  960.087170][ T4367] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  961.695294][ T4367] usb 3-1: device descriptor read/8, error -71
[  961.828011][ T4367] usb usb3-port1: unable to enumerate USB device
[  963.759207][ T4372] bond0 (unregistering): Released all slaves
[  964.794068][T10580] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  964.822640][T10580] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  964.947407][T10580] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  965.379376][T10580] 8021q: adding VLAN 0 to HW filter on device bond0
[  965.459128][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  965.482473][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  965.527278][ T4350] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  965.570302][T10580] 8021q: adding VLAN 0 to HW filter on device team0
[  965.593580][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  965.617979][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  965.684617][T10457] 8021q: adding VLAN 0 to HW filter on device batadv0
[  967.141294][ T4350] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  967.152282][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  967.177702][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  967.196471][ T4350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.230449][ T4350] usb 4-1: Product: syz
[  967.234713][ T4350] usb 4-1: Manufacturer: syz
[  967.240326][ T9788] bridge0: port 1(bridge_slave_0) entered blocking state
[  967.247544][ T9788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  967.280297][ T4350] usb 4-1: SerialNumber: syz
[  967.322128][ T4350] usb 4-1: config 0 descriptor??
[  967.337616][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  967.372846][ T4350] hub 4-1:0.0: bad descriptor, ignoring hub
[  967.397175][ T4350] hub: probe of 4-1:0.0 failed with error -5
[  967.413894][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  967.425251][ T4350] f81232 4-1:0.0: f81534a converter detected
[  967.481570][ T9788] bridge0: port 2(bridge_slave_1) entered blocking state
[  967.488824][ T9788] bridge0: port 2(bridge_slave_1) entered forwarding state
[  967.572833][ T4350] usb 4-1: f81534a converter now attached to ttyUSB0
[  967.640203][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  967.688038][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  967.875448][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  967.907790][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  967.957371][ T4327] usb 4-1: USB disconnect, device number 42
[  967.986051][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  968.005119][ T4327] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  968.048281][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  968.087267][ T4327] f81232 4-1:0.0: device disconnected
[  968.107799][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  968.133951][T10580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  968.227563][T10580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  968.302450][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  968.318128][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  970.063737][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  970.243248][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  970.403433][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  970.594891][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  972.797308][ T7340] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  972.991245][ T7340] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  973.043255][ T7340] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  973.081239][ T7340] usb 4-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00
[  973.120358][ T7340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  973.169449][ T7340] usb 4-1: Product: syz
[  973.179933][ T7340] usb 4-1: Manufacturer: syz
[  973.197050][ T7340] usb 4-1: SerialNumber: syz
[  973.568038][T10860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  973.579186][T10860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  973.589462][T10860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  973.600594][T10860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  973.611704][T10860] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  973.624477][T10860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  973.696171][ T4286] Bluetooth: hci2: CSR: Local version failed (-71)
[  973.706186][ T4323] usb 4-1: USB disconnect, device number 43
[  973.908574][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  973.916361][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  973.980373][T10580] 8021q: adding VLAN 0 to HW filter on device batadv0
[  974.698724][T10859] chnl_net:caif_netlink_parms(): no params data found
[  975.717204][ T4286] Bluetooth: hci4: command 0x0409 tx timeout
[  976.111235][T10859] bridge0: port 1(bridge_slave_0) entered blocking state
[  976.127479][T10859] bridge0: port 1(bridge_slave_0) entered disabled state
[  976.135936][T10859] device bridge_slave_0 entered promiscuous mode
[  976.164606][T10859] bridge0: port 2(bridge_slave_1) entered blocking state
[  976.460356][T10859] bridge0: port 2(bridge_slave_1) entered disabled state
[  976.800152][T10859] device bridge_slave_1 entered promiscuous mode
[  977.312317][T10893] syz.3.1492 uses obsolete (PF_INET,SOCK_PACKET)
[  977.411039][T10859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  977.797379][ T4286] Bluetooth: hci4: command 0x041b tx timeout
[  978.252998][T10859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  978.909691][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  978.934177][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  980.360067][ T4286] Bluetooth: hci4: command 0x040f tx timeout
[  980.415207][T10580] device veth0_vlan entered promiscuous mode
[  980.484531][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  980.502808][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  980.530028][T10859] team0: Port device team_slave_0 added
[  980.543217][T10580] device veth1_vlan entered promiscuous mode
[  980.581692][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  980.605688][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  980.837358][T10859] team0: Port device team_slave_1 added
[  983.112023][ T4286] Bluetooth: hci4: command 0x0419 tx timeout
[  983.242004][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  983.268014][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  983.318509][T10859] batman_adv: batadv0: Adding interface: batadv_slave_0
[  983.325546][T10859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  983.455065][T10859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  983.800255][T10859] batman_adv: batadv0: Adding interface: batadv_slave_1
[  983.923553][T10859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  984.232039][T10859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  985.638011][ T4291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  985.659708][ T4291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  985.668951][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  985.680170][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  985.699488][ T4291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  985.706905][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  985.828625][T10859] device hsr_slave_0 entered promiscuous mode
[  985.847546][T10859] device hsr_slave_1 entered promiscuous mode
[  985.884638][T10859] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  985.897013][T10859] Cannot create hsr debugfs directory
[  986.407115][ T8225] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  986.647112][ T8225] usb 3-1: Using ep0 maxpacket: 8
[  986.660395][ T8225] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  986.824136][ T8225] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  986.937741][ T8225] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  987.025100][ T8225] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  987.151922][ T8225] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  987.253154][ T8225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.588888][ T8225] usb 3-1: GET_CAPABILITIES returned 0
[  987.594469][ T8225] usbtmc 3-1:16.0: can't read capabilities
[  987.798149][ T4286] Bluetooth: hci2: command 0x0409 tx timeout
[  988.086487][ T8225] usb 3-1: USB disconnect, device number 61
[  988.301296][ T4372] device hsr_slave_0 left promiscuous mode
[  988.309740][ T4372] device hsr_slave_1 left promiscuous mode
[  988.316467][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[  988.335607][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[  988.350469][ T4372] device bridge_slave_1 left promiscuous mode
[  988.357926][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[  988.372069][ T4372] device bridge_slave_0 left promiscuous mode
[  988.381719][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[  990.536495][ T4286] Bluetooth: hci2: command 0x041b tx timeout
[  992.438380][ T4372] team0 (unregistering): Port device team_slave_1 removed
[  992.580905][ T4372] team0 (unregistering): Port device team_slave_0 removed
[  992.611189][T10860] Bluetooth: hci2: command 0x040f tx timeout
[  992.725981][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  992.923514][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  992.930993][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  993.310187][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  994.687229][T10860] Bluetooth: hci2: command 0x0419 tx timeout
[  995.572283][T10997] Cannot find set identified by id 0 to match
[  996.898878][ T4372] bond0 (unregistering): Released all slaves
[  997.553723][T10946] chnl_net:caif_netlink_parms(): no params data found
[  997.857890][T10946] bridge0: port 1(bridge_slave_0) entered blocking state
[  997.865164][T10946] bridge0: port 1(bridge_slave_0) entered disabled state
[  997.918769][T10946] device bridge_slave_0 entered promiscuous mode
[  997.948656][T10946] bridge0: port 2(bridge_slave_1) entered blocking state
[  997.985114][T10946] bridge0: port 2(bridge_slave_1) entered disabled state
[  998.034102][T10946] device bridge_slave_1 entered promiscuous mode
[  998.086441][T10859] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  998.136486][T10859] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  998.681848][T10859] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  998.761953][T10946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  998.822891][T10859] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  998.852794][T10946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  999.918950][T10946] team0: Port device team_slave_0 added
[  999.986645][T10946] team0: Port device team_slave_1 added
[ 1001.189513][T10946] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1001.196541][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1001.305735][T10946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1001.660071][T10946] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1001.688982][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1002.427046][T10946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1002.530599][T10859] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1002.575894][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1002.604451][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1002.635646][T10859] 8021q: adding VLAN 0 to HW filter on device team0
[ 1002.662563][T10946] device hsr_slave_0 entered promiscuous mode
[ 1002.703758][T10946] device hsr_slave_1 entered promiscuous mode
[ 1002.876080][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1002.887914][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1002.907297][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1002.914488][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1004.446771][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1004.477899][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1004.507238][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1004.514935][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1004.547530][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1004.733216][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1004.792087][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1006.239570][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1006.269613][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1006.370659][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1006.418375][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1006.481635][T10859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1006.501934][T10859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1006.545525][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1006.952085][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1006.969888][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1006.995772][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1007.013947][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1007.029017][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1007.040120][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1007.049240][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1007.161292][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1007.202241][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1007.242488][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1007.262742][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1008.450392][T11084] binder: 11083:11084 ioctl c0306201 0 returned -14
[ 1008.518772][T11084] binder: 11083:11084 ioctl c0306201 2000000008c0 returned -11
[ 1009.157104][ T4286] Bluetooth: hci3: command 0x0409 tx timeout
[ 1011.237109][ T4286] Bluetooth: hci3: command 0x041b tx timeout
[ 1011.513027][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1011.529183][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1011.767206][ T4326] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1011.827402][T10859] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1011.972994][ T4326] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[ 1011.988137][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.996257][ T4326] usb 2-1: Product: syz
[ 1012.017096][ T4326] usb 2-1: Manufacturer: syz
[ 1012.021784][ T4326] usb 2-1: SerialNumber: syz
[ 1012.039995][ T4326] usb 2-1: config 0 descriptor??
[ 1012.088227][ T4326] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1012.094324][ T4326] hub: probe of 2-1:0.0 failed with error -5
[ 1012.108109][ T4326] f81232 2-1:0.0: f81534a converter detected
[ 1012.251808][ T4326] f81534a ttyUSB0: f81232_set_register failed status: -71
[ 1012.277057][ T4326] f81534a: probe of ttyUSB0 failed with error -5
[ 1012.305929][T11069] chnl_net:caif_netlink_parms(): no params data found
[ 1012.347939][ T4326] usb 2-1: USB disconnect, device number 59
[ 1012.369418][ T4326] f81232 2-1:0.0: device disconnected
[ 1013.398946][ T4286] Bluetooth: hci3: command 0x040f tx timeout
[ 1013.504592][T10946] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1013.635292][T10946] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1013.707737][ T4372] device hsr_slave_0 left promiscuous mode
[ 1013.721518][ T4372] device hsr_slave_1 left promiscuous mode
[ 1013.763755][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1013.775648][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1015.243596][ T4372] device bridge_slave_1 left promiscuous mode
[ 1015.262295][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1015.282804][ T4372] device bridge_slave_0 left promiscuous mode
[ 1015.293000][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1015.336452][ T4372] device veth1_vlan left promiscuous mode
[ 1015.350585][ T4372] device veth0_vlan left promiscuous mode
[ 1015.477139][ T4286] Bluetooth: hci3: command 0x0419 tx timeout
[ 1016.633961][T11145] binder: 11144:11145 ioctl c0306201 2000000008c0 returned -11
[ 1017.054816][ T4372] team0 (unregistering): Port device team_slave_1 removed
[ 1017.277304][ T4372] team0 (unregistering): Port device team_slave_0 removed
[ 1017.524834][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1017.735325][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1018.855913][T11154] syz.1.1541: attempt to access beyond end of device
[ 1018.855913][T11154] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1018.996008][T11156] netlink: 'syz.1.1541': attribute type 19 has an invalid length.
[ 1020.080582][ T4372] bond0 (unregistering): Released all slaves
[ 1020.356288][T10946] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1020.568292][T10946] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1020.671836][T11069] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1020.716020][T11069] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1020.807367][T11069] device bridge_slave_0 entered promiscuous mode
[ 1020.971607][T11069] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1021.027452][T11069] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1021.078236][T11069] device bridge_slave_1 entered promiscuous mode
[ 1021.254740][T11069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1022.869338][T11069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1023.011593][T11069] team0: Port device team_slave_0 added
[ 1023.090676][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1023.108999][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1023.132500][T11069] team0: Port device team_slave_1 added
[ 1023.294384][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1023.340102][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1023.404494][T11069] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1023.417173][T11069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1023.499704][T11069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1023.515672][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1023.532442][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1023.547298][T10859] device veth0_vlan entered promiscuous mode
[ 1023.559727][T10946] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1023.571050][T11069] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1023.584394][T11069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1023.623767][T11069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1023.695998][T11069] device hsr_slave_0 entered promiscuous mode
[ 1023.703323][T11069] device hsr_slave_1 entered promiscuous mode
[ 1023.711154][T11069] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1023.721378][T11069] Cannot create hsr debugfs directory
[ 1023.742627][T10946] 8021q: adding VLAN 0 to HW filter on device team0
[ 1023.755328][T10859] device veth1_vlan entered promiscuous mode
[ 1023.774931][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1023.791878][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1023.801025][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1023.829666][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1023.847937][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1023.867708][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1023.874895][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1023.901236][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1023.916510][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1023.926691][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1023.933969][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1024.033960][ T4372] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1024.086661][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1024.114933][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1024.123911][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1024.133438][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1024.153651][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1024.158482][T11178] binder: 11177:11178 ioctl c0306201 2000000008c0 returned -11
[ 1024.174948][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1024.200929][T10859] device veth0_macvtap entered promiscuous mode
[ 1024.250371][ T4372] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1024.263822][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1024.274162][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1024.285174][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1024.305252][T10859] device veth1_macvtap entered promiscuous mode
[ 1024.340936][ T4361] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1024.353140][ T4372] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1024.466866][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1024.559272][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1024.629832][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1024.704076][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1024.722795][ T4361] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[ 1024.919077][ T4372] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1025.016629][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1025.046623][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1025.113081][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1025.163855][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1025.191150][ T4361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.207039][ T4361] usb 4-1: Product: syz
[ 1025.217521][ T4361] usb 4-1: Manufacturer: syz
[ 1025.222199][ T4361] usb 4-1: SerialNumber: syz
[ 1025.249597][ T4361] usb 4-1: config 0 descriptor??
[ 1025.258566][T10946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1025.267695][ T4361] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1025.273710][ T4361] hub: probe of 4-1:0.0 failed with error -5
[ 1025.281975][ T4361] f81232 4-1:0.0: f81534a converter detected
[ 1025.357679][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1025.415843][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.460017][ T4361] f81534a ttyUSB0: f81232_set_register failed status: -71
[ 1025.478359][ T4361] f81534a: probe of ttyUSB0 failed with error -5
[ 1025.493310][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1025.525065][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.584763][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1025.686451][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.806708][T10859] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1025.919095][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1026.022448][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1026.326189][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1026.337804][ T4361] usb 4-1: USB disconnect, device number 44
[ 1026.345291][ T4361] f81232 4-1:0.0: device disconnected
[ 1026.394499][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1026.435003][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1026.468104][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1026.478464][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1026.491808][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1026.510712][T10859] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1026.781465][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1027.042136][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1028.196877][T10859] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.280342][T10859] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.355827][T10859] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.433899][T10859] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1030.063921][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880560b8400: rx timeout, send abort
[ 1030.126399][T11069] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1030.207734][T11069] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1030.262315][ T4372] tipc: Disabling bearer <udp:syz0>
[ 1030.268156][ T4372] tipc: Left network mode
[ 1030.276608][T11069] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1030.332154][T10946] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1030.360934][T11069] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1030.492731][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1030.502429][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1030.525315][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1030.544592][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1030.565076][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d01a000: rx timeout, send abort
[ 1030.583140][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880560b8400: abort rx timeout. Force session deactivation
[ 1030.637483][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1030.807686][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1030.815598][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1030.865177][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1031.075941][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d01a000: abort rx timeout. Force session deactivation
[ 1031.118334][T11221] binder: 11220:11221 ioctl c0306201 2000000008c0 returned -11
[ 1031.226444][T11069] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1031.394951][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1031.412231][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1031.711407][T11069] 8021q: adding VLAN 0 to HW filter on device team0
[ 1032.139942][T10860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1032.150697][T10860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1032.160274][T10860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1032.259770][T10860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1032.269430][T10860] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1032.276854][T10860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1032.304274][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1032.354851][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1032.387966][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1032.395154][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1032.421642][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1032.437934][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1032.462621][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1032.470047][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1032.486029][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1032.495593][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1032.513022][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1032.581024][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1033.286228][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1033.306580][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1033.426209][T11069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1033.441527][T11069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1033.460838][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1033.480319][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1033.492719][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1033.504830][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1033.515463][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1033.525570][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1033.536671][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1034.370859][ T4286] Bluetooth: hci4: command 0x0409 tx timeout
[ 1034.587458][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1034.616449][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1034.839069][T10946] device veth0_vlan entered promiscuous mode
[ 1034.847878][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1034.856476][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1034.884946][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1034.901305][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1035.473905][T10946] device veth1_vlan entered promiscuous mode
[ 1036.251258][ T4372] device hsr_slave_0 left promiscuous mode
[ 1036.392256][ T4372] device hsr_slave_1 left promiscuous mode
[ 1036.431123][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1036.439167][ T4286] Bluetooth: hci4: command 0x041b tx timeout
[ 1036.459232][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1036.617149][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1036.668069][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1036.739097][ T4372] device bridge_slave_1 left promiscuous mode
[ 1036.762999][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1036.838620][ T4372] device bridge_slave_0 left promiscuous mode
[ 1036.860666][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1037.021082][ T4372] device veth1_macvtap left promiscuous mode
[ 1037.050743][ T4372] device veth0_macvtap left promiscuous mode
[ 1037.132037][ T4372] device veth1_vlan left promiscuous mode
[ 1037.138791][ T4372] device veth0_vlan left promiscuous mode
[ 1037.250117][T11256] syz.3.1561: attempt to access beyond end of device
[ 1037.250117][T11256] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1037.395921][T11258] netlink: 'syz.3.1561': attribute type 19 has an invalid length.
[ 1038.517067][ T4286] Bluetooth: hci4: command 0x040f tx timeout
[ 1039.577972][T11263] FAULT_INJECTION: forcing a failure.
[ 1039.577972][T11263] name failslab, interval 1, probability 0, space 0, times 0
[ 1039.591551][T11263] CPU: 0 PID: 11263 Comm: syz.3.1563 Not tainted syzkaller #0
[ 1039.599268][T11263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1039.609392][T11263] Call Trace:
[ 1039.612720][T11263]  <TASK>
[ 1039.615698][T11263]  dump_stack_lvl+0x188/0x24e
[ 1039.620441][T11263]  ? show_regs_print_info+0x12/0x12
[ 1039.625709][T11263]  ? load_image+0x410/0x410
[ 1039.630306][T11263]  ? __might_sleep+0xd0/0xd0
[ 1039.634989][T11263]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1039.640049][T11263]  ? stack_trace_save+0xa6/0xf0
[ 1039.645089][T11263]  should_fail_ex+0x390/0x4c0
[ 1039.649813][T11263]  should_failslab+0x5/0x20
[ 1039.654341][T11263]  slab_pre_alloc_hook+0x59/0x300
[ 1039.659432][T11263]  ? __kasan_kmalloc+0x8e/0xa0
[ 1039.664308][T11263]  ? __kthread_create_worker+0x5c/0x3c0
[ 1039.670013][T11263]  ? kthread_create_worker+0xe4/0x140
[ 1039.675484][T11263]  ? __kthread_create_on_node+0x129/0x540
[ 1039.681282][T11263]  __kmem_cache_alloc_node+0x4f/0x270
[ 1039.686697][T11263]  ? __kthread_create_on_node+0x129/0x540
[ 1039.692464][T11263]  kmalloc_trace+0x26/0xe0
[ 1039.696924][T11263]  ? __kthread_init_worker+0x190/0x190
[ 1039.702433][T11263]  __kthread_create_on_node+0x129/0x540
[ 1039.708020][T11263]  ? kthread_create_on_node+0x140/0x140
[ 1039.713616][T11263]  ? lockdep_softirqs_off+0x430/0x430
[ 1039.719052][T11263]  __kthread_create_worker+0x21e/0x3c0
[ 1039.724562][T11263]  kthread_create_worker+0xe4/0x140
[ 1039.729819][T11263]  ? kthread_worker_fn+0xb60/0xb60
[ 1039.734981][T11263]  ? __raw_spin_lock_init+0x41/0x100
[ 1039.740363][T11263]  kvm_create_pit+0x19b/0xa30
[ 1039.745161][T11263]  kvm_arch_vm_ioctl+0xfdd/0x16f0
[ 1039.750294][T11263]  ? kvm_arch_pm_notifier+0x2c0/0x2c0
[ 1039.755715][T11263]  ? is_bpf_text_address+0x22/0x2a0
[ 1039.761017][T11263]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1039.766080][T11263]  ? mark_lock+0x94/0x320
[ 1039.770465][T11263]  ? is_bpf_text_address+0x28b/0x2a0
[ 1039.775817][T11263]  ? is_bpf_text_address+0x22/0x2a0
[ 1039.781054][T11263]  ? kernel_text_address+0x9c/0xd0
[ 1039.786201][T11263]  ? __kernel_text_address+0x9/0x30
[ 1039.791445][T11263]  ? unwind_get_return_address+0x49/0x80
[ 1039.797140][T11263]  ? stack_trace_save+0xf0/0xf0
[ 1039.802064][T11263]  ? arch_stack_walk+0xf2/0x140
[ 1039.807033][T11263]  ? stack_trace_save+0xa6/0xf0
[ 1039.811930][T11263]  ? __stack_depot_save+0x35/0x480
[ 1039.817138][T11263]  ? security_file_ioctl+0x6c/0xa0
[ 1039.822317][T11263]  ? __se_sys_ioctl+0x48/0x170
[ 1039.827181][T11263]  ? do_syscall_64+0x4c/0xa0
[ 1039.831813][T11263]  ? kasan_set_track+0x60/0x70
[ 1039.836618][T11263]  ? kasan_set_track+0x4b/0x70
[ 1039.841414][T11263]  ? kasan_save_free_info+0x27/0x40
[ 1039.846646][T11263]  ? ____kasan_slab_free+0x126/0x1f0
[ 1039.851974][T11263]  ? slab_free_freelist_hook+0x133/0x1b0
[ 1039.857645][T11263]  ? __kmem_cache_free+0xb6/0x200
[ 1039.862704][T11263]  ? tomoyo_path_number_perm+0x4fb/0x650
[ 1039.868453][T11263]  ? security_file_ioctl+0x6c/0xa0
[ 1039.873605][T11263]  ? __se_sys_ioctl+0x48/0x170
[ 1039.878505][T11263]  ? do_syscall_64+0x4c/0xa0
[ 1039.883127][T11263]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1039.889259][T11263]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1039.895276][T11263]  ? do_vfs_ioctl+0x1be3/0x1d40
[ 1039.900170][T11263]  ? __ia32_compat_sys_ioctl+0x850/0x850
[ 1039.905851][T11263]  ? tomoyo_path_number_perm+0x205/0x650
[ 1039.911516][T11263]  kvm_vm_ioctl+0x78d/0xb00
[ 1039.916132][T11263]  ? kvm_device_release+0x1e0/0x1e0
[ 1039.921360][T11263]  ? __kmem_cache_free+0xb6/0x200
[ 1039.926417][T11263]  ? tomoyo_path_number_perm+0x205/0x650
[ 1039.932088][T11263]  ? tomoyo_path_number_perm+0x5a4/0x650
[ 1039.937760][T11263]  ? tomoyo_path_number_perm+0x205/0x650
[ 1039.943428][T11263]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1039.948948][T11263]  ? __fget_files+0x28/0x460
[ 1039.953595][T11263]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1039.958684][T11263]  ? security_file_ioctl+0x7c/0xa0
[ 1039.963854][T11263]  ? kvm_device_release+0x1e0/0x1e0
[ 1039.969091][T11263]  __se_sys_ioctl+0xfa/0x170
[ 1039.973731][T11263]  do_syscall_64+0x4c/0xa0
[ 1039.978191][T11263]  ? clear_bhb_loop+0x60/0xb0
[ 1039.982907][T11263]  ? clear_bhb_loop+0x60/0xb0
[ 1039.987627][T11263]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1039.993579][T11263] RIP: 0033:0x7ff16e99e159
[ 1039.998032][T11263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1040.017671][T11263] RSP: 002b:00007ff16f913028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1040.026155][T11263] RAX: ffffffffffffffda RBX: 00007ff16ec25fa0 RCX: 00007ff16e99e159
[ 1040.034162][T11263] RDX: 0000200000000180 RSI: 000000004040ae77 RDI: 0000000000000004
[ 1040.042179][T11263] RBP: 00007ff16ea3506b R08: 0000000000000000 R09: 0000000000000000
[ 1040.050202][T11263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1040.058200][T11263] R13: 00007ff16ec26038 R14: 00007ff16ec25fa0 R15: 00007ffc42187c48
[ 1040.066217][T11263]  </TASK>
[ 1040.597456][ T4286] Bluetooth: hci4: command 0x0419 tx timeout
[ 1040.714111][T11268] kvm: MWAIT instruction emulated as NOP!
[ 1040.798402][ T4372] team0 (unregistering): Port device team_slave_1 removed
[ 1040.909309][ T4372] team0 (unregistering): Port device team_slave_0 removed
[ 1041.007714][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1041.115526][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1043.014396][ T4372] bond0 (unregistering): Released all slaves
[ 1043.727622][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1044.569096][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1044.642747][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1560'.
[ 1045.169970][T11229] chnl_net:caif_netlink_parms(): no params data found
[ 1045.825393][T11069] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1045.878781][ T7738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1045.930259][ T7738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1047.742501][T11229] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1047.753977][T11229] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1047.766163][T11229] device bridge_slave_0 entered promiscuous mode
[ 1047.830557][T11229] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1047.863484][T11229] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1047.885397][T11229] device bridge_slave_1 entered promiscuous mode
[ 1047.955571][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1047.992941][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1048.002461][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1048.037597][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1048.045245][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1048.052731][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1048.160826][T11229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1048.199982][T11229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1048.297729][T11229] team0: Port device team_slave_0 added
[ 1049.936422][T11316] blktrace: Concurrent blktraces are not allowed on loop0
[ 1050.845157][ T4286] Bluetooth: hci2: command 0x0409 tx timeout
[ 1050.877386][T11229] team0: Port device team_slave_1 added
[ 1051.028095][T11229] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1051.035127][T11229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1051.109692][T11229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1051.179916][T11229] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1051.194765][T11229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1051.287583][T11229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1051.562989][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1051.605771][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1051.673151][T11229] device hsr_slave_0 entered promiscuous mode
[ 1051.708048][T11229] device hsr_slave_1 entered promiscuous mode
[ 1051.716151][T11229] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1051.731831][T11229] Cannot create hsr debugfs directory
[ 1051.747098][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1051.755569][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1051.784116][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1051.798155][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1051.833770][T11069] device veth0_vlan entered promiscuous mode
[ 1051.897980][T11305] chnl_net:caif_netlink_parms(): no params data found
[ 1051.935313][T11069] device veth1_vlan entered promiscuous mode
[ 1052.874112][ T4372] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.917534][ T4286] Bluetooth: hci2: command 0x041b tx timeout
[ 1052.962279][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1052.978335][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1053.005099][T11069] device veth0_macvtap entered promiscuous mode
[ 1053.109486][ T4372] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.158664][T11305] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1053.165873][T11305] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1053.198735][T11305] device bridge_slave_0 entered promiscuous mode
[ 1053.284353][T11069] device veth1_macvtap entered promiscuous mode
[ 1053.375433][T11305] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1053.406799][T11305] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1053.517374][T11305] device bridge_slave_1 entered promiscuous mode
[ 1054.305332][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1054.361599][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.368417][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.658180][ T4372] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.694616][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1054.737150][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1054.774500][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1054.801705][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1054.811741][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1054.822309][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1054.835014][T11069] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1054.880480][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1054.918184][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1054.996537][ T4372] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1055.010015][ T4286] Bluetooth: hci2: command 0x040f tx timeout
[ 1055.043025][T11305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1055.077130][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1055.145758][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.187181][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1055.200874][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.233408][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1055.245712][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.264197][T11069] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1055.296859][T11305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1055.370118][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1055.436301][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1055.495969][T11069] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1055.506244][T11069] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1055.515187][T11069] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1055.527898][T11069] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1055.685245][T11305] team0: Port device team_slave_0 added
[ 1055.760440][T11305] team0: Port device team_slave_1 added
[ 1055.819333][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1055.857038][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1055.947718][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1055.968809][T11305] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1055.975838][T11305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1056.033580][T11305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1056.140656][T11305] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1056.149567][T11305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1056.212830][T11305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1056.459449][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1056.474258][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1056.556092][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1056.844390][T11305] device hsr_slave_0 entered promiscuous mode
[ 1056.887211][T11305] device hsr_slave_1 entered promiscuous mode
[ 1056.898137][T11305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1056.935586][T11305] Cannot create hsr debugfs directory
[ 1058.194844][ T4286] Bluetooth: hci2: command 0x0419 tx timeout
[ 1059.352333][T11371] Cannot find set identified by id 0 to match
[ 1063.201363][T11229] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1063.229397][T11229] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1063.332379][T11229] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1063.368394][T11229] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1064.099709][T11398] blktrace: Concurrent blktraces are not allowed on loop0
[ 1066.260805][ T4372] device hsr_slave_0 left promiscuous mode
[ 1066.417762][ T4372] device hsr_slave_1 left promiscuous mode
[ 1066.427818][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1066.467875][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1066.608893][ T4372] device bridge_slave_1 left promiscuous mode
[ 1066.650451][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1066.671271][ T4372] device bridge_slave_0 left promiscuous mode
[ 1067.889695][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1067.943187][ T4372] device hsr_slave_0 left promiscuous mode
[ 1068.007312][ T4372] device hsr_slave_1 left promiscuous mode
[ 1068.023669][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1068.054585][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1068.103360][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1068.129717][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1068.228840][ T4372] device bridge_slave_1 left promiscuous mode
[ 1068.307786][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1068.478155][ T4372] device bridge_slave_0 left promiscuous mode
[ 1068.549070][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1069.083318][ T4372] device veth1_vlan left promiscuous mode
[ 1069.089396][ T4372] device veth0_vlan left promiscuous mode
[ 1069.129399][ T4372] device veth1_macvtap left promiscuous mode
[ 1069.147077][ T4372] device veth0_macvtap left promiscuous mode
[ 1069.153281][ T4372] device veth1_vlan left promiscuous mode
[ 1069.159605][ T4372] device veth0_vlan left promiscuous mode
[ 1070.898308][T11442] blktrace: Concurrent blktraces are not allowed on loop0
[ 1079.278073][T11478] FAULT_INJECTION: forcing a failure.
[ 1079.278073][T11478] name failslab, interval 1, probability 0, space 0, times 0
[ 1079.360273][T11478] CPU: 0 PID: 11478 Comm: syz.9.1604 Not tainted syzkaller #0
[ 1079.367810][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1079.377905][T11478] Call Trace:
[ 1079.381226][T11478]  <TASK>
[ 1079.384193][T11478]  dump_stack_lvl+0x188/0x24e
[ 1079.388935][T11478]  ? show_regs_print_info+0x12/0x12
[ 1079.394194][T11478]  ? load_image+0x410/0x410
[ 1079.398732][T11478]  ? __might_sleep+0xd0/0xd0
[ 1079.403358][T11478]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1079.408451][T11478]  ? node_tag_clear+0x1ec/0x310
[ 1079.413365][T11478]  should_fail_ex+0x390/0x4c0
[ 1079.418123][T11478]  should_failslab+0x5/0x20
[ 1079.422679][T11478]  slab_pre_alloc_hook+0x59/0x300
[ 1079.427754][T11478]  ? __kernfs_new_node+0xa6/0x7f0
[ 1079.432853][T11478]  __kmem_cache_alloc_node+0x4f/0x270
[ 1079.438271][T11478]  ? __kernfs_new_node+0xa6/0x7f0
[ 1079.443332][T11478]  __kmalloc_node_track_caller+0xa0/0x240
[ 1079.449101][T11478]  kstrdup_const+0x56/0x90
[ 1079.453756][T11478]  __kernfs_new_node+0xa6/0x7f0
[ 1079.458647][T11478]  ? vsnprintf+0x1b22/0x1c20
[ 1079.463296][T11478]  ? kernfs_new_node+0x250/0x250
[ 1079.468276][T11478]  ? snprintf+0xe5/0x140
[ 1079.472573][T11478]  ? vscnprintf+0x80/0x80
[ 1079.476952][T11478]  kernfs_new_node+0x148/0x250
[ 1079.481764][T11478]  __kernfs_create_file+0x47/0x2e0
[ 1079.487030][T11478]  cgroup_addrm_files+0x80c/0xd50
[ 1079.492159][T11478]  ? trace_raw_output_cgroup_event+0x1e0/0x1e0
[ 1079.498355][T11478]  ? mark_lock+0x94/0x320
[ 1079.502732][T11478]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1079.508773][T11478]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1079.514249][T11478]  ? lockdep_hardirqs_on+0x94/0x140
[ 1079.519493][T11478]  css_populate_dir+0x157/0x3b0
[ 1079.524389][T11478]  cgroup_apply_control_enable+0x641/0xb00
[ 1079.530251][T11478]  cgroup_mkdir+0xc7f/0xe70
[ 1079.534798][T11478]  ? css_task_iter_end+0x280/0x280
[ 1079.539956][T11478]  ? kernfs_iop_permission+0x26d/0x350
[ 1079.545449][T11478]  ? css_task_iter_end+0x280/0x280
[ 1079.550601][T11478]  kernfs_iop_mkdir+0x23d/0x3d0
[ 1079.555492][T11478]  vfs_mkdir+0x386/0x570
[ 1079.559780][T11478]  do_mkdirat+0x1d8/0x440
[ 1079.564147][T11478]  ? vfs_mkdir+0x570/0x570
[ 1079.568615][T11478]  __x64_sys_mkdirat+0x85/0x90
[ 1079.573441][T11478]  do_syscall_64+0x4c/0xa0
[ 1079.577941][T11478]  ? clear_bhb_loop+0x60/0xb0
[ 1079.582685][T11478]  ? clear_bhb_loop+0x60/0xb0
[ 1079.587410][T11478]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1079.593350][T11478] RIP: 0033:0x7f1a79d9e159
[ 1079.597804][T11478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1079.617457][T11478] RSP: 002b:00007f1a7abab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1079.625911][T11478] RAX: ffffffffffffffda RBX: 00007f1a7a025fa0 RCX: 00007f1a79d9e159
[ 1079.633917][T11478] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1079.641928][T11478] RBP: 00007f1a79e3506b R08: 0000000000000000 R09: 0000000000000000
[ 1079.649945][T11478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1079.657979][T11478] R13: 00007f1a7a026038 R14: 00007f1a7a025fa0 R15: 00007ffd6628d928
[ 1079.666010][T11478]  </TASK>
[ 1079.727147][T11478] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12
[ 1080.690251][T11481] Cannot find set identified by id 0 to match
[ 1081.220176][ T4372] team0 (unregistering): Port device team_slave_1 removed
[ 1081.552827][T11485] kAFS: No cell specified
[ 1082.402727][ T4372] team0 (unregistering): Port device team_slave_0 removed
[ 1082.631719][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1083.027876][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1086.294491][ T4372] bond0 (unregistering): Released all slaves
[ 1091.254776][ T4291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1091.266763][ T4291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1091.275802][ T4291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1091.285416][ T4291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1091.294480][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1091.302080][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1092.690970][ T4286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1092.701129][ T4286] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1092.710169][ T4286] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1092.727221][ T4286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1092.734871][ T4286] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1092.742360][ T4286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1093.335024][T11520] comedi comedi0: No hardware detected at I/O base 0x300
[ 1093.342993][ T4372] team0 (unregistering): Port device team_slave_1 removed
[ 1093.397193][ T4291] Bluetooth: hci5: command 0x0409 tx timeout
[ 1093.967368][ T4372] team0 (unregistering): Port device team_slave_0 removed
[ 1094.991574][ T4291] Bluetooth: hci6: command 0x0409 tx timeout
[ 1095.527213][ T4291] Bluetooth: hci5: command 0x041b tx timeout
[ 1096.397259][T11530] Cannot find set identified by id 0 to match
[ 1096.798190][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1096.986505][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1097.077355][ T4286] Bluetooth: hci6: command 0x041b tx timeout
[ 1098.698357][ T4286] Bluetooth: hci5: command 0x040f tx timeout
[ 1100.441837][ T4286] Bluetooth: hci6: command 0x040f tx timeout
[ 1100.647601][ T4372] bond0 (unregistering): Released all slaves
[ 1100.767461][ T4286] Bluetooth: hci5: command 0x0419 tx timeout
[ 1100.818572][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1619'.
[ 1101.012646][T11535] bridge0: port 3(syz_tun) entered disabled state
[ 1101.190765][T11535] device syz_tun left promiscuous mode
[ 1101.197996][T11535] bridge0: port 3(syz_tun) entered disabled state
[ 1102.517487][ T4286] Bluetooth: hci6: command 0x0419 tx timeout
[ 1102.861914][T11305] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1102.949244][T11305] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1104.197229][T11575] Cannot find set identified by id 0 to match
[ 1104.565524][T11305] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1104.597323][    T7] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1104.610175][T11305] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1104.705783][T11513] chnl_net:caif_netlink_parms(): no params data found
[ 1104.789377][    T7] usb 2-1: device descriptor read/64, error -71
[ 1104.834285][T11517] chnl_net:caif_netlink_parms(): no params data found
[ 1105.067400][    T7] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1105.141922][T11305] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1105.227039][    T7] usb 2-1: device descriptor read/64, error -71
[ 1105.259425][T11305] 8021q: adding VLAN 0 to HW filter on device team0
[ 1105.318486][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1105.334903][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1105.349022][T11513] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1105.359384][T11513] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1105.368031][    T7] usb usb2-port1: attempt power cycle
[ 1105.371758][T11513] device bridge_slave_0 entered promiscuous mode
[ 1105.409238][T11517] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1105.417532][T11517] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1105.451854][T11517] device bridge_slave_0 entered promiscuous mode
[ 1105.484415][T11513] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1105.497307][T11513] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1105.526608][T11513] device bridge_slave_1 entered promiscuous mode
[ 1105.556781][T11517] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1105.564550][T11517] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1105.573987][T11517] device bridge_slave_1 entered promiscuous mode
[ 1105.635115][T11513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1105.706262][T11517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1105.738598][T11513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1105.763218][T11517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1105.787126][    T7] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1105.911974][    T7] usb 2-1: device descriptor read/8, error -71
[ 1106.082794][T11513] team0: Port device team_slave_0 added
[ 1106.152543][T11517] team0: Port device team_slave_0 added
[ 1106.660540][T11599] blktrace: Concurrent blktraces are not allowed on loop0
[ 1107.869159][T11513] team0: Port device team_slave_1 added
[ 1108.069045][T11517] team0: Port device team_slave_1 added
[ 1108.341207][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1108.352259][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1108.365787][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1108.412273][T11513] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1108.419692][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1108.419807][T11513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1108.455857][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1108.467609][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1108.564530][T11513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1108.719610][T11513] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1108.726646][T11513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1108.817018][T11513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1108.848387][T11517] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1108.855620][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1108.951499][T11517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1109.197554][T11517] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1109.791848][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1109.819221][T11517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1109.988158][T11513] device hsr_slave_0 entered promiscuous mode
[ 1110.007821][T11513] device hsr_slave_1 entered promiscuous mode
[ 1110.047441][T11620] syz.1.1630: attempt to access beyond end of device
[ 1110.047441][T11620] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1110.218433][T11624] netlink: 'syz.1.1630': attribute type 19 has an invalid length.
[ 1110.321670][T11517] device hsr_slave_0 entered promiscuous mode
[ 1110.518809][ T4291] Bluetooth: hci0: command 0x0409 tx timeout
[ 1110.957798][T11517] device hsr_slave_1 entered promiscuous mode
[ 1111.068838][T11517] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1111.076582][T11517] Cannot create hsr debugfs directory
[ 1111.626718][ T4372] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.214759][ T4372] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.597238][ T4291] Bluetooth: hci0: command 0x041b tx timeout
[ 1112.701155][ T4372] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.845246][ T4372] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1113.219562][T11606] chnl_net:caif_netlink_parms(): no params data found
[ 1114.677122][ T4291] Bluetooth: hci0: command 0x040f tx timeout
[ 1114.858074][T11654] Cannot find set identified by id 0 to match
[ 1115.747246][ T4350] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1115.801228][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.807833][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.997313][ T4350] usb 10-1: device descriptor read/64, error -71
[ 1116.168241][T11606] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1116.176069][T11606] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1116.214819][T11606] device bridge_slave_0 entered promiscuous mode
[ 1116.261184][T11606] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1116.277073][ T4350] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1116.304352][T11606] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1116.368340][T11606] device bridge_slave_1 entered promiscuous mode
[ 1116.438364][ T4350] usb 10-1: device descriptor read/64, error -71
[ 1116.477594][T11606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1116.486825][ T4372] tipc: Disabling bearer <udp:syz0>
[ 1116.493035][ T4372] tipc: Left network mode
[ 1116.500531][T11606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1116.567320][ T4350] usb usb10-port1: attempt power cycle
[ 1116.617884][T11606] team0: Port device team_slave_0 added
[ 1116.633536][T11606] team0: Port device team_slave_1 added
[ 1116.759937][ T4291] Bluetooth: hci0: command 0x0419 tx timeout
[ 1116.785054][T11606] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1116.799455][T11606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1117.467213][T11664] blktrace: Concurrent blktraces are not allowed on loop0
[ 1117.879921][T11606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1117.897274][ T4350] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1117.938078][ T4350] usb 10-1: device descriptor read/8, error -71
[ 1117.961753][T11606] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1117.969381][T11606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1118.027284][T11606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1118.210654][ T4350] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1118.287427][ T4350] usb 10-1: device descriptor read/8, error -71
[ 1118.302570][T11606] device hsr_slave_0 entered promiscuous mode
[ 1118.328488][T11606] device hsr_slave_1 entered promiscuous mode
[ 1118.360371][T11606] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1118.377030][T11606] Cannot create hsr debugfs directory
[ 1118.407260][ T4350] usb usb10-port1: unable to enumerate USB device
[ 1124.516805][ T4372] device hsr_slave_0 left promiscuous mode
[ 1124.574380][ T4372] device hsr_slave_1 left promiscuous mode
[ 1126.158744][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1126.195784][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1126.241788][ T4372] device bridge_slave_1 left promiscuous mode
[ 1126.270762][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1126.321529][ T4372] device bridge_slave_0 left promiscuous mode
[ 1126.337170][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1126.424236][ T4372] device hsr_slave_0 left promiscuous mode
[ 1126.444075][ T4372] device hsr_slave_1 left promiscuous mode
[ 1126.467353][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1126.474886][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1126.506235][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1126.537265][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1126.553749][ T4372] device bridge_slave_1 left promiscuous mode
[ 1126.575618][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1126.617313][ T4372] device bridge_slave_0 left promiscuous mode
[ 1126.623629][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1126.757308][ T4372] device veth1_macvtap left promiscuous mode
[ 1126.763431][ T4372] device veth0_macvtap left promiscuous mode
[ 1126.797448][ T4372] device veth1_vlan left promiscuous mode
[ 1126.803358][ T4372] device veth0_vlan left promiscuous mode
[ 1128.827372][T11721] blktrace: Concurrent blktraces are not allowed on loop0
[ 1129.278054][ T4372] team0 (unregistering): Port device team_slave_1 removed
[ 1129.368899][ T4372] team0 (unregistering): Port device team_slave_0 removed
[ 1129.433839][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1129.508516][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1129.527188][   T14] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1129.689869][   T14] usb 10-1: device descriptor read/64, error -71
[ 1129.740826][ T4372] bond0 (unregistering): Released all slaves
[ 1130.916948][   T14] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1131.077858][   T14] usb 10-1: device descriptor read/64, error -71
[ 1131.208202][   T14] usb usb10-port1: attempt power cycle
[ 1131.647361][   T14] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1131.704828][   T14] usb 10-1: device descriptor read/8, error -71
[ 1131.976995][   T14] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1132.741778][   T14] usb 10-1: device descriptor read/8, error -71
[ 1132.868533][   T14] usb usb10-port1: unable to enumerate USB device
[ 1132.930817][ T4372] team0 (unregistering): Port device team_slave_1 removed
[ 1133.237185][ T4291] Bluetooth: hci3: command 0x0406 tx timeout
[ 1134.797662][ T4372] team0 (unregistering): Port device team_slave_0 removed
[ 1134.906644][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1136.487243][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1137.917199][   T14] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1138.915364][   T14] usb 2-1: device descriptor read/64, error -71
[ 1139.152537][ T4372] bond0 (unregistering): Released all slaves
[ 1139.347367][   T14] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1139.507417][   T14] usb 2-1: device descriptor read/64, error -71
[ 1139.579994][T11513] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1139.637397][   T14] usb usb2-port1: attempt power cycle
[ 1139.643382][T11513] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1139.808758][T11513] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1139.831208][T11513] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1140.078043][   T14] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1140.158893][   T14] usb 2-1: device descriptor read/8, error -71
[ 1140.468258][   T14] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1140.541454][   T14] usb 2-1: device descriptor read/8, error -71
[ 1140.708355][   T14] usb usb2-port1: unable to enumerate USB device
[ 1140.893659][T11513] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1140.976507][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1140.998022][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1141.009705][T11513] 8021q: adding VLAN 0 to HW filter on device team0
[ 1141.023244][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1141.065127][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1141.106184][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1141.113571][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1142.496865][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1142.589310][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1142.665781][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1142.715767][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1142.723069][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1142.731096][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1142.749219][T11517] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1142.810174][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1142.861048][T11517] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1142.887959][T11517] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1142.985927][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1143.061707][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1143.131581][T11517] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1143.322679][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1143.445390][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1143.591307][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1143.795704][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1143.871417][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1143.906355][T11513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1143.934210][T11513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1143.987700][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1144.005562][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1144.089795][T11606] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1144.233620][T11606] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1144.442648][T11606] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1144.966827][T11606] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1145.216365][T11517] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1145.397651][ T3600] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1145.598390][ T3600] usb 2-1: device descriptor read/64, error -71
[ 1145.831631][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1145.878026][ T3600] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1145.902713][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1146.067429][ T3600] usb 2-1: device descriptor read/64, error -71
[ 1146.098525][T11517] 8021q: adding VLAN 0 to HW filter on device team0
[ 1146.176143][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1146.192464][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1146.204901][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1146.221333][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1146.228465][ T3600] usb usb2-port1: attempt power cycle
[ 1146.233574][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1146.242033][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1146.255572][T11513] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1146.337119][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1146.369957][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1146.437850][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1146.482582][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1146.490139][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1146.560557][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1146.657029][ T3600] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1146.864622][T11606] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1146.903149][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1147.102687][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1147.183742][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1147.455367][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1147.512662][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1147.644797][ T4372] device hsr_slave_0 left promiscuous mode
[ 1147.680605][ T4372] device hsr_slave_1 left promiscuous mode
[ 1147.716658][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1147.753767][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1147.794354][ T4372] device bridge_slave_1 left promiscuous mode
[ 1147.828862][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1147.874333][ T4372] device bridge_slave_0 left promiscuous mode
[ 1147.902714][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1148.897044][ T3600] usb 2-1: device not accepting address 70, error -71
[ 1151.310662][ T4372] team0 (unregistering): Port device team_slave_1 removed
[ 1151.407843][T11848] syz.1.1675: attempt to access beyond end of device
[ 1151.407843][T11848] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1151.424396][ T4372] team0 (unregistering): Port device team_slave_0 removed
[ 1151.518137][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1151.559061][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1151.574408][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1151.583707][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1151.609832][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1151.621227][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1151.631129][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1151.870555][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1152.646002][ T4372] bond0 (unregistering): Released all slaves
[ 1152.734825][T11606] 8021q: adding VLAN 0 to HW filter on device team0
[ 1152.744714][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1152.768072][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1152.787617][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1152.798396][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1152.827688][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1152.895070][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1152.913827][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1152.946613][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1152.953843][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1153.011808][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1153.036034][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1153.254205][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1153.261534][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1153.604939][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1153.717037][ T4291] Bluetooth: hci2: command 0x0409 tx timeout
[ 1153.717855][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1154.740061][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1154.749325][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1154.759181][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1154.769252][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1154.787631][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1154.825691][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1154.917169][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1154.925895][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1154.994154][T11606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1155.032710][T11606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1155.054686][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1155.090779][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1155.458747][ T4367] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1155.668115][ T4367] usb 2-1: device descriptor read/64, error -71
[ 1155.797115][ T4286] Bluetooth: hci2: command 0x041b tx timeout
[ 1156.027261][ T4367] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1156.099019][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1156.137659][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1156.150021][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1156.159982][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1156.169930][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1156.177974][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1156.237179][ T4367] usb 2-1: device descriptor read/64, error -71
[ 1156.357742][ T4367] usb usb2-port1: attempt power cycle
[ 1156.676225][T11849] chnl_net:caif_netlink_parms(): no params data found
[ 1156.787253][ T4367] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1156.838125][ T4367] usb 2-1: device descriptor read/8, error -71
[ 1156.927675][T11849] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1156.943483][T11849] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1156.954521][T11849] device bridge_slave_0 entered promiscuous mode
[ 1157.016472][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1157.034874][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1157.042882][T11849] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1157.057454][T11849] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1157.085163][T11849] device bridge_slave_1 entered promiscuous mode
[ 1157.117164][ T4367] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1157.465157][T11849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1157.577611][T11606] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1157.640122][T11849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1157.877172][ T4286] Bluetooth: hci2: command 0x040f tx timeout
[ 1157.977611][ T4367] usb 2-1: device descriptor read/8, error -71
[ 1158.065272][T11849] team0: Port device team_slave_0 added
[ 1158.097180][ T4367] usb usb2-port1: unable to enumerate USB device
[ 1158.171739][T11849] team0: Port device team_slave_1 added
[ 1158.235210][T11904] syz.1.1684: attempt to access beyond end of device
[ 1158.235210][T11904] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1158.286506][ T4286] Bluetooth: hci4: command 0x0409 tx timeout
[ 1158.347033][T11879] chnl_net:caif_netlink_parms(): no params data found
[ 1158.608389][T11849] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1158.639887][T11849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1158.909999][T11849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1159.182495][T11849] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1159.193562][T11849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1159.230447][T11849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1159.957303][ T4286] Bluetooth: hci2: command 0x0419 tx timeout
[ 1160.358381][ T4286] Bluetooth: hci4: command 0x041b tx timeout
[ 1160.574488][T11849] device hsr_slave_0 entered promiscuous mode
[ 1162.054330][T11849] device hsr_slave_1 entered promiscuous mode
[ 1162.131455][T11849] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1162.157766][T11849] Cannot create hsr debugfs directory
[ 1162.248940][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1162.259861][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1162.320441][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1163.067186][T11930] blktrace: Concurrent blktraces are not allowed on loop0
[ 1163.312135][ T4286] Bluetooth: hci4: command 0x040f tx timeout
[ 1163.340032][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1163.349126][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1163.361110][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1163.400033][T11606] device veth0_vlan entered promiscuous mode
[ 1163.472009][T11879] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1163.488413][T11879] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1163.504668][T11879] device bridge_slave_0 entered promiscuous mode
[ 1163.571241][T11879] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1163.586363][T11879] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1163.623049][T11879] device bridge_slave_1 entered promiscuous mode
[ 1163.634915][T11606] device veth1_vlan entered promiscuous mode
[ 1163.795139][T11879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1163.886578][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1163.924772][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1163.959834][ T3600] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1164.015895][T11606] device veth0_macvtap entered promiscuous mode
[ 1164.031693][T11879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1164.158116][ T3600] usb 2-1: no configurations
[ 1164.162822][ T3600] usb 2-1: can't read configurations, error -22
[ 1164.304672][T11606] device veth1_macvtap entered promiscuous mode
[ 1164.327132][ T3600] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1164.519043][ T3600] usb 2-1: no configurations
[ 1164.524798][ T3600] usb 2-1: can't read configurations, error -22
[ 1164.562695][ T3600] usb usb2-port1: attempt power cycle
[ 1165.000198][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1165.008174][ T3600] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1165.061361][ T3600] usb 2-1: no configurations
[ 1165.080413][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1165.094696][ T3600] usb 2-1: can't read configurations, error -22
[ 1165.286978][ T3600] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1165.344022][ T3600] usb 2-1: no configurations
[ 1165.350990][ T3600] usb 2-1: can't read configurations, error -22
[ 1165.382801][T11879] team0: Port device team_slave_0 added
[ 1165.389976][ T3600] usb usb2-port1: unable to enumerate USB device
[ 1165.397278][ T4286] Bluetooth: hci4: command 0x0419 tx timeout
[ 1165.537080][T11879] team0: Port device team_slave_1 added
[ 1165.545408][T11606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1165.566672][T11606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1165.587021][T11606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1165.610280][T11606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1165.634770][T11606] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1166.199844][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1166.255720][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1166.537682][T11879] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1166.564424][T11879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1166.602756][T11879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1166.699365][T11879] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1166.706756][T11879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1166.806939][T11879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1168.329536][T11879] device hsr_slave_0 entered promiscuous mode
[ 1168.358188][T11879] device hsr_slave_1 entered promiscuous mode
[ 1168.399702][T11879] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1168.446081][T11879] Cannot create hsr debugfs directory
[ 1168.989191][T11987] blktrace: Concurrent blktraces are not allowed on loop0
[ 1171.147506][T11849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1171.371063][T11849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1171.436075][ T4372] device hsr_slave_0 left promiscuous mode
[ 1171.457418][T12001] binder: 11999:12001 ioctl c0306201 2000000008c0 returned -11
[ 1171.474059][ T4372] device hsr_slave_1 left promiscuous mode
[ 1171.489217][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1171.512084][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1171.538148][ T4372] device bridge_slave_1 left promiscuous mode
[ 1171.544476][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1171.583487][T10860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1171.595426][T10860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1171.604025][T10860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1171.604826][ T4372] device bridge_slave_0 left promiscuous mode
[ 1171.643254][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1171.651056][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1171.659692][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1171.727302][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1171.751843][ T4372] device hsr_slave_0 left promiscuous mode
[ 1171.769161][ T4372] device hsr_slave_1 left promiscuous mode
[ 1171.775933][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1171.792525][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1171.807760][ T4372] device bridge_slave_1 left promiscuous mode
[ 1171.817448][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1171.838196][ T4372] device bridge_slave_0 left promiscuous mode
[ 1171.844485][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1171.987188][ T4361] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1172.187909][ T4361] usb 10-1: no configurations
[ 1172.192714][ T4361] usb 10-1: can't read configurations, error -22
[ 1172.385191][ T4361] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1172.452770][ T4372] team0 (unregistering): Port device team_slave_1 removed
[ 1172.516494][ T4372] team0 (unregistering): Port device team_slave_0 removed
[ 1172.572044][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1172.597788][ T4361] usb 10-1: no configurations
[ 1172.602825][ T4361] usb 10-1: can't read configurations, error -22
[ 1172.613132][ T4361] usb usb10-port1: attempt power cycle
[ 1172.645121][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1172.886618][ T4372] bond0 (unregistering): Released all slaves
[ 1173.027153][ T4361] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1173.058347][ T4361] usb 10-1: no configurations
[ 1173.063254][ T4361] usb 10-1: can't read configurations, error -22
[ 1173.221076][ T4361] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1174.680230][ T4291] Bluetooth: hci0: command 0x0409 tx timeout
[ 1174.796932][ T4361] usb 10-1: device descriptor read/8, error -71
[ 1174.917403][ T4361] usb usb10-port1: unable to enumerate USB device
[ 1174.959127][ T4372] team0 (unregistering): Port device team_slave_1 removed
[ 1175.505540][ T4372] team0 (unregistering): Port device team_slave_0 removed
[ 1175.879211][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1176.549349][T12032] blktrace: Concurrent blktraces are not allowed on loop0
[ 1177.344236][ T4291] Bluetooth: hci0: command 0x041b tx timeout
[ 1177.352115][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.358707][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.438316][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1178.817794][ T4372] bond0 (unregistering): Released all slaves
[ 1178.981743][T11849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1179.488944][ T4291] Bluetooth: hci0: command 0x040f tx timeout
[ 1179.904687][T11849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1181.582430][ T4286] Bluetooth: hci0: command 0x0419 tx timeout
[ 1182.149861][T11849] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1182.468490][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1182.560752][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1182.662027][T12002] chnl_net:caif_netlink_parms(): no params data found
[ 1182.769214][T11849] 8021q: adding VLAN 0 to HW filter on device team0
[ 1183.458948][T12073] blktrace: Concurrent blktraces are not allowed on loop0
[ 1184.429864][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1184.451847][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1184.498122][ T9992] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1184.505310][ T9992] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1184.522159][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1184.534697][T12002] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1184.559597][T12002] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1184.581630][T12002] device bridge_slave_0 entered promiscuous mode
[ 1184.604190][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1184.649162][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1184.684123][ T4325] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1184.700130][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1184.707735][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1184.727865][T12002] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1184.735048][T12002] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1184.759702][T12002] device bridge_slave_1 entered promiscuous mode
[ 1184.849674][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1184.887967][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1184.904283][ T4325] usb 10-1: no configurations
[ 1184.909269][ T4325] usb 10-1: can't read configurations, error -22
[ 1184.933950][T12002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1184.973984][T12002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1184.996359][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1185.018610][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1185.035487][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1185.045077][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1185.060826][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1185.073418][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1185.101816][ T4325] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1185.146351][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1185.171310][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1185.180618][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1185.192496][T11849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1185.214513][T12002] team0: Port device team_slave_0 added
[ 1185.238301][T11879] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1185.273095][T11879] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1185.295819][T11879] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1185.307743][ T4325] usb 10-1: no configurations
[ 1185.312545][ T4325] usb 10-1: can't read configurations, error -22
[ 1185.328991][T11879] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1185.336354][ T4325] usb usb10-port1: attempt power cycle
[ 1185.371178][T12002] team0: Port device team_slave_1 added
[ 1185.486040][T12002] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1185.503448][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1185.560508][T12002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1185.633319][T12002] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1185.714189][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1185.787445][ T4325] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1185.952572][T12002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1186.949084][ T4325] usb 10-1: no configurations
[ 1186.953880][ T4325] usb 10-1: can't read configurations, error -22
[ 1186.988873][T12002] device hsr_slave_0 entered promiscuous mode
[ 1187.018992][T12002] device hsr_slave_1 entered promiscuous mode
[ 1187.117025][ T4325] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1187.148467][ T4325] usb 10-1: no configurations
[ 1187.153251][ T4325] usb 10-1: can't read configurations, error -22
[ 1187.167350][ T4325] usb usb10-port1: unable to enumerate USB device
[ 1187.373279][T11879] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1187.474212][T11849] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1187.504365][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1187.515915][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1187.585058][T11879] 8021q: adding VLAN 0 to HW filter on device team0
[ 1187.611134][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1187.626391][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1187.684198][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1187.714831][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1189.233869][ T6898] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1189.241123][ T6898] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1189.283758][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1189.305240][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1189.328694][ T6898] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1189.335935][ T6898] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1189.351444][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1189.371825][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1189.383667][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1189.415710][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1189.625773][T12121] blktrace: Concurrent blktraces are not allowed on loop0
[ 1189.701194][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1190.197736][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1190.209214][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1190.218211][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1190.305175][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1190.368262][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1190.490121][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1190.633152][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1190.763303][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1190.884271][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1191.200428][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1191.264119][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1191.489711][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1191.570764][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1191.682260][T11849] device veth0_vlan entered promiscuous mode
[ 1191.905628][T11849] device veth1_vlan entered promiscuous mode
[ 1192.184950][T11849] device veth0_macvtap entered promiscuous mode
[ 1192.280277][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1192.298355][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1192.319381][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1192.347499][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1192.388981][ T4361] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1192.423397][T11849] device veth1_macvtap entered promiscuous mode
[ 1192.468572][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1192.523258][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1192.547043][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1192.566973][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1192.588953][ T4361] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1192.610835][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1192.621788][ T4361] usb 2-1: config 0 has no interfaces?
[ 1192.627593][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1192.649546][ T4361] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[ 1192.658885][ T4361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1192.667681][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1192.678033][ T4361] usb 2-1: Product: syz
[ 1192.682257][ T4361] usb 2-1: Manufacturer: syz
[ 1192.689286][T11849] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1192.697213][ T4361] usb 2-1: SerialNumber: syz
[ 1192.723179][ T4361] usb 2-1: config 0 descriptor??
[ 1192.828246][T12151] syz.9.1727: attempt to access beyond end of device
[ 1192.828246][T12151] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1193.205033][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1193.255879][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1193.350291][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1193.428533][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1193.545475][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1193.641943][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1193.717143][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1193.727882][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1193.739687][T11849] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1193.750593][T11849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1193.759497][T11849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1193.768494][T11849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1193.777570][T11849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1195.357908][ T3600] usb 2-1: USB disconnect, device number 80
[ 1195.390818][T11879] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1195.424633][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1195.447912][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1195.728578][T12162] blktrace: Concurrent blktraces are not allowed on loop0
[ 1197.463890][T12002] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1197.547717][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1197.555631][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1197.788575][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1197.805717][T12002] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1197.862859][ T4372] device hsr_slave_0 left promiscuous mode
[ 1197.889802][ T4372] device hsr_slave_1 left promiscuous mode
[ 1197.907149][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1197.938480][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1197.966254][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1198.007922][ T4372] device bridge_slave_1 left promiscuous mode
[ 1198.026179][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1198.060765][ T4372] device bridge_slave_0 left promiscuous mode
[ 1198.075439][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1198.150092][ T4372] device veth1_macvtap left promiscuous mode
[ 1198.162990][ T4372] device veth0_macvtap left promiscuous mode
[ 1198.178862][ T4372] device veth1_vlan left promiscuous mode
[ 1198.194182][ T4372] device veth0_vlan left promiscuous mode
[ 1202.129444][T12215] blktrace: Concurrent blktraces are not allowed on loop0
[ 1202.237142][   T14] usb 2-1: new full-speed USB device number 81 using dummy_hcd
[ 1202.520033][   T14] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[ 1202.530465][   T14] usb 2-1: config 0 has no interface number 0
[ 1202.558938][   T14] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1202.629101][   T14] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1202.680347][   T14] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[ 1202.705503][   T14] usb 2-1: Manufacturer: syz
[ 1202.811472][   T14] usb 2-1: SerialNumber: syz
[ 1202.832442][   T14] usb 2-1: config 0 descriptor??
[ 1203.062587][ T4372] team0 (unregistering): Port device team_slave_1 removed
[ 1203.097969][   T14] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71
[ 1203.123560][   T14] usbtouchscreen: probe of 2-1:0.214 failed with error -71
[ 1203.156700][   T14] usb 2-1: USB disconnect, device number 81
[ 1203.226322][ T4372] team0 (unregistering): Port device team_slave_0 removed
[ 1203.292142][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1203.365511][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1204.747187][ T4372] bond0 (unregistering): Released all slaves
[ 1204.947191][T12002] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1204.971000][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1204.974332][T12002] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1206.061802][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1206.102683][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1206.130442][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1206.157611][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1206.237498][T12261] syz.9.1746: attempt to access beyond end of device
[ 1206.237498][T12261] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1206.306564][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1206.315414][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1206.334909][T11879] device veth0_vlan entered promiscuous mode
[ 1206.347947][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1206.356718][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1206.383263][T11879] device veth1_vlan entered promiscuous mode
[ 1206.451936][T12266] netlink: 'syz.9.1746': attribute type 19 has an invalid length.
[ 1206.521306][T11879] device veth0_macvtap entered promiscuous mode
[ 1206.553586][T12002] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1206.571395][T11879] device veth1_macvtap entered promiscuous mode
[ 1206.632314][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1206.646800][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1206.720702][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1206.740895][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1206.760368][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1206.815831][T12002] 8021q: adding VLAN 0 to HW filter on device team0
[ 1206.873119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1206.890966][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1206.929304][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1207.040143][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1207.107702][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1207.138834][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1207.146022][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1207.188865][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1207.198087][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1207.208057][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1207.215209][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1207.223480][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1207.339373][T11879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1207.366966][T11879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1207.387091][T11879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1207.406297][T11879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1207.447881][T11879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1207.647848][T11879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1207.660155][T11879] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1207.672318][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1207.695407][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1208.275388][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1208.354045][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1208.443485][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1208.501398][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1208.510540][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1208.519504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1208.542135][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1208.565052][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1210.103998][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1210.123790][T11879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1210.151711][T11879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1210.180323][T11879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1210.203389][T11879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1210.219463][T11879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1210.233577][T11879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1210.261922][T11879] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1210.331816][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1210.365798][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1210.391284][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1210.427881][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1210.464727][T12002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1210.505910][T11879] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1210.532697][T11879] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1210.562951][T11879] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1210.591054][T11879] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1210.847492][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1210.855437][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1212.268535][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1212.492926][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1212.511762][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1212.542646][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1213.265118][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1213.281008][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1213.315939][T12002] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1214.703060][T12308] 
[ 1214.705487][T12308] ======================================================
[ 1214.712571][T12308] WARNING: possible circular locking dependency detected
[ 1214.719650][T12308] syzkaller #0 Not tainted
[ 1214.724109][T12308] ------------------------------------------------------
[ 1214.731174][T12308] syz.1.1749/12308 is trying to acquire lock:
[ 1214.737287][T12308] ffff88801eb46e58 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x109/0xac0
[ 1214.748874][T12308] 
[ 1214.748874][T12308] but task is already holding lock:
[ 1214.756282][T12308] ffff88801eb44ff0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520
[ 1214.765452][T12308] 
[ 1214.765452][T12308] which lock already depends on the new lock.
[ 1214.765452][T12308] 
[ 1214.775900][T12308] 
[ 1214.775900][T12308] the existing dependency chain (in reverse order) is:
[ 1214.784964][T12308] 
[ 1214.784964][T12308] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}:
[ 1214.792774][T12308]        lock_sock_nested+0x44/0x100
[ 1214.798150][T12308]        smc_listen_out+0xd4/0x3c0
[ 1214.803313][T12308]        smc_listen_work+0x57c/0xd60
[ 1214.808661][T12308]        process_one_work+0x8ab/0x1160
[ 1214.814178][T12308]        worker_thread+0xaf5/0x12a0
[ 1214.819527][T12308]        kthread+0x29d/0x330
[ 1214.824161][T12308]        ret_from_fork+0x1f/0x30
[ 1214.829193][T12308] 
[ 1214.829193][T12308] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}:
[ 1214.839429][T12308]        __lock_acquire+0x3a03/0x7ea0
[ 1214.844861][T12308]        lock_acquire+0x1bc/0x4a0
[ 1214.849979][T12308]        __flush_work+0x122/0xac0
[ 1214.855052][T12308]        __cancel_work_timer+0x3f4/0x560
[ 1214.860734][T12308]        smc_clcsock_release+0x5c/0xe0
[ 1214.866311][T12308]        __smc_release+0x644/0x7b0
[ 1214.871476][T12308]        smc_close_non_accepted+0xd1/0x1f0
[ 1214.877429][T12308]        smc_close_active+0xae2/0xea0
[ 1214.882848][T12308]        __smc_release+0x9c/0x7b0
[ 1214.887909][T12308]        smc_release+0x2c1/0x520
[ 1214.892889][T12308]        sock_close+0xbf/0x210
[ 1214.897874][T12308]        __fput+0x20a/0x8b0
[ 1214.902473][T12308]        task_work_run+0x1d0/0x260
[ 1214.907643][T12308]        exit_to_user_mode_loop+0xe6/0x110
[ 1214.913587][T12308]        exit_to_user_mode_prepare+0xee/0x180
[ 1214.919713][T12308]        syscall_exit_to_user_mode+0x16/0x40
[ 1214.925750][T12308]        do_syscall_64+0x58/0xa0
[ 1214.930732][T12308]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1214.937187][T12308] 
[ 1214.937187][T12308] other info that might help us debug this:
[ 1214.937187][T12308] 
[ 1214.947543][T12308]  Possible unsafe locking scenario:
[ 1214.947543][T12308] 
[ 1214.955029][T12308]        CPU0                    CPU1
[ 1214.960514][T12308]        ----                    ----
[ 1214.965909][T12308]   lock(sk_lock-AF_SMC/1);
[ 1214.970466][T12308]                                lock((work_completion)(&new_smc->smc_listen_work));
[ 1214.980007][T12308]                                lock(sk_lock-AF_SMC/1);
[ 1214.987088][T12308]   lock((work_completion)(&new_smc->smc_listen_work));
[ 1214.994065][T12308] 
[ 1214.994065][T12308]  *** DEADLOCK ***
[ 1214.994065][T12308] 
[ 1215.002253][T12308] 2 locks held by syz.1.1749/12308:
[ 1215.007485][T12308]  #0: ffff888074344410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210
[ 1215.017743][T12308]  #1: ffff88801eb44ff0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520
[ 1215.027312][T12308] 
[ 1215.027312][T12308] stack backtrace:
[ 1215.033258][T12308] CPU: 1 PID: 12308 Comm: syz.1.1749 Not tainted syzkaller #0
[ 1215.040846][T12308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1215.050945][T12308] Call Trace:
[ 1215.054263][T12308]  <TASK>
[ 1215.057233][T12308]  dump_stack_lvl+0x188/0x24e
[ 1215.061957][T12308]  ? load_image+0x410/0x410
[ 1215.066511][T12308]  ? show_regs_print_info+0x12/0x12
[ 1215.071757][T12308]  ? print_circular_bug+0x12b/0x1a0
[ 1215.077020][T12308]  check_noncircular+0x2f8/0x400
[ 1215.082013][T12308]  ? look_up_lock_class+0x75/0x140
[ 1215.087186][T12308]  ? print_deadlock_bug+0x5d0/0x5d0
[ 1215.092440][T12308]  ? lockdep_lock+0xf1/0x1f0
[ 1215.097085][T12308]  ? lock_release+0xcf/0x920
[ 1215.101731][T12308]  ? _find_first_zero_bit+0xd2/0x100
[ 1215.107090][T12308]  __lock_acquire+0x3a03/0x7ea0
[ 1215.112003][T12308]  ? deref_stack_reg+0x18e/0x220
[ 1215.116995][T12308]  ? is_bpf_text_address+0x28b/0x2a0
[ 1215.122327][T12308]  ? verify_lock_unused+0x140/0x140
[ 1215.127583][T12308]  ? check_path+0x40/0x40
[ 1215.131971][T12308]  ? mark_lock+0x94/0x320
[ 1215.136364][T12308]  ? __lock_acquire+0x142d/0x7ea0
[ 1215.141441][T12308]  lock_acquire+0x1bc/0x4a0
[ 1215.146020][T12308]  ? __flush_work+0x109/0xac0
[ 1215.150774][T12308]  ? __lock_acquire+0x142d/0x7ea0
[ 1215.155852][T12308]  ? read_lock_is_recursive+0x10/0x10
[ 1215.161282][T12308]  ? __flush_work+0x109/0xac0
[ 1215.166002][T12308]  __flush_work+0x122/0xac0
[ 1215.170545][T12308]  ? __flush_work+0x109/0xac0
[ 1215.175269][T12308]  ? flush_work+0x20/0x20
[ 1215.179637][T12308]  ? try_to_grab_pending+0xfa/0x890
[ 1215.184921][T12308]  ? lockdep_hardirqs_off+0x70/0x100
[ 1215.190296][T12308]  ? mark_lock+0x94/0x320
[ 1215.194681][T12308]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1215.200710][T12308]  ? mod_delayed_work_on+0x1b0/0x1b0
[ 1215.206041][T12308]  ? lock_chain_count+0x20/0x20
[ 1215.210948][T12308]  ? __cancel_work_timer+0x36a/0x560
[ 1215.216286][T12308]  __cancel_work_timer+0x3f4/0x560
[ 1215.221503][T12308]  ? cancel_work_sync+0x20/0x20
[ 1215.226405][T12308]  ? __smc_release+0x63c/0x7b0
[ 1215.231223][T12308]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1215.236645][T12308]  ? lockdep_hardirqs_on+0x94/0x140
[ 1215.241903][T12308]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1215.247338][T12308]  ? _local_bh_enable+0xa0/0xa0
[ 1215.252248][T12308]  smc_clcsock_release+0x5c/0xe0
[ 1215.257247][T12308]  __smc_release+0x644/0x7b0
[ 1215.261898][T12308]  smc_close_non_accepted+0xd1/0x1f0
[ 1215.267243][T12308]  smc_close_active+0xae2/0xea0
[ 1215.272200][T12308]  ? sock_no_sendpage_locked+0x1c0/0x1c0
[ 1215.277865][T12308]  __smc_release+0x9c/0x7b0
[ 1215.282387][T12308]  smc_release+0x2c1/0x520
[ 1215.286823][T12308]  sock_close+0xbf/0x210
[ 1215.291114][T12308]  ? sock_mmap+0x90/0x90
[ 1215.295369][T12308]  __fput+0x20a/0x8b0
[ 1215.299400][T12308]  task_work_run+0x1d0/0x260
[ 1215.304018][T12308]  ? task_work_cancel+0x220/0x220
[ 1215.309068][T12308]  ? __close_range+0x20c/0x770
[ 1215.313860][T12308]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1215.319377][T12308]  exit_to_user_mode_loop+0xe6/0x110
[ 1215.324686][T12308]  exit_to_user_mode_prepare+0xee/0x180
[ 1215.330283][T12308]  syscall_exit_to_user_mode+0x16/0x40
[ 1215.335770][T12308]  do_syscall_64+0x58/0xa0
[ 1215.340206][T12308]  ? clear_bhb_loop+0x60/0xb0
[ 1215.344903][T12308]  ? clear_bhb_loop+0x60/0xb0
[ 1215.349656][T12308]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1215.355575][T12308] RIP: 0033:0x7fa24d79e159
[ 1215.360014][T12308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1215.379657][T12308] RSP: 002b:00007ffe866ccc58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1215.388088][T12308] RAX: 0000000000000000 RBX: 00007fa24da27da0 RCX: 00007fa24d79e159
[ 1215.396164][T12308] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1215.404147][T12308] RBP: 00007fa24da27da0 R08: 0000000000000006 R09: 0000000000000000
[ 1215.412179][T12308] R10: 00007fa24da27cb0 R11: 0000000000000246 R12: 000000000012867b
[ 1215.420162][T12308] R13: 00007fa24da2609c R14: 00000000001283a8 R15: 00007ffe866ccd60
[ 1215.428167][T12308]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1216.884466][ T4371] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1216.991888][ T4371] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.105317][ T4371] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.264417][ T4371] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1218.072565][ T4371] device hsr_slave_0 left promiscuous mode
[ 1218.079187][ T4371] device hsr_slave_1 left promiscuous mode
[ 1218.085835][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1218.093749][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1218.104803][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1218.115676][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1218.124868][ T4371] device bridge_slave_1 left promiscuous mode
[ 1218.131396][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1218.140105][ T4371] device bridge_slave_0 left promiscuous mode
[ 1218.146403][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1218.163365][ T4371] device veth1_macvtap left promiscuous mode
[ 1218.169565][ T4371] device veth0_macvtap left promiscuous mode
[ 1218.175718][ T4371] device veth1_vlan left promiscuous mode
[ 1218.183468][ T4371] device veth0_vlan left promiscuous mode
[ 1218.355164][ T4371] team0 (unregistering): Port device team_slave_1 removed
[ 1218.373037][ T4371] team0 (unregistering): Port device team_slave_0 removed
[ 1218.407814][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1218.445653][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1218.517781][ T4371] bond0 (unregistering): Released all slaves
[ 1218.995066][ T4371] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1219.032373][ T4371] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1219.082391][ T4371] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1219.152842][ T4371] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1219.266146][ T4371] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1219.342202][ T4371] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1219.411419][ T4371] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1219.451536][ T4371] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1219.750775][ T4371] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1219.803129][ T4371] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1219.852263][ T4371] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1219.892411][ T4371] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1220.017598][ T4371] tipc: Disabling bearer <udp:syz0>
[ 1220.023036][ T4371] tipc: Left network mode
[ 1221.268493][ T4371] device hsr_slave_0 left promiscuous mode
[ 1221.274875][ T4371] device hsr_slave_1 left promiscuous mode
[ 1221.281425][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1221.289037][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1221.296667][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1221.304471][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1221.313764][ T4371] device bridge_slave_1 left promiscuous mode
[ 1221.320281][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1221.328728][ T4371] device bridge_slave_0 left promiscuous mode
[ 1221.334981][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1221.345534][ T4371] device hsr_slave_0 left promiscuous mode
[ 1221.352017][ T4371] device hsr_slave_1 left promiscuous mode
[ 1221.358443][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1221.365900][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1221.373984][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1221.381714][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1221.389439][ T4371] device bridge_slave_1 left promiscuous mode
[ 1221.395619][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1221.404633][ T4371] device bridge_slave_0 left promiscuous mode
[ 1221.411000][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1221.421857][ T4371] device hsr_slave_0 left promiscuous mode
[ 1221.428238][ T4371] device hsr_slave_1 left promiscuous mode
[ 1221.434521][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1221.442326][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1221.450096][ T4371] device bridge_slave_1 left promiscuous mode
[ 1221.456300][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1221.464492][ T4371] device bridge_slave_0 left promiscuous mode
[ 1221.470870][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1221.484053][ T4371] device hsr_slave_0 left promiscuous mode
[ 1221.490524][ T4371] device hsr_slave_1 left promiscuous mode
[ 1221.496798][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1221.504286][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1221.512075][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1221.519664][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1221.527402][ T4371] device bridge_slave_1 left promiscuous mode
[ 1221.533603][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1221.541822][ T4371] device bridge_slave_0 left promiscuous mode
[ 1221.548186][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1221.561335][ T4371] device veth1_macvtap left promiscuous mode
[ 1221.567436][ T4371] device veth0_macvtap left promiscuous mode
[ 1221.573487][ T4371] device veth1_vlan left promiscuous mode
[ 1221.579436][ T4371] device veth0_vlan left promiscuous mode
[ 1221.585965][ T4371] device veth1_macvtap left promiscuous mode
[ 1221.592167][ T4371] device veth0_macvtap left promiscuous mode
[ 1221.598546][ T4371] device veth1_vlan left promiscuous mode
[ 1221.604392][ T4371] device veth0_vlan left promiscuous mode
[ 1221.611577][ T4371] device veth1_macvtap left promiscuous mode
[ 1221.617681][ T4371] device veth0_macvtap left promiscuous mode
[ 1221.623832][ T4371] device veth1_vlan left promiscuous mode
[ 1221.629966][ T4371] device veth0_vlan left promiscuous mode
[ 1221.941051][ T4371] team0 (unregistering): Port device team_slave_1 removed
[ 1221.971189][ T4371] team0 (unregistering): Port device team_slave_0 removed
[ 1221.982607][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1221.995367][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1222.049357][ T4371] bond0 (unregistering): Released all slaves
[ 1222.151430][ T4371] team0 (unregistering): Port device team_slave_1 removed
[ 1222.163263][ T4371] team0 (unregistering): Port device team_slave_0 removed
[ 1222.194278][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1222.224677][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1222.275051][ T4371] bond0 (unregistering): Released all slaves
[ 1222.368547][ T4371] team0 (unregistering): Port device team_slave_1 removed
[ 1222.398485][ T4371] team0 (unregistering): Port device team_slave_0 removed
[ 1222.430275][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1222.461731][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1222.512378][ T4371] bond0 (unregistering): Released all slaves
[ 1222.597335][ T4371] team0 (unregistering): Port device team_slave_1 removed
[ 1222.613858][ T4371] team0 (unregistering): Port device team_slave_0 removed
[ 1222.643646][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1222.673105][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1222.723177][ T4371] bond0 (unregistering): Released all slaves