last executing test programs:

12m10.592186298s ago: executing program 2 (id=18):
syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0000000004000800460fa2e2f5549ea6969a90780000000000000000940400040000000000000000000000000000000000004e2300004e210000000300000003"], 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40, 0x4]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002700))
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000180)=0x1)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0xc000, 0x0)

12m2.547162557s ago: executing program 3 (id=29):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='0000:00:00.0\x00', 0xd)

12m2.482875086s ago: executing program 2 (id=30):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e0102030109021200010000000009"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x2, 0x17, 0x4, 0x2, 0xfffc, 0xfff9}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0x31, 0x3, "9ea602"}, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x81}})

12m2.370276375s ago: executing program 3 (id=31):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="62b4a0cf5802f4ba8b23f24217a1ff51b03e2f1398151dded9c30aa008105945dc3376d12653cfb8a0ed6487c41f5d87bcbb7567c9c68834f5121313ec67a6b6bae7010bdf533a9f9b241c5e1fb0272d665af95a7004e21b761154e6a09a5f046348a418d1bb54c6dbe5d64954", 0x6d}], 0x3}, 0x0)

12m0.463733705s ago: executing program 3 (id=36):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0)

11m58.435415482s ago: executing program 3 (id=39):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
capset(0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0)

11m57.238885914s ago: executing program 3 (id=41):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
socket$inet6(0xa, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000000", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r6, 0x8916, 0x0)
r7 = socket(0x1d, 0x3, 0x1)
getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x65, 0x10, 0x0, 0x20000000)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x54}}, 0x24040084)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084)

11m57.12944962s ago: executing program 2 (id=42):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
socket$inet6(0xa, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000000", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r6, 0x8916, 0x0)
r7 = socket(0x1d, 0x3, 0x1)
getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x65, 0x10, 0x0, 0x20000000)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r9=>0x0})
process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x54}}, 0x24040084)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084)

11m54.741752011s ago: executing program 3 (id=46):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ptrace(0x11, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x78, 0x0, 0x0, 0x78, 0xf88, &(0x7f0000002200)={@flat=@weak_binder={0x77622a85, 0x100, 0x1}, @ptr={0x70742a85, 0x7fffc, 0x0, 0x0, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}, 0x2000}], 0x0, 0x0, 0x0})

11m54.701558267s ago: executing program 2 (id=47):
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x100000c, 0x31, 0xffffffffffffffff, 0x61333000)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0x8, &(0x7f0000000200)="952bb3e006ae9a4c"})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x90\xe1\xf4=\xb5#\xc6\xa5:\xcd\x8e\x02tm\xcb\xbc\x9b\xdc\x85\xfby\x1d\x8f3\xe8W\x1b\xf9\x16\x9c\xc3W\x01\x93\xb1\xb4b\xd9\x7f\xd4.5+\x17\x8c\x1a\xcf\xc5\x90\x03\x94\xd0\xf0\xa9\f\x84\x17', 0xfffffffffffffffd)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000300)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x9)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r5)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r6, &(0x7f0000002a80)=""/4101, 0x2f3)
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000200)={0x0, 0x0})
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

11m50.710314859s ago: executing program 2 (id=52):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8)
setrlimit(0xc, &(0x7f0000000180)={0x6, 0x177})
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0606610, 0x0)

11m44.746752731s ago: executing program 2 (id=64):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x8, 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="419d40000800000800000000000000ff18410000f8ffffff0000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00')
read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0xfffffc7a)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0x8)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)

11m39.056024297s ago: executing program 32 (id=46):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ptrace(0x11, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x78, 0x0, 0x0, 0x78, 0xf88, &(0x7f0000002200)={@flat=@weak_binder={0x77622a85, 0x100, 0x1}, @ptr={0x70742a85, 0x7fffc, 0x0, 0x0, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}, 0x2000}], 0x0, 0x0, 0x0})

11m29.270830849s ago: executing program 33 (id=64):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x8, 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="419d40000800000800000000000000ff18410000f8ffffff0000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00')
read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0xfffffc7a)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0x8)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)

10m12.720362515s ago: executing program 4 (id=199):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10m8.508558738s ago: executing program 4 (id=203):
socket$nl_route(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$kcm(0x29, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x5, 0x0, 0xfffffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

10m7.163619986s ago: executing program 4 (id=205):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @local, 0x4}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000500)="d7", 0x1}], 0x1}}], 0x1, 0x20044040)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

10m6.072314223s ago: executing program 4 (id=209):
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

10m4.098300936s ago: executing program 4 (id=212):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9e, &(0x7f000000bc00)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
syz_mount_image$fuse(0x0, &(0x7f0000005b00)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2001, 0x0, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
write$UHID_INPUT(r0, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300))
mknod(&(0x7f0000000000)='./file3\x00', 0x8, 0x0)

9m58.854616732s ago: executing program 4 (id=221):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x82)
openat$incfs(r6, &(0x7f00000000c0)='.pending_reads\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd9, 0x6, @broadcast}, 0x14)

9m43.532694551s ago: executing program 34 (id=221):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x82)
openat$incfs(r6, &(0x7f00000000c0)='.pending_reads\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd9, 0x6, @broadcast}, 0x14)

2m45.391724464s ago: executing program 5 (id=944):
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@numtail}, {@rodir}, {@utf8}, {@rodir}, {@uni_xlate}, {@rodir}, {@utf8}, {@shortname_win95}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@utf8}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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")
getdents64(0xffffffffffffffff, 0x0, 0x0)

2m44.918144412s ago: executing program 5 (id=947):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x14)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setparam(r1, &(0x7f0000000180)=0x6)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000040)
r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x153a, 0x0, 0x2, 0x17a})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300), 0x0}, 0x20)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
execve(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000240)=',[(,\x00', &(0x7f0000000340)='gtp\x00', 0x0]}, &(0x7f0000000480)={[0x0, &(0x7f0000000440)='-*!\\(\x00']})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

2m43.978393891s ago: executing program 5 (id=949):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x14)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setparam(r1, &(0x7f0000000180)=0x6)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000040)
r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x153a, 0x0, 0x2, 0x17a})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300), 0x0}, 0x20)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
execve(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000240)=',[(,\x00', &(0x7f0000000340)='gtp\x00', 0x0]}, &(0x7f0000000480)={[0x0, &(0x7f0000000440)='-*!\\(\x00']})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m42.42648602s ago: executing program 5 (id=951):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040))

2m42.049791134s ago: executing program 5 (id=953):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)

2m41.834863588s ago: executing program 5 (id=955):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ptrace(0x11, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x78, 0x0, 0x0, 0x78, 0xf88, &(0x7f0000002200)={@flat=@weak_binder={0x77622a85, 0x100, 0x1}, @ptr={0x70742a85, 0x7fffc, 0x0, 0x0, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}, 0x2000}], 0x0, 0x0, 0x0})

2m26.47814311s ago: executing program 35 (id=955):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ptrace(0x11, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x78, 0x0, 0x0, 0x78, 0xf88, &(0x7f0000002200)={@flat=@weak_binder={0x77622a85, 0x100, 0x1}, @ptr={0x70742a85, 0x7fffc, 0x0, 0x0, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}, 0x2000}], 0x0, 0x0, 0x0})

1m34.851239539s ago: executing program 1 (id=1092):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
clock_gettime(0x0, 0x0)
recvmmsg(r0, &(0x7f0000006680)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xfff}], 0x2, 0x100, 0x0)

1m32.803265887s ago: executing program 1 (id=1099):
syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0000000004000800460fa2e2f5549ea6969a9078000000000000000094"], 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40, 0x4]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xdddd0000})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002700))
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000180)=0x1)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0xc000, 0x0)

1m23.254938365s ago: executing program 1 (id=1128):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18)
sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
close_range(r0, 0xffffffffffffffff, 0x0)

1m21.248871497s ago: executing program 1 (id=1134):
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8804)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10)
eventfd2(0x200, 0x1)
sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x5, 0xa)

1m19.250476233s ago: executing program 1 (id=1138):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlinkprop={0x20, 0x6c, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x82a0, 0x10024}}, 0x20}, 0x1, 0x0, 0x0, 0x20000054}, 0x2404c094)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mincore(&(0x7f000088a000/0x1000)=nil, 0x1000, &(0x7f00000088c0)=""/5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000008900))
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
r3 = gettid()
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000)
read(r4, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2})
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f00000000c0)={0x6f7928f4, 0x9, 0x9, 0xfffffffc, 0x80, 0x3})
tkill(r3, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
recvfrom$rxrpc(r2, &(0x7f00000040c0)=""/133, 0x85, 0x40002140, &(0x7f0000004180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @loopback, 0x6}}, 0x24)
write$binfmt_elf64(r0, &(0x7f000000a280)=ANY=[@ANYBLOB="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"/6586], 0x19b0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000180)=0x7f, 0xff08)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c)

1m18.047981621s ago: executing program 1 (id=1144):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x0)

1m10.686373313s ago: executing program 6 (id=1159):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040808007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x7a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "969f02", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0xa, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0)

1m10.472959197s ago: executing program 6 (id=1160):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x8, 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="419d40000800000800000000000000ff18410000f8ffffff0000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00')
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x8)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)

1m8.205847725s ago: executing program 6 (id=1162):
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8804)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10)
eventfd2(0x200, 0x1)
sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x5, 0xa)

1m7.419306166s ago: executing program 6 (id=1163):
socket$nl_route(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$kcm(0x29, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x5, 0x0, 0xfffffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1m5.917837249s ago: executing program 6 (id=1165):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
pread64(r0, 0x0, 0x0, 0x131)

1m5.731562161s ago: executing program 6 (id=1166):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000003900), 0x34aa945a513d639, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ftruncate(r0, 0x10001)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000180)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x400)
setresgid(0x0, 0x0, r4)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
fchown(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

1m2.944467213s ago: executing program 36 (id=1144):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x0)

49.904994991s ago: executing program 37 (id=1166):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000003900), 0x34aa945a513d639, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ftruncate(r0, 0x10001)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000180)=<r3=>0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x400)
setresgid(0x0, 0x0, r4)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
fchown(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

7.847060041s ago: executing program 8 (id=1276):
r0 = socket$igmp(0x2, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', <r1=>0x0})
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44)
ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rf'])
ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000440)={0x2, @sliced={0x2, [0x2, 0xb, 0x8, 0x8, 0x2, 0x4, 0x6, 0x1, 0x7, 0x7, 0xb84, 0x7, 0x200, 0x2, 0x6, 0x8fee, 0x8, 0x6, 0x1, 0x8000, 0x1, 0x78e5, 0x3, 0x8, 0xae4, 0x300, 0x4, 0x9, 0x7fff, 0x401, 0xd874, 0x100, 0x9, 0x9, 0x4, 0x67, 0x1, 0xfff8, 0x58f, 0x3a4, 0xfff, 0x4, 0x7, 0x7, 0xbdcf, 0x9, 0x0, 0x93], 0xfffffa6a}})
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
shutdown(0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004f37ea30f5e6dc290c54acf7c91d450702777fb6650f7da88f07755b5738e49186f1490de575054f77aaa828ba3b4dbd67549a9fa1b608b089"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)

6.461263451s ago: executing program 8 (id=1281):
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='configfs\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0)
write(r1, &(0x7f0000000c00)='0x40', 0x4)
close(r1)
mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00')
symlink(&(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000001200)='./config/usb_gadget/g1/os_desc/c.1\x00')

6.424389102s ago: executing program 7 (id=1282):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x9b00, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000)

6.265629391s ago: executing program 7 (id=1283):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x8, 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="419d40000800000800000000000000ff18410000f8ffffff0000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00')
read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0xfffffc7a)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x8)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)

6.218120857s ago: executing program 8 (id=1284):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x58, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x7, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done], 0xa1, 0x0, &(0x7f0000000840)="b828968b2eedcbc1feca7a588518e89ca3b6eec3cc581ad1ab5c58eec8ae9772c689a2d279582afaf202f26f5678b33849886651760eee6768a9706c65440bb759a21b7e0f2d4242b933b98639ebb5526e72baca54bfc5ce8d3c60212e0e7927185c3c177419f4e33da44413698990713f4ae044442ce17056cec44edc544c9cbc409f43122c6b2f1ee88c5d61446a509db0f00a634fd884b4ab44254e2e01a32a"})

5.974037116s ago: executing program 8 (id=1286):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000700)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18)

5.826517646s ago: executing program 8 (id=1287):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x0)

5.251317849s ago: executing program 7 (id=1288):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0xfffe)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x4)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40)
write(r5, &(0x7f0000004200)='t', 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8105)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000340)={[{@rodir}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@shortname_lower}, {@numtail}, {@utf8}, {@numtail}, {@utf8no}, {@fat=@nocase}, {@fat=@errors_continue}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@uni_xlate}, {@numtail}, {@fat=@nocase}, {@rodir}]}, 0x3, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=")
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xd280, 0x0, 0x1, 0x0, &(0x7f00000007c0))
sendfile(r5, r4, 0x0, 0x7fffffff)
ftruncate(r3, 0x2007ffb)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

4.017195721s ago: executing program 7 (id=1291):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68)
io_uring_setup(0x8, &(0x7f0000000040)={0x0, 0xd89c, 0xc000, 0x1, 0x20002f7})
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000110000000000000000000100", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00'], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0)

3.91006047s ago: executing program 7 (id=1292):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x9b00, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000)

3.757851065s ago: executing program 7 (id=1293):
syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0000000004000800460fa2e2f5549ea6969a9078000000000000000094"], 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40, 0x4]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xdddd0000})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002700))
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0xc000, 0x0)

3.628372371s ago: executing program 0 (id=1294):
r0 = socket$kcm(0x23, 0x5, 0x0)
listen(r0, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x2, 0x0, &(0x7f0000000340))
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000140)=0x1, 0x4)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x20081e, &(0x7f00000001c0)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f0000000940)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W")
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
fallocate(0xffffffffffffffff, 0x20, 0x4000, 0x3000000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x95, 0x7, 0x80000000, 0x8, @mcast2, @local, 0x7f90, 0x7, 0x5, 0x1}})

2.336817068s ago: executing program 0 (id=1295):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x58, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x7, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done], 0xa1, 0x0, &(0x7f0000000840)="b828968b2eedcbc1feca7a588518e89ca3b6eec3cc581ad1ab5c58eec8ae9772c689a2d279582afaf202f26f5678b33849886651760eee6768a9706c65440bb759a21b7e0f2d4242b933b98639ebb5526e72baca54bfc5ce8d3c60212e0e7927185c3c177419f4e33da44413698990713f4ae044442ce17056cec44edc544c9cbc409f43122c6b2f1ee88c5d61446a509db0f00a634fd884b4ab44254e2e01a32a"})

2.213205605s ago: executing program 0 (id=1296):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000700)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18)

2.006339739s ago: executing program 0 (id=1297):
r0 = socket$igmp(0x2, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', <r1=>0x0})
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44)
ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rf'])
ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000440)={0x2, @sliced={0x2, [0x2, 0xb, 0x8, 0x8, 0x2, 0x4, 0x6, 0x1, 0x7, 0x7, 0xb84, 0x7, 0x200, 0x2, 0x6, 0x8fee, 0x8, 0x6, 0x1, 0x8000, 0x1, 0x78e5, 0x3, 0x8, 0xae4, 0x300, 0x4, 0x9, 0x7fff, 0x401, 0xd874, 0x100, 0x9, 0x9, 0x4, 0x67, 0x1, 0xfff8, 0x58f, 0x3a4, 0xfff, 0x4, 0x7, 0x7, 0xbdcf, 0x9, 0x0, 0x93], 0xfffffa6a}})
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4)
sendmmsg$inet(r9, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
shutdown(r9, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004f37ea30f5e6dc290c54acf7c91d450702777fb6650f7da88f07755b5738e49186f1490de575054f77aaa828ba3b4dbd67549a9fa1b608b089"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)

1.032917355s ago: executing program 0 (id=1298):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000c80)={[{@init_itable}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@quota}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$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")
close(0xffffffffffffffff)
mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, &(0x7f0000000180))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
tgkill(r1, r1, 0x39)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)

36.543894ms ago: executing program 0 (id=1299):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000480), 0x0)
write(r0, &(0x7f00000004c0)='\n', 0x1)

0s ago: executing program 8 (id=1300):
mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='dummy_udc.0', 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0)

kernel console output (not intermixed with test programs):

solve the problem.
[  371.227298][ T7692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.723109][ T7763] hsr_slave_0: entered promiscuous mode
[  372.535802][   T79] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  372.560353][ T7763] hsr_slave_1: entered promiscuous mode
[  372.670418][ T7763] debugfs: 'hsr0' already exists in 'hsr'
[  372.721657][ T7763] Cannot create hsr debugfs directory
[  372.778205][ T8037] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  372.798766][ T8037] team0: Port device netdevsim1 added
[  372.834002][ T7692] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.856774][ T7692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  372.901278][ T7692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.242023][ T7692] hsr_slave_0: entered promiscuous mode
[  376.255371][ T7692] hsr_slave_1: entered promiscuous mode
[  376.392418][ T7692] debugfs: 'hsr0' already exists in 'hsr'
[  376.406840][ T7692] Cannot create hsr debugfs directory
[  376.694898][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  376.706552][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  376.716903][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  376.725174][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  376.749304][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  376.904597][ T8088] binder: 8087:8088 ioctl c0306201 0 returned -14
[  377.011592][ T8075] bridge2: entered promiscuous mode
[  378.430169][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  378.439201][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  378.556099][ T8099] syzkaller0: entered promiscuous mode
[  378.571871][ T8099] syzkaller0: entered allmulticast mode
[  378.833334][ T5630] Bluetooth: hci3: command tx timeout
[  380.543711][   T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  380.912334][ T5630] Bluetooth: hci3: command tx timeout
[  382.654274][ T8128] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.444'.
[  382.760483][ T8147] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.446'.
[  382.994504][ T5630] Bluetooth: hci3: command tx timeout
[  385.508976][ T5630] Bluetooth: hci3: command tx timeout
[  386.734870][ T8187] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size.
[  388.899543][ T6206] bridge_slave_1: left allmulticast mode
[  388.929908][ T6206] bridge_slave_1: left promiscuous mode
[  388.957513][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.010979][ T6206] bridge_slave_0: left allmulticast mode
[  389.024999][ T6206] bridge_slave_0: left promiscuous mode
[  389.040378][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.079185][ T6206] bridge_slave_1: left allmulticast mode
[  389.088997][ T6206] bridge_slave_1: left promiscuous mode
[  389.106863][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.146182][ T6206] bridge_slave_0: left allmulticast mode
[  389.163598][ T6206] bridge_slave_0: left promiscuous mode
[  389.184940][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.559401][ T8213] netlink: 'syz.1.458': attribute type 5 has an invalid length.
[  390.967789][ T6206] bridge_slave_1: left allmulticast mode
[  391.003399][ T6206] bridge_slave_1: left promiscuous mode
[  391.029589][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.065887][ T5630] Bluetooth: hci0: unexpected event for opcode 0x2016
[  391.094114][ T6206] bridge_slave_0: left allmulticast mode
[  391.128534][ T4937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  391.144925][ T4937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  391.155904][ T6206] bridge_slave_0: left promiscuous mode
[  391.171692][ T4937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  391.181877][ T4937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  391.196430][ T4937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  391.204227][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.690648][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  391.733520][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  391.775601][ T6206] bond0 (unregistering): Released all slaves
[  392.060467][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  392.124818][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  392.163235][ T6206] bond0 (unregistering): Released all slaves
[  393.171894][ T5944] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  393.248736][ T5630] Bluetooth: hci4: command tx timeout
[  394.940185][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  395.262182][ T5630] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  395.272022][ T5630] Bluetooth: hci0: Injecting HCI hardware error event
[  395.280850][ T5630] Bluetooth: hci0: hardware error 0x00
[  395.662278][ T4937] Bluetooth: hci4: command tx timeout
[  395.980546][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  396.329806][ T6206] bond0 (unregistering): Released all slaves
[  396.415670][ T5282] 8021q: adding VLAN 0 to HW filter on device eth8
[  396.621820][ T8260] 9pnet_fd: Insufficient options for proto=fd
[  396.629113][ T8260] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  397.723447][ T4937] Bluetooth: hci4: command tx timeout
[  398.033025][ T5630] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  398.072357][ T6206] hsr_slave_0: left promiscuous mode
[  398.088337][ T6206] hsr_slave_1: left promiscuous mode
[  398.103847][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.125960][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.168708][ T6206] hsr_slave_0: left promiscuous mode
[  398.185626][ T6206] hsr_slave_1: left promiscuous mode
[  398.198082][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.208729][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.249975][ T6206] hsr_slave_0: left promiscuous mode
[  398.260823][ T6206] hsr_slave_1: left promiscuous mode
[  398.283206][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.302847][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1
[  399.340795][ T8274] 9pnet_fd: Insufficient options for proto=fd
[  399.348502][ T8274] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  399.550281][ T8275] comedi comedi0: 8255: I/O base address not correctly aligned
[  399.855486][ T5630] Bluetooth: hci4: command tx timeout
[  399.887517][ T4937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  399.901152][ T4937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  399.921356][ T4937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  399.935819][ T4937] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  399.947506][ T4937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  400.267345][ T6206] team0 (unregistering): Port device team_slave_1 removed
[  400.333942][ T6206] team0 (unregistering): Port device team_slave_0 removed
[  401.629776][ T6206] team0 (unregistering): Port device team_slave_1 removed
[  401.655203][ T6206] team0 (unregistering): Port device team_slave_0 removed
[  401.884719][ T8299] 9pnet_fd: Insufficient options for proto=fd
[  401.892337][ T8299] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  402.046048][ T4937] Bluetooth: hci5: command tx timeout
[  402.661042][ T6206] team0 (unregistering): Port device team_slave_1 removed
[  402.681556][ T6206] team0 (unregistering): Port device team_slave_0 removed
[  403.758387][ T8275] bridge2: entered promiscuous mode
[  403.781394][ T8275] bridge2: entered allmulticast mode
[  403.828035][ T8275] team0: Port device bridge2 added
[  404.045198][   T31] audit: type=1800 audit(1784943659.887:5): pid=8311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.481" name="serialnumber" dev="configfs" ino=17807 res=0 errno=0
[  404.108495][ T8317] Rounding down aligned max_sectors from 4294967295 to 4294967288
[  404.125010][ T4937] Bluetooth: hci5: command tx timeout
[  405.908659][ T8077] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.232242][ T4937] Bluetooth: hci5: command tx timeout
[  406.501586][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.604151][ T8077] bridge_slave_0: entered allmulticast mode
[  406.665139][ T5880] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  406.717187][ T8077] bridge_slave_0: entered promiscuous mode
[  406.859860][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.882729][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.905813][ T8077] bridge_slave_1: entered allmulticast mode
[  406.930511][ T8077] bridge_slave_1: entered promiscuous mode
[  407.075928][ T8077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  407.144715][ T8077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  408.292508][ T4937] Bluetooth: hci5: command tx timeout
[  410.065195][ T8397] comedi comedi0: 8255: I/O base address not correctly aligned
[  411.509936][ T6201] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  411.523716][ T8408] binder_alloc: 8406: binder_alloc_buf, no vma
[  412.026553][ T8077] team0: Port device team_slave_0 added
[  412.049315][ T8077] team0: Port device team_slave_1 added
[  413.412273][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  414.997935][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_0
[  415.064887][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  415.149468][ T8077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  416.500451][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_1
[  416.539544][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  416.579366][ T8077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  416.669272][ T5282] 8021q: adding VLAN 0 to HW filter on device eth14
[  421.406519][ T8494] comedi comedi0: 8255: I/O base address not correctly aligned
[  422.192922][ T8499] 9pnet_fd: Insufficient options for proto=fd
[  422.201633][ T8499] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  423.175937][ T8077] hsr_slave_0: entered promiscuous mode
[  423.192572][ T8077] hsr_slave_1: entered promiscuous mode
[  423.199174][ T8077] debugfs: 'hsr0' already exists in 'hsr'
[  423.205350][ T8077] Cannot create hsr debugfs directory
[  426.007781][ T1167] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  426.766440][ T6206] bridge_slave_1: left allmulticast mode
[  427.362892][ T6206] bridge_slave_1: left promiscuous mode
[  427.369080][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.391924][ T6206] bridge_slave_0: left allmulticast mode
[  427.412197][ T6206] bridge_slave_0: left promiscuous mode
[  427.421353][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.500990][ T6206] bridge_slave_1: left allmulticast mode
[  427.514745][ T6206] bridge_slave_1: left promiscuous mode
[  427.529413][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.587059][ T6206] bridge_slave_0: left allmulticast mode
[  427.601263][ T6206] bridge_slave_0: left promiscuous mode
[  427.622479][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.892693][ T8574] comedi comedi0: 8255: I/O base address not correctly aligned
[  431.005663][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  431.184048][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  431.524320][ T6206] bond0 (unregistering): Released all slaves
[  432.181547][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  433.119757][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  433.248856][ T6206] bond0 (unregistering): Released all slaves
[  433.685099][ T8222] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.727592][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.785381][ T8222] bridge_slave_0: entered allmulticast mode
[  433.812898][ T8222] bridge_slave_0: entered promiscuous mode
[  433.942777][ T5282] 8021q: adding VLAN 0 to HW filter on device eth15
[  434.873780][ T6206] hsr_slave_0: left promiscuous mode
[  434.936515][ T6206] hsr_slave_1: left promiscuous mode
[  434.960453][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.943221][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1
[  436.028472][ T6206] hsr_slave_0: left promiscuous mode
[  436.060830][ T6206] hsr_slave_1: left promiscuous mode
[  436.087130][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0
[  436.146961][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1
[  436.843066][ T8663] overlayfs: failed to resolve './bus': -2
[  437.197894][ T8667] comedi comedi0: 8255: I/O base address not correctly aligned
[  438.066561][ T6206] team0 (unregistering): Port device team_slave_1 removed
[  438.226424][ T6206] team0 (unregistering): Port device team_slave_0 removed
[  438.387067][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  438.401402][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  438.411542][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  438.427875][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  438.441655][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  439.398558][ T6206] team0 (unregistering): Port device team_slave_1 removed
[  439.407163][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  439.415972][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  439.502444][ T6206] team0 (unregistering): Port device team_slave_0 removed
[  440.503258][ T8375] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  440.522297][ T5630] Bluetooth: hci6: command tx timeout
[  442.592226][ T5630] Bluetooth: hci6: command tx timeout
[  443.526989][ T8222] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.546261][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.581741][ T8222] bridge_slave_1: entered allmulticast mode
[  443.623400][ T8747] comedi comedi0: 8255: I/O base address not correctly aligned
[  443.670699][ T8222] bridge_slave_1: entered promiscuous mode
[  443.982982][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.993724][ T8281] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.003287][ T8281] bridge_slave_0: entered allmulticast mode
[  444.059224][ T8281] bridge_slave_0: entered promiscuous mode
[  444.155363][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.208211][ T8281] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.257484][ T8281] bridge_slave_1: entered allmulticast mode
[  444.318484][ T8281] bridge_slave_1: entered promiscuous mode
[  445.058725][   T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  445.072854][ T5630] Bluetooth: hci6: command tx timeout
[  445.414634][ T8222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.779332][ T8222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.797182][ T8281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.658284][ T5630] Bluetooth: hci6: command tx timeout
[  448.111820][ T8281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.160979][ T8222] team0: Port device team_slave_0 added
[  449.319151][ T8222] team0: Port device team_slave_1 added
[  449.492657][ T8281] team0: Port device team_slave_0 added
[  449.502842][ T8281] team0: Port device team_slave_1 added
[  449.590088][ T8281] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.612207][ T8281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.698214][ T8281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  449.732609][ T8281] batman_adv: batadv0: Adding interface: batadv_slave_1
[  449.771896][ T8281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.838073][ T8281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  452.717329][ T8815] comedi comedi0: 8255: I/O base address not correctly aligned
[  453.185982][ T4937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  453.201550][ T4937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  453.209981][ T4937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  453.220545][ T4937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  453.228571][ T4937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  454.538043][ T8281] hsr_slave_0: entered promiscuous mode
[  454.569788][ T8281] hsr_slave_1: entered promiscuous mode
[  455.528815][ T4937] Bluetooth: hci3: command tx timeout
[  455.576991][ T8281] debugfs: 'hsr0' already exists in 'hsr'
[  456.542125][ T8281] Cannot create hsr debugfs directory
[  457.328172][ T6203] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  457.552160][ T4937] Bluetooth: hci3: command tx timeout
[  458.542857][ T6206] bridge_slave_1: left allmulticast mode
[  458.802174][ T6206] bridge_slave_1: left promiscuous mode
[  458.817356][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.802550][ T4937] Bluetooth: hci3: command tx timeout
[  459.824799][ T8911] comedi comedi0: 8255: I/O base address not correctly aligned
[  461.872455][ T4937] Bluetooth: hci3: command tx timeout
[  462.241747][ T6206] bridge_slave_0: left allmulticast mode
[  462.275522][ T6206] bridge_slave_0: left promiscuous mode
[  462.307059][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.541903][ T6206] bridge_slave_1: left allmulticast mode
[  462.566035][ T6206] bridge_slave_1: left promiscuous mode
[  462.581586][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.561810][ T6206] bridge_slave_0: left allmulticast mode
[  463.572414][ T6206] bridge_slave_0: left promiscuous mode
[  463.578220][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.576053][ T6206] bridge_slave_1: left allmulticast mode
[  464.602273][ T6206] bridge_slave_1: left promiscuous mode
[  464.612480][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.590380][ T6206] bridge_slave_0: left allmulticast mode
[  465.597633][ T6206] bridge_slave_0: left promiscuous mode
[  465.608343][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.784553][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  466.924737][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  466.935466][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  466.948105][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  466.956029][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  467.227089][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  467.261600][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  467.296880][ T6206] bond0 (unregistering): Released all slaves
[  467.470419][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  467.508261][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  467.537656][ T6206] bond0 (unregistering): Released all slaves
[  468.378384][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  468.467601][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  468.620760][ T6206] bond0 (unregistering): Released all slaves
[  468.993778][ T5630] Bluetooth: hci4: command tx timeout
[  469.241673][ T6206] hsr_slave_0: left promiscuous mode
[  469.287498][ T6206] hsr_slave_1: left promiscuous mode
[  469.319436][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0
[  469.370911][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1
[  469.460098][ T6206] hsr_slave_0: left promiscuous mode
[  469.485458][ T6206] hsr_slave_1: left promiscuous mode
[  469.508915][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0
[  470.234738][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1
[  470.520977][ T6206] team0 (unregistering): Port device team_slave_1 removed
[  470.543086][ T8991] comedi comedi0: 8255: I/O base address not correctly aligned
[  470.673682][ T6206] team0 (unregistering): Port device team_slave_0 removed
[  471.072762][ T5630] Bluetooth: hci4: command tx timeout
[  471.694292][ T8999] 9pnet_fd: Insufficient options for proto=fd
[  471.702455][ T8999] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  472.652364][ T6206] team0 (unregistering): Port device team_slave_1 removed
[  472.679256][ T6206] team0 (unregistering): Port device team_slave_0 removed
[  473.152480][ T5630] Bluetooth: hci4: command tx timeout
[  473.850782][ T6206] team0 (unregistering): Port device team_slave_1 removed
[  473.891012][ T9026] fuse: Unknown parameter 'group_i00000000000000000000'
[  474.059465][ T6206] team0 (unregistering): Port device team_slave_0 removed
[  475.328620][ T1100] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  475.685118][ T5630] Bluetooth: hci4: command tx timeout
[  475.945193][ T9040] comedi comedi0: 8255: I/O base address not correctly aligned
[  476.680846][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.693090][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.701345][ T8693] bridge_slave_0: entered allmulticast mode
[  476.710441][ T8693] bridge_slave_0: entered promiscuous mode
[  476.749033][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.756626][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.763947][ T8693] bridge_slave_1: entered allmulticast mode
[  476.786254][ T8693] bridge_slave_1: entered promiscuous mode
[  477.025755][ T6202] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  477.419661][ T9059] 9pnet_fd: Insufficient options for proto=fd
[  477.426378][ T9059] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  477.550249][ T8693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  478.351154][ T8693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  478.596131][ T8693] team0: Port device team_slave_0 added
[  478.605798][ T8693] team0: Port device team_slave_1 added
[  478.649357][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  478.660141][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  478.700338][ T8693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  478.759829][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  478.783965][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  478.824433][ T8693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  481.793199][ T8693] hsr_slave_0: entered promiscuous mode
[  481.800253][ T8693] hsr_slave_1: entered promiscuous mode
[  481.830811][ T8693] debugfs: 'hsr0' already exists in 'hsr'
[  481.982941][ T8693] Cannot create hsr debugfs directory
[  486.739872][ T9140] 9pnet_fd: Insufficient options for proto=fd
[  486.746829][ T9140] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  489.517524][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.806141][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.902730][ T9172] 9pnet_fd: Insufficient options for proto=fd
[  489.910936][ T9172] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  490.522315][ T8829] bridge_slave_0: entered allmulticast mode
[  490.544343][ T8829] bridge_slave_0: entered promiscuous mode
[  490.556880][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.564618][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.571955][ T8829] bridge_slave_1: entered allmulticast mode
[  490.580021][ T8829] bridge_slave_1: entered promiscuous mode
[  490.733293][ T8927] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.764867][ T8927] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.837438][ T8927] bridge_slave_0: entered allmulticast mode
[  490.868853][ T8927] bridge_slave_0: entered promiscuous mode
[  490.986137][ T8829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  491.011979][ T8927] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.027483][ T8927] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.206423][ T6202] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  492.256928][ T8927] bridge_slave_1: entered allmulticast mode
[  492.318332][ T8927] bridge_slave_1: entered promiscuous mode
[  492.550878][ T8829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  492.710244][ T8927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  493.069993][ T6206] bridge_slave_1: left allmulticast mode
[  493.093462][ T6206] bridge_slave_1: left promiscuous mode
[  493.106238][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.129230][ T6206] bridge_slave_0: left allmulticast mode
[  493.143248][ T6206] bridge_slave_0: left promiscuous mode
[  493.158658][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.350822][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  493.373396][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  493.397727][ T6206] bond0 (unregistering): Released all slaves
[  493.436023][ T8927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  493.502770][ T8829] team0: Port device team_slave_0 added
[  493.624764][ T8927] team0: Port device team_slave_0 added
[  493.633790][ T8927] team0: Port device team_slave_1 added
[  494.350467][ T8829] team0: Port device team_slave_1 added
[  494.410089][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  494.445131][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  494.517386][ T8829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  494.644940][ T9226] 9pnet_fd: Insufficient options for proto=fd
[  494.652872][ T9226] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  495.289815][ T6206] hsr_slave_0: left promiscuous mode
[  495.309488][ T6206] hsr_slave_1: left promiscuous mode
[  495.325451][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0
[  495.337005][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1
[  495.616960][ T6206] team0 (unregistering): Port device team_slave_1 removed
[  495.662537][ T6206] team0 (unregistering): Port device team_slave_0 removed
[  496.040372][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  496.063565][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  496.121193][ T8829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  496.159303][ T8927] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.278287][ T8927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  496.366398][ T8927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.415795][ T8927] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.474480][ T8927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.647129][ T8927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.998316][ T8829] hsr_slave_0: entered promiscuous mode
[  498.017769][ T8829] hsr_slave_1: entered promiscuous mode
[  498.035160][ T8829] debugfs: 'hsr0' already exists in 'hsr'
[  498.047731][ T8829] Cannot create hsr debugfs directory
[  498.109312][ T8927] hsr_slave_0: entered promiscuous mode
[  498.139566][ T8927] hsr_slave_1: entered promiscuous mode
[  498.158044][ T8927] debugfs: 'hsr0' already exists in 'hsr'
[  498.182130][ T8927] Cannot create hsr debugfs directory
[  499.165794][ T4937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  499.179563][ T4937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  499.189115][ T4937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  499.197422][ T4937] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  499.208738][ T4937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  500.298000][ T9289] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  500.758072][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  500.764516][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  501.274201][ T4937] Bluetooth: hci5: command tx timeout
[  503.442195][ T4937] Bluetooth: hci5: command tx timeout
[  503.686479][ T8927] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  503.747238][ T8927] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  503.763439][ T8927] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  503.793574][ T8927] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  503.913262][ T8927] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  503.957086][ T8927] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  503.989698][ T8927] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  504.067051][ T8927] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  504.178843][ T9366] 9pnet_fd: Insufficient options for proto=fd
[  504.186512][ T9366] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  505.472249][ T4937] Bluetooth: hci5: command tx timeout
[  506.464961][ T8829] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  506.500105][ T8829] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  506.688833][ T8829] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  506.924175][ T8829] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  506.972289][ T8367] bridge_slave_1: left allmulticast mode
[  507.005446][ T6209] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  507.731034][ T4937] Bluetooth: hci5: command tx timeout
[  507.733090][ T8367] bridge_slave_1: left promiscuous mode
[  507.755547][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.778554][ T8367] bridge_slave_0: left allmulticast mode
[  507.821470][ T8367] bridge_slave_0: left promiscuous mode
[  507.847510][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.177967][ T6209] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  510.390599][ T8367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  510.401925][ T8367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  510.434092][ T8367] bond0 (unregistering): Released all slaves
[  510.463488][ T8829] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  510.487939][ T8829] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  510.610312][ T8367] hsr_slave_0: left promiscuous mode
[  510.623482][ T8367] hsr_slave_1: left promiscuous mode
[  510.636249][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_0
[  510.655614][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_1
[  510.919085][ T8367] team0 (unregistering): Port device team_slave_1 removed
[  510.978155][ T8367] team0 (unregistering): Port device team_slave_0 removed
[  511.018878][ T9434] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  511.310736][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  511.987650][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  511.998712][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  512.010810][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  512.024404][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  512.179280][ T9436] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  512.751448][ T9465] 9pnet_fd: Insufficient options for proto=fd
[  512.758199][ T9465] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  513.645084][ T9474] binder: 9473:9474 ioctl c0306201 2000000006c0 returned -14
[  513.721927][ T8927] 8021q: adding VLAN 0 to HW filter on device bond0
[  513.820776][ T8927] 8021q: adding VLAN 0 to HW filter on device team0
[  513.881901][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.889145][ T6206] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.223086][ T5630] Bluetooth: hci3: command tx timeout
[  515.216740][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.223971][ T6206] bridge0: port 2(bridge_slave_1) entered forwarding state
[  516.893010][ T5630] Bluetooth: hci3: command tx timeout
[  518.914090][ T4937] Bluetooth: hci3: command tx timeout
[  520.992476][ T4937] Bluetooth: hci3: command tx timeout
[  521.621338][ T9292] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.635032][ T9292] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.642657][ T9292] bridge_slave_0: entered allmulticast mode
[  521.653327][ T9292] bridge_slave_0: entered promiscuous mode
[  521.690473][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5
[  521.719439][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.740629][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.758449][ T9292] bridge_slave_1: entered allmulticast mode
[  521.790315][ T9292] bridge_slave_1: entered promiscuous mode
[  523.074296][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  523.095170][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  523.106382][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  523.116002][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  523.129810][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  523.185128][ T8375] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  523.327869][ T9292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.459997][ T9292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  525.152768][ T4937] Bluetooth: hci6: command tx timeout
[  525.176418][ T9292] team0: Port device team_slave_0 added
[  525.186062][ T9292] team0: Port device team_slave_1 added
[  525.228443][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  525.245294][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  525.271970][ T9292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  526.885934][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  526.905980][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  526.963178][ T9292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.232512][ T4937] Bluetooth: hci6: command tx timeout
[  528.974398][ T9598] se_dev->se_dev_ptr already set for storage object
[  529.117007][ T9292] hsr_slave_0: entered promiscuous mode
[  529.124830][ T9292] hsr_slave_1: entered promiscuous mode
[  529.131498][ T9292] debugfs: 'hsr0' already exists in 'hsr'
[  529.137646][ T9292] Cannot create hsr debugfs directory
[  529.392420][ T4937] Bluetooth: hci6: command tx timeout
[  529.465904][ T9613] netlink: 'syz.0.679': attribute type 10 has an invalid length.
[  529.538902][ T9617] bond0: (slave bridge0): Releasing backup interface
[  529.816841][ T9617] bridge_slave_0: left allmulticast mode
[  529.824100][ T9617] bridge_slave_0: left promiscuous mode
[  529.832387][ T9617] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.206586][ T9617] bridge_slave_1: left allmulticast mode
[  530.213932][ T9617] bridge_slave_1: left promiscuous mode
[  530.229135][ T9617] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.270082][ T9617] bond0: (slave veth0_to_bond): Releasing backup interface
[  530.307381][ T9617] bond0: (slave bond_slave_0): Releasing backup interface
[  530.334604][ T9617] bond0: (slave bond_slave_1): Releasing backup interface
[  530.351406][ T9629] i2c i2c-0: new_device: Missing parameters
[  530.395215][ T9617] team0: Port device team_slave_0 removed
[  530.444518][ T9617] team0: Port device team_slave_1 removed
[  530.463399][ T9617] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  530.490019][ T9617] batman_adv: batadv0: Removing interface: batadv_slave_0
[  530.515968][ T9617] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  530.543681][ T9617] batman_adv: batadv0: Removing interface: batadv_slave_1
[  530.559987][ T9617] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  530.764006][ T9613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  530.864669][ T9613] team0: Port device netdevsim1 added
[  531.643712][ T4937] Bluetooth: hci6: command tx timeout
[  532.224948][ T9664] binder: 9663:9664 ioctl c0306201 2000000006c0 returned -14
[  533.884240][ T8367] bridge_slave_1: left allmulticast mode
[  533.901647][ T8367] bridge_slave_1: left promiscuous mode
[  533.932502][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.949307][ T8367] bridge_slave_0: left allmulticast mode
[  533.983592][ T8367] bridge_slave_0: left promiscuous mode
[  534.016127][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.429161][ T9690] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  535.457536][ T8367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  535.470865][ T9698] i2c i2c-0: new_device: Missing parameters
[  535.560343][ T8367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  535.631456][ T8367] bond0 (unregistering): Released all slaves
[  535.977996][ T9693] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  536.132752][ T9712] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  536.139828][ T9712] overlayfs: failed to set xattr on upper
[  536.145657][ T9712] overlayfs: ...falling back to redirect_dir=nofollow.
[  536.152580][ T9712] overlayfs: ...falling back to index=off.
[  536.158430][ T9712] overlayfs: ...falling back to uuid=null.
[  536.220535][ T9713] overlayfs: missing 'lowerdir'
[  536.875865][ T8367] hsr_slave_0: left promiscuous mode
[  536.886494][ T8367] hsr_slave_1: left promiscuous mode
[  536.893615][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_0
[  536.909496][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.922958][ T9754] 9pnet_fd: Insufficient options for proto=fd
[  540.466527][ T8367] team0 (unregistering): Port device team_slave_1 removed
[  540.546797][ T8367] team0 (unregistering): Port device team_slave_0 removed
[  541.581014][ T6201] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  541.596020][ T9761] i2c i2c-0: new_device: Missing parameters
[  542.234470][ T6201] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  543.384571][ T9781] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  543.866570][ T9795] comedi comedi0: 8255: I/O base address not correctly aligned
[  544.465924][ T9783] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  544.993776][ T9795] bridge3: entered promiscuous mode
[  545.000071][ T9795] bridge3: entered allmulticast mode
[  545.032493][ T9795] team0: Port device bridge3 added
[  545.069673][ T9441] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.141823][ T9441] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.222323][ T9441] bridge_slave_0: entered allmulticast mode
[  545.276966][ T9441] bridge_slave_0: entered promiscuous mode
[  545.328053][ T9441] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.356551][ T9441] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.372843][ T9441] bridge_slave_1: entered allmulticast mode
[  545.384284][ T9441] bridge_slave_1: entered promiscuous mode
[  546.577918][ T9820] i2c i2c-0: Invalid 7-bit I2C address 0x00
[  546.740418][ T9441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  546.805555][ T9441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  546.898153][ T9441] team0: Port device team_slave_0 added
[  546.910779][ T9441] team0: Port device team_slave_1 added
[  547.340942][ T9441] batman_adv: batadv0: Adding interface: batadv_slave_0
[  547.371536][ T9441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  547.417152][ T9441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  547.422247][ T9835] netlink: 'syz.1.711': attribute type 12 has an invalid length.
[  547.447771][ T9544] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.481590][ T9544] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.511079][ T9544] bridge_slave_0: entered allmulticast mode
[  547.547673][ T9544] bridge_slave_0: entered promiscuous mode
[  547.579828][ T9441] batman_adv: batadv0: Adding interface: batadv_slave_1
[  547.600164][ T9441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  547.636794][ T9441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  547.740418][ T9848] netlink: 'syz.5.717': attribute type 10 has an invalid length.
[  547.850424][ T9544] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.866408][ T9544] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.890119][ T9544] bridge_slave_1: entered allmulticast mode
[  547.914656][ T9544] bridge_slave_1: entered promiscuous mode
[  548.029771][ T9847] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  548.684526][ T9544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  548.817062][ T9441] hsr_slave_0: entered promiscuous mode
[  548.837918][ T9441] hsr_slave_1: entered promiscuous mode
[  548.863993][ T9441] debugfs: 'hsr0' already exists in 'hsr'
[  548.885653][ T9441] Cannot create hsr debugfs directory
[  548.949217][ T9544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  549.983343][ T9544] team0: Port device team_slave_0 added
[  549.995290][ T9544] team0: Port device team_slave_1 added
[  550.072250][ T9292] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  550.200295][ T9875] comedi comedi0: 8255: I/O base address not correctly aligned
[  551.844411][ T9292] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  551.894265][ T9544] batman_adv: batadv0: Adding interface: batadv_slave_0
[  551.903725][ T9544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  551.930340][ T9544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  551.943267][ T9544] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.950235][ T9544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  551.980844][ T9544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  552.029660][ T9875] bridge4: entered promiscuous mode
[  552.208043][ T9875] bridge4: entered allmulticast mode
[  552.248893][ T9875] team0: Port device bridge4 added
[  552.296539][ T9292] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  552.323578][ T9292] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  552.333844][ T9292] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  552.348140][ T9292] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  552.582469][ T9292] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  553.400005][ T9292] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  556.611405][ T9544] hsr_slave_0: entered promiscuous mode
[  556.636737][ T9544] hsr_slave_1: entered promiscuous mode
[  556.811749][ T5945] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  556.829915][ T9544] debugfs: 'hsr0' already exists in 'hsr'
[  556.840947][ T9544] Cannot create hsr debugfs directory
[  559.239600][ T8367] bridge_slave_1: left allmulticast mode
[  559.276137][ T8367] bridge_slave_1: left promiscuous mode
[  559.313091][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.381070][ T8367] bridge_slave_0: left allmulticast mode
[  559.410439][ T9959] netlink: 'syz.5.735': attribute type 10 has an invalid length.
[  559.448206][ T8367] bridge_slave_0: left promiscuous mode
[  559.528246][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.718975][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  559.731944][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  559.741796][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  559.751459][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  559.768019][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  559.984224][ T9975] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  560.039126][ T9975] input: syz1 as /devices/virtual/input/input9
[  560.338925][ T8367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  560.361095][ T8367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  560.371742][ T8367] bond0 (unregistering): Released all slaves
[  560.408222][ T9956] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  560.882348][ T8367] hsr_slave_0: left promiscuous mode
[  560.901405][ T8367] hsr_slave_1: left promiscuous mode
[  560.920570][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_0
[  560.946369][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_1
[  561.849647][ T8367] team0 (unregistering): Port device team_slave_1 removed
[  561.875736][ T8367] team0 (unregistering): Port device team_slave_0 removed
[  561.892223][ T4937] Bluetooth: hci4: command tx timeout
[  562.413808][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  562.420829][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  563.326009][T10031] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  563.946156][T10031] input: syz1 as /devices/virtual/input/input10
[  563.952969][ T4937] Bluetooth: hci4: command tx timeout
[  566.049712][ T4937] Bluetooth: hci4: command tx timeout
[  567.324744][ T5282] 8021q: adding VLAN 0 to HW filter on device eth7
[  568.355189][ T4937] Bluetooth: hci4: command tx timeout
[  569.625025][T10117] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  569.676361][T10117] input: syz1 as /devices/virtual/input/input11
[  571.876407][ T9441] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  572.373533][ T9441] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  572.393068][ T9965] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.411155][ T9965] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.443494][ T9965] bridge_slave_0: entered allmulticast mode
[  572.476431][ T9965] bridge_slave_0: entered promiscuous mode
[  572.500298][ T9965] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.531246][ T9965] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.574105][ T9965] bridge_slave_1: entered allmulticast mode
[  572.596479][ T9965] bridge_slave_1: entered promiscuous mode
[  572.631166][ T5282] 8021q: adding VLAN 0 to HW filter on device eth16
[  572.961430][ T9965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  572.984966][ T9965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  574.106678][   T79] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  574.112097][ T8375] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  574.136387][ T9965] team0: Port device team_slave_0 added
[  574.203511][ T9965] team0: Port device team_slave_1 added
[  574.236080][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  574.248165][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  574.258001][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  574.267178][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  574.275133][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  574.420113][T10183] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  574.890139][ T9965] batman_adv: batadv0: Adding interface: batadv_slave_0
[  574.903206][ T9965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  574.934614][ T9965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  575.013671][T10193] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  575.148850][T10205] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  575.224668][T10205] input: syz1 as /devices/virtual/input/input12
[  575.676408][ T9965] batman_adv: batadv0: Adding interface: batadv_slave_1
[  575.720974][ T9965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  575.772698][ T9965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  575.797636][T10214] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  576.137910][ T8367] bridge_slave_1: left allmulticast mode
[  576.166277][ T8367] bridge_slave_1: left promiscuous mode
[  576.180253][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.210002][ T8367] bridge_slave_0: left allmulticast mode
[  576.221380][ T8367] bridge_slave_0: left promiscuous mode
[  576.231200][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.236925][T10216] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  576.355146][ T4937] Bluetooth: hci3: command tx timeout
[  576.430946][ T8367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  576.455775][ T8367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  576.487512][ T8367] bond0 (unregistering): Released all slaves
[  577.744504][ T9965] hsr_slave_0: entered promiscuous mode
[  577.751572][ T9965] hsr_slave_1: entered promiscuous mode
[  577.761804][ T9965] debugfs: 'hsr0' already exists in 'hsr'
[  577.769447][ T9965] Cannot create hsr debugfs directory
[  578.432383][ T4937] Bluetooth: hci3: command tx timeout
[  578.688656][ T9544] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  579.277094][ T9544] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  579.368058][ T9544] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  579.547823][ T9544] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  579.729829][T10270] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  580.512163][ T4937] Bluetooth: hci3: command tx timeout
[  580.795767][T10276] input: syz1 as /devices/virtual/input/input13
[  581.761555][ T8367] hsr_slave_0: left promiscuous mode
[  582.026374][ T8367] hsr_slave_1: left promiscuous mode
[  582.066288][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_0
[  582.111397][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_1
[  582.387612][ T8367] team0 (unregistering): Port device team_slave_1 removed
[  582.409058][ T8367] team0 (unregistering): Port device team_slave_0 removed
[  582.590240][ T9544] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  582.613587][ T9544] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  582.833852][ T4937] Bluetooth: hci3: command tx timeout
[  583.114211][T10314] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  584.138054][T10318] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  584.244221][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  584.260137][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  584.269098][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  584.296669][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  584.304627][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  586.746734][ T4937] Bluetooth: hci5: command tx timeout
[  589.092230][ T5630] Bluetooth: hci5: command tx timeout
[  589.664479][ T3274] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  590.414935][T10168] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.435669][T10168] bridge0: port 1(bridge_slave_0) entered disabled state
[  590.451567][T10168] bridge_slave_0: entered allmulticast mode
[  590.655502][T10168] bridge_slave_0: entered promiscuous mode
[  590.664643][T10168] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.672848][T10168] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.680197][T10168] bridge_slave_1: entered allmulticast mode
[  590.688539][T10168] bridge_slave_1: entered promiscuous mode
[  590.741892][T10383] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  590.763654][T10383] input: syz1 as /devices/virtual/input/input14
[  591.744047][ T5630] Bluetooth: hci5: command tx timeout
[  593.348784][T10168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  593.857807][ T5630] Bluetooth: hci5: command tx timeout
[  594.273653][T10168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  595.528030][T10168] team0: Port device team_slave_0 added
[  598.618980][T10168] team0: Port device team_slave_1 added
[  599.339418][T10168] batman_adv: batadv0: Adding interface: batadv_slave_0
[  599.376483][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  599.441398][T10168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  599.530154][ T9965] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  599.566298][ T9965] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  599.596952][T10168] batman_adv: batadv0: Adding interface: batadv_slave_1
[  599.621283][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  600.266826][T10168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  600.331892][ T9965] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  600.358541][ T9965] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  600.368479][ T9965] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  600.379671][ T9965] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  600.776031][ T9965] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  601.143900][ T9965] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  601.152864][T10455] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  601.196579][T10455] input: syz1 as /devices/virtual/input/input15
[  601.334263][T10455] netlink: 36 bytes leftover after parsing attributes in process `syz.5.808'.
[  601.491299][T10168] hsr_slave_0: entered promiscuous mode
[  601.500037][T10168] hsr_slave_1: entered promiscuous mode
[  601.514666][T10168] debugfs: 'hsr0' already exists in 'hsr'
[  601.531216][T10168] Cannot create hsr debugfs directory
[  603.889468][T10486] netlink: 232 bytes leftover after parsing attributes in process `syz.0.813'.
[  604.860775][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5
[  605.175113][T10505] comedi comedi0: 8255: I/O base address not correctly aligned
[  605.515991][ T6201] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  605.548265][ T5945] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  606.057122][T10333] bridge0: port 1(bridge_slave_0) entered blocking state
[  606.073721][T10333] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.104170][T10333] bridge_slave_0: entered allmulticast mode
[  606.130858][T10333] bridge_slave_0: entered promiscuous mode
[  606.160009][T10505] bridge3: entered promiscuous mode
[  606.192207][T10505] bridge3: entered allmulticast mode
[  606.214682][T10505] team0: Port device bridge3 added
[  606.280426][T10333] bridge0: port 2(bridge_slave_1) entered blocking state
[  606.308570][T10333] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.333452][T10333] bridge_slave_1: entered allmulticast mode
[  606.346638][T10333] bridge_slave_1: entered promiscuous mode
[  607.862544][ T9965] 8021q: adding VLAN 0 to HW filter on device bond0
[  608.451658][T10333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  608.787565][T10333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  610.196293][T10333] team0: Port device team_slave_0 added
[  610.227342][T10333] team0: Port device team_slave_1 added
[  611.384721][T10544] netlink: 232 bytes leftover after parsing attributes in process `syz.0.824'.
[  611.650456][ T9965] 8021q: adding VLAN 0 to HW filter on device team0
[  611.713026][ T8367] bridge_slave_1: left allmulticast mode
[  611.729131][ T8367] bridge_slave_1: left promiscuous mode
[  611.749863][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.789127][ T8367] bridge_slave_0: left allmulticast mode
[  611.812672][ T8367] bridge_slave_0: left promiscuous mode
[  611.840823][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.898296][ T8367] bridge_slave_1: left allmulticast mode
[  611.915731][ T8367] bridge_slave_1: left promiscuous mode
[  611.931779][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.011890][ T8367] bridge_slave_0: left allmulticast mode
[  612.048788][T10558] comedi comedi0: 8255: I/O base address not correctly aligned
[  612.082984][ T8367] bridge_slave_0: left promiscuous mode
[  612.136753][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.082932][ T8367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  613.119661][ T8367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  613.166191][ T8367] bond0 (unregistering): Released all slaves
[  613.364824][ T8367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  613.385826][ T8367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  613.414032][ T8367] bond0 (unregistering): Released all slaves
[  613.562951][T10333] batman_adv: batadv0: Adding interface: batadv_slave_0
[  613.577286][T10333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  613.622250][T10333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  613.680430][T10558] bridge5: entered promiscuous mode
[  613.690432][T10558] bridge5: entered allmulticast mode
[  613.746994][T10558] team0: Port device bridge5 added
[  613.823436][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6
[  613.925135][ T8367] hsr_slave_0: left promiscuous mode
[  613.970006][ T8367] hsr_slave_1: left promiscuous mode
[  614.321772][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_0
[  614.507970][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_1
[  614.532655][ T8367] hsr_slave_0: left promiscuous mode
[  614.544206][ T8367] hsr_slave_1: left promiscuous mode
[  614.554630][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_0
[  614.746061][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_1
[  615.704188][T10590] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  615.886298][ T8367] team0 (unregistering): Port device team_slave_1 removed
[  615.925493][ T8367] team0 (unregistering): Port device team_slave_0 removed
[  615.939078][T10592] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  616.528140][ T8367] team0 (unregistering): Port device team_slave_1 removed
[  616.546134][ T8367] team0 (unregistering): Port device team_slave_0 removed
[  616.727136][T10333] batman_adv: batadv0: Adding interface: batadv_slave_1
[  616.735868][T10333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  616.796574][T10333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  616.827991][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.835292][ T6202] bridge0: port 1(bridge_slave_0) entered forwarding state
[  617.165053][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.172297][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state
[  617.802177][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  618.147164][T10608] netlink: 232 bytes leftover after parsing attributes in process `syz.0.836'.
[  618.442134][T10613] comedi comedi0: 8255: I/O base address not correctly aligned
[  618.579665][T10333] hsr_slave_0: entered promiscuous mode
[  618.758608][T10333] hsr_slave_1: entered promiscuous mode
[  618.884349][T10333] debugfs: 'hsr0' already exists in 'hsr'
[  618.931838][T10333] Cannot create hsr debugfs directory
[  619.403382][T10613] bridge4: entered promiscuous mode
[  619.431890][T10613] bridge4: entered allmulticast mode
[  619.468758][T10613] team0: Port device bridge4 added
[  620.653643][T10630] 9pnet_fd: Insufficient options for proto=fd
[  620.661141][T10630] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  620.669509][ T5282] 8021q: adding VLAN 0 to HW filter on device eth7
[  620.719431][ T4937] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  620.730754][ T4937] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  620.740872][ T4937] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  620.752562][ T4937] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  620.761641][ T4937] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  621.059776][T10168] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  621.088017][T10168] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  621.103221][T10168] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  621.120667][T10645] binder: 10644:10645 ioctl c0306201 2000000006c0 returned -14
[  621.149102][T10168] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  621.175357][T10168] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  621.196483][T10168] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  621.212882][T10168] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  621.252614][T10168] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  623.435664][ T5630] Bluetooth: hci6: command tx timeout
[  623.765924][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  623.774245][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  624.275263][ T5945] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  624.820411][T10676] se_dev->se_dev_ptr already set for storage object
[  624.975943][T10680] comedi comedi0: 8255: I/O base address not correctly aligned
[  625.472314][ T5630] Bluetooth: hci6: command tx timeout
[  625.836731][T10687] se_dev->se_dev_ptr already set for storage object
[  625.919351][T10680] bridge3: entered promiscuous mode
[  625.949556][T10680] bridge3: entered allmulticast mode
[  626.002267][T10680] team0: Port device bridge3 added
[  626.249375][T10696] can0: slcan on ttyS3.
[  626.564455][T10701] can0 (unregistered): slcan off ttyS3.
[  627.552137][ T5630] Bluetooth: hci6: command tx timeout
[  629.527279][T10725] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  629.635483][ T5630] Bluetooth: hci6: command tx timeout
[  629.990466][T10728] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  630.404034][T10168] 8021q: adding VLAN 0 to HW filter on device bond0
[  631.072014][T10333] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  631.109028][T10333] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  631.139185][   T79] bridge_slave_1: left allmulticast mode
[  631.152686][   T79] bridge_slave_1: left promiscuous mode
[  631.162885][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.186627][   T79] bridge_slave_0: left allmulticast mode
[  631.192563][   T79] bridge_slave_0: left promiscuous mode
[  631.198476][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.671048][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  631.696178][   T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  631.725797][   T79] bond0 (unregistering): Released all slaves
[  631.768447][T10333] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  631.820091][T10333] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  631.869635][T10333] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  631.940777][T10333] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  631.971545][T10333] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  632.002728][T10333] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  632.049363][   T79] hsr_slave_0: left promiscuous mode
[  632.306141][   T79] hsr_slave_1: left promiscuous mode
[  632.312573][   T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[  632.323475][   T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[  637.207257][ T8372] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  637.221580][ T5880] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  637.908386][ T4937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  637.921343][ T4937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  637.930602][ T4937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  637.941237][ T4937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  637.949009][ T4937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  638.105510][T10779] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  638.448106][T10788] 9pnet_fd: Insufficient options for proto=fd
[  638.454905][T10788] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  638.951939][   T79] team0 (unregistering): Port device team_slave_1 removed
[  639.188643][   T79] team0 (unregistering): Port device team_slave_0 removed
[  639.214633][T10784] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  639.596529][T10801] se_dev->se_dev_ptr already set for storage object
[  640.032817][ T4937] Bluetooth: hci4: command tx timeout
[  640.984884][T10632] bridge0: port 1(bridge_slave_0) entered blocking state
[  641.010190][T10632] bridge0: port 1(bridge_slave_0) entered disabled state
[  641.050044][T10632] bridge_slave_0: entered allmulticast mode
[  641.069607][T10632] bridge_slave_0: entered promiscuous mode
[  641.117108][T10632] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.138879][T10632] bridge0: port 2(bridge_slave_1) entered disabled state
[  641.181316][T10632] bridge_slave_1: entered allmulticast mode
[  641.220817][T10632] bridge_slave_1: entered promiscuous mode
[  641.422784][T10632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  641.478764][T10632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  642.128465][ T4937] Bluetooth: hci4: command tx timeout
[  642.610537][T10846] netlink: 'syz.5.882': attribute type 2 has an invalid length.
[  642.696894][T10632] team0: Port device team_slave_0 added
[  642.720631][T10632] team0: Port device team_slave_1 added
[  642.828815][T10853] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  642.900525][T10632] batman_adv: batadv0: Adding interface: batadv_slave_0
[  642.926964][T10632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.019693][T10632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  643.169579][T10856] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  643.296219][T10632] batman_adv: batadv0: Adding interface: batadv_slave_1
[  643.310609][T10632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.343313][T10632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  643.954972][T10632] hsr_slave_0: entered promiscuous mode
[  643.995677][T10632] hsr_slave_1: entered promiscuous mode
[  644.027683][T10632] debugfs: 'hsr0' already exists in 'hsr'
[  644.048316][T10632] Cannot create hsr debugfs directory
[  644.193083][ T4937] Bluetooth: hci4: command tx timeout
[  644.408694][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  644.421202][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  644.433291][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  644.450600][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  644.532774][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  646.273517][ T5630] Bluetooth: hci4: command tx timeout
[  647.602226][ T5630] Bluetooth: hci3: command tx timeout
[  649.580116][T10924] netlink: 'syz.1.894': attribute type 2 has an invalid length.
[  649.632240][ T5630] Bluetooth: hci3: command tx timeout
[  649.988385][T10769] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.014531][T10769] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.033720][T10769] bridge_slave_0: entered allmulticast mode
[  650.051689][T10769] bridge_slave_0: entered promiscuous mode
[  650.218715][T10769] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.235457][T10769] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.251810][T10769] bridge_slave_1: entered allmulticast mode
[  650.271261][T10769] bridge_slave_1: entered promiscuous mode
[  650.419991][   T79] bridge_slave_1: left allmulticast mode
[  650.441120][   T79] bridge_slave_1: left promiscuous mode
[  650.457107][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.526719][   T79] bridge_slave_0: left allmulticast mode
[  650.544875][   T79] bridge_slave_0: left promiscuous mode
[  650.562789][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.947852][ T5630] Bluetooth: hci3: command tx timeout
[  652.086237][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  652.131525][   T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  652.177995][   T79] bond0 (unregistering): Released all slaves
[  652.264267][T10769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  652.278382][T10769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  652.690811][T10769] team0: Port device team_slave_0 added
[  652.726321][T10970] se_dev->se_dev_ptr already set for storage object
[  652.731787][T10769] team0: Port device team_slave_1 added
[  652.901909][   T79] hsr_slave_0: left promiscuous mode
[  652.936969][   T79] hsr_slave_1: left promiscuous mode
[  652.958650][   T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[  652.999985][   T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[  653.536847][   T79] team0 (unregistering): Port device team_slave_1 removed
[  653.609731][   T79] team0 (unregistering): Port device team_slave_0 removed
[  654.032603][ T5630] Bluetooth: hci3: command tx timeout
[  654.082499][T10769] batman_adv: batadv0: Adding interface: batadv_slave_0
[  654.110201][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  654.193956][T10769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  654.296339][T10769] batman_adv: batadv0: Adding interface: batadv_slave_1
[  654.319139][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  654.364972][T10769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  654.400680][T10998] binder: 10996:10998 ioctl 4018620d 0 returned -22
[  654.421597][T10998] binder: 10996:10998 ioctl c0306201 2000000006c0 returned -14
[  654.578780][T11001] netlink: 'syz.0.905': attribute type 2 has an invalid length.
[  654.649630][T11003] UDC core: g1: couldn't find an available UDC or it's busy
[  655.418788][T10632] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  655.454249][T10632] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  655.516755][T10769] hsr_slave_0: entered promiscuous mode
[  655.545673][T10769] hsr_slave_1: entered promiscuous mode
[  655.560902][T10769] debugfs: 'hsr0' already exists in 'hsr'
[  655.567306][T10769] Cannot create hsr debugfs directory
[  655.611588][T11015] netlink: 'syz.1.908': attribute type 10 has an invalid length.
[  655.691258][ T6206] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  655.777472][T10632] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  655.794386][T10632] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  656.816596][T11012] bond0: (slave bridge0): Releasing backup interface
[  656.823711][T11012] bond0: (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  656.909082][T11012] bond0: (slave veth0_to_bond): Releasing backup interface
[  656.950200][T11012] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  658.549860][T10632] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  658.625050][T10632] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  658.686628][T11037] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  658.996165][T11042] 9pnet_fd: Insufficient options for proto=fd
[  659.003969][T11042] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  659.400504][T10632] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  659.627793][T10775] udevd[10775]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  659.685904][T10632] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  659.706618][T11038] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  659.948948][T11052] netlink: 'syz.0.918': attribute type 2 has an invalid length.
[  661.193660][T10879] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.201001][T10879] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.221329][T10879] bridge_slave_0: entered allmulticast mode
[  661.231611][T10879] bridge_slave_0: entered promiscuous mode
[  663.187096][T10879] bridge0: port 2(bridge_slave_1) entered blocking state
[  663.210527][T10879] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.231469][T10879] bridge_slave_1: entered allmulticast mode
[  663.255663][T10879] bridge_slave_1: entered promiscuous mode
[  663.351493][T11084] netlink: 60 bytes leftover after parsing attributes in process `syz.0.926'.
[  663.493395][T10879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  663.519847][T10879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  663.684954][T10879] team0: Port device team_slave_0 added
[  663.728006][T10879] team0: Port device team_slave_1 added
[  664.033778][T10879] batman_adv: batadv0: Adding interface: batadv_slave_0
[  664.067032][T10879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  664.179695][T10879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  664.309737][T10879] batman_adv: batadv0: Adding interface: batadv_slave_1
[  664.344209][T10879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  664.403442][T10879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  664.753876][   T79] bridge_slave_1: left allmulticast mode
[  664.773356][   T79] bridge_slave_1: left promiscuous mode
[  664.797043][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[  664.827903][   T79] bridge_slave_0: left allmulticast mode
[  664.840949][   T79] bridge_slave_0: left promiscuous mode
[  664.858899][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.991316][T11108] binder_alloc: 11094: binder_alloc_buf, no vma
[  665.204996][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  665.240842][   T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  665.266097][   T79] bond0 (unregistering): Released all slaves
[  665.338465][T10879] hsr_slave_0: entered promiscuous mode
[  665.383456][T10879] hsr_slave_1: entered promiscuous mode
[  665.398279][T10879] debugfs: 'hsr0' already exists in 'hsr'
[  665.412091][T10879] Cannot create hsr debugfs directory
[  666.890095][T11125] netlink: 'syz.0.932': attribute type 2 has an invalid length.
[  667.485096][   T79] hsr_slave_0: left promiscuous mode
[  667.497800][   T79] hsr_slave_1: left promiscuous mode
[  667.509653][   T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[  667.543837][   T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[  668.189450][   T79] team0 (unregistering): Port device team_slave_1 removed
[  668.303863][   T79] team0 (unregistering): Port device team_slave_0 removed
[  669.099489][ T6202] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  669.242840][T10632] 8021q: adding VLAN 0 to HW filter on device bond0
[  669.497460][T10769] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  669.531884][T10769] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  669.538867][T11144] netlink: 48 bytes leftover after parsing attributes in process `syz.5.937'.
[  669.553715][T10769] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  669.581208][T10769] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  669.628093][T10769] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  669.657533][T10769] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  669.678816][T10769] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  669.704804][T10769] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  669.792763][T10632] 8021q: adding VLAN 0 to HW filter on device team0
[  669.937817][T10632] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  669.986515][T10632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  670.788402][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.795797][ T6202] bridge0: port 1(bridge_slave_0) entered forwarding state
[  670.861570][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.868783][ T6202] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.878568][ T5630] block nbd0: Receive control failed (result -107)
[  671.002642][T11164] nbd0: detected capacity change from 0 to 8589934592
[  671.157247][T11158] block nbd0: shutting down sockets
[  671.545738][T11179] netlink: 'syz.0.942': attribute type 2 has an invalid length.
[  672.321212][T10769] 8021q: adding VLAN 0 to HW filter on device bond0
[  672.425061][T10769] 8021q: adding VLAN 0 to HW filter on device team0
[  672.512719][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  672.519894][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  672.594847][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state
[  672.602142][ T6202] bridge0: port 2(bridge_slave_1) entered forwarding state
[  672.831628][T10632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  672.919888][T11207] UDC core: g1: couldn't find an available UDC or it's busy
[  673.010298][T10879] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  673.063288][T10879] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  673.091121][T10879] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  673.133661][T10879] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  673.827710][T10879] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  673.976763][T10879] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  674.021125][T10879] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  674.106342][T10879] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  675.603272][T10879] 8021q: adding VLAN 0 to HW filter on device bond0
[  675.729491][T10879] 8021q: adding VLAN 0 to HW filter on device team0
[  675.776214][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.783420][ T3274] bridge0: port 1(bridge_slave_0) entered forwarding state
[  675.835221][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.842447][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[  675.869308][T11255] netlink: 'syz.1.952': attribute type 2 has an invalid length.
[  676.147608][T10632] veth0_vlan: entered promiscuous mode
[  676.193761][T10632] veth1_vlan: entered promiscuous mode
[  676.260295][T11270] 9pnet_fd: Insufficient options for proto=fd
[  676.267024][T11270] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  676.351212][T10632] veth0_macvtap: entered promiscuous mode
[  676.407897][T10632] veth1_macvtap: entered promiscuous mode
[  676.511232][T10632] batman_adv: batadv0: Interface activated: batadv_slave_0
[  676.580885][T10632] batman_adv: batadv0: Interface activated: batadv_slave_1
[  676.714232][ T5945] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  676.744970][ T5945] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  676.803496][ T5945] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  676.829590][ T6206] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  678.164148][ T6206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.182086][ T6206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.596027][T11297] 9pnet_fd: Insufficient options for proto=fd
[  678.607166][T11296] netlink: 'syz.0.958': attribute type 10 has an invalid length.
[  678.635596][T11296] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  678.749798][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.929942][T11308] binder_alloc: 11268: binder_alloc_buf, no vma
[  678.942224][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.971947][T10769] 8021q: adding VLAN 0 to HW filter on device batadv0
[  679.599255][T11324] netlink: 'syz.0.960': attribute type 10 has an invalid length.
[  680.488819][T10879] 8021q: adding VLAN 0 to HW filter on device batadv0
[  681.767092][T11342] netlink: 'syz.1.963': attribute type 10 has an invalid length.
[  681.780238][T11342] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  682.619797][T11360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.965'.
[  682.910165][T11365] netlink: 'syz.8.964': attribute type 10 has an invalid length.
[  683.430926][T11372] netlink: 'syz.0.966': attribute type 2 has an invalid length.
[  683.461366][T11373] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  683.477356][T10769] veth0_vlan: entered promiscuous mode
[  683.504780][T10769] veth1_vlan: entered promiscuous mode
[  683.608349][T10769] veth0_macvtap: entered promiscuous mode
[  683.671156][T10769] veth1_macvtap: entered promiscuous mode
[  683.796112][T10769] batman_adv: batadv0: Interface activated: batadv_slave_0
[  683.879095][T11376] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  684.085323][T10769] batman_adv: batadv0: Interface activated: batadv_slave_1
[  684.965317][T11399] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  684.978926][ T5945] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  685.338820][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  685.345440][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  685.652771][ T8367] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  685.777104][ T3274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.795904][ T8367] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  685.806234][ T3274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  685.832928][ T8367] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  686.072696][T11405] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  686.292453][ T5880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.315690][T10879] veth0_vlan: entered promiscuous mode
[  686.326814][ T5880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.346937][T10879] veth1_vlan: entered promiscuous mode
[  686.453379][T10879] veth0_macvtap: entered promiscuous mode
[  686.485633][T10879] veth1_macvtap: entered promiscuous mode
[  686.545007][T10879] batman_adv: batadv0: Interface activated: batadv_slave_0
[  686.621603][T10879] batman_adv: batadv0: Interface activated: batadv_slave_1
[  686.688043][ T3274] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  686.757327][ T3274] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  686.810767][ T3274] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  686.844826][T11423] 9pnet_fd: Insufficient options for proto=fd
[  686.995191][ T6201] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  687.658846][ T6202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.690691][ T6202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.755882][T11429] netlink: 'syz.8.982': attribute type 2 has an invalid length.
[  687.878230][ T5945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.898041][ T5945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  690.086939][T11447] 9pnet_fd: Insufficient options for proto=fd
[  692.411502][ T4937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  692.430919][ T4937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  692.445164][ T4937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  692.463119][ T4937] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  692.478924][T11472] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  692.480941][ T4937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  692.614122][T11480] netlink: 424 bytes leftover after parsing attributes in process `syz.0.993'.
[  693.181900][T11492] netlink: 'syz.0.994': attribute type 10 has an invalid length.
[  693.280408][T11476] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  694.652202][ T5630] Bluetooth: hci5: command tx timeout
[  694.725230][ T8372] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  695.034119][T11514] netlink: 424 bytes leftover after parsing attributes in process `syz.7.998'.
[  695.114957][T11516] netlink: 'syz.1.999': attribute type 2 has an invalid length.
[  696.672271][ T4937] Bluetooth: hci5: command tx timeout
[  698.252525][T11539] netlink: 'syz.0.1004': attribute type 10 has an invalid length.
[  698.395490][T11549] netlink: 'syz.6.1006': attribute type 10 has an invalid length.
[  698.752790][ T4937] Bluetooth: hci5: command tx timeout
[  701.533072][ T4937] Bluetooth: hci5: command tx timeout
[  701.719394][ T3274] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  701.856682][ T6202] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  702.721067][T11583] netlink: 'syz.8.1012': attribute type 10 has an invalid length.
[  702.862001][T11585] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  702.899303][ T6201] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.915225][T11589] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind()
[  706.075959][ T6201] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.130400][ T6201] team0: Port device netdevsim1 removed
[  707.250828][ T6201] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.458987][T11635] 9pnet_fd: Insufficient options for proto=fd
[  707.466106][T11635] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  708.261267][ T9771] IPVS: starting estimator thread 0...
[  708.290325][T11468] bridge0: port 1(bridge_slave_0) entered blocking state
[  708.420717][T11468] bridge0: port 1(bridge_slave_0) entered disabled state
[  708.437287][T11639] IPVS: using max 25 ests per chain, 60000 per kthread
[  708.500281][T11468] bridge_slave_0: entered allmulticast mode
[  708.561351][T11468] bridge_slave_0: entered promiscuous mode
[  708.581864][T11644] netlink: 388 bytes leftover after parsing attributes in process `syz.7.1027'.
[  708.620993][T11468] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.659113][T11468] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.692454][T11468] bridge_slave_1: entered allmulticast mode
[  708.739918][T11468] bridge_slave_1: entered promiscuous mode
[  709.005682][T11468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  709.164550][ T6201] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.466929][T11468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  711.047225][T11468] team0: Port device team_slave_0 added
[  711.140957][T11468] team0: Port device team_slave_1 added
[  711.715943][T11658] 9pnet_fd: Insufficient options for proto=fd
[  711.723198][T11658] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  711.956717][ T9771] IPVS: starting estimator thread 0...
[  712.216485][T11468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  712.260798][T11468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  712.294627][T11659] IPVS: using max 25 ests per chain, 60000 per kthread
[  712.597928][T11468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  712.611560][T11468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  712.618559][T11468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  712.652109][T11468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  714.945516][T11684] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  719.929381][T11727] 9pnet_fd: Insufficient options for proto=fd
[  719.938192][T11727] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  721.599053][T11743] netlink: 'syz.7.1048': attribute type 10 has an invalid length.
[  723.392908][ T6201] team0: Port device bridge3 removed
[  723.431650][ T6201] team0: Port device bridge4 removed
[  723.465684][ T6201] bond0 (unregistering): Released all slaves
[  723.660949][T11468] hsr_slave_0: entered promiscuous mode
[  723.698104][T11468] hsr_slave_1: entered promiscuous mode
[  723.728014][T11468] debugfs: 'hsr0' already exists in 'hsr'
[  723.760000][T11468] Cannot create hsr debugfs directory
[  723.828681][T11738] wlan0 speed is unknown, defaulting to 1000
[  724.272743][T11738] wlan0 speed is unknown, defaulting to 1000
[  724.955193][T11738] wlan0 speed is unknown, defaulting to 1000
[  724.963437][T11738] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  724.977907][T11738] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  724.994901][T11738] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  725.009056][T11738] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  725.028220][T11738] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  725.064147][T11738] wlan0 speed is unknown, defaulting to 1000
[  725.072999][T11738] wlan0 speed is unknown, defaulting to 1000
[  725.082659][T11738] wlan0 speed is unknown, defaulting to 1000
[  725.090612][T11738] wlan0 speed is unknown, defaulting to 1000
[  725.098581][T11738] wlan0 speed is unknown, defaulting to 1000
[  725.107870][T11738] wlan0 speed is unknown, defaulting to 1000
[  725.115831][T11738] wlan0 speed is unknown, defaulting to 1000
[  726.512787][T11769] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1053'.
[  727.493066][   T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  729.598750][ T6201] hsr_slave_0: left promiscuous mode
[  729.636308][ T6201] hsr_slave_1: left promiscuous mode
[  729.696726][ T6201] veth1_macvtap: left promiscuous mode
[  729.714715][ T6201] veth0_macvtap: left promiscuous mode
[  729.731322][ T6201] veth1_vlan: left promiscuous mode
[  729.753917][ T6201] veth0_vlan: left promiscuous mode
[  730.143192][T11820] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1070'.
[  730.350083][T11824] netlink: 'syz.0.1068': attribute type 10 has an invalid length.
[  732.084479][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5
[  732.363290][T11806] wlan0 speed is unknown, defaulting to 1000
[  732.496983][T11835] wlan0 speed is unknown, defaulting to 1000
[  734.552956][ T1167] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  735.036386][T11859] 9pnet_fd: Insufficient options for proto=fd
[  735.043853][T11859] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  735.144680][ T6201] IPVS: stop unused estimator thread 0...
[  735.678786][T11468] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  735.702910][T11468] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  735.712967][T11468] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  735.735586][T11468] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  735.745906][T11468] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  735.793769][T11468] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  735.832222][T11468] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  735.872627][T11468] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  735.930050][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6
[  736.102189][T11872] syzkaller0: entered promiscuous mode
[  736.129608][T11885] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1081'.
[  736.129607][T11872] syzkaller0: entered allmulticast mode
[  739.331050][T11900] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1086'.
[  740.439538][T11909] netlink: 'syz.7.1087': attribute type 10 has an invalid length.
[  743.240681][T11468] 8021q: adding VLAN 0 to HW filter on device bond0
[  743.242479][T11924] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1091'.
[  743.295260][T11468] 8021q: adding VLAN 0 to HW filter on device team0
[  743.357148][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1091'.
[  743.372811][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1091'.
[  743.611320][T11915] Bluetooth: hci6: command 0x0406 tx timeout
[  743.659751][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1091'.
[  743.717093][T11939] 9pnet_fd: Insufficient options for proto=fd
[  743.724292][T11939] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  744.542781][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1091'.
[  744.555185][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1091'.
[  744.565101][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1091'.
[  744.661231][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1091'.
[  745.015038][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1091'.
[  745.071528][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1091'.
[  745.311632][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state
[  745.318942][ T6202] bridge0: port 1(bridge_slave_0) entered forwarding state
[  745.585427][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state
[  745.592715][ T6202] bridge0: port 2(bridge_slave_1) entered forwarding state
[  746.163181][T11468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  746.590598][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  746.597254][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  746.738808][T11468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  747.651339][T11982] syzkaller0: entered promiscuous mode
[  747.671166][T11982] syzkaller0: entered allmulticast mode
[  748.046079][T11994] netlink: 'syz.1.1099': attribute type 10 has an invalid length.
[  748.980549][T12007] __nla_validate_parse: 63 callbacks suppressed
[  748.980572][T12007] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1113'.
[  749.142999][ T5282] 8021q: adding VLAN 0 to HW filter on device eth7
[  751.046680][T11468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  752.805086][T11915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  752.816319][T11915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  752.826894][T11915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  752.838141][T11915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  752.848628][T11915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  754.081811][T12076] 9pnet_fd: Insufficient options for proto=fd
[  754.088997][T12076] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  754.718453][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'.
[  755.304771][ T5630] Bluetooth: hci0: command tx timeout
[  757.434751][ T5630] Bluetooth: hci0: command tx timeout
[  758.174733][ T5282] 8021q: adding VLAN 0 to HW filter on device eth16
[  759.142730][T12053] wlan0 speed is unknown, defaulting to 1000
[  759.349123][T12135] bond0: (slave veth0_to_bond): Releasing backup interface
[  759.441261][T12135] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  759.473485][ T5630] Bluetooth: hci0: command tx timeout
[  759.688289][T12144] bridge_slave_0: left allmulticast mode
[  759.694276][T12144] bridge_slave_0: left promiscuous mode
[  759.700256][T12144] bridge0: port 1(bridge_slave_0) entered disabled state
[  759.738620][T12144] bridge_slave_1: left allmulticast mode
[  759.744642][T12144] bridge_slave_1: left promiscuous mode
[  759.752395][T12144] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.769918][T12144] bond0: (slave bond_slave_0): Releasing backup interface
[  759.783512][T12144] bond0: (slave bond_slave_1): Releasing backup interface
[  759.865705][T12144] team0: Port device team_slave_0 removed
[  759.927293][T12144] team0: Port device team_slave_1 removed
[  759.957631][T12144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  759.988600][T12144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  760.022666][T12144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  760.031833][T12144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  760.075535][T12144] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  760.252766][T12155] netlink: 'syz.0.1143': attribute type 10 has an invalid length.
[  760.600024][ T1100] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  760.717273][T12155] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  762.258179][ T5630] Bluetooth: hci0: command tx timeout
[  763.286806][T12159] syzkaller0: entered promiscuous mode
[  763.444751][T12159] syzkaller0: entered allmulticast mode
[  764.283424][T12176] Bluetooth: hci4: command 0x0406 tx timeout
[  765.566299][ T8372] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  765.861966][T12203] 9pnet_fd: Insufficient options for proto=fd
[  765.870557][T12203] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  766.178140][T12205] 9pnet_fd: Insufficient options for proto=fd
[  766.186066][T12205] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  769.082647][T12176] Bluetooth: hci3: command 0x0406 tx timeout
[  771.751892][T12242] 9pnet_fd: Insufficient options for proto=fd
[  771.760387][T12242] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  771.842855][ T5800] IPVS: starting estimator thread 0...
[  772.132287][T12243] IPVS: using max 25 ests per chain, 60000 per kthread
[  775.080694][T12216] bridge1: entered promiscuous mode
[  775.086098][T12216] bridge1: entered allmulticast mode
[  775.094623][T12216] team0: Port device bridge1 added
[  775.391600][T12265] fuse: Bad value for 'fd'
[  775.438810][T12176] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  775.667237][T12176] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  775.873265][T12176] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  775.896811][T12176] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  776.563899][T12278] 9pnet_fd: Insufficient options for proto=fd
[  776.626622][T12278] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  776.657330][T12176] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  776.935723][ T6201] bridge_slave_1: left allmulticast mode
[  776.941937][ T6201] bridge_slave_1: left promiscuous mode
[  776.998741][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.126436][T11915] Bluetooth: hci5: command tx timeout
[  779.514062][ T6201] bridge_slave_0: left allmulticast mode
[  779.550508][ T6201] bridge_slave_0: left promiscuous mode
[  779.574079][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state
[  781.587857][T11915] Bluetooth: hci5: command tx timeout
[  782.115790][T12320] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1177'.
[  782.138077][ T6201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  782.187753][ T6201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  782.217405][ T6201] bond0 (unregistering): Released all slaves
[  783.179359][T12320] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1177'.
[  783.219267][T12320] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1177'.
[  783.278206][T12320] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1177'.
[  783.325234][T12320] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1177'.
[  783.358581][T12320] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1177'.
[  783.372994][T12320] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1177'.
[  783.383323][T12320] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1177'.
[  783.392880][T12320] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1177'.
[  783.402847][T12320] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1177'.
[  783.632390][T11915] Bluetooth: hci5: command tx timeout
[  784.381027][T12336] comedi comedi0: 8255: I/O base address not correctly aligned
[  784.475407][ T9509] wlan0 speed is unknown, defaulting to 1000
[  784.537898][T12336] bridge4: entered promiscuous mode
[  784.543330][T12336] bridge4: entered allmulticast mode
[  784.551370][T12336] team0: Port device bridge4 added
[  784.800143][ T6201] hsr_slave_0: left promiscuous mode
[  784.832164][ T6201] hsr_slave_1: left promiscuous mode
[  784.849118][ T6201] batman_adv: batadv0: Removing interface: batadv_slave_0
[  784.884266][ T6201] batman_adv: batadv0: Removing interface: batadv_slave_1
[  785.722130][T11915] Bluetooth: hci5: command tx timeout
[  786.189566][T12367] netlink: 'syz.7.1183': attribute type 10 has an invalid length.
[  787.186623][ T6201] team0 (unregistering): Port device team_slave_1 removed
[  787.258370][ T6201] team0 (unregistering): Port device team_slave_0 removed
[  787.570242][T12379] netlink: 'syz.0.1185': attribute type 10 has an invalid length.
[  788.279722][T12176] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  788.296683][T12176] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  788.308949][T12176] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  788.326771][T12176] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  788.335819][T12176] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  788.572429][T12053] bridge0: port 1(bridge_slave_0) entered blocking state
[  788.600245][T12053] bridge0: port 1(bridge_slave_0) entered disabled state
[  788.667028][T12053] bridge_slave_0: entered allmulticast mode
[  788.697497][T12053] bridge_slave_0: entered promiscuous mode
[  789.326576][T12053] bridge0: port 2(bridge_slave_1) entered blocking state
[  789.347666][T12053] bridge0: port 2(bridge_slave_1) entered disabled state
[  789.364080][T12053] bridge_slave_1: entered allmulticast mode
[  789.387035][T12053] bridge_slave_1: entered promiscuous mode
[  789.505024][T12053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  789.697905][T12053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  789.984233][T12410] netlink: 'syz.7.1189': attribute type 10 has an invalid length.
[  790.378248][T12053] team0: Port device team_slave_0 added
[  790.399815][T12266] wlan0 speed is unknown, defaulting to 1000
[  790.453108][T12176] Bluetooth: hci2: command tx timeout
[  790.499113][T12053] team0: Port device team_slave_1 added
[  791.739719][T12430] 9pnet_fd: Insufficient options for proto=fd
[  791.748203][T12430] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  792.483713][T12053] batman_adv: batadv0: Adding interface: batadv_slave_0
[  792.548253][T12053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  792.602967][T12176] Bluetooth: hci2: command tx timeout
[  792.629761][T12443] netlink: 'syz.7.1193': attribute type 5 has an invalid length.
[  793.046279][T12445] 9pnet_fd: Insufficient options for proto=fd
[  793.054887][T12445] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  793.119906][T12053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  793.574705][T12053] batman_adv: batadv0: Adding interface: batadv_slave_1
[  793.643123][T12053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  793.781858][T12053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  794.183544][ T1100] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.512144][ T6201] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  794.605193][T12053] hsr_slave_0: entered promiscuous mode
[  794.623888][T12053] hsr_slave_1: entered promiscuous mode
[  794.633335][T12053] debugfs: 'hsr0' already exists in 'hsr'
[  794.640801][T12053] Cannot create hsr debugfs directory
[  794.649271][T12383] wlan0 speed is unknown, defaulting to 1000
[  794.672629][T12176] Bluetooth: hci2: command tx timeout
[  795.545680][ T1100] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.000587][T12488] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  796.311304][T12490] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  796.752563][T12176] Bluetooth: hci2: command tx timeout
[  797.050018][   T31] audit: type=1804 audit(1784944052.897:6): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1206" name="bus" dev="ramfs" ino=38331 res=1 errno=0
[  797.102926][   T31] audit: type=1804 audit(1784944052.927:7): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1206" name="bus" dev="ramfs" ino=38331 res=1 errno=0
[  797.168222][ T1100] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  797.311438][  T730] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  797.502882][ T1100] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  797.864692][T12266] bridge0: port 1(bridge_slave_0) entered blocking state
[  797.906943][T12266] bridge0: port 1(bridge_slave_0) entered disabled state
[  797.935212][T12266] bridge_slave_0: entered allmulticast mode
[  797.959694][T12266] bridge_slave_0: entered promiscuous mode
[  798.033332][T12266] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.071669][T12266] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.108214][T12266] bridge_slave_1: entered allmulticast mode
[  798.134167][T12266] bridge_slave_1: entered promiscuous mode
[  798.378860][T12266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  798.563041][T12528] 9pnet_fd: Insufficient options for proto=fd
[  798.571604][T12528] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  799.867562][T12541] 9pnet_fd: Insufficient options for proto=fd
[  799.902616][T12541] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  800.334685][T12266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  800.647128][T12545] 9pnet_fd: Insufficient options for proto=fd
[  800.655933][T12545] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  801.942806][T12566] 9pnet_fd: Insufficient options for proto=fd
[  801.951374][T12566] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  803.030644][ T1100] bond0 (unregistering): Released all slaves
[  803.054381][T12266] team0: Port device team_slave_0 added
[  803.060313][T12551] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  803.284417][T12266] team0: Port device team_slave_1 added
[  803.290205][T12572] __nla_validate_parse: 135 callbacks suppressed
[  803.290224][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'.
[  803.358302][T12576] netlink: 'syz.8.1222': attribute type 5 has an invalid length.
[  804.455700][T12587] netlink: 'syz.0.1225': attribute type 10 has an invalid length.
[  804.956980][T12266] batman_adv: batadv0: Adding interface: batadv_slave_0
[  804.964540][T12266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  804.991968][T12266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  805.250282][T12266] batman_adv: batadv0: Adding interface: batadv_slave_1
[  805.269627][T12266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  805.982835][T12266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  807.362978][T12383] bridge0: port 1(bridge_slave_0) entered blocking state
[  807.370264][T12383] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.382415][T12383] bridge_slave_0: entered allmulticast mode
[  807.390487][T12383] bridge_slave_0: entered promiscuous mode
[  807.854574][T12612] netlink: 'syz.7.1230': attribute type 5 has an invalid length.
[  808.117180][T12615] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  808.183179][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  808.190311][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  808.459598][T12266] hsr_slave_0: entered promiscuous mode
[  808.467780][T12266] hsr_slave_1: entered promiscuous mode
[  808.518843][T12266] debugfs: 'hsr0' already exists in 'hsr'
[  808.524720][T12266] Cannot create hsr debugfs directory
[  808.548294][T12383] bridge0: port 2(bridge_slave_1) entered blocking state
[  808.556399][T12383] bridge0: port 2(bridge_slave_1) entered disabled state
[  808.566333][T12383] bridge_slave_1: entered allmulticast mode
[  808.580152][T12383] bridge_slave_1: entered promiscuous mode
[  808.687589][T12383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  808.726698][ T1100] hsr_slave_0: left promiscuous mode
[  808.739779][ T1100] hsr_slave_1: left promiscuous mode
[  808.779854][ T1100] veth1_macvtap: left promiscuous mode
[  808.801675][ T1100] veth0_macvtap: left promiscuous mode
[  808.818427][ T1100] veth1_vlan: left promiscuous mode
[  808.835950][ T1100] veth0_vlan: left promiscuous mode
[  808.916366][   T31] audit: type=1804 audit(1784944064.737:8): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1232" name="bus" dev="ramfs" ino=38607 res=1 errno=0
[  808.954921][   T31] audit: type=1804 audit(1784944064.747:9): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1232" name="bus" dev="ramfs" ino=38607 res=1 errno=0
[  809.224279][T12630] netlink: 'syz.8.1233': attribute type 10 has an invalid length.
[  811.058347][T12383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  811.580662][T12383] team0: Port device team_slave_0 added
[  811.615499][T12383] team0: Port device team_slave_1 added
[  813.860366][T12383] batman_adv: batadv0: Adding interface: batadv_slave_0
[  814.078428][T12383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  814.311513][T12383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  814.374264][T11915] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  814.389479][ T1100] IPVS: stop unused estimator thread 0...
[  814.393703][T11915] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  814.405413][T11915] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  814.418412][T11915] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  814.427463][T11915] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  814.555411][T12383] batman_adv: batadv0: Adding interface: batadv_slave_1
[  814.576571][T12383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  814.610028][T12383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  814.740322][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1246'.
[  814.824970][T12383] hsr_slave_0: entered promiscuous mode
[  814.831905][T12383] hsr_slave_1: entered promiscuous mode
[  814.838771][T12383] debugfs: 'hsr0' already exists in 'hsr'
[  814.849194][T12383] Cannot create hsr debugfs directory
[  815.785906][T12691] syzkaller0: entered promiscuous mode
[  815.805669][T12691] syzkaller0: entered allmulticast mode
[  817.078134][T12176] Bluetooth: hci4: command tx timeout
[  817.106349][T12691] tipc: Started in network mode
[  817.145515][T12691] tipc: Node identity 6a2a86daddeb, cluster identity 4711
[  818.412470][T12691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  818.563483][T12709] overlayfs: failed to clone upperpath
[  819.153000][T11915] Bluetooth: hci4: command tx timeout
[  819.283466][T12708] tipc: Resetting bearer <eth:syzkaller0>
[  819.342180][T12716] bridge0: port 3(syz_tun) entered blocking state
[  819.392345][T12716] bridge0: port 3(syz_tun) entered disabled state
[  819.433665][T12716] syz_tun: entered allmulticast mode
[  819.464793][T12716] syz_tun: entered promiscuous mode
[  819.486118][T12716] bridge0: port 3(syz_tun) entered blocking state
[  819.495036][T12716] bridge0: port 3(syz_tun) entered forwarding state
[  819.780585][T12708] tipc: Resetting bearer <eth:syzkaller0>
[  820.941737][T12738] smbdirect: ib_dev[syz0] removed
[  821.513852][T11915] Bluetooth: hci4: command tx timeout
[  821.862593][T12708] tipc: Disabling bearer <eth:syzkaller0>
[  821.924902][    T9] tipc: Node number set to 3082913498
[  822.686749][ T5282] 8021q: adding VLAN 0 to HW filter on device eth20
[  823.666428][T12176] Bluetooth: hci4: command tx timeout
[  826.573583][   T31] audit: type=1804 audit(1784944082.417:10): pid=12789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1269" name="bus" dev="ramfs" ino=39591 res=1 errno=0
[  826.705741][   T31] audit: type=1804 audit(1784944082.487:11): pid=12793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1269" name="bus" dev="ramfs" ino=39591 res=1 errno=0
[  826.884218][T12802] netlink: 'syz.0.1270': attribute type 10 has an invalid length.
[  827.159764][   T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  829.061570][ T6209] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  829.711805][T12824] overlayfs: failed to clone upperpath
[  830.413217][T12664] bridge0: port 1(bridge_slave_0) entered blocking state
[  830.434272][T12664] bridge0: port 1(bridge_slave_0) entered disabled state
[  830.458754][T12664] bridge_slave_0: entered allmulticast mode
[  830.525132][T12664] bridge_slave_0: entered promiscuous mode
[  830.745353][T12845] 9pnet_fd: Insufficient options for proto=fd
[  830.752779][T12845] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  831.537201][ T5282] 8021q: adding VLAN 0 to HW filter on device eth21
[  831.549415][T12664] bridge0: port 2(bridge_slave_1) entered blocking state
[  831.829766][T12664] bridge0: port 2(bridge_slave_1) entered disabled state
[  831.837243][T12664] bridge_slave_1: entered allmulticast mode
[  831.845469][T12664] bridge_slave_1: entered promiscuous mode
[  832.155054][ T6201] bridge_slave_1: left allmulticast mode
[  832.161170][ T6201] bridge_slave_1: left promiscuous mode
[  832.167968][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.178630][ T6201] bridge_slave_0: left allmulticast mode
[  832.184606][ T6201] bridge_slave_0: left promiscuous mode
[  832.190722][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.913883][ T6201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  832.994832][ T6201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  833.066412][ T6201] bond0 (unregistering): Released all slaves
[  833.219618][   T31] audit: type=1804 audit(1784944089.037:12): pid=12880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1288" name="bus" dev="ramfs" ino=39667 res=1 errno=0
[  833.375314][T12872] syzkaller0: entered promiscuous mode
[  833.392694][T12872] syzkaller0: entered allmulticast mode
[  833.409074][   T31] audit: type=1804 audit(1784944089.257:13): pid=12887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1290" name="bus" dev="ramfs" ino=40385 res=1 errno=0
[  833.466739][   T31] audit: type=1804 audit(1784944089.287:14): pid=12887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1290" name="bus" dev="ramfs" ino=40385 res=1 errno=0
[  833.533270][T12664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  834.701097][T12900] netlink: 'syz.7.1293': attribute type 10 has an invalid length.
[  835.650685][T11915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  835.672877][T11915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  835.692220][T11915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  835.721735][T11915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  835.752799][T11915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  836.293174][T12917] 9pnet_fd: Insufficient options for proto=fd
[  836.301648][T12917] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  837.801140][ T6201] hsr_slave_0: left promiscuous mode
[  837.811314][T11915] Bluetooth: hci0: command tx timeout
[  837.821077][ T6201] hsr_slave_1: left promiscuous mode
[  837.827403][ T6201] batman_adv: batadv0: Removing interface: batadv_slave_0
[  837.837695][ T6201] batman_adv: batadv0: Removing interface: batadv_slave_1
[  837.983991][T12923] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  837.991573][T12923] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  838.000007][T12923] ==================================================================
[  838.008074][T12923] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x3f/0x80
[  838.015883][T12923] Read of size 8 at addr ffff888076fc19f0 by task syz.8.1300/12923
[  838.023800][T12923] 
[  838.026124][T12923] CPU: 1 UID: 0 PID: 12923 Comm: syz.8.1300 Not tainted syzkaller #0 PREEMPT(full) 
[  838.026148][T12923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  838.026161][T12923] Call Trace:
[  838.026170][T12923]  <TASK>
[  838.026181][T12923]  dump_stack_lvl+0xe8/0x150
[  838.026217][T12923]  print_address_description+0x55/0x1e0
[  838.026249][T12923]  ? dummy_free_request+0x3f/0x80
[  838.026273][T12923]  print_report+0x58/0x70
[  838.026301][T12923]  kasan_report+0x117/0x150
[  838.026336][T12923]  ? dummy_free_request+0x3f/0x80
[  838.026364][T12923]  dummy_free_request+0x3f/0x80
[  838.026388][T12923]  uvc_function_bind+0xe5d/0x15a0
[  838.026422][T12923]  usb_add_function+0x2e1/0x9f0
[  838.026460][T12923]  configfs_composite_bind+0xde0/0x1410
[  838.026490][T12923]  ? __pfx_configfs_composite_bind+0x10/0x10
[  838.026512][T12923]  gadget_bind_driver+0x2ca/0x9e0
[  838.026547][T12923]  ? __pfx_gadget_bind_driver+0x10/0x10
[  838.026574][T12923]  really_probe+0x254/0xae0
[  838.026605][T12923]  __driver_probe_device+0x1e8/0x360
[  838.026633][T12923]  driver_probe_device+0x4f/0x240
[  838.026661][T12923]  __driver_attach+0x339/0x600
[  838.026689][T12923]  bus_for_each_dev+0x23b/0x2c0
[  838.026721][T12923]  ? __pfx___driver_attach+0x10/0x10
[  838.026746][T12923]  ? __pfx_bus_for_each_dev+0x10/0x10
[  838.026780][T12923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.026806][T12923]  ? do_raw_spin_unlock+0xf5/0x210
[  838.026834][T12923]  bus_add_driver+0x345/0x670
[  838.026871][T12923]  driver_register+0x23a/0x320
[  838.026902][T12923]  usb_gadget_register_driver_owner+0xf9/0x270
[  838.026932][T12923]  gadget_dev_desc_UDC_store+0x1c9/0x2f0
[  838.026963][T12923]  ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[  838.026994][T12923]  configfs_write_iter+0x337/0x430
[  838.027038][T12923]  vfs_write+0x612/0xba0
[  838.027064][T12923]  ? __pfx_vfs_write+0x10/0x10
[  838.027091][T12923]  ? __fget_files+0x2a/0x420
[  838.027123][T12923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.027151][T12923]  ksys_write+0x150/0x270
[  838.027173][T12923]  ? __pfx_ksys_write+0x10/0x10
[  838.027199][T12923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.027221][T12923]  do_syscall_64+0x174/0x580
[  838.027245][T12923]  ? trace_irq_disable+0x3b/0x140
[  838.027276][T12923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.027298][T12923] RIP: 0033:0x7fb3f3d9de99
[  838.027317][T12923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  838.027336][T12923] RSP: 002b:00007fb3f4b91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  838.027357][T12923] RAX: ffffffffffffffda RBX: 00007fb3f4025fa0 RCX: 00007fb3f3d9de99
[  838.027373][T12923] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000005
[  838.027387][T12923] RBP: 00007fb3f3e33eaf R08: 0000000000000000 R09: 0000000000000000
[  838.027401][T12923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  838.027413][T12923] R13: 00007fb3f4026038 R14: 00007fb3f4025fa0 R15: 00007fff14ccf568
[  838.027440][T12923]  </TASK>
[  838.027448][T12923] 
[  838.323606][T12923] Allocated by task 12383:
[  838.328013][T12923]  kasan_save_track+0x3e/0x80
[  838.332781][T12923]  __kasan_kmalloc+0x93/0xb0
[  838.337371][T12923]  __kmalloc_cache_noprof+0x32d/0x660
[  838.342739][T12923]  __hw_addr_create+0x62/0x240
[  838.347492][T12923]  __hw_addr_add_ex+0x1ce/0x520
[  838.352338][T12923]  dev_addr_init+0x15a/0x240
[  838.356915][T12923]  alloc_netdev_mqs+0x2b4/0x12b0
[  838.361846][T12923]  rtnl_create_link+0x321/0xd70
[  838.366694][T12923]  veth_newlink+0x246/0xb70
[  838.371198][T12923]  rtnl_newlink_create+0x310/0xb00
[  838.376312][T12923]  rtnl_newlink+0x167f/0x1bd0
[  838.380983][T12923]  rtnetlink_rcv_msg+0x802/0xc00
[  838.385929][T12923]  netlink_rcv_skb+0x226/0x4a0
[  838.390682][T12923]  netlink_unicast+0x7bb/0x940
[  838.395440][T12923]  netlink_sendmsg+0x813/0xb40
[  838.400196][T12923]  sock_sendmsg_nosec+0x13a/0x180
[  838.405218][T12923]  __sys_sendto+0x408/0x5a0
[  838.409707][T12923]  __x64_sys_sendto+0xde/0x100
[  838.414454][T12923]  do_syscall_64+0x174/0x580
[  838.419037][T12923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.424916][T12923] 
[  838.427241][T12923] The buggy address belongs to the object at ffff888076fc1900
[  838.427241][T12923]  which belongs to the cache kmalloc-128 of size 128
[  838.441303][T12923] The buggy address is located 136 bytes to the right of
[  838.441303][T12923]  allocated 104-byte region [ffff888076fc1900, ffff888076fc1968)
[  838.455970][T12923] 
[  838.458284][T12923] The buggy address belongs to the physical page:
[  838.464678][T12923] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888076fc1b00 pfn:0x76fc1
[  838.474734][T12923] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[  838.482792][T12923] page_type: f5(slab)
[  838.486765][T12923] raw: 00fff00000000200 ffff88801b004a00 ffffea000153e750 ffffea0000c972d0
[  838.495337][T12923] raw: ffff888076fc1b00 000000080010000f 00000000f5000000 0000000000000000
[  838.503903][T12923] page dumped because: kasan: bad access detected
[  838.510297][T12923] page_owner tracks the page as allocated
[  838.515990][T12923] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11511, tgid 11464 (syz.8.990), ts 695320894031, free_ts 695202816395
[  838.536830][T12923]  post_alloc_hook+0x1f9/0x250
[  838.541601][T12923]  get_page_from_freelist+0x21fa/0x2270
[  838.547150][T12923]  __alloc_frozen_pages_noprof+0x18d/0x380
[  838.552957][T12923]  allocate_slab+0x79/0x5e0
[  838.557448][T12923]  refill_objects+0x2d5/0x350
[  838.562115][T12923]  __pcs_replace_empty_main+0x2bf/0x6b0
[  838.567651][T12923]  __kmalloc_noprof+0x485/0x720
[  838.572495][T12923]  io_uring_alloc_async_data+0x191/0x2e0
[  838.578136][T12923]  io_connect_prep+0x1b3/0x300
[  838.582904][T12923]  io_submit_sqes+0xbde/0x2310
[  838.587668][T12923]  __se_sys_io_uring_enter+0x35b/0x1bb0
[  838.593210][T12923]  do_syscall_64+0x174/0x580
[  838.597790][T12923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.603687][T12923] page last free pid 23 tgid 23 stack trace:
[  838.609668][T12923]  __free_frozen_pages+0xc1e/0xd10
[  838.614826][T12923]  tlb_remove_table_rcu+0x85/0x100
[  838.619949][T12923]  rcu_core+0x78b/0x10a0
[  838.624226][T12923]  handle_softirqs+0x225/0x840
[  838.629007][T12923]  run_ksoftirqd+0x36/0x60
[  838.633430][T12923]  smpboot_thread_fn+0x57c/0xa80
[  838.638369][T12923]  kthread+0x388/0x470
[  838.642446][T12923]  ret_from_fork+0x514/0xb70
[  838.647050][T12923]  ret_from_fork_asm+0x1a/0x30
[  838.651806][T12923] 
[  838.654112][T12923] Memory state around the buggy address:
[  838.659725][T12923]  ffff888076fc1880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  838.667777][T12923]  ffff888076fc1900: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc
[  838.675827][T12923] >ffff888076fc1980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  838.683873][T12923]                                                              ^
[  838.691573][T12923]  ffff888076fc1a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  838.699624][T12923]  ffff888076fc1a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  838.707677][T12923] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  838.738963][T12923] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  838.746218][T12923] CPU: 0 UID: 0 PID: 12923 Comm: syz.8.1300 Not tainted syzkaller #0 PREEMPT(full) 
[  838.755596][T12923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  838.765663][T12923] Call Trace:
[  838.768943][T12923]  <TASK>
[  838.771868][T12923]  vpanic+0x56c/0xa60
[  838.775870][T12923]  ? __pfx_vpanic+0x10/0x10
[  838.780397][T12923]  ? __pfx___schedule+0x10/0x10
[  838.785255][T12923]  panic+0xc5/0xd0
[  838.788989][T12923]  ? __pfx_panic+0x10/0x10
[  838.793424][T12923]  ? preempt_schedule_thunk+0x16/0x40
[  838.798801][T12923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.804449][T12923]  ? dummy_free_request+0x3f/0x80
[  838.809484][T12923]  check_panic_on_warn+0x89/0xb0
[  838.814455][T12923]  ? dummy_free_request+0x3f/0x80
[  838.819508][T12923]  end_report+0x73/0x170
[  838.823774][T12923]  ? dummy_free_request+0x3f/0x80
[  838.828793][T12923]  kasan_report+0x128/0x150
[  838.833303][T12923]  ? dummy_free_request+0x3f/0x80
[  838.838331][T12923]  dummy_free_request+0x3f/0x80
[  838.843181][T12923]  uvc_function_bind+0xe5d/0x15a0
[  838.848216][T12923]  usb_add_function+0x2e1/0x9f0
[  838.853081][T12923]  configfs_composite_bind+0xde0/0x1410
[  838.858630][T12923]  ? __pfx_configfs_composite_bind+0x10/0x10
[  838.864601][T12923]  gadget_bind_driver+0x2ca/0x9e0
[  838.869631][T12923]  ? __pfx_gadget_bind_driver+0x10/0x10
[  838.875172][T12923]  really_probe+0x254/0xae0
[  838.879679][T12923]  __driver_probe_device+0x1e8/0x360
[  838.884962][T12923]  driver_probe_device+0x4f/0x240
[  838.889992][T12923]  __driver_attach+0x339/0x600
[  838.894755][T12923]  bus_for_each_dev+0x23b/0x2c0
[  838.899609][T12923]  ? __pfx___driver_attach+0x10/0x10
[  838.904890][T12923]  ? __pfx_bus_for_each_dev+0x10/0x10
[  838.910266][T12923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.915891][T12923]  ? do_raw_spin_unlock+0xf5/0x210
[  838.921004][T12923]  bus_add_driver+0x345/0x670
[  838.925697][T12923]  driver_register+0x23a/0x320
[  838.930463][T12923]  usb_gadget_register_driver_owner+0xf9/0x270
[  838.936620][T12923]  gadget_dev_desc_UDC_store+0x1c9/0x2f0
[  838.942255][T12923]  ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[  838.948409][T12923]  configfs_write_iter+0x337/0x430
[  838.953535][T12923]  vfs_write+0x612/0xba0
[  838.957775][T12923]  ? __pfx_vfs_write+0x10/0x10
[  838.962539][T12923]  ? __fget_files+0x2a/0x420
[  838.967132][T12923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  838.972764][T12923]  ksys_write+0x150/0x270
[  838.977087][T12923]  ? __pfx_ksys_write+0x10/0x10
[  838.981930][T12923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.987987][T12923]  do_syscall_64+0x174/0x580
[  838.992578][T12923]  ? trace_irq_disable+0x3b/0x140
[  838.997609][T12923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  839.003493][T12923] RIP: 0033:0x7fb3f3d9de99
[  839.007903][T12923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  839.027505][T12923] RSP: 002b:00007fb3f4b91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  839.035925][T12923] RAX: ffffffffffffffda RBX: 00007fb3f4025fa0 RCX: 00007fb3f3d9de99
[  839.043891][T12923] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000005
[  839.051854][T12923] RBP: 00007fb3f3e33eaf R08: 0000000000000000 R09: 0000000000000000
[  839.059819][T12923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  839.067784][T12923] R13: 00007fb3f4026038 R14: 00007fb3f4025fa0 R15: 00007fff14ccf568
[  839.075765][T12923]  </TASK>
[  839.078995][T12923] Kernel Offset: disabled
[  839.083306][T12923] Rebooting in 86400 seconds..