last executing test programs:

11m15.367886312s ago: executing program 2 (id=286):
r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
get_mempolicy(0x0, 0x0, 0xf57c, &(0x7f0000003000/0x3000)=nil, 0x2)

11m14.976684453s ago: executing program 2 (id=288):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)

11m14.536952708s ago: executing program 2 (id=290):
r0 = io_uring_setup(0x5f66, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4, 0x398})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32=r3], 0x38}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11m14.084833423s ago: executing program 2 (id=291):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)

11m13.307984089s ago: executing program 2 (id=293):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

11m12.192318053s ago: executing program 2 (id=298):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000041)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
fgetxattr(r7, &(0x7f0000000740)=@known='system.sockprotoname\x00', 0x0, 0x2)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12}]}, 0x18}}, 0x0)

10m57.068742039s ago: executing program 32 (id=298):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000041)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
fgetxattr(r7, &(0x7f0000000740)=@known='system.sockprotoname\x00', 0x0, 0x2)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12}]}, 0x18}}, 0x0)

4m36.53692978s ago: executing program 5 (id=1287):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000480))

4m35.816360934s ago: executing program 5 (id=1294):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r0, 0x8800000)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000200)=0x6, 0x4)
sendfile(r1, r0, 0x0, 0x578410eb)

4m34.278743213s ago: executing program 4 (id=1297):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0x6a06, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$nci(r3, &(0x7f0000000a80)=""/218, 0xda)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x20000012)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000040)={'bond0\x00', 0x1})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000700, 0x0, 0x0)

4m34.192321638s ago: executing program 5 (id=1299):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x800000}, 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@mark={0xc, 0x15, {0x350759, 0xb29}}]}, 0xc4}}, 0x4004)
write(0xffffffffffffffff, &(0x7f0000000000)="2700000014000707", 0x8)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000340)={0x0, 0xa6ff, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r9})
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)

4m32.42655693s ago: executing program 4 (id=1300):
r0 = io_uring_setup(0x27e3, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x1a4})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1b, 0x20000009, 0x0)

4m31.692752218s ago: executing program 4 (id=1303):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x3, 0x0, {{@in6=@empty, @in=@multicast1, 0x0, 0x1000, 0x0, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x401}, {0x0, 0xffffffffffffff6e}, 0xfffffffd, 0x0, 0x1, 0x1, 0x0, 0x2}}, 0xb8}}, 0x10)
socket(0x23, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(r4, 0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xbfe, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@delsa={0x34, 0x11, 0x1, 0x70bd25, 0x25dfdbfe, {@in=@multicast1, 0x4d4, 0xa, 0x6c}, [@mark={0xc, 0x15, {0x35075d, 0x4f3}}]}, 0x34}}, 0x0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x8, 0x2002)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
sendmmsg$unix(r7, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x20, 0x0, 0x1}}, 0xb8}}, 0x0)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r8, 0x40043311, &(0x7f0000000040))

4m29.329006952s ago: executing program 5 (id=1309):
syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x5fc, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}}, 0x0)

4m29.016576152s ago: executing program 4 (id=1310):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5)
r2 = epoll_create1(0x0)
msgsnd(0x0, 0x0, 0x2000, 0x800)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00'}, 0x2c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000680)={0x4, 0x6, 0xf, 0xc, 0x4, "1d451546ed47cd95e7c9744ca42b45cf4e5e53", 0x7, 0x5})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6c}, 0x0, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x1000}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x558ac59, 'syz0\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0)

4m28.2756663s ago: executing program 5 (id=1311):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffff"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000)=0xb, 0x4)
r3 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000a80)={0x0, 0xd, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"})

4m25.828961333s ago: executing program 4 (id=1317):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
shutdown(r0, 0x2)
sendto$inet6(r0, 0x0, 0x17, 0x20060054, 0x0, 0xffffff9d)

4m25.758464786s ago: executing program 4 (id=1320):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
socket$inet6(0xa, 0x2, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000001000000008000000000000040000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r4, 0x0, 0x0}, 0x20)
timer_create(0x0, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, r7, 0x0)
unshare(0x20400)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

4m23.242587829s ago: executing program 5 (id=1326):
socket(0x2, 0x80805, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000000101beb327778e115ed5f86b000000000002000000100002800c000280050001003a"], 0x4c}}, 0x0)
semop(0x0, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2)
semget$private(0x0, 0xbac636aa2767daa0, 0x2c4)
openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40080000000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x40000000, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x200002, 0x0, 0x8}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x78}}, 0x0)

4m10.580542466s ago: executing program 33 (id=1320):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
socket$inet6(0xa, 0x2, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000001000000008000000000000040000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r4, 0x0, 0x0}, 0x20)
timer_create(0x0, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, r7, 0x0)
unshare(0x20400)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

4m7.936135318s ago: executing program 34 (id=1326):
socket(0x2, 0x80805, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000000101beb327778e115ed5f86b000000000002000000100002800c000280050001003a"], 0x4c}}, 0x0)
semop(0x0, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2)
semget$private(0x0, 0xbac636aa2767daa0, 0x2c4)
openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40080000000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x40000000, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x200002, 0x0, 0x8}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x78}}, 0x0)

16.489297951s ago: executing program 7 (id=1901):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0, 0x0, 0x3e0000000000}], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

13.739723585s ago: executing program 7 (id=1912):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000)=0xb, 0x4)
r3 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000a80)={0x0, 0xd, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"})

12.319624152s ago: executing program 0 (id=1915):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004b40)={0x28, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x14, 0x12, 0x0, 0x1, [@nested={0x10, 0xc3, 0x0, 0x1, [@typed={0x9, 0xbb, 0x0, 0x0, @binary="88d0fac0a3"}]}]}]}, 0x28}}, 0x0)

12.04483426s ago: executing program 1 (id=1916):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r6, 0x401, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x4}]}, 0x24}}, 0x0)
recvmmsg(r3, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x6)

11.927124672s ago: executing program 0 (id=1917):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x149f)
syz_open_dev$video4linux(&(0x7f0000000200), 0x1, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000240), 0x4)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44})

11.907981747s ago: executing program 6 (id=1918):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffffff, 0xffffffff, 0x0, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gretap0\x00', 0x0})
r2 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)

10.402345623s ago: executing program 1 (id=1919):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217"], 0x58)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
chdir(&(0x7f0000000100)='./file0\x00')
read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')

10.011235171s ago: executing program 7 (id=1920):
ioperm(0x0, 0x9, 0x5)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x1812, r0, 0x184ac000)
msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1)

9.918476366s ago: executing program 1 (id=1921):
socket(0x2a, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
socket(0x2a, 0x2, 0x0)
memfd_create(&(0x7f0000000680)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rK\b\x00\x00\x00\x00\x00\x00\x00\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7?\xfe?[\xdb9\xef\x9fb$aZ\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16T~\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x99aW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5S\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8+\xc6\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-g\xb3\xaf\v<c\x89\x14\x82\x84\xe4\xe4\x80\r\xa06\xea\xc0\xc2@<\xd4r\f\xf6\xb2E\xa7\xb4\x1e\x17\x0f\xa3\x7f\xf8\xd0}\xbcH\xe4n?Q<\v\x94\x10/I\x14\xdd\xcf\xe6\xb4\xd5\xad\xe2\xfb\xd82\xca\xff\x9b\xdb\xaaU\xb7\xbb\xe7\xbf0T\xa1\xf9\xef\xf8[\x03\x9a\x9eBL$\xf0\xc9\x98\xe1:\xd1\x04S\xff\xef\xbb\xf5\x86`\xcb\x8f\xc0X\xf1z*3\x84\x96\xacE1\x05d0\xcc\xcaR\xfb\x00\xeb.F<\xd5\x1c\xf7\x86\x1b\xe9\xfei|\x90_\x92\x9b]{\x83JnXzK\t\xf1aa\x15D\xc2\xaf\xed\x18\x9e\x93\xa8`\\K\xe6\x1a\xaeDr\x81-a\xc4\xa5\x81\xad\x9c\x95\xc5\x7f \xb9\x90\xed\xca\xa3\x9b\xc5\xe8T\xdaK\xd5\x92X\x16\xf3\xfd \x13\xf2q\xf7N\xe2\xc9\xe4\x12\x19QFT\xbcE\xc3\x03\x0e@\x8b\x96>', 0x6)
socket$kcm(0x11, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00')
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0)

9.721657628s ago: executing program 7 (id=1922):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0, 0x0, 0x3e0000000000}], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

9.318151368s ago: executing program 3 (id=1924):
r0 = socket$xdp(0x2c, 0x3, 0x0)
unshare(0x400)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0)

9.049245888s ago: executing program 3 (id=1925):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

8.800815056s ago: executing program 3 (id=1926):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r1, &(0x7f0000000100)='reno\x00', 0x5)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="54fe93771c110c0fa75a23d63c7c9f80105f505c51fdd5e8664363b4cc841f6078aa63d60c3969b4401de7cd4fb793f5e0eed3078f03797888c9af96ae", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20)
write$tcp_congestion(r1, &(0x7f0000000300)='reno\x00', 0x5)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000005c0)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, 0x0, 0x80)
shutdown(0xffffffffffffffff, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103000000000008000f0c"], 0x14}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r3, r2, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10)
openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)

8.685648562s ago: executing program 0 (id=1927):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004b40)={0x28, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x14, 0x12, 0x0, 0x1, [@nested={0x10, 0xc3, 0x0, 0x1, [@typed={0x9, 0xbb, 0x0, 0x0, @binary="88d0fac0a3"}]}]}]}, 0x28}}, 0x0)

8.339875515s ago: executing program 0 (id=1928):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1, 0x0, 0x1200}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x9, 0x32000)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r4, 0x1ff)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)

7.428731934s ago: executing program 1 (id=1929):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r6, 0x401, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x4}]}, 0x24}}, 0x0)
recvmmsg(r3, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x6)

7.282637728s ago: executing program 6 (id=1930):
userfaultfd(0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x1)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6dd3c3d"}, 0x0, 0x1, {0x0}})

5.798166426s ago: executing program 3 (id=1931):
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, r5, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0xd4)

5.728897305s ago: executing program 6 (id=1932):
syz_open_dev$dri(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x10012, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000080))
socket$rds(0x15, 0x5, 0x0)
writev(0xffffffffffffffff, &(0x7f0000002580), 0x0)

4.440374469s ago: executing program 1 (id=1933):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c000240"], 0xdc}}, 0x0)

4.438306065s ago: executing program 6 (id=1934):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x13f, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r1, 0x1}}, 0x48)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000580), r1, 0x0, 0x1, 0x4}}, 0x20)

4.189514136s ago: executing program 6 (id=1935):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe80000000000000", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.318659972s ago: executing program 3 (id=1936):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x800000}, 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@mark={0xc, 0x15, {0x350759, 0xb29}}]}, 0xc4}}, 0x4004)
write(0xffffffffffffffff, &(0x7f0000000000)="2700000014000707", 0x8)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000340)={0x0, 0xa6ff, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r9})
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)

3.291206636s ago: executing program 7 (id=1937):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00')
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]})
socket$packet(0x11, 0x3, 0x300)
socket$inet(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00')

1.851299192s ago: executing program 3 (id=1938):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
preadv(r0, &(0x7f0000000200), 0x0, 0x0, 0x2)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000001080))

1.761833165s ago: executing program 0 (id=1939):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c)

1.489679966s ago: executing program 1 (id=1940):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

390.349516ms ago: executing program 0 (id=1941):
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, 0x0, 0x0)
r2 = getpgid(0x0)
sched_getscheduler(r2)
listen(r1, 0xa)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = memfd_secret(0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x8010, r3, 0x0)
ftruncate(r3, 0xffffffff)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket(0x10, 0x803, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x39, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)

44.903735ms ago: executing program 7 (id=1942):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000)=0xb, 0x4)
r3 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000a80)={0x0, 0xd, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"})

0s ago: executing program 6 (id=1943):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000103c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
dup2(r4, r2)
ppoll(&(0x7f0000000100)=[{r2, 0x1400}], 0x1, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

terface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.050919][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.063342][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.070647][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.097107][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.111994][ T5840] team0: Port device team_slave_1 added
[   81.126160][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.133284][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.140691][ T5827] bridge_slave_0: entered allmulticast mode
[   81.148001][ T5827] bridge_slave_0: entered promiscuous mode
[   81.164618][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.171867][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.197949][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.215859][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.222844][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.248906][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.273353][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.289368][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.298661][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.306659][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.313858][ T5827] bridge_slave_1: entered allmulticast mode
[   81.320869][ T5827] bridge_slave_1: entered promiscuous mode
[   81.351517][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.403809][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.430720][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.438348][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.465574][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.489274][ T5834] team0: Port device team_slave_0 added
[   81.514482][ T5827] team0: Port device team_slave_0 added
[   81.524336][ T5836] hsr_slave_0: entered promiscuous mode
[   81.531692][ T5836] hsr_slave_1: entered promiscuous mode
[   81.539321][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.546903][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.573437][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.600360][ T5834] team0: Port device team_slave_1 added
[   81.614292][ T5826] hsr_slave_0: entered promiscuous mode
[   81.620677][ T5826] hsr_slave_1: entered promiscuous mode
[   81.627239][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.635387][ T5826] Cannot create hsr debugfs directory
[   81.642794][ T5827] team0: Port device team_slave_1 added
[   81.666147][ T5831] Bluetooth: hci1: command tx timeout
[   81.707815][ T5840] hsr_slave_0: entered promiscuous mode
[   81.714099][ T5840] hsr_slave_1: entered promiscuous mode
[   81.720695][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.728824][ T5840] Cannot create hsr debugfs directory
[   81.748042][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.749491][ T5831] Bluetooth: hci2: command tx timeout
[   81.755177][ T5142] Bluetooth: hci4: command tx timeout
[   81.755577][ T5142] Bluetooth: hci3: command tx timeout
[   81.761069][ T5841] Bluetooth: hci0: command tx timeout
[   81.767696][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.804069][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.830077][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.837684][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.864158][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.877436][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.884413][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.910693][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.926654][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.933635][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.959961][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.043563][ T5834] hsr_slave_0: entered promiscuous mode
[   82.052119][ T5834] hsr_slave_1: entered promiscuous mode
[   82.059075][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.067203][ T5834] Cannot create hsr debugfs directory
[   82.139809][ T5827] hsr_slave_0: entered promiscuous mode
[   82.146810][ T5827] hsr_slave_1: entered promiscuous mode
[   82.152924][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.160973][ T5827] Cannot create hsr debugfs directory
[   82.406198][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.439310][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.475766][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.489604][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.539061][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.569758][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.595313][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.610564][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.620019][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.634006][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.648055][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.658374][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.730670][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.742134][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.767133][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.778311][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.889853][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.903017][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   82.924443][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.933965][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.957424][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   82.990435][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.022490][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   83.038231][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   83.059170][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.066495][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.077970][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.085145][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.109794][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.116931][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.159745][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.166988][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.249163][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.261252][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.334361][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   83.357697][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   83.382641][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.389812][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.432886][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.440079][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.453586][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.460769][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.473066][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.480249][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.497721][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.584012][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   83.643924][ T5840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   83.657569][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.699457][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.713391][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.720555][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.734355][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.741500][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.752538][ T5841] Bluetooth: hci1: command tx timeout
[   83.762339][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.828908][ T5831] Bluetooth: hci3: command tx timeout
[   83.834401][ T5831] Bluetooth: hci2: command tx timeout
[   83.840611][ T5841] Bluetooth: hci4: command tx timeout
[   83.840633][ T5142] Bluetooth: hci0: command tx timeout
[   83.923749][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.012366][ T5826] veth0_vlan: entered promiscuous mode
[   84.090608][ T5826] veth1_vlan: entered promiscuous mode
[   84.128241][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.162346][ T5836] veth0_vlan: entered promiscuous mode
[   84.184320][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.233097][ T5826] veth0_macvtap: entered promiscuous mode
[   84.243801][ T5836] veth1_vlan: entered promiscuous mode
[   84.254524][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.271299][ T5826] veth1_macvtap: entered promiscuous mode
[   84.322674][ T5840] veth0_vlan: entered promiscuous mode
[   84.342679][ T5827] veth0_vlan: entered promiscuous mode
[   84.352682][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.379530][ T5827] veth1_vlan: entered promiscuous mode
[   84.395559][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.409685][ T5840] veth1_vlan: entered promiscuous mode
[   84.446292][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.463173][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.474595][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.483827][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.541890][ T5827] veth0_macvtap: entered promiscuous mode
[   84.583159][ T5836] veth0_macvtap: entered promiscuous mode
[   84.592891][ T5827] veth1_macvtap: entered promiscuous mode
[   84.614087][ T5836] veth1_macvtap: entered promiscuous mode
[   84.639636][ T5840] veth0_macvtap: entered promiscuous mode
[   84.681128][ T5840] veth1_macvtap: entered promiscuous mode
[   84.733942][ T5897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.749211][ T5834] veth0_vlan: entered promiscuous mode
[   84.771262][ T5897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.792575][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.804223][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.817201][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.826351][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.837259][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.849003][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.859737][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.871847][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.889605][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.900965][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.911226][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.922598][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.932616][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.943312][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.954603][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.970825][ T5834] veth1_vlan: entered promiscuous mode
[   84.988387][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.993413][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.007274][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.014115][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.029803][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.041111][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.052667][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.061682][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.070827][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.082934][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.093823][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.104495][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.116165][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.127453][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.135499][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.146616][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.156771][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.167512][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.177398][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.189995][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.201926][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.224689][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.234211][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.243269][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.252103][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.296531][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.307438][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.316250][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.325367][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.330992][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   85.367192][ T5834] veth0_macvtap: entered promiscuous mode
[   85.400414][ T5834] veth1_macvtap: entered promiscuous mode
[   85.531589][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.551398][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.568914][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.584471][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.595040][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.614796][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.624658][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.636913][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.654225][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.804122][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.822538][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.842080][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.852713][ T5841] Bluetooth: hci1: command tx timeout
[   85.866779][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.883217][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.894522][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.904729][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.905268][ T5841] Bluetooth: hci0: command tx timeout
[   85.908699][ T5831] Bluetooth: hci3: command tx timeout
[   85.925449][ T5835] Bluetooth: hci4: command tx timeout
[   85.927508][ T5831] Bluetooth: hci2: command tx timeout
[   85.937865][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.951058][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.964010][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.980470][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.163831][ T5922] affs: No valid root block on device nullb0
[   86.284012][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.419612][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.590771][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.634010][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.728920][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.761773][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.885993][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.899073][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.899158][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.914386][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.957674][  T974] cfg80211: failed to load regulatory.db
[   87.509850][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.545711][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.601555][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.633302][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.664720][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.674219][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.733031][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.748950][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.912377][ T5831] Bluetooth: hci1: command tx timeout
[   87.926766][ T5930] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   87.984956][ T5831] Bluetooth: hci0: command tx timeout
[   87.985924][ T5841] Bluetooth: hci4: command tx timeout
[   87.990412][ T5831] Bluetooth: hci3: command tx timeout
[   87.997763][ T5142] Bluetooth: hci2: command tx timeout
[   88.732287][ T5933] loop0: detected capacity change from 0 to 32768
[   88.908873][ T5933] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   88.925708][ T5957] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   89.320307][ T5933] XFS (loop0): Ending clean mount
[   91.217940][ T5969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.239975][ T5969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.330238][ T5840] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   91.552906][ T5972] loop4: detected capacity change from 0 to 256
[   91.591681][ T5883] IPVS: starting estimator thread 0...
[   91.653616][ T5972] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   92.501518][ T5975] IPVS: using max 17 ests per chain, 40800 per kthread
[   93.049755][ T5987] loop1: detected capacity change from 0 to 16
[   93.143975][ T5990] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   93.521798][ T5987] erofs (device loop1): mounted with root inode @ nid 36.
[   95.422707][ T6007] affs: No valid root block on device nullb0
[   96.534212][ T6018] loop4: detected capacity change from 0 to 256
[   96.798346][ T6018] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   96.850486][ T6020] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   99.212942][ T6038] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  100.086460][ T6043] loop0: detected capacity change from 0 to 16
[  100.155346][ T6043] erofs (device loop0): mounted with root inode @ nid 36.
[  101.654230][ T6057] loop1: detected capacity change from 0 to 256
[  101.803648][ T6057] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  105.032473][ T6084] overlayfs: failed to resolve './file0': -2
[  106.025349][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  106.392067][ T6102] affs: No valid root block on device nullb0
[  106.605476][ T6080] loop2: detected capacity change from 0 to 32768
[  106.816481][ T6080] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  107.276543][ T6080] XFS (loop2): AIL initialisation failed: error -12
[  107.468806][ T6080] XFS (loop2): log mount failed
[  108.853853][ T6134] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  108.959059][ T6136] overlayfs: failed to resolve './file0': -2
[  110.695663][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.704470][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.713302][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.721992][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.730873][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.739569][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.956038][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  111.058512][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  111.263178][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  117.409611][ T6198] overlayfs: failed to resolve './file0': -2
[  118.351917][ T6208] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  123.443006][ T6202] tty tty21: ldisc open failed (-12), clearing slot 20
[  123.819000][ T6215] tipc: Started in network mode
[  123.824186][ T6215] tipc: Node identity ac1414aa, cluster identity 4711
[  123.838128][ T6215] tipc: Enabled bearer <udp:s>, priority 10
[  125.020569][   T46] tipc: Node number set to 2886997162
[  126.238036][ T6247] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  128.315211][ T6256] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  129.799559][ T6248] sctp: failed to load transform for md5: -2
[  130.129976][ T6265] loop1: detected capacity change from 0 to 16
[  130.165923][ T6265] erofs (device loop1): mounted with root inode @ nid 36.
[  133.183579][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  133.194889][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  136.676733][ T6318] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  136.888855][ T6321] IPv6: Can't replace route, no match found
[  139.259006][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'.
[  142.086587][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'.
[  143.482518][ T6360] affs: No valid root block on device nullb0
[  143.743547][ T6363] IPv6: Can't replace route, no match found
[  146.772940][    C1] vcan0: j1939_tp_rxtimer: 0xffff88806f0d9400: rx timeout, send abort
[  146.782848][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806f0d9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  147.640490][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'.
[  148.110712][ T5838] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  148.304812][ T5838] usb 5-1: Using ep0 maxpacket: 16
[  148.319244][ T5838] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[  148.327979][ T5838] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  148.455071][ T5838] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  148.474471][ T5838] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  148.499894][ T5838] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  148.524785][ T5838] usb 5-1: config 0 has no interface number 0
[  148.531486][ T6399] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  148.541123][ T5838] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  148.561600][ T5838] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  148.588289][ T5838] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  148.614787][ T5838] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  148.644788][ T5838] usb 5-1: config 0 interface 125 has no altsetting 0
[  148.651748][ T5838] usb 5-1: config 0 interface 125 has no altsetting 2
[  148.948493][ T6404] affs: No valid root block on device nullb0
[  149.930432][ T5838] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  149.939623][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.947712][ T5838] usb 5-1: Product: syz
[  149.951956][ T5838] usb 5-1: Manufacturer: syz
[  149.956659][ T5838] usb 5-1: SerialNumber: syz
[  149.966812][ T5838] usb 5-1: config 0 descriptor??
[  149.995113][ T5838] usb 5-1: selecting invalid altsetting 2
[  150.091020][    C0] usb 5-1: async_complete: urb error -71
[  150.096881][    C0] usb 5-1: async_complete: urb error -71
[  150.102647][    C0] usb 5-1: async_complete: urb error -71
[  150.108396][    C0] usb 5-1: async_complete: urb error -71
[  150.148069][ T5838] get_1284_register: usb error -71
[  150.153338][ T5838] uss720 5-1:0.125: probe with driver uss720 failed with error -71
[  150.222554][ T5838] usb 5-1: USB disconnect, device number 2
[  150.770387][ T6421] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  151.541048][ T6408] loop0: detected capacity change from 0 to 32768
[  151.762391][ T6408] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  153.394562][ T6408] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop0": -EINTR
[  153.395778][ T6408] XFS (loop0): log mount failed
[  155.399837][ T6457] affs: No valid root block on device nullb0
[  156.715068][ T6459] sctp: failed to load transform for md5: -2
[  157.009797][ T6474] loop4: detected capacity change from 0 to 16
[  157.305607][ T6474] erofs (device loop4): mounted with root inode @ nid 36.
[  157.668271][ T6480] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  161.311125][ T6501] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  163.534241][ T6522] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  164.773613][ T6532] loop2: detected capacity change from 0 to 16
[  164.816799][ T6532] erofs (device loop2): mounted with root inode @ nid 36.
[  165.135872][ T6535] 9pnet_fd: Insufficient options for proto=fd
[  166.976220][ T6558] affs: No valid root block on device nullb0
[  169.053781][ T6566] netlink: 5 bytes leftover after parsing attributes in process `syz.2.179'.
[  169.095157][ T6566] 0�X��D��: renamed from gretap0 (while UP)
[  169.117724][ T6566] 0�X��D��: entered allmulticast mode
[  169.290617][ T6568] overlayfs: failed to resolve './file0': -2
[  169.297010][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802a023c00: rx timeout, send abort
[  169.305474][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a023c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  172.702744][   T29] audit: type=1800 audit(1736434472.427:2): pid=6583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.185" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  172.741316][ T6584] 9pnet_fd: Insufficient options for proto=fd
[  172.915454][ T6589] loop4: detected capacity change from 0 to 16
[  173.145473][ T6589] erofs (device loop4): mounted with root inode @ nid 36.
[  174.830788][ T6610] affs: No valid root block on device nullb0
[  176.411411][ T6621] overlayfs: failed to resolve './file0': -2
[  177.054994][ T6633] 9pnet_fd: Insufficient options for proto=fd
[  177.301716][ T6640] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  177.454906][   T46] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  177.521221][ T6643] loop3: detected capacity change from 0 to 16
[  177.570393][ T6643] erofs (device loop3): mounted with root inode @ nid 36.
[  177.608753][   T46] usb 2-1: config 0 has an invalid interface number: 129 but max is 0
[  177.622422][   T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.272983][   T46] usb 2-1: config 0 has no interface number 0
[  178.279385][   T46] usb 2-1: config 0 interface 129 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  178.311035][   T46] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e
[  178.321842][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.294075][   T46] usb 2-1: Product: syz
[  179.298568][   T46] usb 2-1: Manufacturer: syz
[  179.303545][   T46] usb 2-1: SerialNumber: syz
[  179.340549][   T46] r8152-cfgselector 2-1: Unknown version 0x0000
[  179.356678][   T46] r8152-cfgselector 2-1: config 0 descriptor??
[  179.379681][   T46] r8152 2-1:0.129: Expected endpoints are not found
[  179.636412][   T46] r8152-cfgselector 2-1: USB disconnect, device number 2
[  180.524805][   T29] audit: type=1800 audit(1736434480.247:3): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.207" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  180.859855][ T6665] affs: No valid root block on device nullb0
[  181.893780][ T6674] 9pnet_fd: Insufficient options for proto=fd
[  182.118283][ T6676] overlayfs: failed to resolve './file0': -2
[  182.338528][ T6678] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  183.222286][ T6686] loop2: detected capacity change from 0 to 16
[  183.267890][ T6689] tmpfs: Bad value for 'mpol'
[  183.303893][ T6686] erofs (device loop2): mounted with root inode @ nid 36.
[  186.206726][ T6699] loop1: detected capacity change from 0 to 32768
[  187.654473][ T6699] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop1": -EINTR
[  188.752596][ T6725] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  189.909257][ T6734] 9pnet_fd: Insufficient options for proto=fd
[  191.201493][ T6753] fuse: Unknown parameter 'group_id00000000000000000000'
[  191.368931][   T29] audit: type=1800 audit(1736434490.927:4): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.228" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  192.474139][ T6772] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  193.268555][ T6768] syz.3.235 (6768): drop_caches: 2
[  193.569635][ T6766] loop1: detected capacity change from 0 to 32768
[  193.655307][ T6766] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  193.734058][ T6766] XFS (loop1): Ending clean mount
[  194.522014][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  194.538468][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  194.738187][ T6794] 9pnet_fd: Insufficient options for proto=fd
[  196.576707][ T5826] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  197.906645][ T6835] affs: No valid root block on device nullb0
[  199.091834][ T6847] 9pnet_fd: Insufficient options for proto=fd
[  200.349605][ T6860] netlink: 'syz.2.265': attribute type 1 has an invalid length.
[  200.371731][ T6860] netlink: 224 bytes leftover after parsing attributes in process `syz.2.265'.
[  202.258930][ T6881] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  202.360837][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.272'.
[  202.484833][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'.
[  202.544081][ T6885] loop7: detected capacity change from 0 to 95
[  202.618738][ T6884] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 12 prio class 0
[  202.939625][ T6890] affs: No valid root block on device nullb0
[  204.205469][ T6898] 9pnet_fd: Insufficient options for proto=fd
[  204.941894][ T5846] Bluetooth: hci4: unexpected cc 0x2007 length: 1 < 2
[  204.954779][ T5846] Bluetooth: hci4: unexpected event for opcode 0x2007
[  206.828430][ T5846] Bluetooth: hci0: command 0x0406 tx timeout
[  206.836005][ T5846] Bluetooth: hci3: command 0x0406 tx timeout
[  206.847115][ T5846] Bluetooth: hci2: command 0x0406 tx timeout
[  206.854965][ T5846] Bluetooth: hci1: command 0x0406 tx timeout
[  207.759087][ T6928] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  207.950383][ T6930] loop4: detected capacity change from 0 to 16
[  208.011224][   T29] audit: type=1800 audit(1736434507.747:5): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.286" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  208.636618][ T6930] erofs (device loop4): mounted with root inode @ nid 36.
[  211.190558][ T6956] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  211.206921][ T6956] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  211.215725][ T6956] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  212.334638][ T6965] affs: No valid root block on device nullb0
[  212.556378][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'.
[  212.895594][ T6972] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  214.703214][ T6992] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  220.673382][ T7033] loop3: detected capacity change from 0 to 16
[  220.720223][ T7033] erofs (device loop3): mounted with root inode @ nid 36.
[  223.334918][ T5914] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  224.507287][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  224.536742][ T5914] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=62.70
[  224.554842][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.573174][ T5914] usb 5-1: Product: syz
[  224.577864][ T5914] usb 5-1: Manufacturer: syz
[  224.582818][ T5914] usb 5-1: SerialNumber: syz
[  224.617913][ T5914] usb 5-1: config 0 descriptor??
[  224.628797][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[  224.661202][ T7061] 9pnet_fd: Insufficient options for proto=fd
[  224.908582][ T7068] syz.3.329 uses obsolete (PF_INET,SOCK_PACKET)
[  226.061221][ T5838] usb 5-1: USB disconnect, device number 3
[  227.398298][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  227.407258][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  227.416314][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  227.427060][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  227.435089][ T5831] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  227.443848][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  227.589586][ T7087] loop0: detected capacity change from 0 to 16
[  227.726804][ T7087] erofs (device loop0): mounted with root inode @ nid 36.
[  228.344907][ T5913] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  229.089394][ T7085] chnl_net:caif_netlink_parms(): no params data found
[  229.279071][ T5913] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  229.289792][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.301021][ T7110] 9pnet_fd: Insufficient options for proto=fd
[  229.307406][ T5913] usb 4-1: Product: syz
[  229.317514][ T5913] usb 4-1: Manufacturer: syz
[  229.327922][ T5913] usb 4-1: SerialNumber: syz
[  229.442576][ T5913] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  229.471153][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.472769][ T5838] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  229.504269][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.511475][ T5831] Bluetooth: hci5: command tx timeout
[  229.545588][ T7085] bridge_slave_0: entered allmulticast mode
[  229.596041][ T7085] bridge_slave_0: entered promiscuous mode
[  229.613470][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.774265][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.822975][ T7085] bridge_slave_1: entered allmulticast mode
[  229.926163][ T7085] bridge_slave_1: entered promiscuous mode
[  229.945648][ T7100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.959230][ T7100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.790573][ T7085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.856225][ T7085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.932461][ T5838] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  230.940220][ T5838] ath9k_htc: Failed to initialize the device
[  230.979608][ T5838] usb 4-1: ath9k_htc: USB layer deinitialized
[  231.063980][ T7085] team0: Port device team_slave_0 added
[  231.103876][ T7085] team0: Port device team_slave_1 added
[  231.322978][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.333706][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.402028][ T7085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.432155][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.459378][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.485516][    C0] vkms_vblank_simulate: vblank timer overrun
[  231.591348][ T5831] Bluetooth: hci5: command tx timeout
[  231.601380][ T7085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.473354][ T7085] hsr_slave_0: entered promiscuous mode
[  232.496622][   T46] usb 4-1: USB disconnect, device number 2
[  232.585116][ T7085] hsr_slave_1: entered promiscuous mode
[  232.625228][ T7085] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  232.635083][ T7085] Cannot create hsr debugfs directory
[  233.382319][ T7085] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  233.400955][ T7085] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  233.415393][ T7085] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  233.436855][ T7085] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  233.553110][ T7085] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.572275][ T7085] 8021q: adding VLAN 0 to HW filter on device team0
[  233.584005][ T1327] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.591152][ T1327] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.644788][ T7149] capability: warning: `syz.4.345' uses 32-bit capabilities (legacy support in use)
[  233.675571][ T5831] Bluetooth: hci5: command tx timeout
[  233.688587][ T7154] loop1: detected capacity change from 0 to 16
[  233.700662][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.707820][ T6365] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.719116][ T7149] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  233.729855][ T7149] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  233.759844][ T7154] erofs (device loop1): mounted with root inode @ nid 36.
[  233.839871][ T7085] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  233.850392][ T7085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  234.844656][ T7163] 9pnet_fd: Insufficient options for proto=fd
[  235.333375][ T7085] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.772795][ T5831] Bluetooth: hci5: command tx timeout
[  237.850827][ T7085] veth0_vlan: entered promiscuous mode
[  237.892464][ T7085] veth1_vlan: entered promiscuous mode
[  238.143543][ T7085] veth0_macvtap: entered promiscuous mode
[  238.197101][ T7085] veth1_macvtap: entered promiscuous mode
[  238.241194][ T7198] affs: No valid root block on device nullb0
[  238.347670][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.424881][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.440889][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.463910][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.486540][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.613189][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.623584][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.644985][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.667215][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.712959][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.734962][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.761724][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.773439][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.789087][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.933391][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.969798][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.992920][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.012757][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.023748][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.097152][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.132325][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.163860][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.310246][ T7085] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.337220][ T7085] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.358980][ T7085] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.373728][ T7085] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.508634][ T7217] 9pnet_fd: Insufficient options for proto=fd
[  239.578515][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.604825][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.628260][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.636556][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.297380][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.365'.
[  240.306929][ T7226] nbd: must specify a device to reconfigure
[  242.574555][ T7259] 9pnet_fd: Insufficient options for proto=fd
[  242.967259][   T29] audit: type=1800 audit(1736434542.697:6): pid=7262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.378" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  243.276815][ T5919] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  243.462696][ T7273] 9pnet_fd: Insufficient options for proto=fd
[  243.479038][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  243.529989][ T5919] usb 1-1: config 0 has no interfaces?
[  243.573941][ T5919] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  243.840074][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.850469][ T5919] usb 1-1: config 0 descriptor??
[  244.012970][ T7283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.380'.
[  244.022248][ T7283] nbd: must specify a device to reconfigure
[  248.042592][ T5919] usb 1-1: USB disconnect, device number 2
[  248.503072][ T7315] 9pnet_fd: Insufficient options for proto=fd
[  253.170569][  T974] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  253.326732][  T974] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.337256][  T974] usb 6-1: config 0 has no interfaces?
[  253.342795][  T974] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  253.370668][  T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.397832][  T974] usb 6-1: config 0 descriptor??
[  255.477298][ T7364] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  255.635062][   T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  255.804913][   T25] usb 2-1: Using ep0 maxpacket: 32
[  255.836015][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.936250][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  255.943661][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  256.033818][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.143027][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  256.257031][   T25] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  256.291330][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.350792][   T25] usb 2-1: config 0 descriptor??
[  257.693542][   T46] usb 6-1: USB disconnect, device number 2
[  258.321616][   T25] usbhid 2-1:0.0: can't add hid device: -71
[  258.329330][   T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  258.345394][   T25] usb 2-1: USB disconnect, device number 3
[  258.932638][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.422'.
[  262.512147][ T7423] smc: net device bond0 applied user defined pnetid SYZ2
[  262.541523][ T7423] smc: net device bond0 erased user defined pnetid SYZ2
[  266.180914][ T7453] loop0: detected capacity change from 0 to 16
[  266.266101][ T7455] mmap: syz.3.442 (7455) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  267.049137][ T5835] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  267.166584][ T7453] erofs (device loop0): mounted with root inode @ nid 36.
[  267.424834][ T5919] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  268.082088][ T5835] Bluetooth: hci5: command 0x0405 tx timeout
[  269.589269][ T7478] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock
[  270.435596][ T7489] syz_tun: entered allmulticast mode
[  270.476434][ T7485] syz_tun: left allmulticast mode
[  272.517730][ T7508] affs: No valid root block on device nullb0
[  273.558203][ T7514] loop0: detected capacity change from 0 to 16
[  273.647580][ T7514] erofs (device loop0): mounted with root inode @ nid 36.
[  274.492947][ T7521] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  276.042844][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'.
[  277.729093][ T7570] loop5: detected capacity change from 0 to 16
[  277.809718][ T7554] loop4: detected capacity change from 0 to 32768
[  277.825299][ T7570] erofs (device loop5): mounted with root inode @ nid 36.
[  278.010818][ T7554] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  278.091967][ T7554] XFS (loop4): Ending clean mount
[  278.112118][ T7583] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  279.006516][ T5834] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  279.560924][ T7602] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  279.655671][ T7602] overlayfs: failed to set xattr on upper
[  279.661459][ T7602] overlayfs: ...falling back to redirect_dir=nofollow.
[  279.719241][ T7602] overlayfs: ...falling back to index=off.
[  279.725231][ T7602] overlayfs: ...falling back to uuid=null.
[  281.588582][ T7617] 9pnet: Could not find request transport: fd0x0000000000000004
[  283.678374][ T7638] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  283.979955][ T7633] loop1: detected capacity change from 0 to 32768
[  284.121870][ T7633] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  285.279949][ T7633] XFS (loop1): AIL initialisation failed: error -12
[  285.364475][ T7633] XFS (loop1): log mount failed
[  286.345335][ T7671] 9pnet: Could not find request transport: fd0x0000000000000004
[  288.183193][ T7692] affs: No valid root block on device nullb0
[  291.267988][ T7708] loop4: detected capacity change from 0 to 32768
[  291.291436][ T7720] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  291.466137][ T7718] loop3: detected capacity change from 0 to 16
[  291.520028][ T7718] erofs (device loop3): mounted with root inode @ nid 36.
[  291.565179][ T7708] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  291.584095][ T7723] 9pnet: Could not find request transport: fd0x0000000000000004
[  291.846529][ T7708] XFS (loop4): Ending clean mount
[  293.536981][ T5834] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  296.159923][ T7756] affs: No valid root block on device nullb0
[  298.137780][ T7771] 9pnet_fd: Insufficient options for proto=fd
[  298.550916][ T7777] loop5: detected capacity change from 0 to 16
[  298.635340][ T5919] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  298.798352][ T7777] erofs (device loop5): mounted with root inode @ nid 36.
[  298.913057][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  298.999015][ T5919] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  299.252764][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.872107][ T5919] usb 1-1: config 0 descriptor??
[  299.884519][ T5919] pwc: Askey VC010 type 2 USB webcam detected.
[  301.140541][ T5919] pwc: recv_control_msg error -32 req 02 val 2b00
[  301.174751][ T5919] pwc: recv_control_msg error -32 req 02 val 2700
[  301.212674][ T5919] pwc: recv_control_msg error -32 req 02 val 2c00
[  301.223440][ T5919] pwc: recv_control_msg error -32 req 04 val 1000
[  301.272328][ T5919] pwc: recv_control_msg error -32 req 04 val 1300
[  301.290567][ T5919] pwc: recv_control_msg error -32 req 04 val 1400
[  301.417750][ T5919] pwc: recv_control_msg error -32 req 02 val 2000
[  301.435791][ T5919] pwc: recv_control_msg error -32 req 02 val 2100
[  301.539336][ T7798] affs: No valid root block on device nullb0
[  302.301617][ T5919] pwc: recv_control_msg error -32 req 04 val 1500
[  302.313593][ T5919] pwc: recv_control_msg error -32 req 02 val 2500
[  302.322984][ T5919] pwc: recv_control_msg error -32 req 02 val 2400
[  302.331018][ T5919] pwc: recv_control_msg error -32 req 02 val 2600
[  302.338196][ T5919] pwc: recv_control_msg error -32 req 02 val 2900
[  302.576751][ T5919] pwc: recv_control_msg error -71 req 04 val 1100
[  302.580971][  T974] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  302.583704][ T5919] pwc: recv_control_msg error -71 req 04 val 1200
[  302.701235][ T5919] pwc: Registered as video103.
[  302.725023][ T5919] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9
[  302.866175][  T974] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  302.899951][  T974] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  302.903746][ T5919] usb 1-1: USB disconnect, device number 3
[  303.234818][  T974] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  303.248479][  T974] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  303.259672][  T974] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  303.261396][ T7813] 9pnet_fd: Insufficient options for proto=fd
[  303.375797][ T7816] netlink: 11 bytes leftover after parsing attributes in process `syz.4.548'.
[  303.385255][ T7816] Zero length message leads to an empty skb
[  303.425209][  T974] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  303.434318][  T974] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  303.442938][  T974] usb 6-1: Product: syz
[  303.447258][  T974] usb 6-1: Manufacturer: syz
[  303.797823][ T7822] loop4: detected capacity change from 0 to 32768
[  303.824066][  T974] cdc_wdm 6-1:1.0: skipping garbage
[  303.829514][  T974] cdc_wdm 6-1:1.0: skipping garbage
[  303.871597][  T974] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  303.878846][  T974] cdc_wdm 6-1:1.0: Unknown control protocol
[  303.948251][ T7829] loop1: detected capacity change from 0 to 16
[  304.008270][ T7829] erofs (device loop1): mounted with root inode @ nid 36.
[  304.019627][ T7822] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  304.191295][ T7822] XFS (loop4): Ending clean mount
[  304.555347][    C0] cdc_wdm 6-1:1.0: Unexpected error -71
[  304.565733][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  304.572587][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  304.579062][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  304.585703][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  304.592009][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  304.598640][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  304.606638][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  304.613283][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  304.620344][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  304.627070][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  304.633456][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  304.640088][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  304.646429][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  304.653057][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  304.659366][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  304.666087][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  304.672375][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  304.679006][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  304.685356][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  304.691983][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  304.718633][ T5913] usb 6-1: USB disconnect, device number 3
[  304.724556][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  304.964375][ T5834] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  305.926489][ T7855] affs: No valid root block on device nullb0
[  307.785703][ T7872] 9pnet_fd: Insufficient options for proto=fd
[  309.229351][ T7879] loop3: detected capacity change from 0 to 32768
[  309.537755][ T7879] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  309.594243][ T7879] XFS (loop3): Ending clean mount
[  309.604948][   T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  310.171670][ T7908] affs: No valid root block on device nullb0
[  311.149079][ T5836] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  311.204782][   T25] usb 1-1: too many configurations: 108, using maximum allowed: 8
[  311.238867][ T7910] loop4: detected capacity change from 0 to 16
[  311.260056][   T25] usb 1-1: unable to read config index 0 descriptor/start: -61
[  311.280938][ T7910] erofs (device loop4): mounted with root inode @ nid 36.
[  311.288772][   T25] usb 1-1: can't read configurations, error -61
[  311.789632][   T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  312.084110][ T7919] 9pnet_fd: Insufficient options for proto=fd
[  315.664461][ T7971] 9pnet_fd: Insufficient options for proto=fd
[  315.794086][ T7972] affs: No valid root block on device nullb0
[  317.346917][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  317.353512][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  317.872713][ T7957] loop4: detected capacity change from 0 to 32768
[  318.475456][ T7957] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  318.542325][ T7957] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop4": -EINTR
[  318.542665][ T7957] XFS (loop4): log mount failed
[  318.800171][ T8016] loop9: detected capacity change from 0 to 7
[  318.812478][ T8016] Dev loop9: unable to read RDB block 7
[  318.835819][ T8016]  loop9: unable to read partition table
[  318.841697][ T8016] loop9: partition table beyond EOD, truncated
[  318.872450][ T8016] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  319.148082][ T8026] 9pnet_fd: Insufficient options for proto=fd
[  319.895756][ T8040] affs: No valid root block on device nullb0
[  321.684910][  T974] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  322.117759][  T974] usb 4-1: Using ep0 maxpacket: 32
[  322.339609][ T8083] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  322.593787][  T974] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  322.699969][  T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.752170][  T974] usb 4-1: config 0 descriptor??
[  322.792742][  T974] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  324.253173][ T8070] loop0: detected capacity change from 0 to 32768
[  324.369875][ T8070] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  324.552454][ T8070] XFS (loop0): Ending clean mount
[  324.624473][ T5840] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  325.738990][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  326.269974][  T974] gspca_vc032x: reg_w err -110
[  326.274952][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  326.280617][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  326.307148][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  326.402565][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  326.433911][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  326.463456][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  326.478104][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  326.496650][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  326.514118][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  326.575148][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  326.651668][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  326.701795][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  326.719975][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  326.725753][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  326.880905][ T8140] netlink: 44 bytes leftover after parsing attributes in process `syz.5.620'.
[  327.433957][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  327.439508][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  327.444940][  T974] gspca_vc032x: I2c Bus Busy Wait 00
[  327.450329][  T974] gspca_vc032x: Unknown sensor...
[  327.455589][  T974] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  327.473524][  T974] usb 4-1: USB disconnect, device number 3
[  328.051822][ T8149] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  329.302247][ T8169] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  331.260096][ T8200] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[  331.261255][ T8197] IPVS: stopping master sync thread 8200 ...
[  333.599642][ T8237] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  334.561562][ T8251] netlink: 168 bytes leftover after parsing attributes in process `syz.3.648'.
[  336.046365][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.651'.
[  336.459677][ T8278] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  338.148375][ T8271] loop5: detected capacity change from 0 to 32768
[  338.346167][ T8271] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  338.730807][ T8271] XFS (loop5): Ending clean mount
[  338.804784][ T5837] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  339.665375][ T8340] process 'syz.1.666' launched './file0' with NULL argv: empty string added
[  339.798449][ T7085] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  339.871453][ T5837] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  340.019474][ T5837] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  340.077926][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  340.144479][ T5837] usb 4-1: SerialNumber: syz
[  340.618884][ T8355] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  340.976481][ T5837] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  340.997539][ T5837] usb 4-1: USB disconnect, device number 4
[  344.330785][ T8387] loop1: detected capacity change from 0 to 32768
[  344.464862][ T5838] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  344.778841][ T8409] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  344.816060][ T8387] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  344.970410][ T5838] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  344.981555][ T5838] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  344.991727][ T5838] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  345.001129][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.103044][ T8400] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  345.415293][ T5838] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  345.813214][ T8387] XFS (loop1): Ending clean mount
[  346.005046][ T5913] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  346.111695][ T5826] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  346.162661][ T5913] usb 1-1: Using ep0 maxpacket: 16
[  346.182594][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  346.220905][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  346.291144][ T5913] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  346.316587][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.344229][ T5913] usb 1-1: config 0 descriptor??
[  347.114576][ T5913] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  348.499240][ T5913] usb 6-1: USB disconnect, device number 4
[  350.651555][ T8477] affs: No valid root block on device nullb0
[  350.874895][ T5831] Bluetooth: hci5: command 0x0405 tx timeout
[  352.510825][  T974] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  352.527450][ T5913] usb 1-1: USB disconnect, device number 6
[  353.082709][ T8489] loop0: detected capacity change from 0 to 16
[  353.096247][ T8489] erofs (device loop0): mounted with root inode @ nid 36.
[  353.194228][  T974] usb 5-1: too many configurations: 108, using maximum allowed: 8
[  353.969385][  T974] usb 5-1: unable to read config index 0 descriptor/start: -71
[  353.977109][  T974] usb 5-1: can't read configurations, error -71
[  356.191357][ T8520] loop1: detected capacity change from 0 to 32768
[  356.473384][ T8526] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  356.496549][ T8520] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  357.200591][ T8520] XFS (loop1): Ending clean mount
[  357.860041][ T8546] affs: No valid root block on device nullb0
[  360.006017][ T5826] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  362.354951][ T8586] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  362.897806][ T8591] loop5: detected capacity change from 0 to 16
[  362.916586][ T8591] erofs (device loop5): mounted with root inode @ nid 36.
[  363.772387][ T8599] affs: No valid root block on device nullb0
[  368.285318][ T8634] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  368.906274][ T8646] loop0: detected capacity change from 0 to 16
[  368.951182][ T8646] erofs (device loop0): mounted with root inode @ nid 36.
[  369.173141][ T8654] affs: No valid root block on device nullb0
[  373.046303][ T8663] loop4: detected capacity change from 0 to 32768
[  373.109862][ T8681] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  373.783293][ T8663] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop4": -EINTR
[  374.809259][ T8700] affs: No valid root block on device nullb0
[  375.801898][ T8710] loop3: detected capacity change from 0 to 16
[  375.830708][ T8710] erofs (device loop3): mounted with root inode @ nid 36.
[  378.390493][ T8731] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  378.804603][ T8726] loop4: detected capacity change from 0 to 32768
[  378.895495][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  378.901864][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  379.281703][ T8749] affs: No valid root block on device nullb0
[  379.542154][ T8751] loop1: detected capacity change from 0 to 16
[  379.863193][ T8751] erofs (device loop1): mounted with root inode @ nid 36.
[  380.328363][ T8726] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  380.515778][ T8726] XFS (loop4): Ending clean mount
[  381.755331][ T5834] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  383.697453][   T29] audit: type=1800 audit(1736434683.377:7): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.777" name="/" dev="9p" ino=2 res=0 errno=0
[  385.156994][ T8806] loop4: detected capacity change from 0 to 16
[  385.210821][ T8806] erofs (device loop4): mounted with root inode @ nid 36.
[  385.369677][ T8808] affs: No valid root block on device nullb0
[  390.757200][ T8836] overlayfs: failed to resolve './file1': -2
[  391.958721][ T8846] loop1: detected capacity change from 0 to 16
[  392.018254][ T8846] erofs (device loop1): mounted with root inode @ nid 36.
[  392.534382][ T8851] affs: No valid root block on device nullb0
[  394.101897][   T29] audit: type=1800 audit(1736434693.837:8): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.794" name="/" dev="9p" ino=2 res=0 errno=0
[  396.098798][ T8857] loop5: detected capacity change from 0 to 32768
[  396.827522][ T8857] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop5": -EINTR
[  397.229995][ T8889] overlayfs: failed to resolve './file1': -2
[  397.534591][ T8895] loop4: detected capacity change from 0 to 16
[  397.554137][ T8895] erofs (device loop4): mounted with root inode @ nid 36.
[  398.074818][ T8901] affs: No valid root block on device nullb0
[  402.454500][ T8941] loop0: detected capacity change from 0 to 16
[  402.605056][ T8941] erofs (device loop0): mounted with root inode @ nid 36.
[  403.033612][ T8946] affs: No valid root block on device nullb0
[  403.748082][ T8933] loop4: detected capacity change from 0 to 32768
[  404.830322][ T8933] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  404.979165][ T8933] XFS (loop4): Ending clean mount
[  406.788240][ T5834] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  409.082584][ T8994] loop4: detected capacity change from 0 to 16
[  409.142070][ T8994] erofs (device loop4): mounted with root inode @ nid 36.
[  409.310507][ T9000] affs: No valid root block on device nullb0
[  414.962113][ T9040] loop0: detected capacity change from 0 to 16
[  415.074964][ T9042] affs: No valid root block on device nullb0
[  415.386376][ T9040] erofs (device loop0): mounted with root inode @ nid 36.
[  419.722566][ T9077] loop1: detected capacity change from 0 to 32768
[  419.947478][ T9083] affs: No valid root block on device nullb0
[  421.496334][ T9088] loop3: detected capacity change from 0 to 16
[  421.539135][ T9088] erofs (device loop3): mounted with root inode @ nid 36.
[  421.575751][ T9077] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  422.130816][ T9077] XFS (loop1): Ending clean mount
[  424.195077][ T5826] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  426.213617][ T9128] affs: No valid root block on device nullb0
[  428.446476][ T9144] loop3: detected capacity change from 0 to 16
[  428.499262][ T9144] erofs (device loop3): mounted with root inode @ nid 36.
[  432.115712][ T9176] affs: No valid root block on device nullb0
[  434.479242][ T9186] loop0: detected capacity change from 0 to 16
[  434.568322][ T9186] erofs (device loop0): mounted with root inode @ nid 36.
[  439.108274][ T9229] affs: No valid root block on device nullb0
[  440.366370][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  440.384721][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  442.943912][ T9254] kvm: kvm [9253]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x80
[  443.007110][ T9254] kvm: kvm [9253]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x0
[  443.545997][ T9269] affs: No valid root block on device nullb0
[  444.627832][ T9275] loop4: detected capacity change from 0 to 16
[  444.646290][ T9275] erofs (device loop4): mounted with root inode @ nid 36.
[  449.067768][ T9311] affs: No valid root block on device nullb0
[  450.199707][ T9319] loop3: detected capacity change from 0 to 16
[  450.243696][ T9319] erofs (device loop3): mounted with root inode @ nid 36.
[  450.700677][ T9321] kvm: kvm [9320]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x80
[  450.783697][ T9321] kvm: kvm [9320]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x0
[  454.418372][ T9354] affs: No valid root block on device nullb0
[  454.517513][ T9360] loop5: detected capacity change from 0 to 16
[  454.533308][ T9360] erofs (device loop5): mounted with root inode @ nid 36.
[  455.189488][ T9364] overlayfs: missing 'lowerdir'
[  456.032069][ T9368] veth1_to_bridge: mtu greater than device maximum
[  457.242118][ T9379] kvm: kvm [9369]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x80
[  459.933580][ T9403] affs: No valid root block on device nullb0
[  459.945102][ T9405] loop3: detected capacity change from 0 to 16
[  459.975157][ T9405] erofs (device loop3): mounted with root inode @ nid 36.
[  462.716322][ T9424] overlayfs: missing 'lowerdir'
[  464.695413][ T9450] netlink: 'syz.1.979': attribute type 4 has an invalid length.
[  464.837037][ T9454] loop5: detected capacity change from 0 to 16
[  464.880684][ T9454] erofs (device loop5): mounted with root inode @ nid 36.
[  465.180939][ T9458] affs: No valid root block on device nullb0
[  467.309144][ T9482] overlayfs: missing 'lowerdir'
[  468.967267][ T9499] loop5: detected capacity change from 0 to 16
[  469.057797][ T9499] erofs (device loop5): mounted with root inode @ nid 36.
[  470.657321][ T9508] affs: No valid root block on device nullb0
[  471.405428][ T9504] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  472.519166][ T9526] syz_tun: entered promiscuous mode
[  472.544056][ T9529] overlayfs: missing 'lowerdir'
[  472.560056][ T9526] veth0_to_bond: entered promiscuous mode
[  473.282433][ T9525] veth0_to_bond: left promiscuous mode
[  473.332650][ T9525] syz_tun: left promiscuous mode
[  475.569637][ T9543] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  476.056202][ T9549] loop0: detected capacity change from 0 to 16
[  476.076332][ T9549] erofs (device loop0): mounted with root inode @ nid 36.
[  477.947383][ T9557] affs: No valid root block on device nullb0
[  479.569416][ T9572] overlayfs: missing 'lowerdir'
[  484.017224][ T9604] xt_ecn: cannot match TCP bits for non-tcp packets
[  485.230563][ T9609] affs: No valid root block on device nullb0
[  486.537498][ T9624] loop5: detected capacity change from 0 to 16
[  486.630235][ T9624] erofs (device loop5): mounted with root inode @ nid 36.
[  487.174448][ T9625] overlayfs: missing 'lowerdir'
[  491.750507][ T9657] affs: No valid root block on device nullb0
[  492.675095][ T9672] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  492.684109][ T9672] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  493.453095][ T9675] loop5: detected capacity change from 0 to 16
[  493.461174][ T9675] erofs (device loop5): mounted with root inode @ nid 36.
[  497.821183][ T9712] affs: No valid root block on device nullb0
[  499.479037][ T9724] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  499.488227][ T9724] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  500.888383][ T9733] loop5: detected capacity change from 0 to 16
[  502.475120][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  502.481489][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  502.649492][ T9733] erofs (device loop5): mounted with root inode @ nid 36.
[  504.641570][ T9756] syz_tun: entered promiscuous mode
[  504.674226][ T9756] veth0_to_bond: entered promiscuous mode
[  504.696245][ T9755] veth0_to_bond: left promiscuous mode
[  504.702047][ T9755] syz_tun: left promiscuous mode
[  504.847448][ T9761] xt_ecn: cannot match TCP bits for non-tcp packets
[  506.916441][ T9781] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  506.925823][ T9781] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  508.500337][ T9786] loop4: detected capacity change from 0 to 16
[  508.735058][ T9786] erofs (device loop4): mounted with root inode @ nid 36.
[  508.897568][ T9789] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1076'.
[  513.521511][ T9823] xt_ecn: cannot match TCP bits for non-tcp packets
[  516.700809][ T9836] hub 5-0:1.0: USB hub found
[  516.707855][ T9836] hub 5-0:1.0: 1 port detected
[  523.778479][ T9888] hub 5-0:1.0: USB hub found
[  523.784943][ T9888] hub 5-0:1.0: 1 port detected
[  526.447554][ T9912] loop4: detected capacity change from 0 to 16
[  526.465715][ T9912] erofs (device loop4): mounted with root inode @ nid 36.
[  534.313896][ T9963] QAT: Device 7 not found
[  540.603852][T10006] configfs: Unknown parameter '�Zz-#F�<��]%gC��
[  540.603852][T10006] S�Ș�ȞZ�6��'
[  542.951612][T10036] hub 5-0:1.0: USB hub found
[  542.964874][T10036] hub 5-0:1.0: 1 port detected
[  543.491755][T10039] tipc: Started in network mode
[  543.497217][T10039] tipc: Node identity 7f000001, cluster identity 4711
[  543.504796][T10039] tipc: Enabled bearer <udp:syz2>, priority 10
[  543.514285][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'.
[  543.524364][T10039] tipc: Enabled bearer <eth:team0>, priority 0
[  544.664773][ T5919] tipc: Node number set to 2130706433
[  545.341555][T10055] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1147'.
[  545.351100][T10055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1147'.
[  549.976897][T10089] netlink: 'syz.0.1156': attribute type 10 has an invalid length.
[  550.362379][T10089] team0: Port device netdevsim0 added
[  550.676973][T10089] syz.0.1156 (10089) used greatest stack depth: 18384 bytes left
[  553.397436][T10116] sctp: [Deprecated]: syz.0.1164 (pid 10116) Use of struct sctp_assoc_value in delayed_ack socket option.
[  553.397436][T10116] Use struct sctp_sack_info instead
[  557.456317][T10154] loop5: detected capacity change from 0 to 16
[  557.505133][T10154] erofs (device loop5): mounted with root inode @ nid 36.
[  559.214799][   T46] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  559.943351][   T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  559.956894][   T46] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  559.967383][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.976040][   T46] usb 5-1: Product: syz
[  560.204886][   T46] usb 5-1: Manufacturer: syz
[  560.210350][   T46] usb 5-1: SerialNumber: syz
[  560.217423][   T46] usb 5-1: config 0 descriptor??
[  560.806745][   T46] usb 5-1: probing VID:PID(0424:012C)   
[  560.815419][   T46] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs
[  561.926994][   T46] vub300 5-1:0.0: probe with driver vub300 failed with error -22
[  561.944876][   T46] usb 5-1: USB disconnect, device number 7
[  562.322506][T10194] Bluetooth: MGMT ver 1.23
[  562.550832][T10194] Bluetooth: hci0: service_discovery: too big uuid_count value 65535
[  563.636175][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  563.642536][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  563.840963][T10205] loop5: detected capacity change from 0 to 16
[  563.853110][T10205] erofs (device loop5): mounted with root inode @ nid 36.
[  565.255457][   T46] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  566.026965][T10219] loop5: detected capacity change from 0 to 16
[  566.077138][T10220] netlink: 'syz.1.1194': attribute type 10 has an invalid length.
[  566.121454][T10219] erofs (device loop5): mounted with root inode @ nid 36.
[  566.203719][T10220] team0: Port device netdevsim0 added
[  575.528567][T10280] Bluetooth: hci0: service_discovery: too big uuid_count value 65535
[  575.762288][T10283] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  577.694864][T10294] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1215'.
[  579.074234][T10300] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  579.195297][T10300] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  580.138151][T10303] loop0: detected capacity change from 0 to 16
[  580.190644][T10303] erofs (device loop0): mounted with root inode @ nid 36.
[  587.206493][T10349] loop1: detected capacity change from 0 to 16
[  587.218205][T10349] erofs (device loop1): mounted with root inode @ nid 36.
[  591.691960][T10393] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1242'.
[  592.865337][ T5913] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  593.872629][ T5913] usb 1-1: Using ep0 maxpacket: 16
[  593.889463][ T5913] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  593.900116][ T5913] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  593.913777][ T5913] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  593.923203][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.931449][ T5913] usb 1-1: Product: syz
[  593.935851][ T5913] usb 1-1: Manufacturer: syz
[  593.940493][ T5913] usb 1-1: SerialNumber: syz
[  594.555288][ T5913] usb 1-1: 0:2 : does not exist
[  595.412884][T10425] siw: device registration error -23
[  595.463826][ T5913] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  595.502938][ T5913] usb 1-1: USB disconnect, device number 7
[  595.879289][ T6093] udevd[6093]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  600.241806][T10474] afs: Bad value for 'source'
[  613.278391][T10596] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  613.286056][T10596] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  613.387047][T10596] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  613.393951][T10596] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  613.421251][T10596] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  613.427401][T10596] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  613.892403][T10596] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  613.898689][T10596] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  613.910428][T10596] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  613.916744][T10596] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  615.417068][ T5831] Bluetooth: hci0: command 0x0406 tx timeout
[  615.436708][ T5831] Bluetooth: hci3: command 0x0406 tx timeout
[  615.443641][ T5831] Bluetooth: hci2: command 0x0406 tx timeout
[  615.904989][ T5835] Bluetooth: hci4: command 0x0406 tx timeout
[  616.052474][ T5835] Bluetooth: hci5: command 0x0405 tx timeout
[  616.059279][T10555] IPVS: starting estimator thread 0...
[  616.181682][T10628] IPVS: using max 18 ests per chain, 43200 per kthread
[  616.455288][T10626] xt_CT: No such helper "pptp"
[  617.430846][ T5835] Bluetooth: hci0: command 0x0406 tx timeout
[  617.475452][T10634] trusted_key: syz.3.1313 sent an empty control message without MSG_MORE.
[  617.692143][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  617.698658][ T5835] Bluetooth: hci3: command 0x0406 tx timeout
[  617.984639][T10646] Bluetooth: hci4: command 0x0406 tx timeout
[  618.068521][T10646] Bluetooth: hci5: command 0x0405 tx timeout
[  619.444612][T10663] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1322'.
[  620.324839][T10672] exfat: Unknown parameter 'smackfstransmute'
[  625.486155][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  625.492558][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  626.941733][T10724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1338'.
[  629.732998][T10739] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  629.761836][T10739] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  632.474798][T10749] xt_CT: No such helper "pptp"
[  634.365502][T10763] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1351'.
[  635.375033][T10780] fuse: Bad value for 'fd'
[  635.389882][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  635.401858][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  635.411558][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  635.420043][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  635.428609][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  635.436478][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  635.562860][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  635.621066][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  635.862357][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  635.872173][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  635.880298][ T5831] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  635.887772][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  637.585127][ T5831] Bluetooth: hci1: command tx timeout
[  637.780041][T10777] chnl_net:caif_netlink_parms(): no params data found
[  638.305356][ T5831] Bluetooth: hci6: command tx timeout
[  638.834729][T10555] IPVS: starting estimator thread 0...
[  638.914899][T10809] xt_CT: No such helper "pptp"
[  638.944909][T10811] IPVS: using max 28 ests per chain, 67200 per kthread
[  639.457088][T10785] chnl_net:caif_netlink_parms(): no params data found
[  639.487148][T10777] bridge0: port 1(bridge_slave_0) entered blocking state
[  639.494295][T10777] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.558180][T10777] bridge_slave_0: entered allmulticast mode
[  639.576072][T10777] bridge_slave_0: entered promiscuous mode
[  639.676178][ T5831] Bluetooth: hci1: command tx timeout
[  640.143005][T10777] bridge0: port 2(bridge_slave_1) entered blocking state
[  640.179878][T10777] bridge0: port 2(bridge_slave_1) entered disabled state
[  640.190373][T10777] bridge_slave_1: entered allmulticast mode
[  640.206291][T10777] bridge_slave_1: entered promiscuous mode
[  640.386635][ T5831] Bluetooth: hci6: command tx timeout
[  641.765100][ T5831] Bluetooth: hci1: command tx timeout
[  642.328212][T10777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  642.340293][T10777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  642.464955][ T5831] Bluetooth: hci6: command tx timeout
[  642.741038][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.003277][T10852] netlink: 'syz.0.1373': attribute type 1 has an invalid length.
[  643.044944][T10852] netlink: 'syz.0.1373': attribute type 2 has an invalid length.
[  643.057691][T10854] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1374'.
[  643.099928][T10777] team0: Port device team_slave_0 added
[  643.166028][T10777] team0: Port device team_slave_1 added
[  643.377330][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.459081][T10785] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.466515][T10646] Bluetooth: hci0: ISO packet for unknown connection handle 0
[  643.514992][T10785] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.538241][T10785] bridge_slave_0: entered allmulticast mode
[  643.571655][T10785] bridge_slave_0: entered promiscuous mode
[  643.620206][T10785] bridge0: port 2(bridge_slave_1) entered blocking state
[  643.690184][T10785] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.724759][T10785] bridge_slave_1: entered allmulticast mode
[  643.766659][T10785] bridge_slave_1: entered promiscuous mode
[  643.825033][T10646] Bluetooth: hci1: command tx timeout
[  644.259988][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.496269][T10777] batman_adv: batadv0: Adding interface: batadv_slave_0
[  644.518836][T10777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  644.554997][T10646] Bluetooth: hci6: command tx timeout
[  644.588063][T10777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  644.836733][T10785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  644.900433][T10785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  645.077449][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.185309][T10777] batman_adv: batadv0: Adding interface: batadv_slave_1
[  645.227511][T10777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  645.269052][T10777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  645.350355][T10785] team0: Port device team_slave_0 added
[  645.970530][T10785] team0: Port device team_slave_1 added
[  646.974712][T10880] binder: 10877:10880 ioctl 4b71 0 returned -22
[  647.750353][T10882] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1384'.
[  647.816860][T10785] batman_adv: batadv0: Adding interface: batadv_slave_0
[  647.866656][T10785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  647.893121][T10785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  647.911219][T10886] =======================================================
[  647.911219][T10886] WARNING: The mand mount option has been deprecated and
[  647.911219][T10886]          and is ignored by this kernel. Remove the mand
[  647.911219][T10886]          option from the mount to silence this warning.
[  647.911219][T10886] =======================================================
[  648.113238][T10785] batman_adv: batadv0: Adding interface: batadv_slave_1
[  648.120791][T10785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  648.183437][T10785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  648.217080][T10777] hsr_slave_0: entered promiscuous mode
[  648.240033][T10777] hsr_slave_1: entered promiscuous mode
[  649.246613][T10777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  649.254616][T10777] Cannot create hsr debugfs directory
[  649.745503][   T12] bridge_slave_1: left allmulticast mode
[  649.775514][   T12] bridge_slave_1: left promiscuous mode
[  649.933109][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.132752][   T12] bridge_slave_0: left allmulticast mode
[  650.234610][   T12] bridge_slave_0: left promiscuous mode
[  650.245206][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.881817][T10918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1395'.
[  652.589974][T10922] binder: 10919:10922 ioctl 4b71 0 returned -22
[  653.296640][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  653.320956][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  653.346972][   T12] bond0 (unregistering): Released all slaves
[  653.529070][T10785] hsr_slave_0: entered promiscuous mode
[  653.549444][T10785] hsr_slave_1: entered promiscuous mode
[  653.584007][T10785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  653.622717][T10785] Cannot create hsr debugfs directory
[  656.491177][T10945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1404'.
[  657.239953][   T12] hsr_slave_0: left promiscuous mode
[  657.266506][   T12] hsr_slave_1: left promiscuous mode
[  657.342883][T10972] binder: 10959:10972 ioctl 4b71 0 returned -22
[  657.645872][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  658.344741][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  658.515548][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  658.571882][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  658.674042][   T12] veth1_macvtap: left promiscuous mode
[  658.891649][   T12] veth0_macvtap: left promiscuous mode
[  659.065416][   T12] veth1_vlan: left promiscuous mode
[  659.125026][   T12] veth0_vlan: left promiscuous mode
[  660.687560][T10998] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1415'.
[  662.400533][   T12] team0 (unregistering): Port device team_slave_1 removed
[  663.135750][   T12] team0 (unregistering): Port device team_slave_0 removed
[  663.997484][T11026] VFS: could not find a valid V7 on nullb0.
[  664.770540][T11030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1426'.
[  665.097617][T11003] smc: net device bond0 applied user defined pnetid SYZ2
[  665.106966][T11026] lo speed is unknown, defaulting to 1000
[  665.128665][T11026] lo speed is unknown, defaulting to 1000
[  665.185260][T11026] lo speed is unknown, defaulting to 1000
[  665.209039][T11026] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  665.216479][T10777] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  665.314386][T10777] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  665.351039][T10777] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  665.949074][T10777] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  665.983194][T11026] lo speed is unknown, defaulting to 1000
[  666.088514][T11026] lo speed is unknown, defaulting to 1000
[  666.223649][T11026] lo speed is unknown, defaulting to 1000
[  666.338054][T11026] lo speed is unknown, defaulting to 1000
[  666.429427][T11026] lo speed is unknown, defaulting to 1000
[  666.570249][T11026] lo speed is unknown, defaulting to 1000
[  667.654552][T11050] fuse: Bad value for 'fd'
[  667.784727][T11026] lo speed is unknown, defaulting to 1000
[  667.955129][T10777] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.983244][   T12] IPVS: stop unused estimator thread 0...
[  668.004687][ T5880] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  668.213223][T10777] 8021q: adding VLAN 0 to HW filter on device team0
[  668.647712][T10785] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  668.672694][T10785] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  668.716844][T10785] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  668.744479][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  668.778086][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.784994][T11069] fuse: Bad value for 'fd'
[  668.785261][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.799876][ T5880] usb 4-1: New USB device found, idVendor=0404, idProduct=2801, bcdDevice= 0.00
[  668.816697][T10785] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  668.831935][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.885219][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.892359][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  668.924419][ T5880] usb 4-1: config 0 descriptor??
[  668.997804][ T5880] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  669.148250][T11076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1435'.
[  669.603276][ T5880] usb 4-1: USB disconnect, device number 5
[  669.934095][T10785] 8021q: adding VLAN 0 to HW filter on device bond0
[  669.991628][T10785] 8021q: adding VLAN 0 to HW filter on device team0
[  670.071182][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.078389][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  670.787634][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.794944][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state
[  671.064603][T10777] 8021q: adding VLAN 0 to HW filter on device batadv0
[  671.701663][T10785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  672.701648][T10777] veth0_vlan: entered promiscuous mode
[  672.768663][T11127] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  672.786041][T10777] veth1_vlan: entered promiscuous mode
[  672.812120][T10777] veth0_macvtap: entered promiscuous mode
[  672.821778][T10777] veth1_macvtap: entered promiscuous mode
[  673.004825][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  673.102329][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.273290][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  673.405353][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.519536][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  673.530963][T11136] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1445'.
[  673.543357][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.555275][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  673.570932][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.606570][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  673.620021][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.636740][T10777] batman_adv: batadv0: Interface activated: batadv_slave_0
[  674.044153][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  674.085835][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  674.124702][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  674.138818][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  674.150269][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  674.161065][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  674.171291][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  674.182218][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  674.192209][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  674.202816][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  674.214123][T10777] batman_adv: batadv0: Interface activated: batadv_slave_1
[  674.328205][T10777] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  674.337106][T10777] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  674.346831][T10777] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  674.356167][T10777] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  675.052574][T10785] veth0_vlan: entered promiscuous mode
[  675.150867][T10785] veth1_vlan: entered promiscuous mode
[  675.256452][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  675.284534][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  676.444438][T10785] veth0_macvtap: entered promiscuous mode
[  676.843533][ T5897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  676.865068][ T5897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  676.922048][T10785] veth1_macvtap: entered promiscuous mode
[  678.287887][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.344651][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.389226][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.432898][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.451306][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.482911][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.510015][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.548366][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.583893][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.614379][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.634761][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.662107][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.702501][T10785] batman_adv: batadv0: Interface activated: batadv_slave_0
[  678.817780][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.962381][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.089898][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.101115][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.111876][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.122481][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.132758][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.143713][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.154037][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.779735][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.974694][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  680.034871][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  680.114839][T10785] batman_adv: batadv0: Interface activated: batadv_slave_1
[  680.176012][T10785] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  680.333085][T10785] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  680.388943][T10785] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  680.554651][T10785] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  681.762000][ T8914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  681.808135][ T8914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  681.913480][ T8914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  682.031098][T11232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1466'.
[  682.048520][ T8914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.176117][ T5880] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  682.871588][ T5880] usb 7-1: Using ep0 maxpacket: 8
[  683.045446][ T5880] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  683.056899][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  683.069323][ T5880] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  683.069376][ T5880] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  683.069402][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.129459][ T5880] usb 7-1: config 0 descriptor??
[  683.647890][ T5882] usb 7-1: USB disconnect, device number 2
[  684.569382][ T5883] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  684.874903][ T5883] usb 1-1: Using ep0 maxpacket: 8
[  684.894599][ T5883] usb 1-1: config 0 has an invalid interface number: 141 but max is 0
[  684.926436][ T5883] usb 1-1: config 0 has no interface number 0
[  685.001173][ T5883] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=ee.8a
[  685.014175][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.022769][ T5883] usb 1-1: Product: syz
[  685.027094][ T5883] usb 1-1: Manufacturer: syz
[  685.031811][ T5883] usb 1-1: SerialNumber: syz
[  685.046918][ T5883] usb 1-1: config 0 descriptor??
[  685.060944][T11276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'.
[  685.063539][ T5883] gspca_main: sq905-2.14.0 probing 2770:9120
[  685.294214][T11280] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1479'.
[  685.991215][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  685.998466][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  686.752914][ T5883] gspca_sq905: bulk read fail (-22) len 0/4
[  686.759107][ T5883] sq905 1-1:0.141: probe with driver sq905 failed with error -5
[  686.968711][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.001072][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.036459][   T46] usb 1-1: USB disconnect, device number 8
[  693.965010][T10555] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  695.173804][T10555] usb 8-1: device not accepting address 2, error -71
[  696.983787][T11384] netlink: 'syz.0.1500': attribute type 1 has an invalid length.
[  697.038102][T11378] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  697.044966][T11378] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  697.051522][T11378] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  697.057829][T11378] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  697.063824][T11378] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  697.086077][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'.
[  697.182387][T11378] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  697.192866][T11378] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  697.199941][T11378] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  697.209195][T11378] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  697.350418][T11391] 8021q: adding VLAN 0 to HW filter on device batadv1
[  697.448933][T11391] bond1: (slave batadv1): Enslaving as a backup interface with an up link
[  699.505154][ T5831] Bluetooth: hci0: command 0x0406 tx timeout
[  699.511285][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout
[  699.518196][ T5831] Bluetooth: hci4: command 0x0406 tx timeout
[  699.524246][ T5831] Bluetooth: hci3: command 0x0406 tx timeout
[  699.530751][ T5831] Bluetooth: hci6: command 0x0c1a tx timeout
[  699.651789][T11384] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  699.856605][T11384] bond1 (unregistering): Released all slaves
[  701.859932][ T5835] Bluetooth: hci6: command 0x0c1a tx timeout
[  701.866185][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[  701.936216][ T5835] Bluetooth: unknown link type 115
[  701.941452][ T5835] Bluetooth: hci6: connection err: -111
[  703.915637][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout
[  703.922568][ T5835] Bluetooth: hci6: command 0x0c1a tx timeout
[  704.011054][T11448] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  704.590884][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1514'.
[  705.724807][ T5883] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  706.545893][ T5883] usb 4-1: Using ep0 maxpacket: 8
[  706.565372][ T5883] usb 4-1: config 0 has an invalid interface number: 141 but max is 0
[  707.205674][ T5883] usb 4-1: config 0 has no interface number 0
[  707.232075][ T5883] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=ee.8a
[  707.242008][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.250110][ T5883] usb 4-1: Product: syz
[  707.254501][ T5883] usb 4-1: Manufacturer: syz
[  707.259131][ T5883] usb 4-1: SerialNumber: syz
[  708.139243][ T5883] usb 4-1: config 0 descriptor??
[  708.164154][ T5883] usb 4-1: can't set config #0, error -71
[  708.261148][ T5883] usb 4-1: USB disconnect, device number 6
[  709.727959][T10555] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  711.186401][T10555] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  711.195297][T10555] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  711.205694][T10555] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  711.235136][T10555] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  711.264782][T10555] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  711.457438][T10555] usb 7-1: string descriptor 0 read error: -71
[  711.605138][T10555] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  711.972992][T10555] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  712.282835][T10555] usb 7-1: can't set config #1, error -71
[  712.290199][T10555] usb 7-1: USB disconnect, device number 3
[  717.080125][T11550] kexec: Could not allocate control_code_buffer
[  718.645876][T11581] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  723.540256][T11620] syz.6.1551 (11620): drop_caches: 2
[  726.527125][T11649] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  729.650236][T11682] : entered promiscuous mode
[  732.081329][T11702] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  740.022589][T11768] kexec: Could not allocate control_code_buffer
[  741.355507][T11801] overlayfs: failed to resolve './file1': -2
[  745.386392][T11847] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1608'.
[  747.475308][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  747.481720][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  747.837733][T11826] kexec: Could not allocate control_code_buffer
[  751.113347][T11921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1623'.
[  753.980128][T11951] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  754.222706][T11932] kexec: Could not allocate control_code_buffer
[  754.454862][T11823] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  754.632725][T11823] usb 7-1: config 0 has an invalid interface number: 133 but max is 0
[  754.667219][T11823] usb 7-1: config 0 has no interface number 0
[  754.720416][T11823] usb 7-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  754.893837][T11823] usb 7-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 528, setting to 64
[  755.010846][T11823] usb 7-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8
[  755.055797][T11823] usb 7-1: config 0 interface 133 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  755.099299][T11823] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  755.119071][T11823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.156459][T11823] usb 7-1: Product: syz
[  755.174592][T11823] usb 7-1: Manufacturer: syz
[  755.179260][T11823] usb 7-1: SerialNumber: syz
[  755.222144][T11823] usb 7-1: config 0 descriptor??
[  755.547208][T11956] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  756.418869][T11956] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  756.718564][T11823] usb 7-1: probing VID:PID(0424:012C)   
[  756.765480][T11823] usb 7-1: vub300 testing BULK OUT EndPoint(0) 0B
[  756.794519][T11823] usb 7-1: vub300 testing BULK OUT EndPoint(1) 0F
[  756.841601][T11823] usb 7-1: vub300 testing BULK OUT EndPoint(2) 08
[  756.864669][T11823] usb 7-1: ignoring unexpected bulk_out endpoint
[  756.871136][T11823] usb 7-1: Could not find two sets of bulk-in/out endpoint pairs
[  757.074679][ T5837] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  757.102383][T11823] vub300 7-1:0.133: probe with driver vub300 failed with error -22
[  757.133896][T11823] usb 7-1: USB disconnect, device number 4
[  757.244656][ T5837] usb 2-1: Using ep0 maxpacket: 16
[  757.251919][ T5837] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  757.284122][ T5837] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  757.306131][ T5837] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  757.332727][ T5837] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  757.343079][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.372098][ T5837] usb 2-1: Product: syz
[  757.391253][T12002] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1640'.
[  757.401066][ T5837] usb 2-1: Manufacturer: syz
[  757.412009][ T5837] usb 2-1: SerialNumber: syz
[  758.496222][ T5837] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[  758.506187][T12020] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  758.602418][T12021] QAT: Device 7 not found
[  760.388027][ T5837] usb 2-1: current rate 9338516 is different from the runtime rate 9338507
[  760.815515][ T5837] usb 2-1: USB disconnect, device number 4
[  762.505344][T12055] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1654'.
[  765.444997][T12093] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  768.473661][T12100] kexec: Could not allocate control_code_buffer
[  768.623784][T12121] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1669'.
[  770.671820][T12137] pim6reg0: tun_chr_ioctl cmd 1074025681
[  770.749429][T12139] netlink: 'syz.6.1674': attribute type 1 has an invalid length.
[  770.757789][T12139] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1674'.
[  771.647522][T12150] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  773.959527][T12159] QAT: Device 7 not found
[  775.178089][T12168] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1683'.
[  775.684264][T12163] kexec: Could not allocate control_code_buffer
[  780.183396][T12200] gfs2: not a GFS2 filesystem
[  781.038563][T12219] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1698'.
[  782.013067][T12227] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  784.131617][T12224] kexec: Could not allocate control_code_buffer
[  784.742562][T12244] binfmt_misc: register: failed to install interpreter file ./file0
[  784.890281][T12246] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  785.274619][  T974] IPVS: starting estimator thread 0...
[  785.712988][T12249] IPVS: using max 29 ests per chain, 69600 per kthread
[  786.741532][T12265] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1712'.
[  787.740802][T12277] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  790.372723][T12284] kexec: Could not allocate control_code_buffer
[  790.447066][T12309] netlink: 'syz.6.1727': attribute type 3 has an invalid length.
[  790.455141][T12309] netlink: 'syz.6.1727': attribute type 1 has an invalid length.
[  790.462976][T12309] netlink: 216 bytes leftover after parsing attributes in process `syz.6.1727'.
[  790.472383][T12309] NCSI netlink: No device for ifindex 33022
[  791.828567][T12324] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1730'.
[  794.136300][T12345] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  796.253531][T12350] kexec: Could not allocate control_code_buffer
[  798.654583][T12391] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1748'.
[  802.853590][T12411] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  804.471031][T12413] kexec: Could not allocate control_code_buffer
[  804.626351][ T5914] kernel write not supported for file /1228/attr/keycreate (pid: 5914 comm: kworker/1:5)
[  804.937206][T12439] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1763'.
[  804.948348][T12439] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1763'.
[  806.756241][T12452] overlayfs: failed to resolve './file0': -2
[  808.443011][T12461] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  809.772214][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  809.919419][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  810.817112][T12467] kexec: Could not allocate control_code_buffer
[  811.611560][T12490] netlink: 'syz.3.1777': attribute type 3 has an invalid length.
[  811.619565][T12490] netlink: 'syz.3.1777': attribute type 1 has an invalid length.
[  811.627503][T12490] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1777'.
[  811.636710][T12490] NCSI netlink: No device for ifindex 33022
[  814.390094][T12502] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1780'.
[  814.399183][T12502] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1780'.
[  817.194600][ T5913] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  817.291644][T12540] sock: sock_timestamping_bind_phc: sock not bind to device
[  817.835465][ T5913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  817.853944][ T5913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  817.863845][ T5913] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  817.876971][ T5913] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  817.886103][ T5913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.296719][ T5913] usb 8-1: config 0 descriptor??
[  821.365973][ T5913] usbhid 8-1:0.0: can't add hid device: -71
[  821.372039][ T5913] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  821.451759][ T5913] usb 8-1: USB disconnect, device number 4
[  821.517255][T12531] kexec: Could not allocate control_code_buffer
[  821.642199][T12562] netlink: 'syz.1.1794': attribute type 3 has an invalid length.
[  821.650346][T12562] netlink: 'syz.1.1794': attribute type 1 has an invalid length.
[  821.658248][T12562] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1794'.
[  821.667645][T12562] NCSI netlink: No device for ifindex 33022
[  824.562420][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1803'.
[  829.750686][T12628] syz.6.1814: attempt to access beyond end of device
[  829.750686][T12628] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0
[  829.785059][T12628] MINIX-fs: unable to read superblock
[  831.315286][T12616] kexec: Could not allocate control_code_buffer
[  832.676115][T12655] fuse: Bad value for 'fd'
[  836.538611][T12688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1832'.
[  836.845546][T12680] kexec: Could not allocate control_code_buffer
[  837.016411][T12691] block device autoloading is deprecated and will be removed.
[  837.038983][T12691] syz.1.1832: attempt to access beyond end of device
[  837.038983][T12691] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  839.709796][T12716] fuse: Bad value for 'fd'
[  844.578505][T12749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1849'.
[  844.969883][T12757] syz.0.1849: attempt to access beyond end of device
[  844.969883][T12757] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  845.177723][T12744] kexec: Could not allocate control_code_buffer
[  847.945204][T12785] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1523369646 (3046739292 ns) > initial count (174981010 ns). Using initial count to start timer.
[  848.018455][T12787] fuse: Bad value for 'fd'
[  850.947067][T12802] kexec: Could not allocate control_code_buffer
[  854.205831][T12824] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1873'.
[  854.630021][T12831] syz.7.1873: attempt to access beyond end of device
[  854.630021][T12831] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  856.788410][  T974] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  856.808589][T12851] warning: `syz.3.1876' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  856.956408][  T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  856.967814][  T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  856.996440][  T974] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  857.022931][  T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.041085][  T974] usb 2-1: config 0 descriptor??
[  857.481266][  T974] hid (null): bogus close delimiter
[  858.120213][  T974] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71
[  858.480679][  T974] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71
[  858.503810][T12853] kexec: Could not allocate control_code_buffer
[  858.504761][  T974] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71
[  858.518387][  T974] uclogic 0003:256C:006D.0001: failed probing parameters: -71
[  858.525972][  T974] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71
[  858.556979][  T974] usb 2-1: USB disconnect, device number 5
[  862.191036][T12882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1893'.
[  862.532124][T12889] syz.3.1893: attempt to access beyond end of device
[  862.532124][T12889] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  866.886948][T12918] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  868.403165][T12913] kexec: Could not allocate control_code_buffer
[  868.730254][T12946] Cannot find add_set index 0 as target
[  870.307652][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  870.324097][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  872.845622][T12976] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  873.614595][ T5914] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  873.773712][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  873.794343][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  873.833200][ T5914] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  873.845949][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.882931][ T5914] usb 2-1: Product: syz
[  873.887686][ T5914] usb 2-1: Manufacturer: syz
[  873.892407][ T5914] usb 2-1: SerialNumber: syz
[  874.153578][ T5914] usb 2-1: 0:2 : does not exist
[  874.173099][ T5914] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  874.308520][ T5914] usb 2-1: USB disconnect, device number 6
[  874.390937][T12559] udevd[12559]: setting mode of /dev/bus/usb/002/006 to 020664 failed: No such file or directory
[  874.453678][T12559] udevd[12559]: setting owner of /dev/bus/usb/002/006 to uid=0, gid=0 failed: No such file or directory
[  874.551335][T12559] udevd[12559]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  878.999884][T12986] kexec: Could not allocate control_code_buffer
[  880.061146][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1933'.
[  883.189052][T13054] 
[  883.191431][T13054] ======================================================
[  883.198624][T13054] WARNING: possible circular locking dependency detected
[  883.205645][T13054] 6.13.0-rc6-next-20250107-syzkaller #0 Not tainted
[  883.212248][T13054] ------------------------------------------------------
[  883.219283][T13054] syz.1.1940/13054 is trying to acquire lock:
[  883.225361][T13054] ffff888031e4d488 (vm_lock){++++}-{0:0}, at: binder_alloc_free_page+0x150/0xd50
[  883.234966][T13054] 
[  883.234966][T13054] but task is already holding lock:
[  883.242340][T13054] ffff88802ff17830 (&l->lock){+.+.}-{3:3}, at: lock_list_lru_of_memcg+0x24c/0x4d0
[  883.251705][T13054] 
[  883.251705][T13054] which lock already depends on the new lock.
[  883.251705][T13054] 
[  883.262113][T13054] 
[  883.262113][T13054] the existing dependency chain (in reverse order) is:
[  883.271139][T13054] 
[  883.271139][T13054] -> #1 (&l->lock){+.+.}-{3:3}:
[  883.278193][T13054]        lock_acquire+0x1ed/0x550
[  883.283231][T13054]        _raw_spin_lock+0x2e/0x40
[  883.288278][T13054]        lock_list_lru_of_memcg+0x24c/0x4d0
[  883.294184][T13054]        list_lru_del+0x58/0x1f0
[  883.299122][T13054]        zswap_entry_free+0x1ff/0x440
[  883.304548][T13054]        zswap_load+0x364/0x4a0
[  883.309404][T13054]        swap_read_folio+0x9b4/0x2690
[  883.314787][T13054]        swap_cluster_readahead+0x630/0x710
[  883.320688][T13054]        swapin_readahead+0x1ba/0xd30
[  883.326067][T13054]        do_swap_page+0x5c4/0x5c40
[  883.331192][T13054]        __handle_mm_fault+0x13d7/0x70f0
[  883.336831][T13054]        handle_mm_fault+0x3e2/0x8c0
[  883.342121][T13054]        exc_page_fault+0x459/0x8b0
[  883.347321][T13054]        asm_exc_page_fault+0x26/0x30
[  883.352700][T13054] 
[  883.352700][T13054] -> #0 (vm_lock){++++}-{0:0}:
[  883.359671][T13054]        validate_chain+0x18ef/0x5920
[  883.365064][T13054]        __lock_acquire+0x1397/0x2100
[  883.370450][T13054]        lock_acquire+0x1ed/0x550
[  883.375492][T13054]        lock_vma_under_rcu+0x35f/0x9a0
[  883.381048][T13054]        binder_alloc_free_page+0x150/0xd50
[  883.386950][T13054]        __list_lru_walk_one+0x170/0x470
[  883.392588][T13054]        list_lru_walk_node+0xc4/0xa70
[  883.398049][T13054]        binder_shrink_scan+0x138/0x260
[  883.403601][T13054]        do_shrink_slab+0x72d/0x1160
[  883.408979][T13054]        shrink_slab+0x1093/0x14d0
[  883.414179][T13054]        drop_slab+0x142/0x280
[  883.418965][T13054]        drop_caches_sysctl_handler+0xbc/0x160
[  883.425254][T13054]        proc_sys_call_handler+0x5ec/0x920
[  883.431069][T13054]        do_iter_readv_writev+0x71a/0x9d0
[  883.436798][T13054]        vfs_writev+0x38b/0xbc0
[  883.441999][T13054]        do_writev+0x1b6/0x360
[  883.446761][T13054]        do_syscall_64+0xf3/0x230
[  883.452228][T13054]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.459086][T13054] 
[  883.459086][T13054] other info that might help us debug this:
[  883.459086][T13054] 
[  883.469320][T13054]  Possible unsafe locking scenario:
[  883.469320][T13054] 
[  883.476779][T13054]        CPU0                    CPU1
[  883.482142][T13054]        ----                    ----
[  883.487502][T13054]   lock(&l->lock);
[  883.491320][T13054]                                lock(vm_lock);
[  883.497565][T13054]                                lock(&l->lock);
[  883.503903][T13054]   rlock(vm_lock);
[  883.507719][T13054] 
[  883.507719][T13054]  *** DEADLOCK ***
[  883.507719][T13054] 
[  883.516033][T13054] 4 locks held by syz.1.1940/13054:
[  883.521226][T13054]  #0: ffff88807adb00f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x254/0x320
[  883.530298][T13054]  #1: ffff888027bf0420 (sb_writers#3){.+.+}-{0:0}, at: vfs_writev+0x2d6/0xbc0
[  883.539286][T13054]  #2: ffff88802ff17830 (&l->lock){+.+.}-{3:3}, at: lock_list_lru_of_memcg+0x24c/0x4d0
[  883.549059][T13054]  #3: ffffffff8e937ee0 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x1dd/0x9a0
[  883.558822][T13054] 
[  883.558822][T13054] stack backtrace:
[  883.564733][T13054] CPU: 0 UID: 0 PID: 13054 Comm: syz.1.1940 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  883.564761][T13054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  883.564773][T13054] Call Trace:
[  883.564779][T13054]  <TASK>
[  883.564787][T13054]  dump_stack_lvl+0x241/0x360
[  883.564809][T13054]  ? __pfx_dump_stack_lvl+0x10/0x10
[  883.564826][T13054]  ? __pfx__printk+0x10/0x10
[  883.564857][T13054]  print_circular_bug+0x13a/0x1b0
[  883.564875][T13054]  check_noncircular+0x36a/0x4a0
[  883.564905][T13054]  ? __pfx_check_noncircular+0x10/0x10
[  883.564933][T13054]  ? lockdep_lock+0x123/0x2b0
[  883.564957][T13054]  ? lockdep_unlock+0x16a/0x300
[  883.564978][T13054]  validate_chain+0x18ef/0x5920
[  883.565014][T13054]  ? __pfx_validate_chain+0x10/0x10
[  883.565043][T13054]  ? __pfx_validate_chain+0x10/0x10
[  883.565078][T13054]  ? __pfx_validate_chain+0x10/0x10
[  883.565105][T13054]  ? mark_lock+0x9a/0x360
[  883.565130][T13054]  __lock_acquire+0x1397/0x2100
[  883.565160][T13054]  lock_acquire+0x1ed/0x550
[  883.565181][T13054]  ? binder_alloc_free_page+0x150/0xd50
[  883.565208][T13054]  ? __pfx_lock_acquire+0x10/0x10
[  883.565237][T13054]  ? mas_walk+0x1f3/0x280
[  883.565263][T13054]  lock_vma_under_rcu+0x35f/0x9a0
[  883.565283][T13054]  ? binder_alloc_free_page+0x150/0xd50
[  883.565305][T13054]  ? lock_vma_under_rcu+0x1dd/0x9a0
[  883.565326][T13054]  ? binder_alloc_free_page+0x150/0xd50
[  883.565350][T13054]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  883.565374][T13054]  ? __pfx_validate_chain+0x10/0x10
[  883.565401][T13054]  ? lock_list_lru_of_memcg+0x2e/0x4d0
[  883.565430][T13054]  binder_alloc_free_page+0x150/0xd50
[  883.565457][T13054]  __list_lru_walk_one+0x170/0x470
[  883.565476][T13054]  ? __pfx_binder_alloc_free_page+0x10/0x10
[  883.565500][T13054]  ? __pfx_binder_alloc_free_page+0x10/0x10
[  883.565524][T13054]  list_lru_walk_node+0xc4/0xa70
[  883.565541][T13054]  ? mark_lock+0x9a/0x360
[  883.565567][T13054]  ? __pfx_binder_alloc_free_page+0x10/0x10
[  883.565590][T13054]  ? __pfx_list_lru_walk_node+0x10/0x10
[  883.565611][T13054]  binder_shrink_scan+0x138/0x260
[  883.565635][T13054]  ? __pfx_binder_shrink_scan+0x10/0x10
[  883.565662][T13054]  do_shrink_slab+0x72d/0x1160
[  883.565688][T13054]  ? shrink_slab+0x12b/0x14d0
[  883.565707][T13054]  shrink_slab+0x1093/0x14d0
[  883.565729][T13054]  ? shrink_slab+0x12b/0x14d0
[  883.565748][T13054]  ? __pfx_lock_release+0x10/0x10
[  883.565777][T13054]  ? __pfx_shrink_slab+0x10/0x10
[  883.565801][T13054]  ? mem_cgroup_iter+0x3d/0x420
[  883.565821][T13054]  drop_slab+0x142/0x280
[  883.565843][T13054]  drop_caches_sysctl_handler+0xbc/0x160
[  883.565869][T13054]  ? __pfx_drop_caches_sysctl_handler+0x10/0x10
[  883.565895][T13054]  proc_sys_call_handler+0x5ec/0x920
[  883.565919][T13054]  ? __pfx_proc_sys_call_handler+0x10/0x10
[  883.565943][T13054]  do_iter_readv_writev+0x71a/0x9d0
[  883.565971][T13054]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  883.565994][T13054]  ? rcu_read_lock_any_held+0xb7/0x160
[  883.566018][T13054]  vfs_writev+0x38b/0xbc0
[  883.566037][T13054]  ? trace_contention_end+0x3c/0x120
[  883.566053][T13054]  ? __mutex_lock+0x397/0x1010
[  883.566074][T13054]  ? __pfx_vfs_writev+0x10/0x10
[  883.566097][T13054]  ? __fget_files+0x2a/0x410
[  883.566115][T13054]  ? __fget_files+0x395/0x410
[  883.566131][T13054]  ? __fget_files+0x2a/0x410
[  883.566151][T13054]  do_writev+0x1b6/0x360
[  883.566170][T13054]  ? __pfx_do_writev+0x10/0x10
[  883.566187][T13054]  ? do_syscall_64+0x100/0x230
[  883.566207][T13054]  ? do_syscall_64+0xb6/0x230
[  883.566226][T13054]  do_syscall_64+0xf3/0x230
[  883.566245][T13054]  ? clear_bhb_loop+0x35/0x90
[  883.566272][T13054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.566300][T13054] RIP: 0033:0x7f103ff85d29
[  883.566319][T13054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  883.566334][T13054] RSP: 002b:00007f1040dc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  883.566352][T13054] RAX: ffffffffffffffda RBX: 00007f1040176080 RCX: 00007f103ff85d29
[  883.566365][T13054] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004
[  883.566375][T13054] RBP: 00007f1040001b08 R08: 0000000000000000 R09: 0000000000000000
[  883.566387][T13054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  883.566397][T13054] R13: 0000000000000000 R14: 00007f1040176080 R15: 00007ffdc9dd1898
[  883.566415][T13054]  </TASK>
[  884.543153][T13054] syz.1.1940 (13054): drop_caches: 2