last executing test programs:

1m53.182726895s ago: executing program 0 (id=386):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
prlimit64(0x0, 0x7, 0x0, 0x0)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)

1m53.038544115s ago: executing program 0 (id=387):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a00000001090212"], 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)

1m52.791800344s ago: executing program 3 (id=389):
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04f34020", @ANYRESDEC], 0x7)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
get_mempolicy(0x0, 0x0, 0x1000, &(0x7f0000ff9000/0x4000)=nil, 0x3)
r1 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

1m51.38791762s ago: executing program 2 (id=393):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0)
r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\rW\xef\x10\xd6d#\xf2\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8\x1f\xb2C\xf8\'?]\x16C\x166\xc0\xbcJT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8', 0x2)
pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000600)='\x00', 0x1}], 0x1, 0x7fffff, 0x8)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x2000081)

1m51.017499415s ago: executing program 3 (id=394):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f00000001c0)='\x18\xbd@\xbd\xc9e2\x0e\xb2\xe2OAq\xa7\xa8\xadcz::\x00', 0x0)

1m50.363461544s ago: executing program 4 (id=397):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x5, 0x0, &(0x7f0000000180))
sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x40)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r6 = msgget$private(0x0, 0x0)
msgrcv(r6, 0x0, 0x0, 0x1, 0x3000)

1m50.214679989s ago: executing program 0 (id=398):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0), 0x0)
pipe2$watch_queue(&(0x7f0000002240)={<r0=>0xffffffffffffffff}, 0x80)
pipe2$watch_queue(&(0x7f0000000240), 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xfffffffffffffd23, &(0x7f000001ff80)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100))
sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e0001ffffffff0000000000070000", @ANYRES32=0x0, @ANYBLOB="000002000a0002000000000000000000"], 0x28}}, 0x0)

1m49.659111249s ago: executing program 3 (id=399):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002400)=ANY=[], 0xc00}}, 0x804)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

1m49.473743011s ago: executing program 4 (id=402):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000140)}], 0x2}], 0x1, 0x40800)
r2 = semget$private(0x0, 0x5, 0x0)
semop(r2, &(0x7f0000000000)=[{0x3, 0xffe7, 0x1000}], 0x1)
semop(r2, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1)
semctl$IPC_RMID(r2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4)

1m49.280175023s ago: executing program 0 (id=403):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0)

1m49.275359147s ago: executing program 1 (id=404):
open(&(0x7f00000005c0)='./file0\x00', 0x2a4c0, 0x13)
r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127, 0x0, 0x1, {0x1}})
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x1, 0x12, 0xf, 0x75, 0x0})
io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x5, 0x5}, 0x1}, 0x1)

1m49.170309492s ago: executing program 4 (id=405):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002192ea0845050c800a030102030109021275a8000000000904"], 0x0)

1m48.925285424s ago: executing program 0 (id=406):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@window={0x3, 0x3, 0x6}]}}}}}}}, 0x0)

1m48.865050582s ago: executing program 0 (id=407):
syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x8000)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x4a001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe2$9p(0x0, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f00000002c0)={0x0, 0x3cfa, 0x0, 0x2, 0x26b}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000240)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0)

1m48.77507068s ago: executing program 2 (id=408):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x3}}}]}, 0x3c}}, 0x4000010)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

1m48.763998332s ago: executing program 2 (id=409):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000100)=0xfffffffd, 0x4)

1m48.70270024s ago: executing program 2 (id=410):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0)

1m48.560621652s ago: executing program 1 (id=411):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000080))

1m48.440268014s ago: executing program 3 (id=412):
r0 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000040)="61d30a5bf90453714fc2c72781eaa58b33a96952e5ebff4412", 0x19)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="d8000000", 0x4}], 0x1}, 0x20000000)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
getsockopt(r2, 0x1, 0x4c, 0x0, &(0x7f0000000000))
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e2", 0x3d)
syz_open_dev$video(&(0x7f0000000180), 0x8000000001000003, 0x16b142)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}})
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

1m48.318317792s ago: executing program 1 (id=413):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000405"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44084)

1m48.233535077s ago: executing program 2 (id=414):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)

1m48.228693115s ago: executing program 4 (id=415):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

1m48.110710483s ago: executing program 1 (id=416):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xe0d]}]}]}, 0x30}}, 0x0)

1m47.990967054s ago: executing program 2 (id=417):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@window={0x3, 0x3, 0x6}]}}}}}}}, 0x0)

1m47.990770268s ago: executing program 3 (id=418):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e22, 0x0, @mcast2}, 0x1}, 0x5c)

1m47.990527269s ago: executing program 1 (id=419):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@tcp=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0)

1m47.990331218s ago: executing program 4 (id=420):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000002380)={{0x3, 0x1}, 0x1, 0x0, 0x2, {0x4, 0x1}, 0x2b, 0x800})

1m44.569753422s ago: executing program 1 (id=421):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="00000c000000070001", @ANYRESHEX=r0], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1m43.848397466s ago: executing program 3 (id=422):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

1m12.227224622s ago: executing program 4 (id=423):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x22)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
fsopen(&(0x7f0000000300)='msdos\x00', 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
close_range(r1, 0xffffffffffffffff, 0x0)

45.645013891s ago: executing program 32 (id=407):
syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x8000)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x4a001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe2$9p(0x0, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f00000002c0)={0x0, 0x3cfa, 0x0, 0x2, 0x26b}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000240)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0)

39.837651164s ago: executing program 33 (id=421):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="00000c000000070001", @ANYRESHEX=r0], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

36.706405218s ago: executing program 34 (id=417):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@window={0x3, 0x3, 0x6}]}}}}}}}, 0x0)

36.616048306s ago: executing program 35 (id=422):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

36.542584873s ago: executing program 36 (id=423):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x22)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
fsopen(&(0x7f0000000300)='msdos\x00', 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
close_range(r1, 0xffffffffffffffff, 0x0)

2.705551842s ago: executing program 9 (id=682):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x20000000000014, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x106, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0x12}, r1}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0)

2.643668113s ago: executing program 9 (id=684):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0xbe0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1)

2.358767315s ago: executing program 7 (id=685):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c)
r2 = dup(r1)
sendto$inet6(r2, &(0x7f0000000800)="1e", 0xffffffffffffff31, 0x4041, 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000c, 0x32, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e25, 0x5e3, @loopback, 0xda9}, 0x1c)

2.199659001s ago: executing program 8 (id=688):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000002700)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x7f, 0x0, @val=0x80}}}}}}}, 0x0)
readv(r3, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/49, 0x31}], 0x1)

2.1994574s ago: executing program 7 (id=689):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/163}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)

1.677128934s ago: executing program 8 (id=690):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
pwrite64(r2, &(0x7f0000000300)="572654b114b1a9e1879a390786dd", 0xe, 0x4dc)

1.655073841s ago: executing program 7 (id=691):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x2, &(0x7f0000000380)=<r1=>0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0xa}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])

1.51745936s ago: executing program 9 (id=693):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', <r4=>0x0})
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.486770126s ago: executing program 7 (id=694):
syz_io_uring_setup(0x4f9, &(0x7f00000000c0)={0x0, 0x8d2dd, 0x8, 0xffffffff}, &(0x7f00000003c0), &(0x7f0000000040))
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)

1.426453591s ago: executing program 8 (id=695):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0xffbf)

1.425229563s ago: executing program 7 (id=697):
sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e63, @rand_addr=0x64010104}}, 0x80, 0x0}, 0x4001000)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b000a", 0x35}], 0x1}, 0x80)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

1.37967467s ago: executing program 9 (id=698):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

1.379384334s ago: executing program 5 (id=699):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000003c0)={0x2, 0x3, 0x0, 0x9, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x58}}, 0x0)

1.37916738s ago: executing program 9 (id=700):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000070000002800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b703dad7000000007e1487381b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='timer_expire_entry\x00', r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
socket$inet6(0xa, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001400010026bd3000fddbdf25020801fe5e3119975da014309c198f55ea8b5ebdc8c1813947195a0df4cad49ac4c119dcc1780f2c8346f99873d2a364b0361da3ebdf8c287464ba6dfcacfce0e10530b3336a67e6eb01777bc52e2fb43878c44eb023907757f7fd912c8ebdb8035f2ac8106230bae30400949087869f92d812b1e600375e5acf78ab0b7345765a09728c3587", @ANYRES32, @ANYBLOB="080008000704000008000200e000000208000400e0000002"], 0x30}, 0x1, 0x0, 0x0, 0x20014015}, 0x0)
fstatfs(0xffffffffffffffff, &(0x7f0000000100)=""/163)

1.179527902s ago: executing program 6 (id=703):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
syz_open_procfs(0xffffffffffffffff, 0x0)
socket(0x2a, 0x3, 0x9)

482.048803ms ago: executing program 5 (id=704):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)

458.305846ms ago: executing program 5 (id=705):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x60, 0x31, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0xff, 0x0})

394.901462ms ago: executing program 5 (id=706):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd)

326.564724ms ago: executing program 6 (id=707):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
close(0xffffffffffffffff)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x7}, {}, 0x3ff}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0)

298.600991ms ago: executing program 6 (id=708):
write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0xfe, 0x4}, {0x4, 0x6}, @time=@tick=0xcd}, {0x0, 0x0, 0x0, 0x4, @time={0x10001, 0x3ff}, {0x6, 0x4}, {0x0, 0xfe}, @result={0xd, 0x8}}], 0x38)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$FUSE_STATX(r4, &(0x7f00000009c0)={0x130, 0xfffffffffffffff5, 0x0, {0xfffffffffffffffc, 0x5, 0x0, '\x00', {0x1500, 0x25a1, 0x0, 0xc, 0x0, 0x0, 0x6000, '\x00', 0x2, 0x2, 0x3, 0x20000000000000, {0x4, 0x2}, {0x800, 0x1}, {0x6, 0x3}, {0x2c, 0x6}, 0x8, 0x9, 0x7ff, 0x40}}}, 0x130)

256.501429ms ago: executing program 6 (id=709):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="11060000"], 0x174}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

249.153237ms ago: executing program 7 (id=710):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x843)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

187.546944ms ago: executing program 8 (id=711):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x9}, {}, {0x1, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18934}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x200008e2)

141.20682ms ago: executing program 6 (id=712):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0xa47, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r0, r3, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r3, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffd38, 0x0, 0x0}, &(0x7f0000000100)=0x40)

124.592858ms ago: executing program 9 (id=713):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00')
preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0)

67.719854ms ago: executing program 5 (id=714):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000001a40), 0x1007, r0}, 0x38)

67.533164ms ago: executing program 8 (id=715):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

67.261012ms ago: executing program 6 (id=716):
r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "8527d2413790af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589ddb3c101840af347c1a253ec5fb", 0x18}, 0x48, 0xffffffffffffffff)
keyctl$setperm(0x5, r0, 0x4000410)
keyctl$describe(0x6, r0, 0x0, 0x0)
add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x41, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0)
pipe2$watch_queue(0x0, 0x80)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x9, 0x3, 0x3, 0x0, 0x7})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x8, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x39}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44)

27.414723ms ago: executing program 8 (id=717):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/4091, 0xffb}], 0x2}, 0x2)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

0s ago: executing program 5 (id=718):
syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
ioctl$EVIOCGKEY(r0, 0x80404518, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000040000000200000080000000", @ANYRES32=0x1, @ANYBLOB="00000000680780a4527a5bc78900000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000100"/28], 0x48)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cgroups\x00', 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)

0s ago: executing program 7 (id=719):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts.
[   29.828684][ T6539] cgroup: Unknown subsys name 'net'
[   29.958437][ T6539] cgroup: Unknown subsys name 'cpuset'
[   29.960337][ T6539] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   30.105644][ T6539] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   31.186670][ T6556] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   31.186941][ T6556] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   31.190421][ T6556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   31.191818][ T6558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   31.191958][ T6558] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   31.194818][ T6558] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   31.194968][ T6558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   31.196387][ T6558] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   31.197954][ T6558] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   31.197999][ T6558] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   31.198042][ T6558] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   31.198318][ T6558] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   31.199796][ T6558] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   31.199845][ T6558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   31.204436][ T6558] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   31.204939][ T6557] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   31.206056][ T6561] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   31.206358][ T6561] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   31.208104][ T6561] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   31.208191][ T6561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   31.210142][ T6551] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   31.218892][ T6118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   31.220384][ T6118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   31.220603][ T6551] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   31.224006][ T6118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   31.374666][ T6549] chnl_net:caif_netlink_parms(): no params data found
[   31.394851][ T6562] chnl_net:caif_netlink_parms(): no params data found
[   31.417175][ T6550] chnl_net:caif_netlink_parms(): no params data found
[   31.428594][ T6554] chnl_net:caif_netlink_parms(): no params data found
[   31.443317][ T6559] chnl_net:caif_netlink_parms(): no params data found
[   31.467768][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.469230][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.469333][ T6549] bridge_slave_0: entered allmulticast mode
[   31.470089][ T6549] bridge_slave_0: entered promiscuous mode
[   31.482988][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.484200][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.484303][ T6549] bridge_slave_1: entered allmulticast mode
[   31.486862][ T6549] bridge_slave_1: entered promiscuous mode
[   31.493050][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.493105][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.493173][ T6562] bridge_slave_0: entered allmulticast mode
[   31.493576][ T6562] bridge_slave_0: entered promiscuous mode
[   31.494417][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.494433][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.494473][ T6562] bridge_slave_1: entered allmulticast mode
[   31.494863][ T6562] bridge_slave_1: entered promiscuous mode
[   31.504687][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.504778][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.504830][ T6554] bridge_slave_0: entered allmulticast mode
[   31.505230][ T6554] bridge_slave_0: entered promiscuous mode
[   31.518013][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.518091][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.518413][ T6554] bridge_slave_1: entered allmulticast mode
[   31.519232][ T6554] bridge_slave_1: entered promiscuous mode
[   31.539367][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.539466][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.539542][ T6550] bridge_slave_0: entered allmulticast mode
[   31.539999][ T6550] bridge_slave_0: entered promiscuous mode
[   31.541002][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.541023][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.541069][ T6550] bridge_slave_1: entered allmulticast mode
[   31.541448][ T6550] bridge_slave_1: entered promiscuous mode
[   31.542784][ T6549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.543644][ T6549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.554925][ T6562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.564270][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.571734][ T6562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.575622][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.576505][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.582071][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.586298][ T6549] team0: Port device team_slave_0 added
[   31.587769][ T6549] team0: Port device team_slave_1 added
[   31.587958][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.588006][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.588055][ T6559] bridge_slave_0: entered allmulticast mode
[   31.588453][ T6559] bridge_slave_0: entered promiscuous mode
[   31.605471][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.605537][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.605587][ T6559] bridge_slave_1: entered allmulticast mode
[   31.606035][ T6559] bridge_slave_1: entered promiscuous mode
[   31.610963][ T6562] team0: Port device team_slave_0 added
[   31.612220][ T6550] team0: Port device team_slave_0 added
[   31.612904][ T6554] team0: Port device team_slave_0 added
[   31.617529][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.617552][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.617575][ T6549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.619056][ T6562] team0: Port device team_slave_1 added
[   31.631932][ T6554] team0: Port device team_slave_1 added
[   31.632923][ T6550] team0: Port device team_slave_1 added
[   31.633538][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.633549][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.633564][ T6549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.645608][ T6559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.654706][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.654736][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.654754][ T6562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.655369][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.655377][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.655389][ T6562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.670060][ T6559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.673738][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.673763][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.673778][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.682779][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.682798][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.682827][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.691724][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.691749][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.692018][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.694176][ T6549] hsr_slave_0: entered promiscuous mode
[   31.694506][ T6549] hsr_slave_1: entered promiscuous mode
[   31.696487][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.696493][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.696505][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.721963][ T6562] hsr_slave_0: entered promiscuous mode
[   31.722326][ T6562] hsr_slave_1: entered promiscuous mode
[   31.722532][ T6562] debugfs: 'hsr0' already exists in 'hsr'
[   31.722565][ T6562] Cannot create hsr debugfs directory
[   31.735268][ T6559] team0: Port device team_slave_0 added
[   31.736645][ T6550] hsr_slave_0: entered promiscuous mode
[   31.736940][ T6550] hsr_slave_1: entered promiscuous mode
[   31.737157][ T6550] debugfs: 'hsr0' already exists in 'hsr'
[   31.737169][ T6550] Cannot create hsr debugfs directory
[   31.751897][ T6559] team0: Port device team_slave_1 added
[   31.756300][ T6554] hsr_slave_0: entered promiscuous mode
[   31.756581][ T6554] hsr_slave_1: entered promiscuous mode
[   31.756747][ T6554] debugfs: 'hsr0' already exists in 'hsr'
[   31.756759][ T6554] Cannot create hsr debugfs directory
[   31.798675][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.798703][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.798719][ T6559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.799266][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.799272][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.799283][ T6559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.834890][ T6559] hsr_slave_0: entered promiscuous mode
[   31.835170][ T6559] hsr_slave_1: entered promiscuous mode
[   31.835339][ T6559] debugfs: 'hsr0' already exists in 'hsr'
[   31.835348][ T6559] Cannot create hsr debugfs directory
[   31.912864][ T6549] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.916079][ T6549] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.923746][ T6549] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.933224][ T6549] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.950135][ T6554] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.952613][ T6554] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.954899][ T6554] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.960051][ T6554] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.973605][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.973659][ T6549] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.973822][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.973857][ T6549] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.984139][ T6562] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.988226][ T6562] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.990652][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.990694][ T6554] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.990774][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.990806][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.000713][ T6562] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   32.003084][ T6562] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   32.023746][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.023790][ T6562] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.023857][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.023880][ T6562] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.039617][ T6549] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.045932][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.048044][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.049558][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.051371][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.052714][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.054032][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.068196][ T6550] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   32.070382][ T6550] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   32.072981][ T6550] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   32.080177][ T6549] 8021q: adding VLAN 0 to HW filter on device team0
[   32.086156][ T6562] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.090080][ T6550] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.092775][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.095796][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.095863][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.096203][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.096218][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.106652][ T6562] 8021q: adding VLAN 0 to HW filter on device team0
[   32.110660][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.110694][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.125892][ T6559] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   32.129180][ T6559] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   32.133161][ T6554] 8021q: adding VLAN 0 to HW filter on device team0
[   32.135011][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.135050][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.138811][ T6559] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   32.140830][ T6559] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   32.150336][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.150372][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.154761][ T6549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.164634][ T6562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.164660][ T6562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.176421][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.176461][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.205340][ T6554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.205380][ T6554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.224877][ T6559] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.233564][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.256071][ T6562] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.271515][ T6550] 8021q: adding VLAN 0 to HW filter on device team0
[   32.272749][ T6559] 8021q: adding VLAN 0 to HW filter on device team0
[   32.282808][ T1926] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.282856][ T1926] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.291482][ T6562] veth0_vlan: entered promiscuous mode
[   32.293205][ T1926] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.293245][ T1926] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.294574][ T1926] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.294592][ T1926] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.295026][ T1926] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.295044][ T1926] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.301962][ T6549] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.313250][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.327623][ T6549] veth0_vlan: entered promiscuous mode
[   32.329117][ T6549] veth1_vlan: entered promiscuous mode
[   32.335198][ T6549] veth0_macvtap: entered promiscuous mode
[   32.336140][ T6549] veth1_macvtap: entered promiscuous mode
[   32.346347][ T6559] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.350698][ T6559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.353940][ T6562] veth1_vlan: entered promiscuous mode
[   32.360514][ T6562] veth0_macvtap: entered promiscuous mode
[   32.373159][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.374253][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.381569][ T6562] veth1_macvtap: entered promiscuous mode
[   32.385914][  T287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.386062][  T287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.386083][  T287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.386102][  T287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.409780][ T6554] veth0_vlan: entered promiscuous mode
[   32.413902][ T6554] veth1_vlan: entered promiscuous mode
[   32.416190][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.428832][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.445733][ T1926] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.445783][ T1926] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.445803][ T1926] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.445817][ T1926] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.460361][ T6559] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.462818][ T6554] veth0_macvtap: entered promiscuous mode
[   32.464747][ T6554] veth1_macvtap: entered promiscuous mode
[   32.481569][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.485227][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.495943][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.495992][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.505836][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.513667][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.515209][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.524780][ T2221] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.524952][ T2221] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.524979][ T2221] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.525002][ T2221] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.528404][ T2221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.528417][ T2221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.533642][ T6550] veth0_vlan: entered promiscuous mode
[   32.535110][ T6550] veth1_vlan: entered promiscuous mode
[   32.565339][ T6550] veth0_macvtap: entered promiscuous mode
[   32.566239][ T6550] veth1_macvtap: entered promiscuous mode
[   32.568625][  T287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.568658][  T287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.590292][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.590324][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.593339][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.594250][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.610467][   T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.612133][   T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.613570][   T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.615027][   T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.616206][ T6549] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.658079][ T6660] netlink: 'syz.0.1': attribute type 13 has an invalid length.
[   32.661173][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.661201][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.686237][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.686515][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.028548][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   33.030726][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   33.287866][ T6118] Bluetooth: hci3: command tx timeout
[   33.289153][   T52] Bluetooth: hci4: command tx timeout
[   33.289261][ T6118] Bluetooth: hci0: command tx timeout
[   33.289264][   T52] Bluetooth: hci1: command tx timeout
[   33.289358][ T6118] Bluetooth: hci2: command tx timeout
[   33.322810][   T41] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   33.330925][   T41] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   33.330985][   T41] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   33.331026][   T41] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   33.338201][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.341721][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.361346][ T6559] veth0_vlan: entered promiscuous mode
[   33.363197][   T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.363222][   T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.379919][ T6559] veth1_vlan: entered promiscuous mode
[   33.393303][ T6559] veth0_macvtap: entered promiscuous mode
[   33.395683][ T6559] veth1_macvtap: entered promiscuous mode
[   33.396317][ T6671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.396489][ T6671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.410264][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.413899][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.417416][ T1926] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.417522][ T1926] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.417603][ T1926] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.417693][ T1926] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.482639][  T287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.484139][  T287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.499217][  T287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.499243][  T287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.481794][ T6689] Bluetooth: MGMT ver 1.23
[   34.483445][   T31] audit: type=1326 audit(34.460:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5c0a8 code=0x7ffc0000
[   34.485038][   T31] audit: type=1326 audit(34.460:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff83b5c0a8 code=0x7ffc0000
[   34.485309][   T31] audit: type=1326 audit(34.460:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5c0a8 code=0x7ffc0000
[   34.566660][ T6689] loop2: detected capacity change from 0 to 512
[   34.573112][ T6689] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   34.573793][   T31] audit: type=1326 audit(34.540:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5c0a8 code=0x7ffc0000
[   34.573828][   T31] audit: type=1326 audit(34.540:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=76 compat=0 ip=0xffff83b5c0a8 code=0x7ffc0000
[   34.573851][   T31] audit: type=1326 audit(34.540:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5c0a8 code=0x7ffc0000
[   34.573868][   T31] audit: type=1326 audit(34.540:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff83b5c0a8 code=0x7ffc0000
[   34.573881][   T31] audit: type=1326 audit(34.540:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff83b5c0dc code=0x7ffc0000
[   34.573893][   T31] audit: type=1326 audit(34.540:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff83b5a770 code=0x7ffc0000
[   34.573907][   T31] audit: type=1326 audit(34.540:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff83b5c14c code=0x7ffc0000
[   34.580097][ T6689] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   34.920004][ T6689] EXT4-fs (loop2): 1 truncate cleaned up
[   34.920468][ T6689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.935681][ T6696] loop1: detected capacity change from 0 to 128
[   34.944417][ T6696] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   35.025186][ T6562] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.538565][ T6699] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   35.538898][ T6558] Bluetooth: hci1: command tx timeout
[   35.538937][ T6558] Bluetooth: hci4: command tx timeout
[   35.538958][ T6558] Bluetooth: hci3: command tx timeout
[   35.538975][ T6558] Bluetooth: hci2: command tx timeout
[   35.878841][ T6554] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   36.277545][ T6728] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET)
[   36.277849][ T6728] syzkaller1: entered promiscuous mode
[   36.277892][ T6728] syzkaller1: entered allmulticast mode
[   36.943637][ T6746] netlink: 48 bytes leftover after parsing attributes in process `syz.2.23'.
[   36.943740][ T6746] Zero length message leads to an empty skb
[   37.045567][ T6752] loop2: detected capacity change from 0 to 128
[   37.062022][ T6752] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   37.607221][ T6558] Bluetooth: hci3: command tx timeout
[   37.608035][ T6558] Bluetooth: hci4: command tx timeout
[   37.608057][ T6558] Bluetooth: hci1: command tx timeout
[   37.609272][ T6118] Bluetooth: hci2: command tx timeout
[   37.630939][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.634942][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.914711][ T6562] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   38.068720][ T6778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.068913][ T6778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.081394][ T6776] syz.0.41 (6776): drop_caches: 1
[   38.361596][ T6776] syz.0.41 (6776): drop_caches: 1
[   39.192089][ T6793] netlink: 172 bytes leftover after parsing attributes in process `syz.0.35'.
[   39.192132][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'.
[   39.192528][ T6793] netlink: 172 bytes leftover after parsing attributes in process `syz.0.35'.
[   39.192546][ T6793] netlink: 100 bytes leftover after parsing attributes in process `syz.0.35'.
[   39.192560][ T6793] netlink: 32 bytes leftover after parsing attributes in process `syz.0.35'.
[   39.311171][ T6797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.313038][ T6797] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.316432][ T6797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.316606][ T6797] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.460424][ T6799] warning: `syz.1.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   39.687150][ T6118] Bluetooth: hci1: command tx timeout
[   39.688596][ T6558] Bluetooth: hci4: command tx timeout
[   39.688631][ T6558] Bluetooth: hci3: command tx timeout
[   39.690724][   T52] Bluetooth: hci2: command tx timeout
[   40.198963][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.201174][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.371467][ T6881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.373339][ T6881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.391253][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.391431][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.484545][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.484720][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.485154][ T6883] netlink: 'syz.2.68': attribute type 10 has an invalid length.
[   42.485163][ T6883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.68'.
[   42.512292][ T6883] team0: Port device geneve0 added
[   43.342525][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'.
[   43.381523][ T6913] Driver unsupported XDP return value 0 on prog  (id 3) dev N/A, expect packet loss!
[   43.860873][ T6933] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   43.860896][ T6933] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   43.864095][ T6933] vhci_hcd vhci_hcd.0: Device attached
[   44.362934][   T26] vhci_hcd: vhci_device speed not set
[   44.377186][ T6663] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[   44.432443][   T26] usb 2-1: new full-speed USB device number 2 using vhci_hcd
[   44.598867][ T6951] netlink: 172 bytes leftover after parsing attributes in process `syz.2.89'.
[   44.598896][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'.
[   44.598947][ T6951] netlink: 172 bytes leftover after parsing attributes in process `syz.2.89'.
[   44.598958][ T6951] netlink: 100 bytes leftover after parsing attributes in process `syz.2.89'.
[   44.598969][ T6951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.89'.
[   44.898206][ T6663] usb 1-1: config 0 has no interfaces?
[   44.898248][ T6663] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   44.898260][ T6663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.902942][ T6663] usb 1-1: config 0 descriptor??
[   45.115077][ T6934] usb 2-1: recv xbuf, 0
[   45.120864][  T287] vhci_hcd: stop threads
[   45.120881][  T287] vhci_hcd: release socket
[   45.121529][  T287] vhci_hcd: disconnect device
[   45.122095][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.122259][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.187086][   T26] vhci_hcd: vhci_device speed not set
[   45.251705][ T6663] usb 1-1: USB disconnect, device number 2
[   45.310794][ T6970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.310981][ T6970] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.543749][ T6979] netlink: 'syz.1.98': attribute type 12 has an invalid length.
[   45.548994][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.551826][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.297073][ T6604] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   46.326932][ T6998] Set syz1 is full, maxelem 6117 reached
[   46.380293][ T7004] netlink: 172 bytes leftover after parsing attributes in process `syz.4.108'.
[   46.382613][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'.
[   46.385725][ T7004] netlink: 172 bytes leftover after parsing attributes in process `syz.4.108'.
[   46.857360][ T6604] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   46.857388][ T6604] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   46.857421][ T6604] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   46.857433][ T6604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.999497][ T7020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.001750][ T7020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.278571][ T6604] usb 1-1: usb_control_msg returned -32
[   47.278606][ T6604] usbtmc 1-1:16.0: can't read capabilities
[   47.583578][ T7034] mmap: syz.2.118 (7034) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   48.290214][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.290388][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.649209][ T7067] trusted_key: encrypted_key: insufficient parameters specified
[   48.884014][ T7071] __nla_validate_parse: 2 callbacks suppressed
[   48.884050][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.130'.
[   48.996809][ T6604] usb 1-1: USB disconnect, device number 3
[   49.696695][ T7105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.696883][ T7105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.844752][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.844954][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.446602][ T7125] capability: warning: `syz.2.152' uses 32-bit capabilities (legacy support in use)
[   50.570569][ T7136] capability: warning: `syz.2.157' uses deprecated v2 capabilities in a way that may be insecure
[   50.625300][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.626914][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.728854][ T7161] netdevsim netdevsim3: Direct firmware load for lookup_extent_enter failed with error -2
[   50.730699][ T7161] netdevsim netdevsim3: Falling back to sysfs fallback for: lookup_extent_enter
[   50.816940][ T7163] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[   50.817029][ T7163] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[   51.195303][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   51.303394][ T7177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.306432][ T7177] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.483610][ T7181] smc: net device bond0 applied user defined pnetid SYZ2
[   51.904549][ T7195] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.992670][   T26] IPVS: starting estimator thread 0...
[   52.108105][ T7199] IPVS: using max 69 ests per chain, 165600 per kthread
[   52.617086][   T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   52.776166][   T26] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[   52.776203][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.776487][ T7208] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   52.777828][   T26] usb 1-1: Product: syz
[   52.777847][   T26] usb 1-1: Manufacturer: syz
[   52.777858][   T26] usb 1-1: SerialNumber: syz
[   52.780854][   T26] usb 1-1: config 0 descriptor??
[   52.785072][   T26] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 004
[   52.796171][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.796373][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.283301][ T7226] binder: 7225:7226 ioctl c0306201 20000080 returned -14
[   53.285487][ T7226] binder: 7225:7226 tried to acquire reference to desc 0, got 1 instead
[   53.346828][ T7227] erofs (device nbd1): cannot find valid erofs superblock
[   53.493240][   T26]  (null): failure reading functionality
[   53.494833][ T7226] binder: 7225:7226 got transaction with invalid fd, -1
[   53.494926][ T7226] binder: 7226:7225 translate fd failed
[   53.494966][ T7226] binder: 7225:7226 transaction async to 7225:0 failed 5/29201/-9, code 0 size 96-24 line 3520
[   53.506336][ T6364] binder: undelivered TRANSACTION_ERROR: 29201
[   53.706800][   T26] i2c i2c-1: failure reading functionality
[   53.708757][   T26] i2c i2c-1: failure reading functionality
[   53.708777][   T26] i2c i2c-1: No suitable probing method supported for address 0x18
[   53.709267][   T26] i2c i2c-1: failure reading functionality
[   53.710175][   T26] i2c i2c-1: failure reading functionality
[   53.710366][   T26] i2c i2c-1: No suitable probing method supported for address 0x19
[   53.712377][   T26] i2c i2c-1: failure reading functionality
[   53.712810][   T26] i2c i2c-1: failure reading functionality
[   53.712826][   T26] i2c i2c-1: No suitable probing method supported for address 0x1A
[   53.713025][   T26] i2c i2c-1: failure reading functionality
[   53.713213][   T26] i2c i2c-1: failure reading functionality
[   53.713224][   T26] i2c i2c-1: No suitable probing method supported for address 0x1B
[   53.713408][   T26] i2c i2c-1: failure reading functionality
[   53.713725][   T26] i2c i2c-1: failure reading functionality
[   53.713755][   T26] i2c i2c-1: No suitable probing method supported for address 0x1C
[   53.713974][   T26] i2c i2c-1: failure reading functionality
[   53.714165][   T26] i2c i2c-1: failure reading functionality
[   53.714177][   T26] i2c i2c-1: No suitable probing method supported for address 0x1D
[   53.714450][   T26] i2c i2c-1: failure reading functionality
[   53.714919][   T26] i2c i2c-1: failure reading functionality
[   53.714974][   T26] i2c i2c-1: No suitable probing method supported for address 0x1E
[   53.715417][   T26] i2c i2c-1: failure reading functionality
[   53.715679][   T26] i2c i2c-1: failure reading functionality
[   53.715691][   T26] i2c i2c-1: No suitable probing method supported for address 0x1F
[   53.715886][   T26] i2c i2c-1: failure reading functionality
[   53.716069][   T26] i2c i2c-1: failure reading functionality
[   53.716077][   T26] i2c i2c-1: No suitable probing method supported for address 0x48
[   53.716254][   T26] i2c i2c-1: failure reading functionality
[   53.716432][   T26] i2c i2c-1: failure reading functionality
[   53.716441][   T26] i2c i2c-1: No suitable probing method supported for address 0x49
[   53.716876][   T26] i2c i2c-1: failure reading functionality
[   53.718129][   T26] i2c i2c-1: failure reading functionality
[   53.718289][   T26] i2c i2c-1: No suitable probing method supported for address 0x4A
[   53.720059][   T26] i2c i2c-1: failure reading functionality
[   53.720300][   T26] i2c i2c-1: failure reading functionality
[   53.720313][   T26] i2c i2c-1: No suitable probing method supported for address 0x4B
[   53.720508][   T26] i2c i2c-1: failure reading functionality
[   53.720727][   T26] i2c i2c-1: failure reading functionality
[   53.720736][   T26] i2c i2c-1: No suitable probing method supported for address 0x4C
[   53.722152][   T26] i2c i2c-1: failure reading functionality
[   53.724178][   T26] i2c i2c-1: failure reading functionality
[   53.724501][   T26] i2c i2c-1: No suitable probing method supported for address 0x4D
[   53.726282][   T26] i2c i2c-1: failure reading functionality
[   53.728333][   T26] i2c i2c-1: failure reading functionality
[   53.729251][   T26] i2c i2c-1: No suitable probing method supported for address 0x4E
[   53.729983][   T26] i2c i2c-1: failure reading functionality
[   53.730325][   T26] i2c i2c-1: failure reading functionality
[   53.730337][   T26] i2c i2c-1: No suitable probing method supported for address 0x4F
[   53.740401][   T26] i2c i2c-1: failure reading functionality
[   53.743631][   T26] i2c i2c-1: failure reading functionality
[   53.743783][   T26] i2c i2c-1: No suitable probing method supported for address 0x18
[   53.744558][   T26] i2c i2c-1: failure reading functionality
[   53.745765][   T26] i2c i2c-1: failure reading functionality
[   53.745778][   T26] i2c i2c-1: No suitable probing method supported for address 0x19
[   53.755899][   T26] i2c i2c-1: failure reading functionality
[   53.757306][   T26] i2c i2c-1: failure reading functionality
[   53.757363][   T26] i2c i2c-1: No suitable probing method supported for address 0x1A
[   53.767539][ T2321] libceph: connect (1)[c::]:6789 error -101
[   53.768256][   T26] i2c i2c-1: failure reading functionality
[   53.769102][   T26] i2c i2c-1: failure reading functionality
[   53.769170][   T26] i2c i2c-1: No suitable probing method supported for address 0x29
[   53.770070][   T26] i2c i2c-1: failure reading functionality
[   53.770981][   T26] i2c i2c-1: failure reading functionality
[   53.770994][   T26] i2c i2c-1: No suitable probing method supported for address 0x2A
[   53.772035][ T2321] libceph: mon0 (1)[c::]:6789 connect error
[   53.772262][   T26] i2c i2c-1: failure reading functionality
[   53.773411][   T26] i2c i2c-1: failure reading functionality
[   53.773463][   T26] i2c i2c-1: No suitable probing method supported for address 0x2B
[   53.773925][   T26] i2c i2c-1: failure reading functionality
[   53.774529][   T26] i2c i2c-1: failure reading functionality
[   53.774545][   T26] i2c i2c-1: No suitable probing method supported for address 0x48
[   53.774745][   T26] i2c i2c-1: failure reading functionality
[   53.774959][   T26] i2c i2c-1: failure reading functionality
[   53.774967][   T26] i2c i2c-1: No suitable probing method supported for address 0x49
[   53.775148][   T26] i2c i2c-1: failure reading functionality
[   53.777651][   T26] i2c i2c-1: failure reading functionality
[   53.777684][   T26] i2c i2c-1: No suitable probing method supported for address 0x4A
[   53.780291][   T26] i2c i2c-1: failure reading functionality
[   53.783596][   T26] i2c i2c-1: failure reading functionality
[   53.783646][   T26] i2c i2c-1: No suitable probing method supported for address 0x4B
[   53.784729][   T26] i2c i2c-1: failure reading functionality
[   53.785141][   T26] i2c i2c-1: failure reading functionality
[   53.785152][   T26] i2c i2c-1: No suitable probing method supported for address 0x4C
[   53.785342][   T26] i2c i2c-1: failure reading functionality
[   53.785633][   T26] i2c i2c-1: failure reading functionality
[   53.785647][   T26] i2c i2c-1: No suitable probing method supported for address 0x4D
[   53.793701][ T7234] ceph: No mds server is up or the cluster is laggy
[   53.798898][   T26] i2c i2c-1: failure reading functionality
[   53.800637][   T26] i2c i2c-1: failure reading functionality
[   53.800923][   T26] i2c i2c-1: No suitable probing method supported for address 0x4E
[   53.803285][   T26] i2c i2c-1: failure reading functionality
[   53.803526][   T26] i2c i2c-1: failure reading functionality
[   53.803538][   T26] i2c i2c-1: No suitable probing method supported for address 0x4F
[   53.803613][   T26] i2c i2c-1: connected i2c-tiny-usb device
[   53.893822][   T26] usb 1-1: USB disconnect, device number 4
[   54.214379][ T7241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.215184][ T7241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.729457][ T7251] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed
[   55.587624][ T6618] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   55.737066][ T6618] usb 1-1: Using ep0 maxpacket: 16
[   55.751421][ T6618] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[   55.751460][ T6618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.751485][ T6618] usb 1-1: Product: syz
[   55.751498][ T6618] usb 1-1: Manufacturer: syz
[   55.753091][ T6618] usb 1-1: SerialNumber: syz
[   55.782279][ T6618] usb 1-1: config 0 descriptor??
[   55.790881][ T6618] hub 1-1:0.0: bad descriptor, ignoring hub
[   55.792242][ T6618] hub 1-1:0.0: probe with driver hub failed with error -5
[   56.454906][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.456579][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.947794][ T6618] usb 1-1: USB disconnect, device number 5
[   56.968394][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'.
[   56.972519][ T7303] veth0_macvtap: left promiscuous mode
[   57.283828][ T7315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.925320][ T7338] overlayfs: failed to resolve './file0': -2
[   59.175501][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.324102][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.370714][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.370904][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.725555][ T6618] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   60.742937][ T7408] netlink: 'syz.3.250': attribute type 10 has an invalid length.
[   60.750285][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.752690][ T7408] bridge_slave_1: left allmulticast mode
[   60.754107][ T7408] bridge_slave_1: left promiscuous mode
[   60.776087][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.780107][ T7408] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   60.906871][ T6618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   60.906913][ T6618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.906938][ T6618] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   60.906962][ T6618] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   60.906977][ T6618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.227559][ T6618] usb 1-1: config 0 descriptor??
[   61.290987][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.292961][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.430274][ T7422] syz.2.253: attempt to access beyond end of device
[   61.430274][ T7422] nbd2: rw=2048, sector=2, nr_sectors = 1 limit=0
[   61.430551][ T7422] hfsplus: unable to find HFS+ superblock
[   61.643220][ T6618] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   62.171013][ T7435] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   62.184483][ T7435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.192539][ T7435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.274705][ T3925] usb 1-1: reset high-speed USB device number 6 using dummy_hcd
[   64.642066][ T2411] ieee802154 phy0 wpan0: encryption failed: -22
[   64.643542][ T2411] ieee802154 phy1 wpan1: encryption failed: -22
[   64.675265][   T24] cfg80211: failed to load regulatory.db
[   64.756295][ T7474] netlink: 'syz.1.271': attribute type 17 has an invalid length.
[   64.756328][ T7474] netlink: 148 bytes leftover after parsing attributes in process `syz.1.271'.
[   65.152561][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.157890][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.246481][    T9] usb 1-1: USB disconnect, device number 6
[   65.927622][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.286'.
[   66.352607][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   66.502511][    T9] usb 1-1: Using ep0 maxpacket: 32
[   66.505620][    T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[   66.507316][    T9] usb 1-1: config 0 has no interface number 0
[   66.511192][    T9] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[   66.511244][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.511273][    T9] usb 1-1: Product: syz
[   66.511284][    T9] usb 1-1: Manufacturer: syz
[   66.511293][    T9] usb 1-1: SerialNumber: syz
[   66.518959][    T9] usb 1-1: config 0 descriptor??
[   66.527555][    T9] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz)
[   66.928565][    T9] etas_es58x 1-1:0.2: could not parse product info: '424242424242'
[   66.970046][ T7538] netlink: 'syz.2.293': attribute type 4 has an invalid length.
[   66.991217][ T7538] netlink: 'syz.2.293': attribute type 4 has an invalid length.
[   67.043331][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.045071][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.162958][    T9] usb 1-1: USB disconnect, device number 7
[   67.163672][    T9] etas_es58x 1-1:0.2: Disconnecting syz syz
[   67.535189][ T7585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.535368][ T7585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.965142][ T7614] binder: 7612:7614 tried to acquire reference to desc 0, got 1 instead
[   67.965406][ T7614] binder: 7612:7614 got transaction with invalid offset (1, min 0 max 72) or object.
[   67.965435][ T7614] binder: 7612:7614 transaction async to 7612:0 failed 10/29201/-22, code 0 size 72-24 line 3451
[   67.965650][ T2321] binder: undelivered TRANSACTION_ERROR: 29201
[   71.123083][   T52] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[   71.123129][   T52] Bluetooth: hci3: Injecting HCI hardware error event
[   71.124281][   T52] Bluetooth: hci3: hardware error 0x00
[   72.259584][ T3925] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   72.439660][ T7683] netlink: 'syz.4.332': attribute type 1 has an invalid length.
[   72.447337][ T7691] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   72.450269][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.451906][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.509492][ T3925] usb 1-1: Using ep0 maxpacket: 16
[   72.514950][ T3925] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[   72.514992][ T3925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   72.515009][ T3925] usb 1-1: config 0 has no interface number 0
[   73.469401][ T3925] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[   73.469438][ T3925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.469464][ T3925] usb 1-1: Product: syz
[   73.469474][ T3925] usb 1-1: Manufacturer: syz
[   73.469483][ T3925] usb 1-1: SerialNumber: syz
[   73.522939][ T3925] usb 1-1: config 0 descriptor??
[   73.958786][   T52] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   74.097764][ T3925] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected
[   74.187917][ T3925] nokiaca42v2 ttyUSB0: required endpoint is missing
[   78.582357][ T7700] binder: 7699:7700 ioctl c0306201 20000080 returned -14
[   78.651012][ T7700] binder: 7699:7700 tried to acquire reference to desc 0, got 1 instead
[   78.655032][ T3925] binder: undelivered TRANSACTION_COMPLETE
[   78.674461][ T3925] binder: undelivered transaction 15, process died.
[   79.566797][ T7715] netlink: 'syz.1.344': attribute type 1 has an invalid length.
[   79.566838][ T7715] netlink: 'syz.1.344': attribute type 4 has an invalid length.
[   79.566859][ T7715] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.344'.
[   79.567228][ T7715] netlink: 'syz.1.344': attribute type 1 has an invalid length.
[   79.567243][ T7715] netlink: 'syz.1.344': attribute type 4 has an invalid length.
[   79.567257][ T7715] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.344'.
[   81.243354][ T7731] sched: DL replenish lagged too much
[   81.614976][ T6654] usb 1-1: USB disconnect, device number 8
[   81.631866][ T6654] cypress_m8 1-1:0.35: device disconnected
[   83.382062][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'.
[   83.382101][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'.
[   83.521452][ T7751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.521633][ T7751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.522388][ T7751] netlink: 48 bytes leftover after parsing attributes in process `syz.2.353'.
[   83.691327][   T52] Bluetooth: hci4: link tx timeout
[   83.691416][   T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[   85.753868][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[   85.887396][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.887575][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.899068][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'.
[   85.899095][ T7770] netlink: 36 bytes leftover after parsing attributes in process `syz.2.359'.
[   86.037291][ T6654] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   86.252650][ T7774] erofs (device nbd2): cannot find valid erofs superblock
[   88.869125][ T7831] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.961085][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'.
[   88.983638][ T7835] bridge_slave_1: left allmulticast mode
[   88.985417][ T7835] bridge_slave_1: left promiscuous mode
[   88.989726][ T7835] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.054864][ T7835] bridge_slave_0: left allmulticast mode
[   89.062231][ T7835] bridge_slave_0: left promiscuous mode
[   89.066117][ T7835] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.683014][ T6654] usb 1-1: Using ep0 maxpacket: 8
[   90.692632][ T6654] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.721109][ T6654] usb 1-1: config 0 has no interfaces?
[   90.730979][ T6654] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[   90.741152][ T6654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.776536][ T6654] usb 1-1: config 0 descriptor??
[   91.347950][ T6654] usb 1-1: USB disconnect, device number 9
[   91.821306][ T7872] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed
[   92.296428][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'.
[   93.100926][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.102635][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.928905][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'.
[  126.292694][ T2411] ieee802154 phy0 wpan0: encryption failed: -22
[  126.306908][ T2411] ieee802154 phy1 wpan1: encryption failed: -22
[  155.500420][ T6558] Bluetooth: hci2: command 0x0406 tx timeout
[  155.509265][ T6558] Bluetooth: hci1: command 0x0406 tx timeout
[  165.713951][ T6558] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  165.728830][ T6558] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  165.730511][ T6558] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  165.732015][ T6558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  165.732242][ T6558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  165.744660][ T6551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  165.745260][ T6551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  165.745487][ T6551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  165.745989][ T6551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  165.746192][ T6551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  165.763452][ T6118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.765457][ T6118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.771085][ T6118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  165.807973][ T6118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  165.809795][ T6118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  165.850100][ T6118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  165.852371][ T6118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  165.854217][ T6118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  165.876938][ T6118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  165.882035][ T6551] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  165.882360][ T6551] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  165.884032][ T6558] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  165.884937][ T6558] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  165.887883][ T6558] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  165.897205][ T6558] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  166.143210][ T7952] chnl_net:caif_netlink_parms(): no params data found
[  166.148666][ T7959] chnl_net:caif_netlink_parms(): no params data found
[  166.228915][ T7959] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.229040][ T7959] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.229198][ T7959] bridge_slave_0: entered allmulticast mode
[  166.229649][ T7959] bridge_slave_0: entered promiscuous mode
[  166.245569][ T7957] chnl_net:caif_netlink_parms(): no params data found
[  166.246903][ T7959] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.246978][ T7959] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.247046][ T7959] bridge_slave_1: entered allmulticast mode
[  166.247470][ T7959] bridge_slave_1: entered promiscuous mode
[  166.252070][ T7955] chnl_net:caif_netlink_parms(): no params data found
[  166.256057][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.256109][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.256191][ T7952] bridge_slave_0: entered allmulticast mode
[  166.256637][ T7952] bridge_slave_0: entered promiscuous mode
[  166.279862][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.279942][ T7952] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.280015][ T7952] bridge_slave_1: entered allmulticast mode
[  166.280448][ T7952] bridge_slave_1: entered promiscuous mode
[  166.295414][ T7959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.300087][ T7959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.303722][ T7967] chnl_net:caif_netlink_parms(): no params data found
[  166.308784][ T7952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.309754][ T7952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.339249][ T7952] team0: Port device team_slave_0 added
[  166.340001][ T7952] team0: Port device team_slave_1 added
[  166.349081][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.349102][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.349117][ T7952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.360941][ T7959] team0: Port device team_slave_0 added
[  166.376464][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.376487][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.376501][ T7952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.377232][  T287] bridge_slave_1: left allmulticast mode
[  166.377256][  T287] bridge_slave_1: left promiscuous mode
[  166.377683][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.383710][  T287] bridge_slave_0: left allmulticast mode
[  166.383720][  T287] bridge_slave_0: left promiscuous mode
[  166.383777][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.506345][  T287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.553208][  T287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.582785][  T287] bond0 (unregistering): Released all slaves
[  166.588019][ T7959] team0: Port device team_slave_1 added
[  166.602205][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.602248][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.602321][ T7957] bridge_slave_0: entered allmulticast mode
[  166.603564][ T7957] bridge_slave_0: entered promiscuous mode
[  166.604284][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.604352][ T7957] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.604415][ T7957] bridge_slave_1: entered allmulticast mode
[  166.604810][ T7957] bridge_slave_1: entered promiscuous mode
[  166.611395][ T7959] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.611404][ T7959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.611419][ T7959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.611953][ T7959] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.611962][ T7959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.611974][ T7959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.642077][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.643707][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.645020][ T7955] bridge_slave_0: entered allmulticast mode
[  166.646627][ T7955] bridge_slave_0: entered promiscuous mode
[  166.660339][ T7957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.670801][ T7967] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.670843][ T7967] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.670906][ T7967] bridge_slave_0: entered allmulticast mode
[  166.671318][ T7967] bridge_slave_0: entered promiscuous mode
[  166.671910][ T7967] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.671927][ T7967] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.671977][ T7967] bridge_slave_1: entered allmulticast mode
[  166.672905][ T7967] bridge_slave_1: entered promiscuous mode
[  166.681484][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.682930][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.684441][ T7955] bridge_slave_1: entered allmulticast mode
[  166.686620][ T7955] bridge_slave_1: entered promiscuous mode
[  166.693113][ T7957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.726348][ T7967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.745523][ T7957] team0: Port device team_slave_0 added
[  166.747344][ T7952] hsr_slave_0: entered promiscuous mode
[  166.747647][ T7952] hsr_slave_1: entered promiscuous mode
[  166.748327][ T7952] debugfs: 'hsr0' already exists in 'hsr'
[  166.748340][ T7952] Cannot create hsr debugfs directory
[  166.749749][ T7967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.766270][ T7959] hsr_slave_0: entered promiscuous mode
[  166.766643][ T7959] hsr_slave_1: entered promiscuous mode
[  166.767203][ T7959] debugfs: 'hsr0' already exists in 'hsr'
[  166.767212][ T7959] Cannot create hsr debugfs directory
[  166.769406][ T7955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.770436][ T7955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.771084][ T7957] team0: Port device team_slave_1 added
[  166.849196][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.849226][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.849240][ T7957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.859092][ T7967] team0: Port device team_slave_0 added
[  166.861480][ T7967] team0: Port device team_slave_1 added
[  166.881547][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.881580][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.881593][ T7957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.904079][ T7955] team0: Port device team_slave_0 added
[  166.928891][ T7955] team0: Port device team_slave_1 added
[  166.946903][ T7967] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.946933][ T7967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.946963][ T7967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.957438][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.957462][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.957492][ T7955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.958529][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.958546][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.958573][ T7955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.980396][ T7967] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.981683][ T7967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.984531][ T7967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.006490][  T287] hsr_slave_0: left promiscuous mode
[  167.007481][  T287] hsr_slave_1: left promiscuous mode
[  167.007745][  T287] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.009100][  T287] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.139750][  T287] team0 (unregistering): Port device team_slave_1 removed
[  167.157284][  T287] team0 (unregistering): Port device team_slave_0 removed
[  167.291021][ T7967] hsr_slave_0: entered promiscuous mode
[  167.291367][ T7967] hsr_slave_1: entered promiscuous mode
[  167.318838][ T7957] hsr_slave_0: entered promiscuous mode
[  167.320241][ T7957] hsr_slave_1: entered promiscuous mode
[  167.321501][ T7957] debugfs: 'hsr0' already exists in 'hsr'
[  167.322783][ T7957] Cannot create hsr debugfs directory
[  167.372328][ T7955] hsr_slave_0: entered promiscuous mode
[  167.372690][ T7955] hsr_slave_1: entered promiscuous mode
[  167.374278][ T7955] debugfs: 'hsr0' already exists in 'hsr'
[  167.374618][ T7955] Cannot create hsr debugfs directory
[  167.507665][ T7952] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  167.510197][ T7952] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  167.528168][ T7952] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  167.530914][ T7952] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  167.606418][ T7959] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  167.608776][ T7959] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  167.610990][ T7959] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  167.613799][ T7959] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  167.792011][ T6558] Bluetooth: hci0: command tx timeout
[  167.792017][ T6118] Bluetooth: hci4: command tx timeout
[  167.871797][ T6118] Bluetooth: hci2: command tx timeout
[  167.951819][ T6118] Bluetooth: hci3: command tx timeout
[  167.951878][ T6558] Bluetooth: hci5: command tx timeout
[  168.352801][ T7952] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.374079][  T287] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.380788][ T7952] 8021q: adding VLAN 0 to HW filter on device team0
[  168.385063][ T7967] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  168.389722][ T7967] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  168.392642][ T7967] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  168.395065][ T7967] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  168.416124][  T287] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.434889][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.434929][ T6867] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.435419][ T6867] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.435441][ T6867] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.452815][  T287] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.476732][ T7957] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  168.482748][ T7957] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  168.490446][ T7957] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  168.498895][ T7957] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  168.517336][  T287] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.526459][ T7959] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.561283][ T7955] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  168.568855][ T7955] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  168.575097][ T7955] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  168.578349][ T7959] 8021q: adding VLAN 0 to HW filter on device team0
[  168.579948][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.579993][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.585449][ T7955] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  168.622759][ T7967] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.630192][ T7957] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.632756][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.632792][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.656896][ T7952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.686978][ T7957] 8021q: adding VLAN 0 to HW filter on device team0
[  168.697879][ T7967] 8021q: adding VLAN 0 to HW filter on device team0
[  168.720951][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.720998][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.722588][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.722606][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.724883][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.724905][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.725984][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.726004][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.755571][  T287] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.789660][ T7955] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.794124][ T7955] 8021q: adding VLAN 0 to HW filter on device team0
[  168.810623][  T287] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.826839][ T7967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.835860][ T7959] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.840845][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.840886][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.874753][  T287] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.878155][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.878198][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.919219][  T287] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.946112][ T7955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.963896][ T7967] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.973137][ T7952] veth0_vlan: entered promiscuous mode
[  168.974649][ T7952] veth1_vlan: entered promiscuous mode
[  169.008130][ T7957] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.028061][ T7959] veth0_vlan: entered promiscuous mode
[  169.032749][ T7952] veth0_macvtap: entered promiscuous mode
[  169.036131][ T7952] veth1_macvtap: entered promiscuous mode
[  169.041007][ T7952] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.045484][ T7952] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.057551][ T7959] veth1_vlan: entered promiscuous mode
[  169.066627][ T7959] veth0_macvtap: entered promiscuous mode
[  169.085758][ T7959] veth1_macvtap: entered promiscuous mode
[  169.095950][ T1926] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.122384][ T1926] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.122823][ T1926] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.123218][ T1926] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.138555][ T7959] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.139462][ T7959] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.143660][   T41] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.144130][   T41] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.144505][   T41] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.144523][   T41] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.176040][  T287] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.208032][ T7955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.245396][  T287] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.248797][ T7967] veth0_vlan: entered promiscuous mode
[  169.274348][ T7967] veth1_vlan: entered promiscuous mode
[  169.292307][  T287] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.323264][  T287] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.330346][ T7957] veth0_vlan: entered promiscuous mode
[  169.336568][ T7957] veth1_vlan: entered promiscuous mode
[  169.347161][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.347193][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.358383][ T7967] veth0_macvtap: entered promiscuous mode
[  169.362147][ T7967] veth1_macvtap: entered promiscuous mode
[  169.367700][ T7967] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.377563][ T7955] veth0_vlan: entered promiscuous mode
[  169.386892][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.386920][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.406110][ T7967] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.407969][ T1926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.408492][ T1926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.408592][ T1926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.408599][ T1926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.412321][ T7955] veth1_vlan: entered promiscuous mode
[  169.417138][   T41] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.418838][   T41] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.420396][   T41] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.424527][   T41] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.441637][ T7957] veth0_macvtap: entered promiscuous mode
[  169.468477][ T7955] veth0_macvtap: entered promiscuous mode
[  169.470554][ T7957] veth1_macvtap: entered promiscuous mode
[  169.476341][ T7957] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.492663][ T7955] veth1_macvtap: entered promiscuous mode
[  169.507668][ T7957] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.515541][   T42] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.515755][   T42] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.515858][   T42] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.515907][   T42] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.538512][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.538541][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.539406][ T1926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.539414][ T1926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.569171][  T287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.579988][ T7955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.596883][ T7955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.625524][ T6867] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.625641][ T6867] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.625665][ T6867] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.625684][ T6867] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.651357][  T287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.720307][  T287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.777993][  T287] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.801947][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.803957][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.881104][ T6118] Bluetooth: hci0: command tx timeout
[  169.881145][ T6118] Bluetooth: hci4: command tx timeout
[  169.951177][ T6558] Bluetooth: hci2: command tx timeout
[  169.996965][   T31] kauditd_printk_skb: 32 callbacks suppressed
[  169.996999][   T31] audit: type=1326 audit(425.980:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.8.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3b5c0a8 code=0x7ffc0000
[  169.997024][   T31] audit: type=1326 audit(425.980:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.8.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=437 compat=0 ip=0xffffb3b5c0a8 code=0x7ffc0000
[  169.997042][   T31] audit: type=1326 audit(425.980:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.8.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3b5c0a8 code=0x7ffc0000
[  169.997059][   T31] audit: type=1326 audit(425.980:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.8.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=233 compat=0 ip=0xffffb3b5c0a8 code=0x7ffc0000
[  169.997074][   T31] audit: type=1326 audit(425.980:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.8.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3b5c0a8 code=0x7ffc0000
[  169.997089][   T31] audit: type=1326 audit(425.980:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.8.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb3b5c0a8 code=0x7ffc0000
[  169.997105][   T31] audit: type=1326 audit(425.980:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.8.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3b5c0a8 code=0x7ffc0000
[  169.997119][   T31] audit: type=1326 audit(425.980:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.8.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb3b5c0a8 code=0x7ffc0000
[  169.997133][   T31] audit: type=1326 audit(425.980:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.8.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3b5c0a8 code=0x7ffc0000
[  169.997149][   T31] audit: type=1326 audit(425.980:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.8.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffb3b5c0a8 code=0x7ffc0000
[  170.031867][ T6558] Bluetooth: hci5: command tx timeout
[  170.040900][ T6558] Bluetooth: hci3: command tx timeout
[  170.060360][ T8220] pim6reg: entered allmulticast mode
[  170.078296][ T1926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.078326][ T1926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.103016][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.103046][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.170847][  T287] bridge_slave_1: left allmulticast mode
[  170.172603][  T287] bridge_slave_1: left promiscuous mode
[  170.172737][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.275509][  T287] bridge_slave_0: left allmulticast mode
[  170.275542][  T287] bridge_slave_0: left promiscuous mode
[  170.275645][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.287628][  T287] bridge_slave_0: left allmulticast mode
[  170.288812][  T287] bridge_slave_0: left promiscuous mode
[  170.290474][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.295728][ T8235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.295922][ T8235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.299899][  T287] bridge_slave_1: left allmulticast mode
[  170.303246][  T287] bridge_slave_1: left promiscuous mode
[  170.304566][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.308302][  T287] bridge_slave_0: left allmulticast mode
[  170.309760][  T287] bridge_slave_0: left promiscuous mode
[  170.312636][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.503678][ T8245] trusted_key: syz.5.434 sent an empty control message without MSG_MORE.
[  170.703092][  T287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.733425][  T287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.982931][  T287] bond0 (unregistering): Released all slaves
[  171.106514][  T287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.121451][  T287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.161323][  T287] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  171.192778][  T287] bond0 (unregistering): Released all slaves
[  171.321222][  T287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.371220][  T287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.411125][  T287] bond0 (unregistering): Released all slaves
[  171.467703][  T287] team0: Port device geneve0 removed
[  171.514624][  T287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.542209][  T287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.571032][  T287] bond0 (unregistering): Released all slaves
[  171.606198][ T6867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.611085][ T6867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.672185][ T8273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.673956][ T8273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.279727][ T6558] Bluetooth: hci4: command tx timeout
[  172.279780][ T6558] Bluetooth: hci2: command tx timeout
[  172.279817][ T6558] Bluetooth: hci3: command tx timeout
[  172.279843][ T6558] Bluetooth: hci5: command tx timeout
[  172.310858][ T8280] netlink: 96 bytes leftover after parsing attributes in process `syz.7.426'.
[  172.331453][ T8280] ªªªªªª: renamed from wg2 (while UP)
[  172.914369][ T6118] Bluetooth: hci0: command tx timeout
[  174.527662][ T8342] block device autoloading is deprecated and will be removed.
[  174.568089][   T52] Bluetooth: hci5: command tx timeout
[  174.575502][   T52] Bluetooth: hci2: command tx timeout
[  174.585588][   T52] Bluetooth: hci4: command tx timeout
[  174.599593][ T6558] Bluetooth: hci3: command tx timeout
[  174.900865][ T8350] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed
[  174.901411][ T8350] netlink: 64 bytes leftover after parsing attributes in process `syz.5.449'.
[  175.450985][ T8362] netlink: 172 bytes leftover after parsing attributes in process `syz.8.452'.
[  175.451027][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.452'.
[  175.451102][ T8362] netlink: 172 bytes leftover after parsing attributes in process `syz.8.452'.
[  175.451110][ T8362] netlink: 100 bytes leftover after parsing attributes in process `syz.8.452'.
[  175.451119][ T8362] netlink: 32 bytes leftover after parsing attributes in process `syz.8.452'.
[  175.507858][ T8368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.513349][ T8368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.965782][ T8380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.965979][ T8380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.980336][ T8380] netlink: 'syz.9.457': attribute type 10 has an invalid length.
[  176.234722][ T8392] netlink: 'syz.9.457': attribute type 10 has an invalid length.
[  176.264301][ T8380] 8021q: adding VLAN 0 to HW filter on device team0
[  176.266714][ T8380] bond0: (slave team0): Enslaving as an active interface with an up link
[  176.277164][ T8392] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  176.331951][ T8380] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  176.338884][ T8380] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  176.669226][ T6558] Bluetooth: hci3: command 0x0405 tx timeout
[  177.962233][ T8444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.965730][ T8444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.093455][ T8407] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  178.093485][ T8407] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  178.188637][ T8407] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  178.188667][ T8407] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  178.266341][ T8458] netlink: 'syz.5.471': attribute type 2 has an invalid length.
[  178.266378][ T8458] netlink: 116 bytes leftover after parsing attributes in process `syz.5.471'.
[  178.267703][ T8407] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  178.267723][ T8407] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  178.324528][ T2321] IPVS: starting estimator thread 0...
[  178.358675][ T8407] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  178.358704][ T8407] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  178.416565][ T8465] IPVS: using max 70 ests per chain, 168000 per kthread
[  178.437066][ T8407] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  178.437093][ T8407] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  178.995557][ T8485] netlink: 68 bytes leftover after parsing attributes in process `syz.5.477'.
[  179.970319][ T8534] netlink: 'syz.5.488': attribute type 2 has an invalid length.
[  179.970354][ T8534] netlink: 116 bytes leftover after parsing attributes in process `syz.5.488'.
[  179.999996][ T8539] netlink: 20 bytes leftover after parsing attributes in process `syz.6.492'.
[  180.018083][ T8539] vlan2: entered promiscuous mode
[  180.019524][ T8539] gretap0: entered promiscuous mode
[  180.159418][ T8550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.159598][ T8550] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.192399][ T8549] 9pnet: p9_errstr2errno: server reported unknown error 
[  180.679654][  T287] hsr_slave_0: left promiscuous mode
[  180.680717][  T287] hsr_slave_1: left promiscuous mode
[  180.682209][  T287] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.682264][  T287] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.684925][  T287] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.684946][  T287] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.690183][  T287] hsr_slave_0: left promiscuous mode
[  180.691270][  T287] hsr_slave_1: left promiscuous mode
[  180.691828][  T287] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.692069][  T287] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.695078][  T287] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.695101][  T287] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.701448][  T287] hsr_slave_0: left promiscuous mode
[  180.702387][  T287] hsr_slave_1: left promiscuous mode
[  180.703123][  T287] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.703133][  T287] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.703527][  T287] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.703535][  T287] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.721176][  T287] hsr_slave_0: left promiscuous mode
[  180.722551][  T287] hsr_slave_1: left promiscuous mode
[  180.723679][  T287] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.724935][  T287] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.728518][  T287] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.729818][  T287] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.751021][  T287] veth1_macvtap: left promiscuous mode
[  180.752789][  T287] veth1_vlan: left promiscuous mode
[  180.753851][  T287] veth0_vlan: left promiscuous mode
[  180.758743][  T287] veth1_macvtap: left promiscuous mode
[  180.758784][  T287] veth0_macvtap: left promiscuous mode
[  180.758851][  T287] veth1_vlan: left promiscuous mode
[  180.758912][  T287] veth0_vlan: left promiscuous mode
[  180.763958][  T287] veth1_macvtap: left promiscuous mode
[  180.764871][  T287] veth0_macvtap: left promiscuous mode
[  180.766387][  T287] veth1_vlan: left promiscuous mode
[  180.767358][  T287] veth0_vlan: left promiscuous mode
[  180.768729][  T287] veth1_macvtap: left promiscuous mode
[  180.769576][  T287] veth0_macvtap: left promiscuous mode
[  180.770531][  T287] veth1_vlan: left promiscuous mode
[  180.771501][  T287] veth0_vlan: left promiscuous mode
[  181.970336][  T287] team0 (unregistering): Port device team_slave_1 removed
[  182.004142][  T287] team0 (unregistering): Port device team_slave_0 removed
[  182.043209][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.045219][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.053733][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.053954][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.300354][  T287] team0 (unregistering): Port device team_slave_1 removed
[  182.312034][  T287] team0 (unregistering): Port device team_slave_0 removed
[  182.458372][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.514'.
[  182.620907][  T287] team0 (unregistering): Port device team_slave_1 removed
[  182.636749][  T287] team0 (unregistering): Port device team_slave_0 removed
[  182.707691][    C1] vcan0: j1939_tp_rxtimer: 0x0000000035d6af7d: rx timeout, send abort
[  183.140608][  T287] team0 (unregistering): Port device team_slave_1 removed
[  183.151294][  T287] team0 (unregistering): Port device team_slave_0 removed
[  183.207698][    C1] vcan0: j1939_tp_rxtimer: 0x00000000fd0a2e08: rx timeout, send abort
[  183.208733][    C1] vcan0: j1939_tp_rxtimer: 0x0000000035d6af7d: abort rx timeout. Force session deactivation
[  183.321900][ T8630] netlink: 172 bytes leftover after parsing attributes in process `syz.8.515'.
[  183.321946][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.8.515'.
[  183.322019][ T8630] netlink: 172 bytes leftover after parsing attributes in process `syz.8.515'.
[  183.322051][ T8630] netlink: 100 bytes leftover after parsing attributes in process `syz.8.515'.
[  183.322067][ T8630] netlink: 32 bytes leftover after parsing attributes in process `syz.8.515'.
[  183.549428][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.549616][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.552318][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.552473][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.553382][ T8662] Bluetooth: MGMT ver 1.23
[  183.707513][    C1] vcan0 (unregistered): j1939_tp_rxtimer: 0x00000000fd0a2e08: abort rx timeout. Force session deactivation
[  184.207725][ T8678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.207938][ T8678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.025775][ T8732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.029191][ T8732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.034632][ T8732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.036850][ T8732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.148640][  T287] IPVS: stop unused estimator thread 0...
[  187.880245][ T2411] ieee802154 phy0 wpan0: encryption failed: -22
[  187.880297][ T2411] ieee802154 phy1 wpan1: encryption failed: -22
[  188.182103][ T8814] kexec: Could not allocate control_code_buffer
[  188.359088][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.359263][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.361023][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.361176][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.462347][ T8835] vxcan1 speed is unknown, defaulting to 1000
[  188.468309][ T8835] vxcan1 speed is unknown, defaulting to 1000
[  188.471338][ T8835] vxcan1 speed is unknown, defaulting to 1000
[  188.677354][ T8835] infiniband syz2: set active
[  188.677390][ T8835] infiniband syz2: added vxcan1
[  188.679293][ T6663] vxcan1 speed is unknown, defaulting to 1000
[  188.685781][ T8835] RDS/IB: syz2: added
[  188.685933][ T8835] smc: adding ib device syz2 with port count 1
[  188.685969][ T8835] smc:    ib device syz2 port 1 has pnetid 
[  188.686903][ T8835] vxcan1 speed is unknown, defaulting to 1000
[  188.717946][ T8835] vxcan1 speed is unknown, defaulting to 1000
[  188.747217][ T6663] vxcan1 speed is unknown, defaulting to 1000
[  188.790284][ T8835] vxcan1 speed is unknown, defaulting to 1000
[  188.824796][ T8835] vxcan1 speed is unknown, defaulting to 1000
[  188.882639][ T8835] vxcan1 speed is unknown, defaulting to 1000
[  189.882143][ T8876] netlink: 300 bytes leftover after parsing attributes in process `syz.7.562'.
[  190.684090][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.685859][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.866848][   T31] kauditd_printk_skb: 10 callbacks suppressed
[  190.866883][   T31] audit: type=1326 audit(702.909:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8877 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9375c0a8 code=0x7fc00000
[  190.873765][   T31] audit: type=1326 audit(702.919:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8877 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9375c0a8 code=0x7fc00000
[  190.882276][   T31] audit: type=1326 audit(702.929:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8877 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9375c0a8 code=0x7fc00000
[  190.885813][   T31] audit: type=1326 audit(702.929:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8877 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9375c0a8 code=0x7fc00000
[  190.896194][   T31] audit: type=1326 audit(702.939:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8877 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9375c0a8 code=0x7fc00000
[  191.328044][ T8921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.331845][ T8921] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.341445][ T8921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.342435][ T8921] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.121739][ T9004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.125806][ T9004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.374695][ T9004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.377997][ T9004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.406515][ T9011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.409042][ T9011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.466800][ T9016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.466999][ T9016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.514325][ T9098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.514534][ T9098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.524106][ T9098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.524268][ T9098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.893811][ T9132] netlink: 60 bytes leftover after parsing attributes in process `syz.9.617'.
[  193.895044][ T9127] netlink: 60 bytes leftover after parsing attributes in process `syz.9.617'.
[  193.895634][ T9127] netlink: 60 bytes leftover after parsing attributes in process `syz.9.617'.
[  193.922542][ T9135] netlink: 'syz.9.618': attribute type 1 has an invalid length.
[  193.922575][ T9135] netlink: 16150 bytes leftover after parsing attributes in process `syz.9.618'.
[  193.923490][ T9135] netlink: 'syz.9.618': attribute type 1 has an invalid length.
[  193.923498][ T9135] netlink: 16150 bytes leftover after parsing attributes in process `syz.9.618'.
[  194.037075][ T9152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.038794][ T9152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.144815][ T9154] netlink: 152 bytes leftover after parsing attributes in process `syz.6.622'.
[  194.634084][ T9192] netlink: 'syz.9.629': attribute type 1 has an invalid length.
[  194.634115][ T9192] netlink: 16150 bytes leftover after parsing attributes in process `syz.9.629'.
[  194.634519][ T9192] netlink: 'syz.9.629': attribute type 1 has an invalid length.
[  194.634529][ T9192] netlink: 16150 bytes leftover after parsing attributes in process `syz.9.629'.
[  194.675370][   T31] audit: type=1326 audit(706.711:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9195 comm="syz.9.631" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075c0a8 code=0x7ffc0000
[  194.675424][   T31] audit: type=1326 audit(706.711:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9195 comm="syz.9.631" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075c0a8 code=0x7ffc0000
[  194.675461][   T31] audit: type=1326 audit(706.711:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9195 comm="syz.9.631" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=15 compat=0 ip=0xffff8075c0a8 code=0x7ffc0000
[  194.675491][   T31] audit: type=1326 audit(706.711:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9195 comm="syz.9.631" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075c0a8 code=0x7ffc0000
[  194.675509][   T31] audit: type=1326 audit(706.711:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9195 comm="syz.9.631" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075c0a8 code=0x7ffc0000
[  194.783303][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.785462][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.790302][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.790498][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.911029][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.911206][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.321965][ T9228] netlink: 152 bytes leftover after parsing attributes in process `syz.6.635'.
[  195.608999][ T9256] netlink: 'syz.6.637': attribute type 12 has an invalid length.
[  195.799439][ T9260] netlink: 'syz.7.640': attribute type 1 has an invalid length.
[  195.801079][ T9260] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.640'.
[  195.804004][ T9260] netlink: 'syz.7.640': attribute type 1 has an invalid length.
[  195.805651][ T9260] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.640'.
[  195.856700][ T9270] loop8: detected capacity change from 0 to 512
[  195.865331][ T9270] EXT4-fs: Ignoring removed orlov option
[  195.902593][ T9270] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.473088][ T9302] netlink: 152 bytes leftover after parsing attributes in process `syz.5.646'.
[  196.613171][ T9309] vxcan1 speed is unknown, defaulting to 1000
[  196.718693][ T7959] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.866708][ T9323] netlink: 'syz.8.652': attribute type 1 has an invalid length.
[  196.871818][ T9323] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.652'.
[  196.872299][ T9323] netlink: 'syz.8.652': attribute type 1 has an invalid length.
[  196.872315][ T9323] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.652'.
[  197.041629][   T31] kauditd_printk_skb: 9 callbacks suppressed
[  197.041666][   T31] audit: type=1326 audit(709.072:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9313 comm="syz.6.650" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75c0a8 code=0x7ffc0000
[  197.041694][   T31] audit: type=1326 audit(709.072:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9313 comm="syz.6.650" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75c0a8 code=0x7ffc0000
[  197.041712][   T31] audit: type=1326 audit(709.072:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9313 comm="syz.6.650" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffaa75c0a8 code=0x7ffc0000
[  197.041729][   T31] audit: type=1326 audit(709.082:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9313 comm="syz.6.650" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75c0a8 code=0x7ffc0000
[  197.041744][   T31] audit: type=1326 audit(709.082:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9313 comm="syz.6.650" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa75c0a8 code=0x7ffc0000
[  197.881631][ T9358] netlink: 'syz.9.659': attribute type 2 has an invalid length.
[  197.881663][ T9358] netlink: 116 bytes leftover after parsing attributes in process `syz.9.659'.
[  197.986571][ T9382] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.665'.
[  197.987394][ T9382] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.665'.
[  198.044411][ T9364] loop6: detected capacity change from 0 to 40427
[  198.046015][ T9364] f2fs: Unknown parameter '0x000000000000000300000000000000000003'
[  198.801256][ T9420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.802958][ T9420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.804920][ T9420] netlink: 104 bytes leftover after parsing attributes in process `syz.6.671'.
[  198.931898][ T9436] validate_nla: 3 callbacks suppressed
[  198.932167][ T9436] netlink: 'syz.8.678': attribute type 1 has an invalid length.
[  198.932662][ T9436] netlink: 'syz.8.678': attribute type 1 has an invalid length.
[  199.426517][ T9446] syz.9.681 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  199.867506][ T9466] netlink: 'syz.6.686': attribute type 2 has an invalid length.
[  200.410696][ T9478] binder: BINDER_SET_CONTEXT_MGR already set
[  200.410725][ T9478] binder: 9455:9478 ioctl 4018620d 20004a80 returned -16
[  200.448105][ T6661] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  200.454646][ T9476] syz.7.689: attempt to access beyond end of device
[  200.454646][ T9476] loop15: rw=0, sector=0, nr_sectors = 1 limit=0
[  200.459563][ T9476] FAT-fs (loop15): unable to read boot sector
[  200.468463][ T6661] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  200.616515][ T9483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  201.021173][ T9527] __nla_validate_parse: 4 callbacks suppressed
[  201.021220][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.9.700'.
[  201.722184][ T9533] vhci_hcd: invalid port number 96
[  201.723878][ T9533] vhci_hcd: default hub control req: 6031 vfffc i0060 l0
[  201.903315][ T9513] netlink: 'syz.7.697': attribute type 2 has an invalid length.
[  201.903351][ T9513] netlink: 116 bytes leftover after parsing attributes in process `syz.7.697'.
[  201.927514][ T9537] syzkaller0: entered promiscuous mode
[  201.927542][ T9537] syzkaller0: entered allmulticast mode
[  202.219425][ T6663] IPVS: starting estimator thread 0...
[  202.330086][ T9581] IPVS: using max 57 ests per chain, 136800 per kthread
[  202.812436][ T9621] ------------[ cut here ]------------
[  202.812461][ T
** replaying previous printk message **
[  202.812461][ T9621] verifier bug: not inlined functions bpf_probe_read_user#112 is missing func(1)
[  202.813943][ T9621] WARNING: CPU: 1 PID: 9621 at kernel/bpf/verifier.c:22840 bpf_check+0x1559c/0x15d8c
[  202.817486][ T9621] Modules linked in:
[  202.818076][ T9621] CPU: 1 UID: 0 PID: 9621 Comm: syz.7.719 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
[  202.819678][ T9621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[  202.821152][ T9621] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
[  202.822328][ T9621] pc : bpf_check+0x1559c/0x15d8c
[  202.823058][ T9621] lr : bpf_check+0x1559c/0x15d8c
[  202.823805][ T9621] sp : ffff80009d117480
[  202.824455][ T9621] x29: ffff80009d117980 x28: dfff800000000000 x27: 0000000000000006
[  202.825682][ T9621] x26: 1ffff00013889612 x25: ffff80009c44b094 x24: ffff00010bc48008
[  202.826917][ T9621] x23: ffff80009c44b090 x22: ffff80008b144140 x21: ffff800092df4000
[  202.828181][ T9621] x20: ffff80009c44b094 x19: 1ffff00013889612 x18: 1fffe000337a0688
[  202.829452][ T9621] x17: ffff80008f7be000 x16: ffff80008b007230 x15: 0000000000000001
[  202.830740][ T9621] x14: 1fffe000337a3108 x13: 0000000000000000 x12: 0000000000000000
[  202.832011][ T9621] x11: 0000000000080000 x10: 0000000000000003 x9 : a409046750afc900
[  202.833137][ T9621] x8 : a409046750afc900 x7 : ffff800080491074 x6 : 0000000000000000
[  202.834364][ T9621] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010
[  202.835628][ T9621] x2 : ffff80009d117040 x1 : ffff80008b6577c0 x0 : 0000000000000001
[  202.836893][ T9621] Call trace:
[  202.837383][ T9621]  bpf_check+0x1559c/0x15d8c (P)
[  202.838112][ T9621]  bpf_prog_load+0xec8/0x13fc
[  202.838897][ T9621]  __sys_bpf+0x450/0x628
[  202.839583][ T9621]  __arm64_sys_bpf+0x80/0x98
[  202.840303][ T9621]  invoke_syscall+0x98/0x2b8
[  202.841081][ T9621]  el0_svc_common+0x130/0x23c
[  202.841864][ T9621]  do_el0_svc+0x48/0x58
[  202.842545][ T9621]  el0_svc+0x58/0x180
[  202.843220][ T9621]  el0t_64_sync_handler+0x84/0x12c
[  202.844021][ T9621]  el0t_64_sync+0x198/0x19c
[  202.844680][ T9621] irq event stamp: 368
[  202.845295][ T9621] hardirqs last  enabled at (367): [<ffff800080491108>] finish_lock_switch+0xb0/0x1c0
[  202.846881][ T9621] hardirqs last disabled at (368): [<ffff80008b001bfc>] el1_brk64+0x1c/0x48
[  202.848302][ T9621] softirqs last  enabled at (236): [<ffff800080201608>] local_bh_enable+0x10/0x34
[  202.849731][ T9621] softirqs last disabled at (234): [<ffff8000802015d4>] local_bh_disable+0x10/0x34
[  202.851240][ T9621] ---[ end trace 0000000000000000 ]---
[  202.852184][    C1] vkms_vblank_simulate: vblank timer overrun