last executing test programs:

1m47.658200453s ago: executing program 1 (id=68):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2711, @host}, 0x10)
r4 = accept(r2, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r4}, 0x47)
recvmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r6}, 0x10)
setsockopt$sock_attach_bpf(r1, 0x29, 0x14, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x15, 0x0, 0x0)

1m43.632638357s ago: executing program 1 (id=74):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000940)={[{@umask={'umask', 0x3d, 0x9}}, {@nls={'nls', 0x3d, 'cp862'}}, {@nodecompose}, {@gid}]}, 0x1, 0x6e4, &(0x7f0000000bc0)="$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")
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000013c0)=ANY=[@ANYBLOB='osx.:'], 0x0, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
cachestat(r3, &(0x7f0000000280)={0xffffffffffff8632, 0x401}, &(0x7f00000002c0), 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
open$dir(0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001a0000000c000180080001"], 0x20}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
linkat(r8, &(0x7f0000000180)='./file1\x00', r8, &(0x7f0000000640)='./bus\x00', 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3015840, &(0x7f0000000180)={[{@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000001}}, {@jqfmt_vfsold}, {@norecovery}, {@inlinecrypt}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'norecovery'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@appraise}]}, 0x3, 0x4c2, &(0x7f0000000780)="$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")

1m40.502008986s ago: executing program 1 (id=87):
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, r0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r1=>0x0}, 0x0)
lchown(&(0x7f0000000240)='./file0\x00', r0, r1)
r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3f, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x300f})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
set_mempolicy(0x3, 0x0, 0x7)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x204000, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x101}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}]}, 0xfe, 0x451, &(0x7f00000016c0)="$eJzs3M9PHFUcAPDv7rK0tEWw/iy2ilYj8QcU+sMevNRo4kETEz3UeEKgDXZbTMHENkTRAx5NE+/Go4l/gRfrxagnE696NybEcLF6WjO7M3SBXVhgYWv380kG3tv3Nu99Z+btvn2zswF0rMHkTy7iUET8FhF91ezqCoPVf7eW5yf+WZ6fyEW5/OZfuUq9v5fnJ7Kq2fMOVjPl8gbtLr4TMV4qTV1N8yNzl98fmb12/fnpy+MXpy5OXRk7e/bUyWPdZ8ZOtyTO3qSvAx/NHD3y6ts3Xp84f+Pdn75J+nsoLa+No1UGq3u3rqda3Vib9dakc11t7AhbUoiI5HAVK+O/LwrRs1LWF6982tbOAbuqXM6X9zUuXigDd7Fkog50ouyNPvn8m217NPW4Iyydi5V1jFvpVi3pinxap5h+RtoNgxFxfuHfL5MtdmkdAgCg1s1zEfFcvflfPh6sqXdPem2oPyLujYjDEXFfRNwfEQ9EVOo+FBEPb7H9tVdI1s9/yn3bCqxJyfzvxfTa1ur5Xzb7i/5CmuutxF/MXZguTZ1I98lQFPcl+dEN2vj+5V8/b1RWO/9LtqT9bC6Y9uPPrjULdJPjc+M7ibnW0icRA1314s+tzHmT+fGRiBjYZhvTz3x9tFFZ/6bxb6AFk/LyVxFPV4//QqyJP5NreH1y9IUzY6dH9kdp6sRIdlas9/Mvi280an/z47+7lm6W40Dd838l/v7c/ojZa9cvVa7Xzm69jcXfP2v4mWa753937q1Kujt97MPxubmroxHdudfWPz52+7lZPqufnP9Dx+uP/8Nxe088EhHJSXwsIh6NiMfSvj8eEU9ExPEN4v/xpSff23r8G6zKt1AS/+Rmxz9qj//WE4VLP3xbt/Fis8f/VCU1lD7SzOtfsx3c4e4DAACA/4V85TvwufzwSjqfHx6OWKis7R7Il2Zm5569MPPBlcnqd+X7o5jPVrr6atZDR9O1vCw/tiZ/Ml03/qLQU8kPT8yUJtsdPHS4g9n4L6we/4k/Cu3uHbDr3K8Fncv4h85l/EPnMv6hcxn/0Lnqjf+P29APYO9t8v7fs1f9APae+T90LuMfOpfxDx2p4b3x+R3d8i/RpsR33Tv7rYbmE5G/Q0K+axLFqFvU1fSPWWwzsa9uUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrjvwAAAP//gk3jgQ==")
lseek(0xffffffffffffffff, 0x0, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0b010510"], 0xe)
accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040))
openat$hwrng(0xffffffffffffff9c, 0x0, 0x400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$alg(0x26, 0x5, 0x0)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
pipe(0x0)

1m36.387601428s ago: executing program 1 (id=92):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100"], 0x101c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
read$FUSE(r2, &(0x7f0000001680)={0x2020}, 0x2020)
setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), &(0x7f0000000280)=ANY=[@ANYBLOB="0405"], 0x2, 0x0)
readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/153, 0x99)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000001440)='rxrpc\x00', 0x0, &(0x7f0000000000)="0100000000f61c4e6b7bc991e731c1a7a7908d092bde0d11", 0x4e34, r7)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount$afs(&(0x7f0000000080)=@cell={0x25, '', 'syz0', '.backup'}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, 0x0)
recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)}, 0x2)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)="02", 0x1}], 0x1}, 0x0)
write$P9_RGETLOCK(r2, &(0x7f0000000540)=ANY=[], 0x25)

3.808971985s ago: executing program 1 (id=98):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
lremovexattr(0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0xf, 0x0, 0x0, 0x8, 0x1}]}}, 0x0, 0x26, 0x0, 0x0, 0x7, 0x0, @void, @value}, 0x28)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xea, 0xc2, 0x74, 0x40, 0xfd9, 0x2c, 0x518f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x84, 0xea, 0xa4}}]}}]}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x4, &(0x7f0000000040))
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1b1)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0xffffffffe4e875cc, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0x400000000, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x400000, 0x4000000000000003, 0x4, 0xc11a, 0x6], 0x0, 0x34300})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1)

2.089283337s ago: executing program 2 (id=127):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="110000000d0000000a0000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000006974d481e05c97", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00@'], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400000008"], 0x48)

1.555431917s ago: executing program 0 (id=132):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x814}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

1.460345748s ago: executing program 4 (id=133):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)={[{0x2b, 'pids'}, {0x2d, 'rdma'}, {0x2b, 'memory'}]}, 0x14)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="110000000400000004000000ff00000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00402a718300"/28], 0x48)

1.172857934s ago: executing program 0 (id=135):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x814}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240))

1.10547771s ago: executing program 4 (id=136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r3}, 0x10)
write$cgroup_int(r2, &(0x7f0000000200), 0x43451)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r5}, 0x10)
write$cgroup_int(r4, &(0x7f0000000200), 0x43451)

996.938928ms ago: executing program 3 (id=138):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f0000001a80)='%pB    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

939.785736ms ago: executing program 2 (id=139):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, 0x0, &(0x7f00000000c0)=""/109}, 0x20)

802.077981ms ago: executing program 3 (id=140):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x7b)

801.655336ms ago: executing program 0 (id=141):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000040000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='console\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

779.973293ms ago: executing program 2 (id=142):
bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000480)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

653.849408ms ago: executing program 4 (id=143):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

582.20611ms ago: executing program 2 (id=144):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

530.320878ms ago: executing program 3 (id=145):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x880, 0x0)
close(r2)

441.974922ms ago: executing program 2 (id=146):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

386.386867ms ago: executing program 4 (id=147):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x2, 0x7, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

385.985018ms ago: executing program 0 (id=148):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)

385.496268ms ago: executing program 3 (id=149):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

281.053959ms ago: executing program 4 (id=150):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

259.798677ms ago: executing program 0 (id=151):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

174.022328ms ago: executing program 1 (id=152):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001409)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x63, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
close(0x3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x4d, 0x8c, &(0x7f0000000180)="bf61e81b2c842955139551df3b67b7007248449db284d0513bf7e11888c0354ced76babbba9980de9217db8fc4b6635c598044769a06d0e54862b4b3db96a49bd79f18c110f65894714039ca63", &(0x7f0000000300)=""/140, 0x1, 0x0, 0x6, 0x33, &(0x7f0000000200)="a2aac41d3403", &(0x7f0000000280)="dfaec512b1abd93cfe7d8222ebd7f478fb54c9f1927a24b05b624e266f5685c7e703c55cbd3cb1cf15ce0485019670dff3776b", 0x3}, 0x50)
syz_open_procfs$namespace(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
syz_clone(0x43b00000, 0x0, 0x5b, 0x0, 0x0, 0x0)

173.53243ms ago: executing program 3 (id=153):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3}, &(0x7f00000008c0), &(0x7f0000000900)=r2}, 0x20)

127.360848ms ago: executing program 2 (id=154):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x80000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

103.163901ms ago: executing program 4 (id=155):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffff9d9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

18.138277ms ago: executing program 0 (id=156):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0xfffffffffffffd00, 0x0, 0x0, 0x0, 0x0, 0x82, 0x8, 0xfffffffffffffd77, 0x0}}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f0000000780)=""/135}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

0s ago: executing program 3 (id=157):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f00000009c0)={&(0x7f0000000600)=@id, 0x10, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

  57.767502][ T5237] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   57.778885][ T5237] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   57.789815][ T5237] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   57.806391][ T5237] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   57.905371][ T5232] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.913904][ T5232] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.935688][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.946185][ T5232] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.966732][ T5232] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.980834][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.012327][ T5228] 8021q: adding VLAN 0 to HW filter on device team0
[   58.025732][ T5227] 8021q: adding VLAN 0 to HW filter on device team0
[   58.053505][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.060695][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.072769][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.079834][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.099311][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.106422][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.145345][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.152464][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.189528][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.222854][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.265494][ T5244] 8021q: adding VLAN 0 to HW filter on device team0
[   58.280214][ T5237] 8021q: adding VLAN 0 to HW filter on device team0
[   58.300642][ T5227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.339890][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.347023][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.365803][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.372911][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.381930][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.389031][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.465261][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.472424][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.507569][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.549537][ T5232] 8021q: adding VLAN 0 to HW filter on device team0
[   58.597721][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.604839][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.625518][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.652531][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.659629][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.706760][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.836457][ T5228] veth0_vlan: entered promiscuous mode
[   58.872257][ T5227] veth0_vlan: entered promiscuous mode
[   58.888180][ T5228] veth1_vlan: entered promiscuous mode
[   58.929382][ T5227] veth1_vlan: entered promiscuous mode
[   58.959995][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.007637][ T5228] veth0_macvtap: entered promiscuous mode
[   59.020848][ T5228] veth1_macvtap: entered promiscuous mode
[   59.067362][ T5227] veth0_macvtap: entered promiscuous mode
[   59.073989][ T5239] Bluetooth: hci0: command tx timeout
[   59.074055][ T5241] Bluetooth: hci3: command tx timeout
[   59.079378][ T5239] Bluetooth: hci2: command tx timeout
[   59.097827][ T5227] veth1_macvtap: entered promiscuous mode
[   59.108436][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.130755][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.140471][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.158781][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.170131][ T5239] Bluetooth: hci4: command tx timeout
[   59.170437][ T5241] Bluetooth: hci1: command tx timeout
[   59.180479][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.193068][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.213844][ T5244] veth0_vlan: entered promiscuous mode
[   59.229414][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.254910][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.267009][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.278724][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.290153][ T5228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.300124][ T5228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.311453][ T5228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.320143][ T5228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.335478][ T5227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.344285][ T5227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.355068][ T5227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.364136][ T5227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.376715][ T5244] veth1_vlan: entered promiscuous mode
[   59.502198][ T5244] veth0_macvtap: entered promiscuous mode
[   59.543283][ T5244] veth1_macvtap: entered promiscuous mode
[   59.614399][ T5232] veth0_vlan: entered promiscuous mode
[   59.624145][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.635291][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.648747][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.655715][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.689782][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.700820][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.711279][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.729037][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.739745][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.766034][ T5237] veth0_vlan: entered promiscuous mode
[   59.785310][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.797507][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.807736][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.818317][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.830374][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.839151][ T5232] veth1_vlan: entered promiscuous mode
[   59.848228][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.856774][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.860511][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.877323][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.879867][ T5237] veth1_vlan: entered promiscuous mode
[   59.915923][ T5244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.930136][ T5244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.939269][ T5244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.948250][ T5244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.994544][ T5232] veth0_macvtap: entered promiscuous mode
[   60.000128][ T5228] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.003085][ T5237] veth0_macvtap: entered promiscuous mode
[   60.033661][ T5232] veth1_macvtap: entered promiscuous mode
[   60.049190][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.059757][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.088151][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.109393][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.119736][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.130706][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.150362][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.170550][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.181494][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.214550][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.225839][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.249624][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.267626][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.281407][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.315664][ T5314] loop0: detected capacity change from 0 to 8192
[   60.345867][ T5237] veth1_macvtap: entered promiscuous mode
[   60.353054][ T5314] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   60.367009][ T5232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.390378][ T5232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.408025][ T5232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.418090][ T5232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.432553][ T5315] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure
[   60.473479][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.500780][   T29] audit: type=1326 audit(1728300362.113:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5313 comm="syz.2.3" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18fa57dff9 code=0x0
[   60.501955][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.541282][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.558464][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.570465][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.586872][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.597981][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.609776][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.622289][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.666247][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.691872][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.706905][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.718115][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.733357][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.747151][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.773888][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.786418][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.798703][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.822607][ T5237] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.832145][ T5237] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.840854][ T5237] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.849656][ T5237] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.880385][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.946717][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.056255][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.073637][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.158097][ T5241] Bluetooth: hci3: command tx timeout
[   61.158378][ T5241] Bluetooth: hci0: command tx timeout
[   61.158638][ T5241] Bluetooth: hci2: command tx timeout
[   61.522300][ T5239] Bluetooth: hci1: command tx timeout
[   61.528477][ T5239] Bluetooth: hci4: command tx timeout
[   61.831567][ T5314] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[   61.840488][ T5314] FAT-fs (loop0): Filesystem has been set read-only
[   61.849305][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.851422][ T5316] can: request_module (can-proto-5) failed.
[   61.865175][ T5314] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[   61.882728][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.894553][ T5314] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[   61.919679][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.942054][ T5322] loop2: detected capacity change from 0 to 4096
[   61.943187][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.067508][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.078535][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.159888][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.171387][ T5322] EXT4-fs: Ignoring removed oldalloc option
[   62.197014][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.202398][ T5322] EXT4-fs (loop2): Test dummy encryption mode enabled
[   62.249946][ T5322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.320565][ T5329] loop3: detected capacity change from 0 to 4096
[   62.331771][ T5334] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   62.378547][ T5329] =======================================================
[   62.378547][ T5329] WARNING: The mand mount option has been deprecated and
[   62.378547][ T5329]          and is ignored by this kernel. Remove the mand
[   62.378547][ T5329]          option from the mount to silence this warning.
[   62.378547][ T5329] =======================================================
[   62.458400][ T5329] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[   62.637818][ T5329] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   62.662764][ T5329] ntfs3(loop3): volume is dirty and "force" flag is not set!
[   62.724923][ T5230] libceph: connect (1)[c::]:6789 error -101
[   62.732698][ T5230] libceph: mon0 (1)[c::]:6789 connect error
[   62.740786][ T5230] libceph: connect (1)[c::]:6789 error -101
[   62.747975][ T5230] libceph: mon0 (1)[c::]:6789 connect error
[   63.016621][ T5282] libceph: connect (1)[c::]:6789 error -101
[   63.031724][ T5228] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[   63.049146][ T5334] hsr0: entered promiscuous mode
[   63.110246][ T5282] libceph: mon0 (1)[c::]:6789 connect error
[   63.124229][ T5329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'.
[   63.175800][ T5316] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[   63.204355][ T5344] ext4: Unknown parameter 'À'
[   63.231984][ T5348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'.
[   63.232666][ T5241] Bluetooth: hci2: command tx timeout
[   63.247074][ T5239] Bluetooth: hci0: command tx timeout
[   63.253935][ T5239] Bluetooth: hci3: command tx timeout
[   63.271599][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   63.281495][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   63.316048][ T5331] hsr0: left promiscuous mode
[   63.331549][   T29] audit: type=1326 audit(1728300364.953:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ee97dff9 code=0x7ffc0000
[   63.372776][   T29] audit: type=1326 audit(1728300364.953:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ee97dff9 code=0x7ffc0000
[   63.415376][   T29] audit: type=1326 audit(1728300364.953:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f37ee97dff9 code=0x7ffc0000
[   63.493974][   T29] audit: type=1326 audit(1728300364.953:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ee97dff9 code=0x7ffc0000
[   63.518504][ T5348] loop4: detected capacity change from 0 to 4096
[   63.539407][ T5359] loop0: detected capacity change from 0 to 512
[   63.550553][ T5227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.550824][   T29] audit: type=1326 audit(1728300364.953:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ee97dff9 code=0x7ffc0000
[   63.583092][ T5241] Bluetooth: hci4: command tx timeout
[   63.588468][ T5241] Bluetooth: hci1: command tx timeout
[   63.641921][   T29] audit: type=1326 audit(1728300364.953:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f37ee97dff9 code=0x7ffc0000
[   63.684808][ T5309] libceph: connect (1)[c::]:6789 error -101
[   63.690875][ T5309] libceph: mon0 (1)[c::]:6789 connect error
[   63.800879][ T5359] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002]
[   63.834550][   T29] audit: type=1326 audit(1728300364.953:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ee97dff9 code=0x7ffc0000
[   63.856520][   T29] audit: type=1326 audit(1728300364.953:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ee97dff9 code=0x7ffc0000
[   63.880138][   T29] audit: type=1326 audit(1728300364.953:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37ee97dff9 code=0x7ffc0000
[   63.902249][ T5359] System zones: 0-2, 18-18, 34-35
[   63.919174][ T5366] loop1: detected capacity change from 0 to 128
[   64.319026][ T5348] ntfs3(loop4): failed to convert "0080" to macceltic
[   64.319516][ T5359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.328017][ T5348] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[   64.358207][ T5338] ceph: No mds server is up or the cluster is laggy
[   64.369893][ T5359] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.406045][ T5348] ntfs3(loop4): failed to convert name for inode 1e.
[   64.428585][ T5359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.586464][ T5375] hsr0: entered promiscuous mode
[   64.913144][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[   64.982444][ T5370] hsr0: left promiscuous mode
[   65.072111][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[   65.080696][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   65.211503][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   65.274401][ T5380] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   65.358141][ T5383] Zero length message leads to an empty skb
[   65.619590][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   65.966931][ T5368] loop2: detected capacity change from 0 to 40427
[   66.010772][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   66.031852][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   66.104859][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   66.536465][ T5391] hsr0: entered promiscuous mode
[   66.552294][ T5390] hsr0: left promiscuous mode
[   66.630200][ T5368] F2FS-fs (loop2): Found nat_bits in checkpoint
[   66.649673][ T5396] hsr0: entered promiscuous mode
[   66.674071][ T5393] hsr0: left promiscuous mode
[   66.788258][ T5368] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   66.808177][ T5406] netlink: 'syz.0.18': attribute type 3 has an invalid length.
[   66.821584][ T5406] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.18'.
[   66.876018][ T5368] syz.2.8: attempt to access beyond end of device
[   66.876018][ T5368] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   66.909267][ T5368] syz.2.8: attempt to access beyond end of device
[   66.909267][ T5368] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   67.084595][ T5227] syz-executor: attempt to access beyond end of device
[   67.084595][ T5227] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[   67.098816][ T5422] FAULT_INJECTION: forcing a failure.
[   67.098816][ T5422] name failslab, interval 1, probability 0, space 0, times 1
[   67.098852][ T5422] CPU: 1 UID: 0 PID: 5422 Comm: syz.0.22 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0
[   67.098878][ T5422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   67.098893][ T5422] Call Trace:
[   67.098901][ T5422]  <TASK>
[   67.098910][ T5422]  dump_stack_lvl+0x241/0x360
[   67.098947][ T5422]  ? __pfx_dump_stack_lvl+0x10/0x10
[   67.098971][ T5422]  ? __pfx__printk+0x10/0x10
[   67.099003][ T5422]  ? __kmalloc_noprof+0xb5/0x4c0
[   67.099027][ T5422]  ? __pfx___might_resched+0x10/0x10
[   67.133774][ T5227] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   67.134851][ T5422]  should_fail_ex+0x3b0/0x4e0
[   67.173950][ T5422]  should_failslab+0xac/0x100
[   67.178654][ T5422]  __kmalloc_noprof+0xdd/0x4c0
[   67.183437][ T5422]  ? security_sk_alloc+0x53/0x360
[   67.188479][ T5422]  security_sk_alloc+0x53/0x360
[   67.193348][ T5422]  sk_prot_alloc+0xfa/0x210
[   67.197868][ T5422]  ? sk_alloc+0x26/0x370
[   67.202130][ T5422]  sk_alloc+0x38/0x370
[   67.206215][ T5422]  ? __pfx_genl_release+0x10/0x10
[   67.211242][ T5422]  __netlink_create+0x65/0x260
[   67.216009][ T5422]  ? __pfx_genl_release+0x10/0x10
[   67.221029][ T5422]  netlink_create+0x3ab/0x560
[   67.225704][ T5422]  ? __pfx_genl_unbind+0x10/0x10
[   67.230636][ T5422]  ? __pfx_genl_bind+0x10/0x10
[   67.235391][ T5422]  ? __sock_create+0x337/0x920
[   67.240148][ T5422]  __sock_create+0x490/0x920
[   67.244738][ T5422]  __sys_socket+0x150/0x3c0
[   67.249239][ T5422]  ? __pfx___sys_socket+0x10/0x10
[   67.254261][ T5422]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   67.260596][ T5422]  ? exc_page_fault+0x590/0x8c0
[   67.265453][ T5422]  __x64_sys_socket+0x7a/0x90
[   67.270130][ T5422]  do_syscall_64+0xf3/0x230
[   67.274630][ T5422]  ? clear_bhb_loop+0x35/0x90
[   67.279306][ T5422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.285200][ T5422] RIP: 0033:0x7f37ee97ff17
[   67.289613][ T5422] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.309210][ T5422] RSP: 002b:00007f37ef718fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[   67.317624][ T5422] RAX: ffffffffffffffda RBX: 00007f37eeb36058 RCX: 00007f37ee97ff17
[   67.325586][ T5422] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[   67.333549][ T5422] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[   67.341515][ T5422] R10: 00000000200002c0 R11: 0000000000000286 R12: 0000000000000001
[   67.349476][ T5422] R13: 0000000000000000 R14: 00007f37eeb36058 R15: 00007ffdc217e3c8
[   67.357448][ T5422]  </TASK>
[   67.378915][ T5425] FAULT_INJECTION: forcing a failure.
[   67.378915][ T5425] name failslab, interval 1, probability 0, space 0, times 1
[   67.404968][ T5425] CPU: 0 UID: 0 PID: 5425 Comm: syz.4.24 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0
[   67.414981][ T5425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   67.425048][ T5425] Call Trace:
[   67.428337][ T5425]  <TASK>
[   67.431281][ T5425]  dump_stack_lvl+0x241/0x360
[   67.435980][ T5425]  ? __pfx_dump_stack_lvl+0x10/0x10
[   67.441206][ T5425]  ? __pfx__printk+0x10/0x10
[   67.445831][ T5425]  should_fail_ex+0x3b0/0x4e0
[   67.450532][ T5425]  should_failslab+0xac/0x100
[   67.455233][ T5425]  ? skb_clone+0x20c/0x390
[   67.459667][ T5425]  kmem_cache_alloc_noprof+0x70/0x380
[   67.465072][ T5425]  skb_clone+0x20c/0x390
[   67.469344][ T5425]  __netlink_deliver_tap+0x3cc/0x7c0
[   67.472542][ T5426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'.
[   67.474641][ T5425]  ? netlink_deliver_tap+0x2e/0x1b0
[   67.488501][ T5425]  netlink_deliver_tap+0x19d/0x1b0
[   67.493638][ T5425]  netlink_unicast+0x7c4/0x990
[   67.498431][ T5425]  ? __pfx_netlink_unicast+0x10/0x10
[   67.503733][ T5425]  ? __virt_addr_valid+0x183/0x530
[   67.508865][ T5425]  ? __check_object_size+0x48e/0x900
[   67.514178][ T5425]  netlink_sendmsg+0x8e4/0xcb0
[   67.518982][ T5425]  ? __pfx_netlink_sendmsg+0x10/0x10
[   67.524297][ T5425]  ? aa_sock_msg_perm+0x91/0x160
[   67.529264][ T5425]  ? __pfx_netlink_sendmsg+0x10/0x10
[   67.534568][ T5425]  __sock_sendmsg+0x221/0x270
[   67.539271][ T5425]  ____sys_sendmsg+0x52a/0x7e0
[   67.544061][ T5425]  ? __pfx_____sys_sendmsg+0x10/0x10
[   67.549384][ T5425]  __sys_sendmmsg+0x3ab/0x730
[   67.554089][ T5425]  ? __pfx___sys_sendmmsg+0x10/0x10
[   67.559317][ T5425]  ? __pfx_lock_release+0x10/0x10
[   67.564356][ T5425]  ? kstrtouint_from_user+0x128/0x190
[   67.569777][ T5425]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[   67.575696][ T5425]  ? ksys_write+0x229/0x2b0
[   67.580221][ T5425]  ? __pfx_lock_release+0x10/0x10
[   67.585269][ T5425]  ? vfs_write+0x7bf/0xc90
[   67.589707][ T5425]  ? __mutex_unlock_slowpath+0x21d/0x750
[   67.595376][ T5425]  ? __fget_files+0x3f3/0x470
[   67.600087][ T5425]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   67.606095][ T5425]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   67.612451][ T5425]  ? do_syscall_64+0x100/0x230
[   67.617242][ T5425]  __x64_sys_sendmmsg+0xa0/0xb0
[   67.622115][ T5425]  do_syscall_64+0xf3/0x230
[   67.626651][ T5425]  ? clear_bhb_loop+0x35/0x90
[   67.631357][ T5425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.637270][ T5425] RIP: 0033:0x7f4b5db7dff9
[   67.641708][ T5425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.661334][ T5425] RSP: 002b:00007f4b5e9a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   67.669773][ T5425] RAX: ffffffffffffffda RBX: 00007f4b5dd35f80 RCX: 00007f4b5db7dff9
[   67.677763][ T5425] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000006
[   67.685761][ T5425] RBP: 00007f4b5e9a5090 R08: 0000000000000000 R09: 0000000000000000
[   67.687524][ T5418] loop3: detected capacity change from 0 to 32768
[   67.693729][ T5425] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000001
[   67.693746][ T5425] R13: 0000000000000000 R14: 00007f4b5dd35f80 R15: 00007fff4e936628
[   67.693774][ T5425]  </TASK>
[   68.092009][ T5448] FAULT_INJECTION: forcing a failure.
[   68.092009][ T5448] name failslab, interval 1, probability 0, space 0, times 0
[   68.105657][ T5448] CPU: 0 UID: 0 PID: 5448 Comm: syz.4.31 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0
[   68.115645][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   68.125706][ T5448] Call Trace:
[   68.128983][ T5448]  <TASK>
[   68.131911][ T5448]  dump_stack_lvl+0x241/0x360
[   68.136597][ T5448]  ? __pfx_dump_stack_lvl+0x10/0x10
[   68.141794][ T5448]  ? __pfx__printk+0x10/0x10
[   68.146390][ T5448]  should_fail_ex+0x3b0/0x4e0
[   68.151067][ T5448]  should_failslab+0xac/0x100
[   68.155743][ T5448]  ? skb_clone+0x20c/0x390
[   68.160154][ T5448]  kmem_cache_alloc_noprof+0x70/0x380
[   68.165527][ T5448]  skb_clone+0x20c/0x390
[   68.169764][ T5448]  __netlink_deliver_tap+0x3cc/0x7c0
[   68.175052][ T5448]  ? netlink_deliver_tap+0x2e/0x1b0
[   68.180255][ T5448]  netlink_deliver_tap+0x19d/0x1b0
[   68.185370][ T5448]  netlink_unicast+0x7c4/0x990
[   68.190138][ T5448]  ? __pfx_netlink_unicast+0x10/0x10
[   68.195419][ T5448]  ? __virt_addr_valid+0x183/0x530
[   68.200529][ T5448]  ? __check_object_size+0x48e/0x900
[   68.205815][ T5448]  netlink_sendmsg+0x8e4/0xcb0
[   68.210587][ T5448]  ? __pfx_netlink_sendmsg+0x10/0x10
[   68.215877][ T5448]  ? aa_sock_msg_perm+0x91/0x160
[   68.220820][ T5448]  ? __pfx_netlink_sendmsg+0x10/0x10
[   68.226121][ T5448]  __sock_sendmsg+0x221/0x270
[   68.230806][ T5448]  ____sys_sendmsg+0x52a/0x7e0
[   68.235573][ T5448]  ? __pfx_____sys_sendmsg+0x10/0x10
[   68.240871][ T5448]  __sys_sendmsg+0x292/0x380
[   68.245460][ T5448]  ? __pfx___sys_sendmsg+0x10/0x10
[   68.250572][ T5448]  ? __pfx_vfs_write+0x10/0x10
[   68.255349][ T5448]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   68.261678][ T5448]  ? do_syscall_64+0x100/0x230
[   68.266443][ T5448]  ? do_syscall_64+0xb6/0x230
[   68.271123][ T5448]  do_syscall_64+0xf3/0x230
[   68.275628][ T5448]  ? clear_bhb_loop+0x35/0x90
[   68.280309][ T5448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.286203][ T5448] RIP: 0033:0x7f4b5db7dff9
[   68.290615][ T5448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.310217][ T5448] RSP: 002b:00007f4b5e9a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   68.318629][ T5448] RAX: ffffffffffffffda RBX: 00007f4b5dd35f80 RCX: 00007f4b5db7dff9
[   68.326599][ T5448] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003
[   68.334563][ T5448] RBP: 00007f4b5e9a5090 R08: 0000000000000000 R09: 0000000000000000
[   68.342527][ T5448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   68.350493][ T5448] R13: 0000000000000000 R14: 00007f4b5dd35f80 R15: 00007fff4e936628
[   68.358468][ T5448]  </TASK>
[   68.431932][ T5440] hsr0: entered promiscuous mode
[   68.437328][ T5438] hsr0: left promiscuous mode
[   68.563416][ T5451] loop3: detected capacity change from 0 to 512
[   68.789847][ T5462] loop0: detected capacity change from 0 to 64
[   68.971555][ T5460] loop1: detected capacity change from 0 to 32768
[   68.992126][ T5461] FAULT_INJECTION: forcing a failure.
[   68.992126][ T5461] name failslab, interval 1, probability 0, space 0, times 0
[   69.015227][ T5462] hfs: unable to load codepage "macgaedic"
[   69.031367][ T5461] CPU: 1 UID: 0 PID: 5461 Comm: syz.4.36 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0
[   69.041386][ T5461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   69.051461][ T5461] Call Trace:
[   69.054757][ T5461]  <TASK>
[   69.057706][ T5461]  dump_stack_lvl+0x241/0x360
[   69.062403][ T5461]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.067598][ T5461]  ? __pfx__printk+0x10/0x10
[   69.072208][ T5461]  should_fail_ex+0x3b0/0x4e0
[   69.076876][ T5461]  should_failslab+0xac/0x100
[   69.081542][ T5461]  ? skb_clone+0x20c/0x390
[   69.085941][ T5461]  kmem_cache_alloc_noprof+0x70/0x380
[   69.091318][ T5461]  skb_clone+0x20c/0x390
[   69.095568][ T5461]  __netlink_deliver_tap+0x3cc/0x7c0
[   69.100869][ T5461]  ? netlink_deliver_tap+0x2e/0x1b0
[   69.106076][ T5461]  netlink_deliver_tap+0x19d/0x1b0
[   69.111185][ T5461]  netlink_unicast+0x7c4/0x990
[   69.115955][ T5461]  ? __pfx_netlink_unicast+0x10/0x10
[   69.121232][ T5461]  ? __virt_addr_valid+0x183/0x530
[   69.126329][ T5461]  ? __check_object_size+0x48e/0x900
[   69.131602][ T5461]  netlink_sendmsg+0x8e4/0xcb0
[   69.136357][ T5461]  ? __pfx_netlink_sendmsg+0x10/0x10
[   69.141632][ T5461]  ? aa_sock_msg_perm+0x91/0x160
[   69.146562][ T5461]  ? __pfx_netlink_sendmsg+0x10/0x10
[   69.151833][ T5461]  __sock_sendmsg+0x221/0x270
[   69.156501][ T5461]  ____sys_sendmsg+0x52a/0x7e0
[   69.161257][ T5461]  ? __pfx_____sys_sendmsg+0x10/0x10
[   69.166536][ T5461]  __sys_sendmmsg+0x3ab/0x730
[   69.171212][ T5461]  ? __pfx___sys_sendmmsg+0x10/0x10
[   69.176403][ T5461]  ? __pfx_lock_release+0x10/0x10
[   69.181413][ T5461]  ? kstrtouint_from_user+0x128/0x190
[   69.186785][ T5461]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[   69.192666][ T5461]  ? ksys_write+0x229/0x2b0
[   69.197154][ T5461]  ? __pfx_lock_release+0x10/0x10
[   69.202165][ T5461]  ? vfs_write+0x7bf/0xc90
[   69.206576][ T5461]  ? __mutex_unlock_slowpath+0x21d/0x750
[   69.212205][ T5461]  ? __fget_files+0x3f3/0x470
[   69.216876][ T5461]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   69.222850][ T5461]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   69.229164][ T5461]  ? do_syscall_64+0x100/0x230
[   69.233921][ T5461]  __x64_sys_sendmmsg+0xa0/0xb0
[   69.238756][ T5461]  do_syscall_64+0xf3/0x230
[   69.243249][ T5461]  ? clear_bhb_loop+0x35/0x90
[   69.247931][ T5461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.253822][ T5461] RIP: 0033:0x7f4b5db7dff9
[   69.258225][ T5461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.277822][ T5461] RSP: 002b:00007f4b5e9a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   69.286231][ T5461] RAX: ffffffffffffffda RBX: 00007f4b5dd35f80 RCX: 00007f4b5db7dff9
[   69.294190][ T5461] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[   69.302146][ T5461] RBP: 00007f4b5e9a5090 R08: 0000000000000000 R09: 0000000000000000
[   69.310105][ T5461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.318063][ T5461] R13: 0000000000000000 R14: 00007f4b5dd35f80 R15: 00007fff4e936628
[   69.326031][ T5461]  </TASK>
[   69.330472][ T5461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'.
[   69.480287][ T5474] loop4: detected capacity change from 0 to 256
[   69.487408][ T5474] exfat: Bad value for 'fmask'
[   69.524772][ T5470] loop0: detected capacity change from 0 to 1024
[   69.531714][ T5470] EXT4-fs: Ignoring removed i_version option
[   69.543446][ T5470] EXT4-fs (loop0): stripe (255) is not aligned with cluster size (16), stripe is disabled
[   69.557471][ T5460] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   69.608768][ T5470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.669447][ T5460] XFS (loop1): Ending clean mount
[   70.195176][    T8] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   70.296744][ T5470] overlay: ./file2 is not a directory
[   70.449019][ T5232] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   70.473879][    T8] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[   70.485341][    T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   70.494767][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.536542][ T5476] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   70.544541][ T5476] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   70.578336][    T8] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   70.605148][ T5505] 9pnet_fd: Insufficient options for proto=fd
[   70.661022][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.740319][ T5507] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.769043][ T5509] loop1: detected capacity change from 0 to 2048
[   70.855714][ T5476] loop2: detected capacity change from 0 to 2048
[   70.872494][ T5511] loop0: detected capacity change from 0 to 4096
[   70.885045][ T5511] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   70.917802][ T5512] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   70.941519][ T5309] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   70.968084][   T29] kauditd_printk_skb: 57 callbacks suppressed
[   70.968098][   T29] audit: type=1804 audit(1728300372.593:69): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.41" name="/newroot/8/file0/file2" dev="loop1" ino=16 res=1 errno=0
[   70.973536][ T5476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.007086][ T5230] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   71.031433][ T5476] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.072744][ T5509] NILFS (loop1): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[   71.091510][ T5511] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   71.091833][ T5309] usb 5-1: Using ep0 maxpacket: 8
[   71.098967][ T5509] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16)
[   71.111796][ T5309] usb 5-1: config index 0 descriptor too short (expected 7382, got 27)
[   71.121223][   T29] audit: type=1800 audit(1728300372.743:70): pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.26" name="file0" dev="loop2" ino=13 res=0 errno=0
[   71.123430][ T5309] usb 5-1: config 195 has an invalid descriptor of length 0, skipping remainder of the config
[   71.152838][ T5230] usb 4-1: device descriptor read/64, error -71
[   71.163667][ T5309] usb 5-1: config 195 has 1 interface, different from the descriptor's value: 23
[   71.167117][ T5509] Remounting filesystem read-only
[   71.183952][ T5309] usb 5-1: config 195 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   71.207225][ T5476] fs-verity: sha512 using implementation "sha512-avx2"
[   71.218057][ T5509] syz.1.41 (5509) used greatest stack depth: 18032 bytes left
[   71.220104][ T5309] usb 5-1: config 195 interface 0 has no altsetting 0
[   71.240306][ T5232] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[   71.241129][ T5309] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[   71.259492][ T5309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.268856][ T5309] usb 5-1: Product: syz
[   71.286197][ T5309] usb 5-1: Manufacturer: syz
[   71.303091][ T5309] usb 5-1: SerialNumber: syz
[   71.324859][ T5309] hub 5-1:195.0: bad descriptor, ignoring hub
[   71.339735][ T5309] hub 5-1:195.0: probe with driver hub failed with error -5
[   71.364580][ T5309] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[   71.401530][ T5230] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   71.453919][ T5522] FAULT_INJECTION: forcing a failure.
[   71.453919][ T5522] name failslab, interval 1, probability 0, space 0, times 0
[   71.470067][ T5522] CPU: 0 UID: 0 PID: 5522 Comm: syz.0.46 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0
[   71.480072][ T5522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   71.490143][ T5522] Call Trace:
[   71.493434][ T5522]  <TASK>
[   71.496373][ T5522]  dump_stack_lvl+0x241/0x360
[   71.501067][ T5522]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.506263][ T5522]  ? __pfx__printk+0x10/0x10
[   71.510870][ T5522]  should_fail_ex+0x3b0/0x4e0
[   71.515561][ T5522]  should_failslab+0xac/0x100
[   71.520377][ T5522]  ? skb_clone+0x20c/0x390
[   71.524814][ T5522]  kmem_cache_alloc_noprof+0x70/0x380
[   71.530211][ T5522]  skb_clone+0x20c/0x390
[   71.534446][ T5522]  __netlink_deliver_tap+0x3cc/0x7c0
[   71.539748][ T5522]  ? netlink_deliver_tap+0x2e/0x1b0
[   71.541283][ T5230] usb 4-1: device descriptor read/64, error -71
[   71.544948][ T5522]  netlink_deliver_tap+0x19d/0x1b0
[   71.544979][ T5522]  netlink_unicast+0x7c4/0x990
[   71.561081][ T5522]  ? __pfx_netlink_unicast+0x10/0x10
[   71.566460][ T5522]  ? __virt_addr_valid+0x183/0x530
[   71.571581][ T5522]  ? __check_object_size+0x48e/0x900
[   71.576870][ T5522]  netlink_sendmsg+0x8e4/0xcb0
[   71.581649][ T5522]  ? __pfx_netlink_sendmsg+0x10/0x10
[   71.586931][ T5522]  ? aa_sock_msg_perm+0x91/0x160
[   71.591886][ T5522]  ? __pfx_netlink_sendmsg+0x10/0x10
[   71.597188][ T5522]  __sock_sendmsg+0x221/0x270
[   71.601881][ T5522]  ____sys_sendmsg+0x52a/0x7e0
[   71.606672][ T5522]  ? __pfx_____sys_sendmsg+0x10/0x10
[   71.611993][ T5522]  __sys_sendmsg+0x292/0x380
[   71.616586][ T5522]  ? __pfx___sys_sendmsg+0x10/0x10
[   71.621705][ T5522]  ? __pfx_vfs_write+0x10/0x10
[   71.626487][ T5522]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   71.632833][ T5522]  ? do_syscall_64+0x100/0x230
[   71.637613][ T5522]  ? do_syscall_64+0xb6/0x230
[   71.642309][ T5522]  do_syscall_64+0xf3/0x230
[   71.646832][ T5522]  ? clear_bhb_loop+0x35/0x90
[   71.651529][ T5522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.657419][ T5522] RIP: 0033:0x7f37ee97dff9
[   71.661846][ T5522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.662108][ T5230] usb usb4-port1: attempt power cycle
[   71.681448][ T5522] RSP: 002b:00007f37ef71a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   71.681474][ T5522] RAX: ffffffffffffffda RBX: 00007f37eeb36058 RCX: 00007f37ee97dff9
[   71.681488][ T5522] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005
[   71.681501][ T5522] RBP: 00007f37ef71a090 R08: 0000000000000000 R09: 0000000000000000
[   71.681519][ T5522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.681530][ T5522] R13: 0000000000000000 R14: 00007f37eeb36058 R15: 00007ffdc217e3c8
[   71.681559][ T5522]  </TASK>
[   71.753158][ T5522] netlink: 5300 bytes leftover after parsing attributes in process `syz.0.46'.
[   71.762424][ T5522] openvswitch: netlink: ct_state flags 00050005 unsupported
[   72.218505][ T5309] gspca_zc3xx: reg_w_i err -110
[   72.222059][ T5524] hsr0: entered promiscuous mode
[   72.235851][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[   72.291776][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[   72.491937][ T5230] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   72.501769][ T5227] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[   72.552977][ T5230] usb 4-1: device descriptor read/8, error -71
[   72.585660][ T5520] hsr0: left promiscuous mode
[   72.821871][ T5230] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   72.830140][ T5309] gspca_zc3xx: Unknown sensor - set to TAS5130C
[   72.842021][ T5309] gspca_zc3xx 5-1:195.0: probe with driver gspca_zc3xx failed with error -110
[   73.081774][ T5230] usb 4-1: device descriptor read/8, error -71
[   73.168172][ T5529] loop0: detected capacity change from 0 to 4096
[   73.206431][ T5230] usb usb4-port1: unable to enumerate USB device
[   73.261299][   T25] usb 3-1: USB disconnect, device number 2
[   73.281900][ T5309] usb 5-1: reset high-speed USB device number 2 using dummy_hcd
[   73.301450][ T5531] netlink: 'syz.1.49': attribute type 1 has an invalid length.
[   73.318395][ T5517] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.331417][   T29] audit: type=1326 audit(1728300374.963:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ee97dff9 code=0x7ffc0000
[   73.435137][   T29] audit: type=1326 audit(1728300374.963:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ee97dff9 code=0x7ffc0000
[   73.457117][    C1] vkms_vblank_simulate: vblank timer overrun
[   73.478843][ T1106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.534094][   T29] audit: type=1326 audit(1728300374.963:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37ee97c990 code=0x7ffc0000
[   73.556065][    C1] vkms_vblank_simulate: vblank timer overrun
[   73.617309][ T5309] usb 5-1: failed to restore interface 0 altsetting 6 (error=-71)
[   73.639633][ T5309] usb 5-1: USB disconnect, device number 2
[   73.648684][   T29] audit: type=1326 audit(1728300374.963:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37ee97c990 code=0x7ffc0000
[   73.771318][   T29] audit: type=1326 audit(1728300374.963:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ee97dff9 code=0x7ffc0000
[   73.790289][ T5534] loop0: detected capacity change from 0 to 2048
[   73.793291][    C1] vkms_vblank_simulate: vblank timer overrun
[   73.822732][ T1106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.831608][   T29] audit: type=1326 audit(1728300374.963:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ee97dff9 code=0x7ffc0000
[   73.942588][   T29] audit: type=1326 audit(1728300374.963:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f37ee97dff9 code=0x7ffc0000
[   73.952860][ T5534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.964857][   T29] audit: type=1326 audit(1728300374.963:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ee97dff9 code=0x7ffc0000
[   74.027786][ T5537] loop3: detected capacity change from 0 to 1024
[   74.109629][ T5534] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #2: comm syz.0.50: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[   74.326904][ T5551] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.50: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   74.345957][ T1106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.405421][ T5551] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.50: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   74.450549][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.483500][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.491729][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.499501][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.508099][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   74.515783][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.691559][ T1106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.711931][ T5230] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   74.781417][ T5309] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   74.866693][ T5230] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[   74.886635][ T5230] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[   74.971432][ T5565] loop3: detected capacity change from 0 to 128
[   74.973187][ T5309] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   75.001133][ T5230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.033495][ T5309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.098556][ T5230] usb 2-1: config 0 descriptor??
[   75.124622][ T5309] usb 1-1: config 0 descriptor??
[   75.186902][ T5552] chnl_net:caif_netlink_parms(): no params data found
[   75.287069][ T1106] bridge_slave_1: left allmulticast mode
[   75.293161][ T1106] bridge_slave_1: left promiscuous mode
[   75.299907][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.373158][ T5570] syz.3.60 uses obsolete (PF_INET,SOCK_PACKET)
[   75.578873][ T1106] bridge_slave_0: left allmulticast mode
[   75.588891][ T1106] bridge_slave_0: left promiscuous mode
[   75.622552][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.737716][ T5582] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.57'.
[   76.180373][    T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   76.271642][ T5515] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[   76.331324][    T8] usb 4-1: Using ep0 maxpacket: 16
[   76.338485][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.371188][    C1] hrtimer: interrupt took 255030 ns
[   76.373382][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.425863][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   76.477181][    T8] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[   76.523118][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.570214][    T8] usb 4-1: config 0 descriptor??
[   76.593546][ T5241] Bluetooth: hci0: command tx timeout
[   76.665350][  T937] cfg80211: failed to load regulatory.db
[   76.800612][ T5570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.832407][ T5570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.187225][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.220707][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.248993][ T1106] bond0 (unregistering): Released all slaves
[   77.407151][ T5570] netlink: 'syz.3.60': attribute type 58 has an invalid length.
[   77.475622][ T5230] usb 2-1: string descriptor 0 read error: -71
[   77.546501][ T5230] usb 2-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[   77.592236][ T5230] usb 2-1: No valid video chain found.
[   77.614070][ T5230] usb 2-1: USB disconnect, device number 2
[   77.638697][    T8] usbhid 4-1:0.0: can't add hid device: -71
[   77.651395][    T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   77.688231][    T8] usb 4-1: USB disconnect, device number 6
[   77.818325][ T5592] FAULT_INJECTION: forcing a failure.
[   77.818325][ T5592] name failslab, interval 1, probability 0, space 0, times 0
[   77.832160][ T5592] CPU: 0 UID: 0 PID: 5592 Comm: syz.1.61 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0
[   77.842203][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   77.852282][ T5592] Call Trace:
[   77.855571][ T5592]  <TASK>
[   77.858501][ T5592]  dump_stack_lvl+0x241/0x360
[   77.863198][ T5592]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.868422][ T5592]  ? __pfx__printk+0x10/0x10
[   77.873047][ T5592]  should_fail_ex+0x3b0/0x4e0
[   77.877749][ T5592]  should_failslab+0xac/0x100
[   77.882452][ T5592]  ? skb_clone+0x20c/0x390
[   77.886888][ T5592]  kmem_cache_alloc_noprof+0x70/0x380
[   77.892292][ T5592]  skb_clone+0x20c/0x390
[   77.896548][ T5592]  __netlink_deliver_tap+0x3cc/0x7c0
[   77.901850][ T5592]  ? netlink_deliver_tap+0x2e/0x1b0
[   77.907073][ T5592]  netlink_deliver_tap+0x19d/0x1b0
[   77.912210][ T5592]  netlink_unicast+0x7c4/0x990
[   77.917002][ T5592]  ? __pfx_netlink_unicast+0x10/0x10
[   77.922299][ T5592]  ? __virt_addr_valid+0x183/0x530
[   77.927415][ T5592]  ? __check_object_size+0x48e/0x900
[   77.932700][ T5592]  netlink_sendmsg+0x8e4/0xcb0
[   77.937470][ T5592]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.942760][ T5592]  ? aa_sock_msg_perm+0x91/0x160
[   77.947699][ T5592]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.952980][ T5592]  __sock_sendmsg+0x221/0x270
[   77.957656][ T5592]  ____sys_sendmsg+0x52a/0x7e0
[   77.962424][ T5592]  ? __pfx_____sys_sendmsg+0x10/0x10
[   77.967722][ T5592]  __sys_sendmsg+0x292/0x380
[   77.972305][ T5592]  ? __pfx___sys_sendmsg+0x10/0x10
[   77.977424][ T5592]  ? __pfx_vfs_write+0x10/0x10
[   77.982207][ T5592]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   77.988532][ T5592]  ? do_syscall_64+0x100/0x230
[   77.993296][ T5592]  ? do_syscall_64+0xb6/0x230
[   77.997975][ T5592]  do_syscall_64+0xf3/0x230
[   78.002478][ T5592]  ? clear_bhb_loop+0x35/0x90
[   78.007154][ T5592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.013046][ T5592] RIP: 0033:0x7f42de57dff9
[   78.017456][ T5592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.037056][ T5592] RSP: 002b:00007f42df309038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   78.045464][ T5592] RAX: ffffffffffffffda RBX: 00007f42de736058 RCX: 00007f42de57dff9
[   78.053426][ T5592] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004
[   78.061391][ T5592] RBP: 00007f42df309090 R08: 0000000000000000 R09: 0000000000000000
[   78.069353][ T5592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   78.077313][ T5592] R13: 0000000000000001 R14: 00007f42de736058 R15: 00007ffcbc67e678
[   78.085291][ T5592]  </TASK>
[   78.183350][ T5309] usb 1-1: Cannot set autoneg
[   78.188485][ T5309] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   78.189493][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.222747][ T5552] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.238382][ T5309] usb 1-1: USB disconnect, device number 2
[   78.244345][ T5552] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.244470][ T5552] bridge_slave_0: entered allmulticast mode
[   78.312252][ T5552] bridge_slave_0: entered promiscuous mode
[   78.463104][ T5552] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.485847][ T5552] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.500277][ T5552] bridge_slave_1: entered allmulticast mode
[   78.507464][ T5552] bridge_slave_1: entered promiscuous mode
[   78.618252][ T1106] hsr_slave_0: left promiscuous mode
[   78.634497][ T5603] binder: 5597:5603 ioctl c0306201 20000080 returned -14
[   78.675695][ T5241] Bluetooth: hci0: command tx timeout
[   78.770884][ T5607] FAULT_INJECTION: forcing a failure.
[   78.770884][ T5607] name failslab, interval 1, probability 0, space 0, times 0
[   78.783646][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: syz.1.65 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0
[   78.793635][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   78.803696][ T5607] Call Trace:
[   78.806980][ T5607]  <TASK>
[   78.809917][ T5607]  dump_stack_lvl+0x241/0x360
[   78.814615][ T5607]  ? __pfx_dump_stack_lvl+0x10/0x10
[   78.819828][ T5607]  ? __pfx__printk+0x10/0x10
[   78.824443][ T5607]  should_fail_ex+0x3b0/0x4e0
[   78.829141][ T5607]  should_failslab+0xac/0x100
[   78.833838][ T5607]  ? skb_clone+0x20c/0x390
[   78.838261][ T5607]  kmem_cache_alloc_noprof+0x70/0x380
[   78.843652][ T5607]  skb_clone+0x20c/0x390
[   78.847906][ T5607]  __netlink_deliver_tap+0x3cc/0x7c0
[   78.853213][ T5607]  ? netlink_deliver_tap+0x2e/0x1b0
[   78.858420][ T5607]  netlink_deliver_tap+0x19d/0x1b0
[   78.863548][ T5607]  netlink_unicast+0x7c4/0x990
[   78.868331][ T5607]  ? __pfx_netlink_unicast+0x10/0x10
[   78.873622][ T5607]  ? __virt_addr_valid+0x183/0x530
[   78.878744][ T5607]  ? __check_object_size+0x48e/0x900
[   78.884051][ T5607]  netlink_sendmsg+0x8e4/0xcb0
[   78.888838][ T5607]  ? __pfx_netlink_sendmsg+0x10/0x10
[   78.894138][ T5607]  ? aa_sock_msg_perm+0x91/0x160
[   78.899095][ T5607]  ? __pfx_netlink_sendmsg+0x10/0x10
[   78.904391][ T5607]  __sock_sendmsg+0x221/0x270
[   78.909082][ T5607]  ____sys_sendmsg+0x52a/0x7e0
[   78.913862][ T5607]  ? __pfx_____sys_sendmsg+0x10/0x10
[   78.919178][ T5607]  __sys_sendmsg+0x292/0x380
[   78.923775][ T5607]  ? __pfx___sys_sendmsg+0x10/0x10
[   78.928907][ T5607]  ? __pfx_vfs_write+0x10/0x10
[   78.933708][ T5607]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   78.940058][ T5607]  ? do_syscall_64+0x100/0x230
[   78.944870][ T5607]  ? do_syscall_64+0xb6/0x230
[   78.949565][ T5607]  do_syscall_64+0xf3/0x230
[   78.954079][ T5607]  ? clear_bhb_loop+0x35/0x90
[   78.958772][ T5607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.964674][ T5607] RIP: 0033:0x7f42de57dff9
[   78.969096][ T5607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.988711][ T5607] RSP: 002b:00007f42df2e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   78.997139][ T5607] RAX: ffffffffffffffda RBX: 00007f42de736130 RCX: 00007f42de57dff9
[   79.005119][ T5607] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000008
[   79.013094][ T5607] RBP: 00007f42df2e8090 R08: 0000000000000000 R09: 0000000000000000
[   79.021068][ T5607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   79.029050][ T5607] R13: 0000000000000000 R14: 00007f42de736130 R15: 00007ffcbc67e678
[   79.037053][ T5607]  </TASK>
[   79.057995][ T1106] hsr_slave_1: left promiscuous mode
[   79.064413][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.097748][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.117648][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.137359][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.192290][ T1106] veth1_macvtap: left promiscuous mode
[   79.198094][ T1106] veth0_macvtap: left promiscuous mode
[   79.234867][ T1106] veth1_vlan: left promiscuous mode
[   79.257871][ T1106] veth0_vlan: left promiscuous mode
[   80.751627][ T5241] Bluetooth: hci0: command tx timeout
[   80.762896][    T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   80.787070][ T5616] loop0: detected capacity change from 0 to 32768
[   80.804811][ T5616] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.67 (5616)
[   80.856428][ T5616] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   80.880940][ T5616] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   80.891048][ T5616] BTRFS info (device loop0): using free-space-tree
[   80.934316][    T8] usb 4-1: Using ep0 maxpacket: 8
[   80.954551][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   80.991338][    T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   81.004255][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.035285][    T8] usb 4-1: config 0 descriptor??
[   81.091142][ T1106] team0 (unregistering): Port device team_slave_1 removed
[   81.197206][ T1106] team0 (unregistering): Port device team_slave_0 removed
[   81.239126][ T5228] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   81.774715][    T8] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   83.141545][ T5660] loop0: detected capacity change from 0 to 128
[   83.148476][ T5660] vfat: Unknown parameter '<'
[   83.314918][ T5281] usb 4-1: USB disconnect, device number 7
[   83.320862][ T5241] Bluetooth: hci0: command tx timeout
[   83.338682][ T5281] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected
[   83.443127][ T5552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.500901][ T5552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.555239][ T5666] netlink: 'syz.4.76': attribute type 1 has an invalid length.
[   83.562105][ T5664] loop1: detected capacity change from 0 to 1024
[   83.564625][ T5666] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.76'.
[   83.601865][ T5666] netlink: 'syz.4.76': attribute type 1 has an invalid length.
[   83.677073][ T5552] team0: Port device team_slave_0 added
[   83.700519][ T5552] team0: Port device team_slave_1 added
[   83.791870][ T5552] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.829562][ T5552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.931623][ T5552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.996877][ T5552] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.042113][ T5552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.166750][ T5552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.182494][ T5685] loop3: detected capacity change from 0 to 256
[   84.211672][ T5685] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   84.259912][ T5685] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   84.293665][ T5685] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe563dbae, utbl_chksum : 0xe619d30d)
[   84.384935][ T5552] hsr_slave_0: entered promiscuous mode
[   84.413060][ T5552] hsr_slave_1: entered promiscuous mode
[   85.421430][ T5279] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   85.581248][ T5279] usb 5-1: Using ep0 maxpacket: 8
[   85.597522][ T5279] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60
[   85.619508][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.643538][ T5279] usb 5-1: Product: syz
[   85.845558][ T5279] usb 5-1: Manufacturer: syz
[   85.850297][ T5279] usb 5-1: SerialNumber: syz
[   85.862413][ T5279] r8152-cfgselector 5-1: Unknown version 0x0000
[   85.868691][ T5279] r8152-cfgselector 5-1: config 0 descriptor??
[   85.994675][ T5721] overlay: filesystem on ./bus not supported
[   86.449566][ T5695] loop4: detected capacity change from 0 to 64
[   86.523400][    T8] r8152-cfgselector 5-1: USB disconnect, device number 3
[   86.546615][ T5727] loop3: detected capacity change from 0 to 1024
[   86.558009][ T5492] hfsplus: b-tree write err: -5, ino 4
[   86.636018][ T5727] loop3: detected capacity change from 0 to 512
[   86.642574][ T5727] EXT4-fs: inline encryption not supported
[   86.672297][ T5727] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   86.681865][ T5727] EXT4-fs (loop3): 1 truncate cleaned up
[   86.687959][ T5727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.825626][ T5733] loop1: detected capacity change from 0 to 512
[   86.920747][ T5244] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.985814][ T5733] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   87.056184][ T5733] EXT4-fs (loop1): 1 truncate cleaned up
[   87.064610][ T5733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.200887][ T5745] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.220474][ T5709] loop0: detected capacity change from 0 to 32768
[   87.237764][ T5709] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.84 (5709)
[   87.289194][ T5709] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[   87.319365][ T5709] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   87.361923][ T5309] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   87.431337][ T5709] BTRFS info (device loop0): using free-space-tree
[   87.630023][ T5552] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.649504][ T5552] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.664748][ T5309] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[   87.680524][ T5309] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[   87.699770][ T5552] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.708844][ T5309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.730908][ T5552] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.747884][ T5309] usb 4-1: config 0 descriptor??
[   88.128355][ T5552] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.183008][ T5228] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[   88.335184][ T5770] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.88'.
[   88.647387][ T5552] 8021q: adding VLAN 0 to HW filter on device team0
[   88.913487][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.920662][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.930386][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.937501][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.908714][ T5552] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.918147][ T5785] netlink: 'syz.0.90': attribute type 11 has an invalid length.
[   90.081735][ T5309] usb 4-1: string descriptor 0 read error: -71
[   90.147487][ T5309] usb 4-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[   90.155421][ T5309] usb 4-1: No valid video chain found.
[   90.170378][ T5309] usb 4-1: USB disconnect, device number 8
[   90.293101][ T5552] veth0_vlan: entered promiscuous mode
[   90.379844][ T5552] veth1_vlan: entered promiscuous mode
[   90.486636][ T5552] veth0_macvtap: entered promiscuous mode
[   90.540033][ T5552] veth1_macvtap: entered promiscuous mode
[   90.593332][ T5729] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[   90.624296][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.688840][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.699556][ T5784] Bluetooth: hci3: Opcode 0x0401 failed: -4
[   90.721335][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.751248][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.761070][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.821220][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.831043][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.881205][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.902976][ T5552] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.931652][ T5232] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.943462][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.973747][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.007262][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.051251][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.098182][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.144394][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.174751][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.206790][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.274218][ T5811] netlink: 4100 bytes leftover after parsing attributes in process `syz.1.92'.
[   91.285490][ T5552] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.470002][ T5552] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.551103][ T5816] kAFS: No cell specified
[   91.615678][ T5552] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.680634][ T5552] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.730867][ T5552] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.941385][ T5241] Bluetooth: hci3: command 0x0401 tx timeout
[   93.843247][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.876534][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.156930][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.205719][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.779429][ T5279] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  110.755067][ T5279] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  113.194084][ T5279] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  113.234509][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.557733][ T5243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  113.566996][ T5243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  113.579706][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  113.594529][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  113.605265][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  113.617936][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  114.836457][ T5279] usb 1-1: config 0 descriptor??
[  115.633529][ T5241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  115.722827][ T5241] Bluetooth: hci5: command tx timeout
[  115.946446][ T5241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  115.957339][ T5241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  115.982039][ T5241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  115.999601][ T5241] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  116.738600][ T5241] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  117.869587][ T5279] usb 1-1: can't set config #0, error -71
[  117.902310][ T5241] Bluetooth: hci5: command tx timeout
[  118.585843][ T5854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.607295][ T5279] usb 1-1: USB disconnect, device number 3
[  120.065844][ T5241] Bluetooth: hci5: command tx timeout
[  120.522453][ T5241] Bluetooth: hci6: command tx timeout
[  122.036566][ T5862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'.
[  122.149772][ T5241] Bluetooth: hci5: command tx timeout
[  122.677549][ T5241] Bluetooth: hci6: command tx timeout
[  124.320965][ T5862] bond1: entered promiscuous mode
[  124.600906][ T5863] ip6gretap1: entered promiscuous mode
[  124.680465][ T5863] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  124.752164][ T5241] Bluetooth: hci6: command tx timeout
[  124.769032][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'.
[  126.014565][ T5864] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  126.025604][ T5243] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  126.048098][ T5243] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  126.064666][ T5243] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  126.064939][ T5864] ip6gretap1: left promiscuous mode
[  126.085401][ T5243] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  126.097608][ T5243] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  126.109514][ T5243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  126.412123][ T5864] bond1 (unregistering): Released all slaves
[  126.863402][ T5243] Bluetooth: hci6: command tx timeout
[  128.568722][ T5243] Bluetooth: hci7: command tx timeout
[  130.924758][ T5241] Bluetooth: hci7: command tx timeout
[  132.932609][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  132.946269][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  132.991245][ T5241] Bluetooth: hci7: command tx timeout
[  135.081302][ T5241] Bluetooth: hci7: command tx timeout
[  143.712362][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  143.736456][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  143.866349][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  143.992015][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  144.005183][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  144.014014][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  147.002099][ T5241] Bluetooth: hci0: command tx timeout
[  149.173354][ T5241] Bluetooth: hci0: command tx timeout
[  149.215773][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  149.233498][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  149.243028][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  149.273109][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  149.303192][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  149.312909][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  151.295556][ T5241] Bluetooth: hci0: command tx timeout
[  151.542290][ T5241] Bluetooth: hci1: command tx timeout
[  153.311311][ T5241] Bluetooth: hci0: command tx timeout
[  153.562267][ T5241] Bluetooth: hci1: command tx timeout
[  155.631303][ T5241] Bluetooth: hci1: command tx timeout
[  157.842009][ T5241] Bluetooth: hci1: command tx timeout
[  157.913231][ T2961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.798398][ T2961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.981995][ T2961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.033155][ T5852] chnl_net:caif_netlink_parms(): no params data found
[  162.105139][ T2961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.390300][ T5850] chnl_net:caif_netlink_parms(): no params data found
[  162.468856][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.476691][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.484047][ T5852] bridge_slave_0: entered allmulticast mode
[  162.492534][ T5852] bridge_slave_0: entered promiscuous mode
[  162.569890][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.577441][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.584796][ T5852] bridge_slave_1: entered allmulticast mode
[  162.591963][ T5852] bridge_slave_1: entered promiscuous mode
[  162.648122][ T2961] bridge_slave_1: left allmulticast mode
[  162.661229][ T2961] bridge_slave_1: left promiscuous mode
[  162.667338][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.680521][ T2961] bridge_slave_0: left allmulticast mode
[  162.687561][ T2961] bridge_slave_0: left promiscuous mode
[  162.693716][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.984167][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.996038][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.007373][ T2961] bond0 (unregistering): Released all slaves
[  163.083574][ T5869] chnl_net:caif_netlink_parms(): no params data found
[  163.116508][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.126332][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.135129][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.142481][ T5850] bridge_slave_0: entered allmulticast mode
[  163.148984][ T5850] bridge_slave_0: entered promiscuous mode
[  163.156940][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.164148][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.171894][ T5850] bridge_slave_1: entered allmulticast mode
[  163.178377][ T5850] bridge_slave_1: entered promiscuous mode
[  163.229470][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.263638][ T5895] chnl_net:caif_netlink_parms(): no params data found
[  163.276582][ T5890] chnl_net:caif_netlink_parms(): no params data found
[  163.299413][ T5852] team0: Port device team_slave_0 added
[  163.307248][ T5852] team0: Port device team_slave_1 added
[  163.398953][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.440807][ T2961] hsr_slave_0: left promiscuous mode
[  163.446699][ T2961] hsr_slave_1: left promiscuous mode
[  163.452756][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.460152][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.468203][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.476286][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.493954][ T2961] veth1_macvtap: left promiscuous mode
[  163.499484][ T2961] veth0_macvtap: left promiscuous mode
[  163.505237][ T2961] veth1_vlan: left promiscuous mode
[  163.511017][ T2961] veth0_vlan: left promiscuous mode
[  163.878903][ T2961] team0 (unregistering): Port device team_slave_1 removed
[  163.912875][ T2961] team0 (unregistering): Port device team_slave_0 removed
[  164.244735][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.253214][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.279646][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.303677][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.310631][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.339516][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.352688][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.453096][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.460227][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.467450][ T5890] bridge_slave_0: entered allmulticast mode
[  164.475736][ T5890] bridge_slave_0: entered promiscuous mode
[  164.493559][ T5850] team0: Port device team_slave_0 added
[  164.531908][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.540012][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.558817][ T5869] bridge_slave_0: entered allmulticast mode
[  164.569405][ T5869] bridge_slave_0: entered promiscuous mode
[  164.659890][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.680121][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.691440][ T5895] bridge_slave_0: entered allmulticast mode
[  164.709330][ T5895] bridge_slave_0: entered promiscuous mode
[  164.720289][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  164.721951][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.733980][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  164.741213][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.744721][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  164.748732][ T5890] bridge_slave_1: entered allmulticast mode
[  164.756778][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  164.769801][ T5890] bridge_slave_1: entered promiscuous mode
[  164.782818][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  164.790175][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  164.808480][ T5850] team0: Port device team_slave_1 added
[  164.826148][ T5852] hsr_slave_0: entered promiscuous mode
[  164.832925][ T5852] hsr_slave_1: entered promiscuous mode
[  164.839045][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  164.847475][ T5852] Cannot create hsr debugfs directory
[  164.854820][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.870228][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.880753][ T5869] bridge_slave_1: entered allmulticast mode
[  164.892296][ T5869] bridge_slave_1: entered promiscuous mode
[  164.900306][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.908223][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.919645][ T5895] bridge_slave_1: entered allmulticast mode
[  164.926710][ T5895] bridge_slave_1: entered promiscuous mode
[  164.980134][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.077852][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.094895][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.102064][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.129875][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.142344][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.149301][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.175784][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.208209][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.220106][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.232122][ T5895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.245145][ T5895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.293148][ T5890] team0: Port device team_slave_0 added
[  165.421871][ T5890] team0: Port device team_slave_1 added
[  165.446542][ T5850] hsr_slave_0: entered promiscuous mode
[  165.463495][ T5850] hsr_slave_1: entered promiscuous mode
[  165.469594][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.487123][ T5850] Cannot create hsr debugfs directory
[  165.510826][ T5869] team0: Port device team_slave_0 added
[  165.534823][ T5895] team0: Port device team_slave_0 added
[  165.582337][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.589298][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.619134][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.643287][ T5869] team0: Port device team_slave_1 added
[  165.662244][ T5895] team0: Port device team_slave_1 added
[  165.693517][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.700476][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.727110][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.762955][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.770623][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.797213][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.845338][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.856419][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.882896][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.921789][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.928744][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.959328][ T5895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.027092][ T2961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.044561][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.051800][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.078461][ T5895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.110383][ T5869] hsr_slave_0: entered promiscuous mode
[  166.117615][ T5869] hsr_slave_1: entered promiscuous mode
[  166.124656][ T5869] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.133768][ T5869] Cannot create hsr debugfs directory
[  166.151647][ T5890] hsr_slave_0: entered promiscuous mode
[  166.157795][ T5890] hsr_slave_1: entered promiscuous mode
[  166.164172][ T5890] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.171783][ T5890] Cannot create hsr debugfs directory
[  166.189028][ T5895] hsr_slave_0: entered promiscuous mode
[  166.197153][ T5895] hsr_slave_1: entered promiscuous mode
[  166.203599][ T5895] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.211586][ T5895] Cannot create hsr debugfs directory
[  166.236938][ T2961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.364981][ T2961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.538832][ T2961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.826983][ T5965] chnl_net:caif_netlink_parms(): no params data found
[  166.831544][ T5241] Bluetooth: hci2: command tx timeout
[  166.981942][ T2961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.039356][ T5890] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.084245][ T2961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.127511][ T5890] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.143712][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.159719][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.167322][ T5965] bridge_slave_0: entered allmulticast mode
[  167.174065][ T5965] bridge_slave_0: entered promiscuous mode
[  167.181320][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.188448][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.196037][ T5965] bridge_slave_1: entered allmulticast mode
[  167.203594][ T5965] bridge_slave_1: entered promiscuous mode
[  167.242725][ T2961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.288153][ T5890] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.358603][ T2961] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.406226][ T5890] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.447489][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.468015][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.546396][ T5965] team0: Port device team_slave_0 added
[  167.614058][ T5965] team0: Port device team_slave_1 added
[  167.662396][ T2961] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.737998][ T2961] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.764907][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.774265][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.800438][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.830441][ T2961] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.846109][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.853230][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.879298][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.907359][ T2961] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.005319][ T5965] hsr_slave_0: entered promiscuous mode
[  168.020584][ T5965] hsr_slave_1: entered promiscuous mode
[  168.031942][ T5965] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  168.039524][ T5965] Cannot create hsr debugfs directory
[  168.092328][ T5890] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  168.115713][ T5890] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  168.176835][ T5890] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  168.202486][ T5890] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  168.378296][ T2961] bridge_slave_1: left allmulticast mode
[  168.388544][ T2961] bridge_slave_1: left promiscuous mode
[  168.401013][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.422480][ T2961] bridge_slave_0: left allmulticast mode
[  168.428143][ T2961] bridge_slave_0: left promiscuous mode
[  168.446749][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.462942][ T2961] bridge_slave_1: left allmulticast mode
[  168.468603][ T2961] bridge_slave_1: left promiscuous mode
[  168.484129][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.506848][ T2961] bridge_slave_0: left allmulticast mode
[  168.521303][ T2961] bridge_slave_0: left promiscuous mode
[  168.527016][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.547801][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  168.558352][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  168.560321][ T2961] bridge_slave_1: left allmulticast mode
[  168.572080][ T2961] bridge_slave_1: left promiscuous mode
[  168.577765][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.582374][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  168.594679][ T2961] bridge_slave_0: left allmulticast mode
[  168.600335][ T2961] bridge_slave_0: left promiscuous mode
[  168.603467][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  168.606595][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.621407][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  168.629124][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  168.629863][ T2961] bridge_slave_1: left allmulticast mode
[  168.644491][ T2961] bridge_slave_1: left promiscuous mode
[  168.658579][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.667717][ T2961] bridge_slave_0: left allmulticast mode
[  168.673825][ T2961] bridge_slave_0: left promiscuous mode
[  168.679447][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.689330][ T2961] bridge_slave_1: left allmulticast mode
[  168.695321][ T2961] bridge_slave_1: left promiscuous mode
[  168.700948][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.709353][ T2961] bridge_slave_0: left allmulticast mode
[  168.715292][ T2961] bridge_slave_0: left promiscuous mode
[  168.720911][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.914541][ T5243] Bluetooth: hci2: command tx timeout
[  169.646309][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.657644][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.669631][ T2961] bond0 (unregistering): Released all slaves
[  169.775902][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.790214][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.807580][ T2961] bond0 (unregistering): Released all slaves
[  169.910282][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.920750][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.931027][ T2961] bond0 (unregistering): Released all slaves
[  170.030895][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.044584][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.055951][ T2961] bond0 (unregistering): Released all slaves
[  170.160081][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.171814][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.182903][ T2961] bond0 (unregistering): Released all slaves
[  170.568325][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.655209][ T5890] 8021q: adding VLAN 0 to HW filter on device team0
[  170.671988][ T5243] Bluetooth: hci3: command tx timeout
[  170.749310][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.756441][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.824500][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.831636][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.959395][ T6030] chnl_net:caif_netlink_parms(): no params data found
[  170.991716][ T5243] Bluetooth: hci2: command tx timeout
[  171.250501][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  171.274490][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  171.294339][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.312498][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.319668][ T6030] bridge_slave_0: entered allmulticast mode
[  171.334382][ T6030] bridge_slave_0: entered promiscuous mode
[  171.367350][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  171.402348][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.409491][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.424480][ T6030] bridge_slave_1: entered allmulticast mode
[  171.432277][ T6030] bridge_slave_1: entered promiscuous mode
[  171.487799][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  171.574916][ T6030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.602638][ T6030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.708944][ T6030] team0: Port device team_slave_0 added
[  171.958912][ T6030] team0: Port device team_slave_1 added
[  172.134501][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.151280][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.189570][ T6030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.275342][ T2961] hsr_slave_0: left promiscuous mode
[  172.282349][ T2961] hsr_slave_1: left promiscuous mode
[  172.288247][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.298475][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.309862][ T2961] hsr_slave_0: left promiscuous mode
[  172.316044][ T2961] hsr_slave_1: left promiscuous mode
[  172.324846][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.332586][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.340497][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.348359][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.359889][ T2961] hsr_slave_0: left promiscuous mode
[  172.372512][ T2961] hsr_slave_1: left promiscuous mode
[  172.378374][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.386069][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.395961][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.403728][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.414186][ T2961] hsr_slave_0: left promiscuous mode
[  172.419934][ T2961] hsr_slave_1: left promiscuous mode
[  172.430261][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.438456][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.449898][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.457858][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.472289][ T2961] hsr_slave_0: left promiscuous mode
[  172.478092][ T2961] hsr_slave_1: left promiscuous mode
[  172.489004][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.496467][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.509028][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.516842][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.570906][ T2961] veth1_macvtap: left promiscuous mode
[  172.576433][ T2961] veth0_macvtap: left promiscuous mode
[  172.582104][ T2961] veth1_vlan: left promiscuous mode
[  172.587388][ T2961] veth0_vlan: left promiscuous mode
[  172.596010][ T2961] veth1_macvtap: left promiscuous mode
[  172.601639][ T2961] veth0_macvtap: left promiscuous mode
[  172.607240][ T2961] veth1_vlan: left promiscuous mode
[  172.612596][ T2961] veth0_vlan: left promiscuous mode
[  172.618613][ T2961] veth1_macvtap: left promiscuous mode
[  172.624436][ T2961] veth0_macvtap: left promiscuous mode
[  172.629974][ T2961] veth1_vlan: left promiscuous mode
[  172.635646][ T2961] veth0_vlan: left promiscuous mode
[  172.646455][ T2961] veth1_macvtap: left promiscuous mode
[  172.652793][ T2961] veth0_macvtap: left promiscuous mode
[  172.659018][ T2961] veth1_vlan: left promiscuous mode
[  172.665623][ T2961] veth0_vlan: left promiscuous mode
[  172.751848][ T5243] Bluetooth: hci3: command tx timeout
[  173.040018][ T2961] team0 (unregistering): Port device team_slave_1 removed
[  173.067986][ T2961] team0 (unregistering): Port device team_slave_0 removed
[  173.084543][ T5243] Bluetooth: hci2: command tx timeout
[  173.489148][ T2961] team0 (unregistering): Port device team_slave_1 removed
[  173.525203][ T2961] team0 (unregistering): Port device team_slave_0 removed
[  174.189972][ T2961] team0 (unregistering): Port device team_slave_1 removed
[  174.230658][ T2961] team0 (unregistering): Port device team_slave_0 removed
[  174.833260][ T5243] Bluetooth: hci3: command tx timeout
[  174.875484][ T2961] team0 (unregistering): Port device team_slave_1 removed
[  174.915263][ T2961] team0 (unregistering): Port device team_slave_0 removed
[  175.580971][ T2961] team0 (unregistering): Port device team_slave_1 removed
[  175.620816][ T2961] team0 (unregistering): Port device team_slave_0 removed
[  175.979315][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.000035][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.038735][ T6030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.135250][ T6030] hsr_slave_0: entered promiscuous mode
[  176.152948][ T6030] hsr_slave_1: entered promiscuous mode
[  176.191883][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.522433][ T5895] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  176.549601][ T5895] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  176.566482][ T5890] veth0_vlan: entered promiscuous mode
[  176.579665][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.600471][ T5895] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  176.617757][ T5895] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  176.670678][ T5890] veth1_vlan: entered promiscuous mode
[  176.699449][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[  176.755930][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.763074][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.779667][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.786829][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.890762][ T5965] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  176.912058][ T5243] Bluetooth: hci3: command tx timeout
[  176.926566][ T5965] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  176.969799][ T5965] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  176.997295][ T5890] veth0_macvtap: entered promiscuous mode
[  177.033087][ T5965] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  177.079920][ T5890] veth1_macvtap: entered promiscuous mode
[  177.149074][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.229120][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.249651][ T5895] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.294927][ T5890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.310842][ T5890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.320851][ T5890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.334647][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.389857][ T5895] 8021q: adding VLAN 0 to HW filter on device team0
[  177.486639][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.493779][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.519318][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.526433][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.578413][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.606640][ T5493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.617144][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.621981][ T5493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.672949][ T5965] 8021q: adding VLAN 0 to HW filter on device team0
[  177.700863][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.714479][ T6030] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  177.723779][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.739626][ T6030] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  177.750334][ T6030] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  177.769427][ T6030] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  177.793481][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.800585][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.849978][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.857123][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.898703][ T6128] loop0: detected capacity change from 0 to 64
[  177.915047][ T5869] veth0_vlan: entered promiscuous mode
[  177.988022][ T5869] veth1_vlan: entered promiscuous mode
[  178.043744][ T5965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  178.082478][ T6030] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.098774][ T6030] 8021q: adding VLAN 0 to HW filter on device team0
[  178.123395][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.130481][ T5834] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.144348][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.151514][ T5834] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.258607][ T5869] veth0_macvtap: entered promiscuous mode
[  178.307417][ T5869] veth1_macvtap: entered promiscuous mode
[  178.371017][ T5869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.392600][ T5869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.420447][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.451080][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.484144][ T5869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.499059][ T5869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.520164][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.533783][ T5895] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.553758][ T5869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.563588][ T5869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.573210][ T5869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.582066][ T5869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.636144][ T6030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.700228][ T2961] bridge_slave_1: left allmulticast mode
[  178.718296][ T2961] bridge_slave_1: left promiscuous mode
[  178.726323][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.738899][ T2961] bridge_slave_0: left allmulticast mode
[  178.756356][ T2961] bridge_slave_0: left promiscuous mode
[  178.778031][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.123408][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.165821][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.192368][ T2961] bond0 (unregistering): Released all slaves
[  179.320450][ T5895] veth0_vlan: entered promiscuous mode
[  179.366427][ T6149] hsr0: entered promiscuous mode
[  179.400663][ T2961] hsr_slave_0: left promiscuous mode
[  179.407509][ T2961] hsr_slave_1: left promiscuous mode
[  179.427702][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.436015][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.556350][ T2961] team0 (unregistering): Port device team_slave_1 removed
[  179.579526][ T2961] team0 (unregistering): Port device team_slave_0 removed
[  179.703454][ T6145] hsr0: left promiscuous mode
[  179.716208][ T5895] veth1_vlan: entered promiscuous mode
[  179.747455][ T5965] veth0_vlan: entered promiscuous mode
[  179.780780][ T5493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.806383][ T5965] veth1_vlan: entered promiscuous mode
[  179.821764][ T5493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.868559][ T6156] loop0: detected capacity change from 0 to 512
[  179.923312][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.941899][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.978022][ T5895] veth0_macvtap: entered promiscuous mode
[  180.017566][ T6030] veth0_vlan: entered promiscuous mode
[  180.025995][ T6157] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  180.073491][ T5895] veth1_macvtap: entered promiscuous mode
[  180.106918][ T6030] veth1_vlan: entered promiscuous mode
[  180.156365][ T5965] veth0_macvtap: entered promiscuous mode
[  180.175094][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.106'.
[  180.198797][ T5965] veth1_macvtap: entered promiscuous mode
[  180.223738][ T5895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.256550][ T5895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.268733][ T5895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.293468][ T5895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.303378][ T6162] loop0: detected capacity change from 0 to 128
[  180.313981][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.328920][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'.
[  180.603400][ T5895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.624390][ T5895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.634867][ T5895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.674482][ T5895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.755530][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.854968][ T5895] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.901367][ T5895] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.931492][ T5895] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.951058][ T5895] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.973760][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.991605][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.011365][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.028606][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.038863][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.056108][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.067801][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.096849][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.107656][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.119143][ T6166] syz.0.112 (6166) used greatest stack depth: 16912 bytes left
[  181.126979][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.137827][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.167525][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.185473][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.199541][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.260142][ T5965] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.328644][ T5965] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.348385][ T5965] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.374353][ T5965] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.409835][ T6030] veth0_macvtap: entered promiscuous mode
[  181.477502][ T6030] veth1_macvtap: entered promiscuous mode
[  181.569084][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.602438][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.626983][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.659931][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.687009][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.721672][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.740968][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.759163][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.764403][ T6167] loop2: detected capacity change from 0 to 40427
[  181.775861][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.828819][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.844286][ T6167] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  181.846262][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.851633][ T6167] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  181.873229][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.887449][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.900636][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.913902][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.914963][ T6167] F2FS-fs (loop2): invalid crc value
[  181.924858][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.937659][ T6167] F2FS-fs (loop2): Found nat_bits in checkpoint
[  181.939876][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.956778][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.969794][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.990508][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.010003][ T6030] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.019178][ T6030] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.039668][ T6030] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.056857][ T6030] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.144383][ T6167] F2FS-fs (loop2): Start checkpoint disabled!
[  182.348665][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.423320][ T6167] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  182.432768][ T6167] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  182.440550][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.486492][ T5493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.522485][ T5493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.572849][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.584575][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.627063][ T5843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.634987][ T5843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.693495][   T52] kworker/u8:3: attempt to access beyond end of device
[  182.693495][   T52] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  182.695933][ T5834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.767219][ T5834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.773631][   T52] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  182.802136][   T52] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  182.809897][ T6186] loop3: detected capacity change from 0 to 1024
[  182.818557][   T52] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  182.827874][   T52] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  182.839465][ T6186] hfsplus: Unknown parameter 'nodecomp'
[  184.002872][ T6197] pim6reg1: entered promiscuous mode
[  184.008318][ T6197] pim6reg1: entered allmulticast mode
[  184.087382][ T6201] syz.3.119[6201] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  184.087469][ T6201] syz.3.119[6201] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  184.121313][ T6201] syz.3.119[6201] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  184.188847][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  184.404239][ T6203] loop2: detected capacity change from 0 to 32768
[  184.427084][ T6209] pim6reg1: entered promiscuous mode
[  184.441809][ T6209] pim6reg1: entered allmulticast mode
[  184.445572][ T6203] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  184.479641][    T9] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  184.497931][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  184.512166][ T6203] JBD2: Ignoring recovery information on journal
[  184.518859][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  184.534066][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  184.543205][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  184.553162][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  184.571160][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  184.578691][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  184.590879][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  184.605473][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  184.649596][ T6203] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  184.657551][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  184.705295][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  184.736291][ T6216] pim6reg1: entered promiscuous mode
[  184.759668][ T6216] pim6reg1: entered allmulticast mode
[  184.780099][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  184.806713][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  184.825033][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  184.837214][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  184.863325][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  184.872602][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  184.928293][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  184.995923][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  185.004907][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  185.015934][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  185.036211][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  185.045444][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  185.054822][ T5869] ocfs2: Unmounting device (7,2) on (node local)
[  185.056371][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  185.144828][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  185.154214][    T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  185.162662][    T9] usb 2-1: Product: syz
[  185.166843][    T9] usb 2-1: Manufacturer: syz
[  185.171665][    T9] usb 2-1: SerialNumber: syz
[  185.189486][    T9] usb 2-1: config 0 descriptor??
[  185.213467][    T9] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  185.407982][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.519701][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.545969][ T6192] FAULT_INJECTION: forcing a failure.
[  185.545969][ T6192] name failslab, interval 1, probability 0, space 0, times 0
[  185.585723][ T6192] CPU: 0 UID: 0 PID: 6192 Comm: syz.1.98 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0
[  185.595732][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  185.605798][ T6192] Call Trace:
[  185.609087][ T6192]  <TASK>
[  185.612032][ T6192]  dump_stack_lvl+0x241/0x360
[  185.616730][ T6192]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.621950][ T6192]  ? __pfx__printk+0x10/0x10
[  185.626566][ T6192]  ? fs_reclaim_acquire+0x93/0x140
[  185.631698][ T6192]  ? __pfx___might_resched+0x10/0x10
[  185.636997][ T6192]  should_fail_ex+0x3b0/0x4e0
[  185.641679][ T6192]  should_failslab+0xac/0x100
[  185.646355][ T6192]  __kmalloc_noprof+0xdd/0x4c0
[  185.651113][ T6192]  ? kstrtouint_from_user+0x128/0x190
[  185.656483][ T6192]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  185.662200][ T6192]  tomoyo_realpath_from_path+0xcf/0x5e0
[  185.667741][ T6192]  tomoyo_path_number_perm+0x23a/0x880
[  185.673206][ T6192]  ? tomoyo_path_number_perm+0x208/0x880
[  185.678834][ T6192]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  185.684833][ T6192]  ? __fget_files+0x29/0x470
[  185.689416][ T6192]  ? __fget_files+0x3f3/0x470
[  185.694092][ T6192]  security_file_ioctl+0xc6/0x2a0
[  185.699111][ T6192]  __se_sys_ioctl+0x47/0x170
[  185.703693][ T6192]  do_syscall_64+0xf3/0x230
[  185.708190][ T6192]  ? clear_bhb_loop+0x35/0x90
[  185.712863][ T6192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.718750][ T6192] RIP: 0033:0x7fdd3157dff9
[  185.723156][ T6192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.742762][ T6192] RSP: 002b:00007fdd322bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  185.751175][ T6192] RAX: ffffffffffffffda RBX: 00007fdd31735f80 RCX: 00007fdd3157dff9
[  185.759135][ T6192] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  185.767094][ T6192] RBP: 00007fdd322bf090 R08: 0000000000000000 R09: 0000000000000000
[  185.775061][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.783022][ T6192] R13: 0000000000000000 R14: 00007fdd31735f80 R15: 00007ffc88c7e288
[  185.790999][ T6192]  </TASK>
[  185.851517][ T6192] ERROR: Out of memory at tomoyo_realpath_from_path.
[  185.872761][   T25] usb 2-1: USB disconnect, device number 3
[  185.918198][   T25] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  186.358708][ T6262] syz.3.140[6262] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  186.358796][ T6262] syz.3.140[6262] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  186.391626][ T6262] syz.3.140[6262] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  186.411633][ T6264] pim6reg1: entered promiscuous mode
[  186.448101][ T6264] pim6reg1: entered allmulticast mode
[  187.068421][ T6297] BUG: unable to handle page fault for address: fffffbfffbf4a000
[  187.076182][ T6297] #PF: supervisor read access in kernel mode
[  187.082145][ T6297] #PF: error_code(0x0000) - not-present page
[  187.088104][ T6297] PGD 23ffe4067 P4D 23ffe4067 PUD 23ffe3067 PMD 0 
[  187.094611][ T6297] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI
[  187.100659][ T6297] CPU: 0 UID: 0 PID: 6297 Comm: syz.2.154 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0
[  187.110707][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  187.120749][ T6297] RIP: 0010:kasan_check_range+0x82/0x290
[  187.126383][ T6297] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00
[  187.145979][ T6297] RSP: 0018:ffffc90003bef858 EFLAGS: 00010286
[  187.152034][ T6297] RAX: 0000000000000001 RBX: 1ffffffffbf4a000 RCX: ffffffff81cf410f
[  187.159991][ T6297] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffdfa50000
[  187.167954][ T6297] RBP: ffffffffffffffff R08: ffffffffdfa50007 R09: 1ffffffffbf4a000
[  187.175919][ T6297] R10: dffffc0000000000 R11: fffffbfffbf4a000 R12: ffffffffdfa50000
[  187.183878][ T6297] R13: 0000000000000008 R14: dffffc0000000001 R15: fffffbfffbf4a001
[  187.191834][ T6297] FS:  00007f547d45d6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  187.200752][ T6297] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  187.207318][ T6297] CR2: fffffbfffbf4a000 CR3: 0000000030182000 CR4: 00000000003526f0
[  187.215275][ T6297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  187.223232][ T6297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  187.231190][ T6297] Call Trace:
[  187.234451][ T6297]  <TASK>
[  187.237370][ T6297]  ? __die_body+0x5f/0xb0
[  187.241684][ T6297]  ? page_fault_oops+0x8e4/0xcc0
[  187.246614][ T6297]  ? __pfx_page_fault_oops+0x10/0x10
[  187.251885][ T6297]  ? is_prefetch+0x4ed/0x780
[  187.256462][ T6297]  ? __pfx_validate_chain+0x10/0x10
[  187.261645][ T6297]  ? stack_trace_save+0x118/0x1d0
[  187.266658][ T6297]  ? __pfx_is_prefetch+0x10/0x10
[  187.271588][ T6297]  ? stack_depot_save_flags+0x29/0x830
[  187.277038][ T6297]  ? __bad_area_nosemaphore+0x118/0x770
[  187.282571][ T6297]  ? kasan_save_track+0x3f/0x80
[  187.287409][ T6297]  ? kasan_save_free_info+0x40/0x50
[  187.292597][ T6297]  ? map_create+0x946/0x11c0
[  187.297176][ T6297]  ? __pfx___bad_area_nosemaphore+0x10/0x10
[  187.303056][ T6297]  ? spurious_kernel_fault+0x119/0x5a0
[  187.308505][ T6297]  ? exc_page_fault+0x5c8/0x8c0
[  187.313346][ T6297]  ? asm_exc_page_fault+0x26/0x30
[  187.318361][ T6297]  ? copy_from_kernel_nofault+0x6f/0x2f0
[  187.323981][ T6297]  ? kasan_check_range+0x82/0x290
[  187.328997][ T6297]  copy_from_kernel_nofault+0x6f/0x2f0
[  187.334446][ T6297]  bpf_probe_read_compat+0x10f/0x180
[  187.339722][ T6297]  bpf_prog_88b8db6957d33ffb+0x48/0x4a
[  187.345168][ T6297]  bpf_trace_run1+0x2ca/0x520
[  187.349832][ T6297]  ? bpf_trace_run1+0x1d6/0x520
[  187.354668][ T6297]  ? __pfx_bpf_trace_run1+0x10/0x10
[  187.359853][ T6297]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  187.365745][ T6297]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  187.372060][ T6297]  ? rcu_is_watching+0x15/0xb0
[  187.376815][ T6297]  trace_percpu_create_chunk+0x186/0x1f0
[  187.382440][ T6297]  pcpu_create_chunk+0x7dd/0xbc0
[  187.387373][ T6297]  pcpu_alloc_noprof+0x7b3/0x1780
[  187.392393][ T6297]  bpf_map_alloc_percpu+0xdc/0x1d0
[  187.397498][ T6297]  prealloc_init+0x244/0x840
[  187.402080][ T6297]  htab_map_alloc+0x86e/0xe70
[  187.406749][ T6297]  map_create+0x946/0x11c0
[  187.411159][ T6297]  __sys_bpf+0x6d1/0x810
[  187.415388][ T6297]  ? __pfx___sys_bpf+0x10/0x10
[  187.420142][ T6297]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  187.426114][ T6297]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  187.432434][ T6297]  ? do_syscall_64+0x100/0x230
[  187.437188][ T6297]  __x64_sys_bpf+0x7c/0x90
[  187.441588][ T6297]  do_syscall_64+0xf3/0x230
[  187.446080][ T6297]  ? clear_bhb_loop+0x35/0x90
[  187.450749][ T6297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.456630][ T6297] RIP: 0033:0x7f547c57dff9
[  187.461029][ T6297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.480622][ T6297] RSP: 002b:00007f547d45d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  187.489024][ T6297] RAX: ffffffffffffffda RBX: 00007f547c735f80 RCX: 00007f547c57dff9
[  187.496982][ T6297] RDX: 0000000000000048 RSI: 0000000020000840 RDI: 0000000000000000
[  187.504935][ T6297] RBP: 00007f547c5f0296 R08: 0000000000000000 R09: 0000000000000000
[  187.512890][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.520843][ T6297] R13: 0000000000000000 R14: 00007f547c735f80 R15: 00007fffd1c79888
[  187.528808][ T6297]  </TASK>
[  187.531814][ T6297] Modules linked in:
[  187.535703][ T6297] CR2: fffffbfffbf4a000
[  187.539842][ T6297] ---[ end trace 0000000000000000 ]---
[  187.545280][ T6297] RIP: 0010:kasan_check_range+0x82/0x290
[  187.550906][ T6297] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00
[  187.570494][ T6297] RSP: 0018:ffffc90003bef858 EFLAGS: 00010286
[  187.576548][ T6297] RAX: 0000000000000001 RBX: 1ffffffffbf4a000 RCX: ffffffff81cf410f
[  187.584507][ T6297] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffdfa50000
[  187.592465][ T6297] RBP: ffffffffffffffff R08: ffffffffdfa50007 R09: 1ffffffffbf4a000
[  187.600420][ T6297] R10: dffffc0000000000 R11: fffffbfffbf4a000 R12: ffffffffdfa50000
[  187.608374][ T6297] R13: 0000000000000008 R14: dffffc0000000001 R15: fffffbfffbf4a001
[  187.616329][ T6297] FS:  00007f547d45d6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  187.625244][ T6297] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  187.631812][ T6297] CR2: fffffbfffbf4a000 CR3: 0000000030182000 CR4: 00000000003526f0
[  187.639770][ T6297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  187.647725][ T6297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  187.655681][ T6297] Kernel panic - not syncing: Fatal exception
[  187.661941][ T6297] Kernel Offset: disabled
[  187.666248][ T6297] Rebooting in 86400 seconds..