last executing test programs:

6.970611746s ago: executing program 3 (id=29):
truncate(&(0x7f0000000100)='./file0\x00', 0x5)

6.707433781s ago: executing program 1 (id=32):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet6(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='neigh_update\x00', r1}, 0x18)
sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)

6.706710499s ago: executing program 3 (id=33):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r2, 0xa, 0x13)
fcntl$setlease(r2, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

6.532072388s ago: executing program 2 (id=34):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc08}}, 0x120)
readv(r1, &(0x7f0000000880)=[{&(0x7f0000000700)=""/71, 0x47}, {&(0x7f0000000780)=""/20, 0x14}], 0x2)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1)
write$UHID_DESTROY(r1, &(0x7f0000000200), 0x4)

5.715563428s ago: executing program 1 (id=38):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9, 0x4}}, './file0\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x4000000)
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x2008803, &(0x7f0000000080), 0x1, 0x638, &(0x7f0000000240)="$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")

5.645266457s ago: executing program 3 (id=39):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

5.046469163s ago: executing program 2 (id=43):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x1ff}, {{&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/125, 0x7d}], 0x1}}, {{&(0x7f0000000580)=@ax25={{0x3, @null}, [@remote, @rose, @bcast, @netrom, @null, @netrom, @remote, @netrom]}, 0x80, &(0x7f0000000f00)=[{&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000880)=""/54, 0x36}, {&(0x7f00000008c0)=""/15, 0xf}, {&(0x7f0000000c00)=""/241, 0xf1}, {&(0x7f0000000900)=""/5, 0x5}, {&(0x7f0000000d00)=""/192, 0xc0}, {&(0x7f0000000b00)=""/135, 0x87}, {&(0x7f0000000e00)=""/249, 0xf9}, {&(0x7f0000000940)=""/63, 0x3f}], 0xa, &(0x7f0000000fc0)=""/196, 0xc4}, 0x7d}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001140)=""/237, 0xed}, {&(0x7f0000001240)=""/210, 0xd2}, {&(0x7f0000001340)=""/206, 0xce}, {0x0}, {&(0x7f0000001500)=""/132, 0x84}, {&(0x7f00000015c0)=""/71, 0x47}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000002640)=""/247, 0xf7}, {&(0x7f0000002740)=""/126, 0x7e}], 0x9, &(0x7f0000002880)=""/53, 0x35}, 0x1}, {{&(0x7f00000028c0)=@l2, 0x80, 0x0, 0x0, &(0x7f0000002c00)=""/57, 0x39}, 0x7}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002c40)=""/114, 0x72}, {&(0x7f0000002cc0)=""/210, 0xd2}], 0x2}}, {{&(0x7f0000002e80)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002f00)=""/68, 0x44}], 0x1, &(0x7f0000002fc0)=""/221, 0xdd}, 0xe1fc}], 0x7, 0x0, 0x0)

4.943763532s ago: executing program 0 (id=45):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = dup2(r1, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff)

4.943586726s ago: executing program 1 (id=46):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt\x00\b\x00\x00\x00\x00\x00\x00uni_xlate=1,showexec,flush,shortname=win95,nonumpail=0,rodir,utf8=0,shortname/mixed,umask=000000\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5, 0x2a1, &(0x7f0000000a00)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0)

4.214531651s ago: executing program 3 (id=48):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0xf)
r3 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000080a010300000000000000000200000a14000000000a010200000000000000000a00000714000000110001"], 0x50}}, 0x0)

3.871945329s ago: executing program 2 (id=49):
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

3.871761153s ago: executing program 3 (id=50):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010b"], 0x14}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x1}, 0x0)

3.871609067s ago: executing program 0 (id=51):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@noblock_validity}, {}, {@sysvgroups}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x868420, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

3.786011083s ago: executing program 4 (id=52):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5d15, &(0x7f00000014c0)={0x0, 0xe929, 0x800, 0x0, 0x3e3}, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)

3.755585919s ago: executing program 1 (id=53):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2044}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x4000004)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r3}, 0x8)
dup(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r6, @ANYRES16, @ANYRESHEX=r5, @ANYRES64=r1, @ANYRES32, @ANYRESDEC, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x8002}, 0x800)
socket$inet6(0xa, 0x1, 0x8010800000000084)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8000)

3.503745871s ago: executing program 3 (id=54):
add_key$user(&(0x7f0000001e80), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000900)={[{@data_err_abort}, {@bh}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@noinit_itable}, {@noblock_validity}, {@jqfmt_vfsv1}, {@debug}]}, 0xfb, 0x46f, &(0x7f0000000480)="$eJzs3D1sG1UcAPD/XZIW+pVQykdLgUBBVHwkbVqgAwMgITEUCQmGMpo0rUrdBjVBolVEA6rKggSV2BESCxIzAxMTAiYkFgbYUaUKdaEwGZ19Nk5iu47j1E79+0kXv2c/+73/3T3fu3s5BzCwxrM/ScS2iPg9IkYjIl1eYLzycOP6wvQ/1xemkyiV3vgryd4Wf19fmK4WTfLHrZXMcPaQXkrixQb1zp2/cLpQLM6cy/OT82fenZw7f+GZU2cKJ2dOzpydOnLk8KGDzz839WxX4rwra+ueD2b37n71rSuvTR+78vZP3yR1ja6PoztGYrFunSz3eHcr67ntdelkuGXRdN0bQ9s2R5Q76ki5/4/G0KUdtddG45WPeto4YF2VSqXSVPOXF0vAbSyJXrcA6I3qgT47/60ut2jo0ReuvVQ5AcrivpEvlVeGayeqI8vOb7tpISKOLf77RbbEulyHAABY6vts/PN0o/FfGvfWlduRzw2N5XMpOyPi7ojYFRH3RJTL3hcR96+y/vFl+ZXjn/RqR4G1KRv/vZDPbS0d/9WmKcaG8tz2cvwjyYlTxZkD+TrZHyObs/zBhp+eRHkSKH79tFn943Xjv2zJ6q+OBfN2XB3evPQ9xwvzhTUHnrv2YcSe4Ubx5xN4+RzW7ojY02Edp578eu/SZ4ZqqZvH30Lreaa2lL6MeKKy/RdjWfxVSev5yck7ojhzYLK6V6z08y+XX29W/5ri74Js+29puP/X4h9L6udr51Z8xKab1XH5j4+bntN0uv9vSt5cUvn7hfn5cwcjNiVHVz5fd4G7mq+Wz+Lfv69x/98Z/6+JByIi24kfjIiHIuLhvO2PRMSjEbGvRfw/vvzYO53Hv76y+I+uavuvPjF0+ofvmtXf3vY/XE7tz59p5/uv3QauZd0BAADARpFGxLZI0olaOk0nJir/w78rtqTF2bn5p07Mvnf2eOUegbEYSatXukbzfOTXP8fqro9OlWfNIy7m+UP5dePPh+4s5yemZ4vHex08DLitTfp/5s+hXrcOWHddmEcDNij9HwZX5/3fNwdsdDfpxX6wAW5jjuIwuBr1/4s9aAdw6zn+w+Cq9f/P2ihcd7vX8ps3gY3H8R8Gl/4PA2kt9/X3RSK+imhdJumXpq4q8Ul/NKN5ItK+aEbHiUJ/NGMVieG2f9XifOlioVj87du1VNrrbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+C8AAP//2SfnNA==")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e5f}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0x1, 0x8, 0x0, @void, @value}, 0x20)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0], 0x14}}, 0x4000004)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000050a245d5cde008060001080006960003000000000000ac1414aa000000008000e0000001"], 0x0)
setns(r1, 0x24020000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0)

3.066092152s ago: executing program 2 (id=55):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)

2.954506654s ago: executing program 0 (id=56):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0xff04}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)

1.751893421s ago: executing program 4 (id=57):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000020000000500000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x83c00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000))
close_range(r2, 0xffffffffffffffff, 0x0)

1.751670645s ago: executing program 0 (id=58):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000002800)=ANY=[], 0x6, 0x2b0, &(0x7f0000000680)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r0}, 0x10)
mq_open(0x0, 0x42, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x11, r1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0x100000002)

1.548569152s ago: executing program 4 (id=59):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x10, 0xa401)
ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f00000002c0)={0x2ffe, 0x1, [{0x1, 0x1}]})

1.276267409s ago: executing program 4 (id=60):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x48, r1, 0x1, 0x0, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa, 0x4, "ece97cacb603"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x24000010)

1.156011593s ago: executing program 0 (id=61):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
close_range(r2, r2, 0x0)

935.999867ms ago: executing program 0 (id=62):
syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x4be, &(0x7f0000000540)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000"], 0x34)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
unshare(0x68040200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r5, 0x802)
r6 = socket$netlink(0x10, 0x3, 0x4)
write(r6, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "67d46975569d4aa886f57a16be696ae9cd29a3b536e4896315aa5b1e80986e5584b6c02bf430f69e0ebe0b193d67056ce4b00a1ff7460a3ef73182ce1309c9f6", 0x21}, 0x48, 0xfffffffffffffffc)
socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000436000/0x1000)=nil, 0x1000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)

574.228256ms ago: executing program 1 (id=63):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x40030000000000}, 0x0)

523.862391ms ago: executing program 4 (id=64):
r0 = io_uring_setup(0x4111, &(0x7f0000000200)={0x0, 0x10000000, 0x2, 0xfdfffffc, 0xd8})
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)

523.66216ms ago: executing program 2 (id=65):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18)
flock(0xffffffffffffffff, 0x2)

152.250829ms ago: executing program 2 (id=66):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
unshare(0x2040400)
r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(r2, 0x0, 0x0)

70.833673ms ago: executing program 4 (id=67):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r1, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)

0s ago: executing program 1 (id=68):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x2, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts.
[   96.626620][ T5823] cgroup: Unknown subsys name 'net'
[   96.779417][ T5823] cgroup: Unknown subsys name 'cpuset'
[   96.789321][ T5823] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   97.466435][ T1205] cfg80211: failed to load regulatory.db
[   98.622474][ T5823] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  101.729499][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  101.744067][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  101.752168][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  101.761353][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  101.769705][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  101.777556][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  101.787781][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  101.808108][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  101.833449][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  101.868157][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  101.877518][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  101.903572][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  101.922951][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  101.930793][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  101.940194][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  101.950125][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  101.959260][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  101.965108][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  101.971099][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  101.981700][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  101.990748][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  102.000079][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  102.009906][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  102.031480][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  102.039569][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  102.046465][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  102.049009][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  102.055257][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  102.068710][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  102.076302][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  102.786037][ T5834] chnl_net:caif_netlink_parms(): no params data found
[  103.162205][ T5844] chnl_net:caif_netlink_parms(): no params data found
[  103.177169][ T5845] chnl_net:caif_netlink_parms(): no params data found
[  103.221003][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.228553][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.237477][ T5834] bridge_slave_0: entered allmulticast mode
[  103.245409][ T5834] bridge_slave_0: entered promiscuous mode
[  103.256175][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.263564][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.270779][ T5834] bridge_slave_1: entered allmulticast mode
[  103.278994][ T5834] bridge_slave_1: entered promiscuous mode
[  103.365679][ T5837] chnl_net:caif_netlink_parms(): no params data found
[  103.487866][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.508111][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.648603][ T5834] team0: Port device team_slave_0 added
[  103.692284][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.699607][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.707507][ T5844] bridge_slave_0: entered allmulticast mode
[  103.716708][ T5844] bridge_slave_0: entered promiscuous mode
[  103.745617][ T5840] chnl_net:caif_netlink_parms(): no params data found
[  103.763065][ T5834] team0: Port device team_slave_1 added
[  103.788236][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.796020][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.803392][ T5844] bridge_slave_1: entered allmulticast mode
[  103.811129][ T5844] bridge_slave_1: entered promiscuous mode
[  103.862770][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.871127][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.874979][   T54] Bluetooth: hci0: command tx timeout
[  103.878661][ T5845] bridge_slave_0: entered allmulticast mode
[  103.893420][ T5845] bridge_slave_0: entered promiscuous mode
[  103.980830][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.989066][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.997163][ T5845] bridge_slave_1: entered allmulticast mode
[  104.005011][ T5845] bridge_slave_1: entered promiscuous mode
[  104.069285][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.080448][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.106812][ T5849] Bluetooth: hci2: command tx timeout
[  104.112679][ T5849] Bluetooth: hci1: command tx timeout
[  104.112727][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.118471][ T5144] Bluetooth: hci3: command tx timeout
[  104.128760][   T54] Bluetooth: hci4: command tx timeout
[  104.161821][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.175480][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.193741][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.200961][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.208825][ T5837] bridge_slave_0: entered allmulticast mode
[  104.217612][ T5837] bridge_slave_0: entered promiscuous mode
[  104.225829][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.232791][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.258806][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.346026][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.353181][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.363194][ T5837] bridge_slave_1: entered allmulticast mode
[  104.371431][ T5837] bridge_slave_1: entered promiscuous mode
[  104.419007][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.432481][ T5844] team0: Port device team_slave_0 added
[  104.441897][ T5844] team0: Port device team_slave_1 added
[  104.461008][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.473190][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.575609][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.622587][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.630325][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.638649][ T5840] bridge_slave_0: entered allmulticast mode
[  104.647014][ T5840] bridge_slave_0: entered promiscuous mode
[  104.656312][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.663573][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.670731][ T5840] bridge_slave_1: entered allmulticast mode
[  104.678918][ T5840] bridge_slave_1: entered promiscuous mode
[  104.726529][ T5845] team0: Port device team_slave_0 added
[  104.733875][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.740843][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.767289][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.808246][ T5834] hsr_slave_0: entered promiscuous mode
[  104.815724][ T5834] hsr_slave_1: entered promiscuous mode
[  104.846317][ T5837] team0: Port device team_slave_0 added
[  104.855701][ T5845] team0: Port device team_slave_1 added
[  104.867000][ T5837] team0: Port device team_slave_1 added
[  104.885799][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.892785][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.918969][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.958432][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.041634][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.089992][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.097418][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.123945][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.184264][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.191270][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.218133][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.233099][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.240332][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.266324][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.278854][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.285962][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.312071][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.347551][ T5840] team0: Port device team_slave_0 added
[  105.431339][ T5840] team0: Port device team_slave_1 added
[  105.469185][ T5844] hsr_slave_0: entered promiscuous mode
[  105.476771][ T5844] hsr_slave_1: entered promiscuous mode
[  105.483103][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  105.491602][ T5844] Cannot create hsr debugfs directory
[  105.597354][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.605086][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.631271][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.668986][ T5845] hsr_slave_0: entered promiscuous mode
[  105.676147][ T5845] hsr_slave_1: entered promiscuous mode
[  105.682417][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  105.690124][ T5845] Cannot create hsr debugfs directory
[  105.727076][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.734189][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.760439][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.807775][ T5837] hsr_slave_0: entered promiscuous mode
[  105.814692][ T5837] hsr_slave_1: entered promiscuous mode
[  105.820986][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  105.828685][ T5837] Cannot create hsr debugfs directory
[  105.943533][   T54] Bluetooth: hci0: command tx timeout
[  106.166787][ T5840] hsr_slave_0: entered promiscuous mode
[  106.174852][ T5840] hsr_slave_1: entered promiscuous mode
[  106.181483][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.189387][   T54] Bluetooth: hci4: command tx timeout
[  106.191759][ T5840] Cannot create hsr debugfs directory
[  106.194979][   T54] Bluetooth: hci3: command tx timeout
[  106.195032][   T54] Bluetooth: hci1: command tx timeout
[  106.195145][   T54] Bluetooth: hci2: command tx timeout
[  106.566457][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  106.581802][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  106.612949][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  106.662039][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  106.810724][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  106.826114][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  106.852834][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  106.888160][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  106.998598][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  107.040365][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  107.056423][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  107.090556][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  107.262234][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  107.275552][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  107.305948][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  107.329839][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  107.494748][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.501919][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  107.518941][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  107.530176][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  107.542391][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  107.625148][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.700059][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[  107.749010][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.757107][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.805485][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.833162][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[  107.869235][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.876462][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.888551][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.895793][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.909831][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.917133][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.024392][ T5144] Bluetooth: hci0: command tx timeout
[  108.035972][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[  108.119090][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.126395][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.210229][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.228571][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.235821][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.263887][ T5144] Bluetooth: hci2: command tx timeout
[  108.269378][ T5144] Bluetooth: hci1: command tx timeout
[  108.275826][   T54] Bluetooth: hci3: command tx timeout
[  108.275853][ T5849] Bluetooth: hci4: command tx timeout
[  108.313992][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[  108.332836][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.475089][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.482366][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.532389][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[  108.570494][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.577753][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.679101][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.686361][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.778136][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.785395][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.932248][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.021580][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.162745][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.260967][ T5844] veth0_vlan: entered promiscuous mode
[  109.296740][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.328810][ T5844] veth1_vlan: entered promiscuous mode
[  109.518004][ T5834] veth0_vlan: entered promiscuous mode
[  109.542806][ T5845] veth0_vlan: entered promiscuous mode
[  109.567822][ T5844] veth0_macvtap: entered promiscuous mode
[  109.588250][ T5834] veth1_vlan: entered promiscuous mode
[  109.604469][ T5845] veth1_vlan: entered promiscuous mode
[  109.620299][ T5844] veth1_macvtap: entered promiscuous mode
[  109.726417][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.811524][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.829345][ T5834] veth0_macvtap: entered promiscuous mode
[  109.855172][ T5845] veth0_macvtap: entered promiscuous mode
[  109.867449][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.878335][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.887749][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.897603][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.914007][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.926078][ T5845] veth1_macvtap: entered promiscuous mode
[  109.938876][ T5834] veth1_macvtap: entered promiscuous mode
[  110.037926][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.049666][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.061928][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.077249][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.088044][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.100517][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.108414][ T5849] Bluetooth: hci0: command tx timeout
[  110.117112][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.129257][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.140888][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.151966][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.164218][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.197204][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.207162][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.218202][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.227452][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.252052][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.262784][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.276905][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.287841][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.301777][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.352113][ T5849] Bluetooth: hci1: command tx timeout
[  110.357830][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.357898][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.357930][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.357961][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.375683][ T5144] Bluetooth: hci3: command tx timeout
[  110.376820][ T5841] Bluetooth: hci2: command tx timeout
[  110.393949][ T5144] Bluetooth: hci4: command tx timeout
[  110.479890][ T5837] veth0_vlan: entered promiscuous mode
[  110.545877][ T5840] veth0_vlan: entered promiscuous mode
[  110.588525][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.618095][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.631041][ T5837] veth1_vlan: entered promiscuous mode
[  110.647014][ T5840] veth1_vlan: entered promiscuous mode
[  110.737083][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.765279][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.859969][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.882542][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.892210][ T5840] veth0_macvtap: entered promiscuous mode
[  110.925119][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.933420][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.949042][ T5840] veth1_macvtap: entered promiscuous mode
[  111.027414][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.035653][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.046908][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.062211][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.101793][ T5837] veth0_macvtap: entered promiscuous mode
[  111.143103][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.166920][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.179390][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.190295][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.200462][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.211706][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.239234][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  111.240462][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.330207][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.349278][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.376094][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.390583][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.402702][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.414392][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.433210][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.452054][ T5837] veth1_macvtap: entered promiscuous mode
[  111.514645][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.545439][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.563755][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.572535][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.670302][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.692255][ T5918] process 'syz.0.1' launched './file0' with NULL argv: empty string added
[  111.715576][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.753413][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.774500][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.807402][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.826012][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.836473][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.848225][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.860391][ T5921] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  111.862851][ T5881] IPVS: starting estimator thread 0...
[  111.876256][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.991401][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.003735][ T5924] IPVS: using max 19 ests per chain, 45600 per kthread
[  112.035148][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.045921][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.057061][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.067519][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.078521][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.104931][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.123312][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.146903][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.208418][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.233914][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.262583][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.292529][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.613886][ T5881] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  112.680985][ T5937] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  112.695360][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.719255][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.777374][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.793905][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.804625][ T5881] usb 2-1: device descriptor read/64, error -71
[  112.927727][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.970974][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.083391][ T5881] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  113.138451][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.158719][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.266653][ T5881] usb 2-1: device descriptor read/64, error -71
[  113.381949][ T5881] usb usb2-port1: attempt power cycle
[  113.795039][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  113.859819][ T5881] usb 2-1: device descriptor read/8, error -71
[  113.872036][ T5953] netlink: 'syz.4.15': attribute type 21 has an invalid length.
[  113.884802][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'.
[  113.903711][ T5956] netlink: 'syz.0.16': attribute type 1 has an invalid length.
[  113.924025][ T5956] netlink: 'syz.0.16': attribute type 2 has an invalid length.
[  113.983634][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'.
[  114.148503][ T5881] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  114.177519][   T29] audit: type=1326 audit(1740560083.070:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddd38d169 code=0x7ffc0000
[  114.200005][ T5881] usb 2-1: device descriptor read/8, error -71
[  114.271415][   T29] audit: type=1326 audit(1740560083.120:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fbddd38d169 code=0x7ffc0000
[  114.307891][ T5881] usb usb2-port1: unable to enumerate USB device
[  114.331531][   T29] audit: type=1326 audit(1740560083.120:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddd38d169 code=0x7ffc0000
[  114.937892][ T5970] netlink: 312 bytes leftover after parsing attributes in process `syz.0.21'.
[  115.073579][   T29] audit: type=1326 audit(1740560083.970:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d1b8d169 code=0x7ffc0000
[  115.161665][   T29] audit: type=1326 audit(1740560083.970:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d1b8d169 code=0x7ffc0000
[  115.289132][   T29] audit: type=1326 audit(1740560083.970:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34d1b8d169 code=0x7ffc0000
[  115.371637][   T29] audit: type=1326 audit(1740560083.970:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d1b8d169 code=0x7ffc0000
[  115.480672][   T29] audit: type=1326 audit(1740560083.970:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f34d1b8d169 code=0x7ffc0000
[  115.488900][ T5988] Zero length message leads to an empty skb
[  115.589300][   T29] audit: type=1326 audit(1740560083.970:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d1b8d169 code=0x7ffc0000
[  115.666382][   T29] audit: type=1326 audit(1740560083.970:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f34d1b8d169 code=0x7ffc0000
[  116.146228][ T5998] bond1: entered promiscuous mode
[  116.151657][ T5998] bond1: entered allmulticast mode
[  116.157920][ T5998] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.442370][ T5998] bond1 (unregistering): Released all slaves
[  116.608672][ T6000] netlink: 96 bytes leftover after parsing attributes in process `syz.1.32'.
[  116.671854][ T5882] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[  116.693489][ T5882] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[  116.736274][ T5882] hid-generic 0000:0003:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  117.046295][ T6015] loop1: detected capacity change from 0 to 1024
[  117.098781][ T6015] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  117.143406][ T6015] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  117.183585][ T6015] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869)
[  117.253500][ T6015] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  117.300524][ T6015] journal_load_superblock: Cannot read journal superblock
[  117.314747][ T6015] EXT4-fs (loop1): Could not load journal inode
[  117.862161][ T6032] loop1: detected capacity change from 0 to 256
[  117.874777][ T6032] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  118.924929][ T6048] loop0: detected capacity change from 0 to 1024
[  118.956605][ T6048] EXT4-fs: Ignoring removed orlov option
[  118.962353][ T6048] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.169476][ T6048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.201133][ T6055] netlink: 'syz.1.53': attribute type 1 has an invalid length.
[  119.246959][ T6056] loop3: detected capacity change from 0 to 512
[  119.273792][ T6056] =======================================================
[  119.273792][ T6056] WARNING: The mand mount option has been deprecated and
[  119.273792][ T6056]          and is ignored by this kernel. Remove the mand
[  119.273792][ T6056]          option from the mount to silence this warning.
[  119.273792][ T6056] =======================================================
[  119.321239][ T6048] EXT4-fs: Ignoring removed orlov option
[  119.385303][ T6048] EXT4-fs (loop0): can't enable nombcache during remount
[  119.413433][ T6056] EXT4-fs: Ignoring removed bh option
[  119.522555][ T6056] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1840c018, mo2=0002]
[  119.542124][ T6056] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  119.570844][ T6056] EXT4-fs (loop3): 1 truncate cleaned up
[  119.579079][ T6056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.613362][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.742967][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.752282][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.811400][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.873837][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.919274][ T6068] loop0: detected capacity change from 0 to 256
[  121.085114][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  121.085133][   T29] audit: type=1804 audit(1740560089.990:14): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.58" name="/newroot/19/file2/cgroup.controllers" dev="loop0" ino=4 res=1 errno=0
[  121.155359][ T6070] usb usb6: usbfs: process 6070 (syz.4.59) did not claim interface 0 before use
[  121.323003][ T6050] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.341214][ T6050] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.366597][ T6050] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.383428][ T6050] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.710686][ T6076] loop0: detected capacity change from 0 to 512
[  121.742573][ T6076] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  121.751821][ T6060] IPv6: Can't replace route, no match found
[  122.183571][ T6054] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[  122.607308][ T6088] 
[  122.610016][ T6088] =============================
[  122.615040][ T6088] WARNING: suspicious RCU usage
[  122.619919][ T6088] 6.14.0-rc3-next-20250218-syzkaller #0 Not tainted
[  122.626601][ T6088] -----------------------------
[  122.631474][ T6088] fs/kernfs/mount.c:243 suspicious rcu_dereference_check() usage!
[  122.640079][ T6088] 
[  122.640079][ T6088] other info that might help us debug this:
[  122.640079][ T6088] 
[  122.651211][ T6088] 
[  122.651211][ T6088] rcu_scheduler_active = 2, debug_locks = 1
[  122.659432][ T6088] 3 locks held by syz.2.66/6088:
[  122.664889][ T6088]  #0: ffff888027fe4870 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x9b2/0xf60
[  122.675957][ T6088]  #1: ffff88807f2540e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: super_lock+0x196/0x400
[  122.686836][ T6088]  #2: ffff88801bef7148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_node_dentry+0xc3/0x2d0
[  122.698080][ T6088] 
[  122.698080][ T6088] stack backtrace:
[  122.704872][ T6088] CPU: 0 UID: 0 PID: 6088 Comm: syz.2.66 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  122.704902][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  122.704919][ T6088] Call Trace:
[  122.704928][ T6088]  <TASK>
[  122.704937][ T6088]  dump_stack_lvl+0x241/0x360
[  122.704973][ T6088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.705001][ T6088]  ? __pfx__printk+0x10/0x10
[  122.705019][ T6088]  ? do_raw_spin_lock+0x14f/0x370
[  122.705078][ T6088]  lockdep_rcu_suspicious+0x226/0x340
[  122.705111][ T6088]  kernfs_node_dentry+0x24b/0x2d0
[  122.705154][ T6088]  cgroup_do_get_tree+0x248/0x390
[  122.705191][ T6088]  cgroup_get_tree+0xbb/0x230
[  122.705225][ T6088]  vfs_get_tree+0x90/0x2b0
[  122.705260][ T6088]  vfs_cmd_create+0xa0/0x1f0
[  122.705291][ T6088]  ? __se_sys_fsconfig+0xa29/0xf60
[  122.705325][ T6088]  __se_sys_fsconfig+0xa33/0xf60
[  122.705369][ T6088]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  122.705395][ T6088]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  122.705436][ T6088]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  122.705472][ T6088]  ? do_syscall_64+0x100/0x230
[  122.705511][ T6088]  ? __x64_sys_fsconfig+0x20/0xc0
[  122.705543][ T6088]  do_syscall_64+0xf3/0x230
[  122.705577][ T6088]  ? clear_bhb_loop+0x45/0xa0
[  122.705611][ T6088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.705640][ T6088] RIP: 0033:0x7f34d1b8d169
[  122.705666][ T6088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.705684][ T6088] RSP: 002b:00007f34d29b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  122.705706][ T6088] RAX: ffffffffffffffda RBX: 00007f34d1da5fa0 RCX: 00007f34d1b8d169
[  122.705720][ T6088] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  122.705733][ T6088] RBP: 00007f34d1c0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  122.705747][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  122.705759][ T6088] R13: 0000000000000000 R14: 00007f34d1da5fa0 R15: 00007ffde7994e08
[  122.705802][ T6088]  </TASK>
[  122.983174][ T6088] 
[  122.985576][ T6088] ============================================
[  122.991752][ T6088] WARNING: possible recursive locking detected
[  122.997929][ T6088] 6.14.0-rc3-next-20250218-syzkaller #0 Not tainted
[  123.004536][ T6088] --------------------------------------------
[  123.010704][ T6088] syz.2.66/6088 is trying to acquire lock:
[  123.016529][ T6088] ffff88801bef7148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xa2/0x5d0
[  123.026598][ T6088] 
[  123.026598][ T6088] but task is already holding lock:
[  123.033984][ T6088] ffff88801bef7148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_node_dentry+0xc3/0x2d0
[  123.043802][ T6088] 
[  123.043802][ T6088] other info that might help us debug this:
[  123.051890][ T6088]  Possible unsafe locking scenario:
[  123.051890][ T6088] 
[  123.059360][ T6088]        CPU0
[  123.062664][ T6088]        ----
[  123.065975][ T6088]   lock(&root->kernfs_rwsem);
[  123.070777][ T6088]   lock(&root->kernfs_rwsem);
[  123.075568][ T6088] 
[  123.075568][ T6088]  *** DEADLOCK ***
[  123.075568][ T6088] 
[  123.083732][ T6088]  May be due to missing lock nesting notation
[  123.083732][ T6088] 
[  123.092070][ T6088] 3 locks held by syz.2.66/6088:
[  123.097024][ T6088]  #0: ffff888027fe4870 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x9b2/0xf60
[  123.106929][ T6088]  #1: ffff88807f2540e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: super_lock+0x196/0x400
[  123.116838][ T6088]  #2: ffff88801bef7148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_node_dentry+0xc3/0x2d0
[  123.127095][ T6088] 
[  123.127095][ T6088] stack backtrace:
[  123.133006][ T6088] CPU: 1 UID: 0 PID: 6088 Comm: syz.2.66 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  123.133034][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  123.133047][ T6088] Call Trace:
[  123.133055][ T6088]  <TASK>
[  123.133065][ T6088]  dump_stack_lvl+0x241/0x360
[  123.133096][ T6088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.133120][ T6088]  ? __pfx__printk+0x10/0x10
[  123.133141][ T6088]  ? lockdep_unlock+0x16a/0x300
[  123.133180][ T6088]  print_deadlock_bug+0x483/0x620
[  123.133209][ T6088]  validate_chain+0x15e2/0x5920
[  123.133243][ T6088]  ? validate_chain+0x15c0/0x5920
[  123.133268][ T6088]  ? __pfx_validate_chain+0x10/0x10
[  123.133314][ T6088]  ? __pfx_validate_chain+0x10/0x10
[  123.133338][ T6088]  ? __lock_acquire+0x1397/0x2100
[  123.133371][ T6088]  ? __pfx_validate_chain+0x10/0x10
[  123.133400][ T6088]  ? mark_lock+0x9a/0x360
[  123.133424][ T6088]  __lock_acquire+0x1397/0x2100
[  123.133466][ T6088]  lock_acquire+0x1ed/0x550
[  123.133498][ T6088]  ? kernfs_dop_revalidate+0xa2/0x5d0
[  123.133530][ T6088]  ? __pfx_lock_acquire+0x10/0x10
[  123.133565][ T6088]  ? __pfx___might_resched+0x10/0x10
[  123.133605][ T6088]  down_read+0xb1/0xa40
[  123.133636][ T6088]  ? kernfs_dop_revalidate+0xa2/0x5d0
[  123.133663][ T6088]  ? __pfx_lock_acquire+0x10/0x10
[  123.133695][ T6088]  ? kernfs_root+0x1c/0x230
[  123.133715][ T6088]  ? __pfx_down_read+0x10/0x10
[  123.133772][ T6088]  ? kernfs_root+0x1c/0x230
[  123.133797][ T6088]  kernfs_dop_revalidate+0xa2/0x5d0
[  123.133826][ T6088]  lookup_one_unlocked+0x23b/0x2d0
[  123.133855][ T6088]  ? __pfx_lookup_one_unlocked+0x10/0x10
[  123.133880][ T6088]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  123.133912][ T6088]  ? nbcon_cpu_emergency_exit+0x6e/0xd0
[  123.133933][ T6088]  ? nbcon_cpu_emergency_exit+0x77/0xd0
[  123.133958][ T6088]  lookup_positive_unlocked+0x2b/0xb0
[  123.133984][ T6088]  kernfs_node_dentry+0x139/0x2d0
[  123.134019][ T6088]  cgroup_do_get_tree+0x248/0x390
[  123.134046][ T6088]  cgroup_get_tree+0xbb/0x230
[  123.134079][ T6088]  vfs_get_tree+0x90/0x2b0
[  123.134109][ T6088]  vfs_cmd_create+0xa0/0x1f0
[  123.134134][ T6088]  ? __se_sys_fsconfig+0xa29/0xf60
[  123.134161][ T6088]  __se_sys_fsconfig+0xa33/0xf60
[  123.134193][ T6088]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  123.134218][ T6088]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  123.134253][ T6088]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  123.134296][ T6088]  ? do_syscall_64+0x100/0x230
[  123.134328][ T6088]  ? __x64_sys_fsconfig+0x20/0xc0
[  123.134355][ T6088]  do_syscall_64+0xf3/0x230
[  123.134386][ T6088]  ? clear_bhb_loop+0x45/0xa0
[  123.134420][ T6088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.134450][ T6088] RIP: 0033:0x7f34d1b8d169
[  123.134470][ T6088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.134487][ T6088] RSP: 002b:00007f34d29b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  123.134510][ T6088] RAX: ffffffffffffffda RBX: 00007f34d1da5fa0 RCX: 00007f34d1b8d169
[  123.134527][ T6088] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  123.134540][ T6088] RBP: 00007f34d1c0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  123.134553][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.134566][ T6088] R13: 0000000000000000 R14: 00007f34d1da5fa0 R15: 00007ffde7994e08
[  123.134593][ T6088]  </TASK>
[  123.857945][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.