last executing test programs:

6m20.281061407s ago: executing program 0 (id=829):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0xfdef)

6m19.932476032s ago: executing program 0 (id=833):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0x61f0, 0x10100, 0x2, 0x2ea}, &(0x7f0000000100)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x80f0}, 0x3})
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x4)
fcntl$getown(r1, 0x9)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, 0x0)
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
listen(r5, 0x0)
accept4(r5, 0x0, 0x0, 0x80800)

6m18.669168817s ago: executing program 0 (id=838):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000009c0)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000780)={{@my=0x1}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x8000})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x8, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0xffffffff, @remote, 0x3}}, {{0xa, 0x4e20, 0x80, @local, 0x1000}}}, 0x104)
r2 = socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}]}]}], {0x14}}, 0x98}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f00000005c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0)
r5 = gettid()
signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0)
tkill(r5, 0x7)

6m17.389507582s ago: executing program 0 (id=847):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x2004000, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x35, 0x39, 0x32, 0x6b, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1})
io_uring_setup(0x1b7b, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x400c010)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
syz_usb_connect(0x3, 0x9d3, 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x0, {0x2b, 0x0, 0x56, 0x0, 0x40}})

6m13.455420632s ago: executing program 0 (id=851):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0xfdef)

6m11.822122332s ago: executing program 0 (id=857):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740))
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

6m10.545344157s ago: executing program 32 (id=857):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740))
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

11.226209747s ago: executing program 4 (id=2294):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

11.043092094s ago: executing program 4 (id=2296):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000005956b98c562a7629000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010002f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000780)={'bridge_slave_0\x00', @random="010000201000"})

6.689714222s ago: executing program 4 (id=2316):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)='+\fER', 0x4)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r5, 0x205, 0x70bd2c, 0x25dfdbf9, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffffff45}]}, 0x20}}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x1, 0x3}, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000007900), 0x847, 0x10162, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="52fb64364baa3f901787a470c8b8767a87fb253f9cb6730f011facb0c2b0800a9976b7fd8a3083ebc241", @ANYRES32=r2, @ANYRES8, @ANYRESOCT=r5], 0x34}, 0x1, 0x0, 0x0, 0x4b9702dee4ac411b}, 0x4004854)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
recvmmsg(r6, 0x0, 0x0, 0x10122, 0x0)

4.288671116s ago: executing program 1 (id=2347):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

4.119086723s ago: executing program 2 (id=2349):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x24, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df86dd", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.992754768s ago: executing program 3 (id=2350):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)

3.992469598s ago: executing program 2 (id=2351):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

3.972797569s ago: executing program 1 (id=2352):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000c80000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

3.822732006s ago: executing program 1 (id=2353):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

3.776727398s ago: executing program 2 (id=2354):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000000000000000000000008500000008000000660000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xad, &(0x7f0000000000)=""/173}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)

3.749640239s ago: executing program 3 (id=2355):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000005000000fd2900008400000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38)

3.626372314s ago: executing program 1 (id=2356):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8602, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[], 0x66)

3.560580557s ago: executing program 2 (id=2357):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

3.425407293s ago: executing program 3 (id=2358):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001200), 0x4)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48)

3.306114298s ago: executing program 3 (id=2359):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1}, 0x2100)
sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000840)='J', 0x1}], 0x1}, 0x0)
sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="3c25bad07607ab4ff4e6ce192a46a569759c8398dd027638a46c2a04af3821b747f0630b61a8e8ff7f2b7cba4de93934fd1108cdd91e35e42b19ffcfd8490b95ff56ab083fde5c6cd97a5faa4fe9539909", 0x51}], 0x1}, 0x50)

2.905040575s ago: executing program 4 (id=2360):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x4, 0x1}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2.904534315s ago: executing program 3 (id=2361):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x25, 0x4, 0x0, 0x0, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r4}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe0c, 0xffe0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847fe803500121100632f77fbac14141dac1414", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r8, 0x0, 0x2, 0x0)
openat$cgroup_freezer_state(r8, &(0x7f0000000340), 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$tipc(r10, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x21, &(0x7f0000000040), 0x4)
sendmsg$tipc(r10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000841}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB], 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10)

2.79883262s ago: executing program 4 (id=2362):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x2}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000300), &(0x7f00000003c0)=r2}, 0x20)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)

2.746785222s ago: executing program 3 (id=2363):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)

208.703672ms ago: executing program 1 (id=2364):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)

189.722433ms ago: executing program 2 (id=2365):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000280)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000221)

174.807753ms ago: executing program 4 (id=2366):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a10000000000061119800000000001800000000000000000000000000000095000000000000004b38860958764a89b1c4f8ddfdce8ca1fda573388de10da6858a603bbf74da4a75a937447ea670758718e385c0be5a082ac5db56c812cdc936ef69907bb69b144f3487036fd1291b0c48ab85f691804a9fc6705be229"], &(0x7f0000000000)='GPL\x00'}, 0x80)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0xffffffffffffff74}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

584.65µs ago: executing program 1 (id=2367):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

0s ago: executing program 2 (id=2368):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000080), 0x0}, 0x20)

kernel console output (not intermixed with test programs):

 to 1000
[  279.208187][ T8391] ip6_vti0 speed is unknown, defaulting to 1000
[  280.087902][  T788] ip6_vti0 speed is unknown, defaulting to 1000
[  280.118761][ T8391] infiniband syz2: set down
[  280.136807][ T8391] infiniband syz2: added ip6_vti0
[  280.246005][ T8391] RDS/IB: syz2: added
[  280.251265][ T8391] smc: adding ib device syz2 with port count 1
[  280.293558][ T8391] smc:    ib device syz2 port 1 has pnetid 
[  280.314890][    T8] ip6_vti0 speed is unknown, defaulting to 1000
[  280.337567][ T8391] ip6_vti0 speed is unknown, defaulting to 1000
[  280.457716][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.683'.
[  280.973009][ T8391] ip6_vti0 speed is unknown, defaulting to 1000
[  281.273497][ T8381] syz.3.675 (8381) used greatest stack depth: 20680 bytes left
[  281.312113][ T8391] ip6_vti0 speed is unknown, defaulting to 1000
[  281.370624][ T8407] syz.2.680 (8407): drop_caches: 2
[  281.677453][ T8391] ip6_vti0 speed is unknown, defaulting to 1000
[  281.775530][ T8425] loop1: detected capacity change from 0 to 32768
[  281.789370][ T8425] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.687 (8425)
[  281.867851][ T8425] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  281.885998][ T8425] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  281.895089][ T8425] BTRFS info (device loop1): force clearing of disk cache
[  281.902405][ T8425] BTRFS info (device loop1): enabling auto defrag
[  282.192765][ T8425] BTRFS info (device loop1): max_inline at 0
[  282.248749][ T8425] BTRFS info (device loop1): enabling disk space caching
[  282.319820][ T8425] BTRFS info (device loop1): disk space caching is enabled
[  282.468815][ T8425] BTRFS info (device loop1): enabling ssd optimizations
[  282.563712][ T8425] BTRFS info (device loop1): rebuilding free space tree
[  282.615376][ T8425] BTRFS info (device loop1): disabling free space tree
[  282.646198][ T8425] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  282.666064][ T8425] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  283.079849][ T8465] loop1: detected capacity change from 32768 to 64
[  283.104834][ T8464] syz.1.687: attempt to access beyond end of device
[  283.104834][ T8464] loop1: rw=6145, sector=10488, nr_sectors = 8 limit=64
[  283.134732][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'.
[  283.197569][ T8464] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  283.216833][ T8464] syz.1.687: attempt to access beyond end of device
[  283.216833][ T8464] loop1: rw=6145, sector=10496, nr_sectors = 8 limit=64
[  283.232598][ T8464] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[  283.246967][ T8464] BTRFS: error (device loop1) in btrfs_commit_transaction:2511: errno=-5 IO failure (Error while writing out transaction)
[  283.261750][ T8464] BTRFS info (device loop1: state E): forced readonly
[  283.276768][ T8464] BTRFS warning (device loop1: state E): Skipping commit of aborted transaction.
[  283.307072][ T8464] BTRFS error (device loop1: state EA): Transaction aborted (error -5)
[  283.362809][ T8464] BTRFS: error (device loop1: state EA) in cleanup_transaction:2004: errno=-5 IO failure
[  284.905768][ T5787] BTRFS info (device loop1: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  285.619471][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.702'.
[  287.348131][ T5802] Bluetooth: hci3: hcon ffff88802f61c000 sent 4 < count 6
[  287.432158][ T8526] (null): rxe_set_mtu: Set mtu to 1024
[  287.448073][ T8526] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[  287.994112][ T8519] loop3: detected capacity change from 0 to 32768
[  288.011205][ T8519] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.708 (8519)
[  288.097108][ T8519] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  288.143586][ T8519] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  288.152317][ T8519] BTRFS info (device loop3): force clearing of disk cache
[  288.192374][ T8519] BTRFS info (device loop3): enabling auto defrag
[  288.210737][ T8519] BTRFS info (device loop3): max_inline at 0
[  288.229961][ T8519] BTRFS info (device loop3): enabling disk space caching
[  288.243233][ T8519] BTRFS info (device loop3): disk space caching is enabled
[  288.442309][ T8519] BTRFS info (device loop3): enabling ssd optimizations
[  288.468036][ T8519] BTRFS info (device loop3): rebuilding free space tree
[  288.562779][ T8519] BTRFS info (device loop3): disabling free space tree
[  288.614726][ T8519] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  288.793272][ T8519] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  289.384216][ T8561] loop3: detected capacity change from 32768 to 64
[  289.400723][ T7288] kworker/u4:13: attempt to access beyond end of device
[  289.400723][ T7288] loop3: rw=6145, sector=10520, nr_sectors = 8 limit=64
[  289.457016][ T7288] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  289.515043][ T7288] kworker/u4:13: attempt to access beyond end of device
[  289.515043][ T7288] loop3: rw=6145, sector=10528, nr_sectors = 8 limit=64
[  289.542404][ T7288] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[  289.557550][ T7288] BTRFS: error (device loop3) in btrfs_commit_transaction:2511: errno=-5 IO failure (Error while writing out transaction)
[  289.591661][ T7288] BTRFS info (device loop3: state E): forced readonly
[  289.608560][ T7288] BTRFS warning (device loop3: state E): Skipping commit of aborted transaction.
[  289.635971][ T7288] BTRFS error (device loop3: state EA): Transaction aborted (error -5)
[  289.651731][ T7288] BTRFS: error (device loop3: state EA) in cleanup_transaction:2004: errno=-5 IO failure
[  289.670104][ T7288] BTRFS error (device loop3: state EA): fail to start transaction for status update: -30
[  290.802066][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.722'.
[  290.838019][ T5796] BTRFS info (device loop3: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  292.737816][ T8595] syz.3.721 (8595): drop_caches: 2
[  293.030236][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'.
[  293.291651][ T8611] loop0: detected capacity change from 0 to 32768
[  293.344815][ T8611] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.729 (8611)
[  293.386681][ T8611] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  293.401763][ T8611] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  293.418553][ T8611] BTRFS info (device loop0): force clearing of disk cache
[  293.440285][ T8611] BTRFS info (device loop0): enabling auto defrag
[  293.473766][ T8611] BTRFS info (device loop0): max_inline at 0
[  293.651865][ T8611] BTRFS info (device loop0): enabling disk space caching
[  293.694679][ T8611] BTRFS info (device loop0): disk space caching is enabled
[  293.770689][ T8626] syzkaller0: entered promiscuous mode
[  293.781537][ T8626] syzkaller0: entered allmulticast mode
[  293.932709][ T8611] BTRFS info (device loop0): enabling ssd optimizations
[  293.979726][ T8611] BTRFS info (device loop0): rebuilding free space tree
[  294.095145][ T8611] BTRFS info (device loop0): disabling free space tree
[  294.109968][ T8611] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  294.137659][ T8611] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  294.466482][ T8657] loop0: detected capacity change from 32768 to 64
[  294.488882][ T7294] kworker/u4:18: attempt to access beyond end of device
[  294.488882][ T7294] loop0: rw=6145, sector=10512, nr_sectors = 8 limit=64
[  294.529362][ T7294] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  295.415374][ T7294] kworker/u4:18: attempt to access beyond end of device
[  295.415374][ T7294] loop0: rw=6145, sector=10520, nr_sectors = 8 limit=64
[  295.490657][ T7294] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[  295.555241][ T7294] BTRFS: error (device loop0) in btrfs_commit_transaction:2511: errno=-5 IO failure (Error while writing out transaction)
[  295.615070][ T7294] BTRFS info (device loop0: state E): forced readonly
[  295.655875][ T7294] BTRFS warning (device loop0: state E): Skipping commit of aborted transaction.
[  295.687016][ T7294] BTRFS error (device loop0: state EA): Transaction aborted (error -5)
[  295.720851][ T7294] BTRFS: error (device loop0: state EA) in cleanup_transaction:2004: errno=-5 IO failure
[  295.762941][ T7294] BTRFS error (device loop0: state EA): fail to start transaction for status update: -30
[  295.947308][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'.
[  296.381366][ T8667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.740'.
[  296.780018][ T5792] BTRFS info (device loop0: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  296.830100][ T8674] fuse: Bad value for 'group_id'
[  299.427267][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.751'.
[  299.439340][ T8703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.751'.
[  299.545986][ T8707] fuse: Bad value for 'group_id'
[  302.985647][ T8745] fuse: Bad value for 'group_id'
[  306.102781][ T8793] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  306.114551][ T8793] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  308.146584][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'.
[  308.159218][ T8825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.787'.
[  309.431769][ T8839] loop2: detected capacity change from 0 to 7
[  309.472222][ T8839] Dev loop2: unable to read RDB block 7
[  309.482580][ T8839]  loop2: unable to read partition table
[  309.494886][ T8839] loop2: partition table beyond EOD, truncated
[  309.515822][ T8839] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  309.815941][ T5161] Dev loop2: unable to read RDB block 7
[  309.830831][ T5161]  loop2: unable to read partition table
[  309.873350][    T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  309.873475][ T5161] loop2: partition table beyond EOD, truncated
[  310.103200][    T8] usb 4-1: Using ep0 maxpacket: 16
[  310.182433][ T5161] Dev loop2: unable to read RDB block 7
[  310.198468][ T5161]  loop2: unable to read partition table
[  310.215051][ T5161] loop2: partition table beyond EOD, truncated
[  310.304306][    T8] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  310.386155][    T8] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  310.474990][    T8] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  310.609911][    T8] usb 4-1: config 1 interface 0 has no altsetting 0
[  311.220629][    T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  311.286732][ T8853] loop1: detected capacity change from 0 to 32768
[  311.303370][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.311877][    T8] usb 4-1: Product: syz
[  311.325571][ T5161] Dev loop2: unable to read RDB block 7
[  311.331211][ T5161]  loop2: unable to read partition table
[  311.348965][ T8853] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.794 (8853)
[  311.378024][ T5161] loop2: partition table beyond EOD, truncated
[  311.412493][ T8853] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  311.425939][    T8] usb 4-1: Manufacturer: syz
[  311.430625][    T8] usb 4-1: SerialNumber: syz
[  311.450660][ T8853] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  311.459145][ T8860] gretap0: entered promiscuous mode
[  311.481430][ T8853] BTRFS info (device loop1): force clearing of disk cache
[  311.523259][ T8853] BTRFS info (device loop1): enabling auto defrag
[  311.553224][ T8853] BTRFS info (device loop1): max_inline at 0
[  311.580871][ T8853] BTRFS info (device loop1): enabling disk space caching
[  311.641163][ T5161] Dev loop2: unable to read RDB block 7
[  311.644622][ T8853] BTRFS info (device loop1): disk space caching is enabled
[  311.656633][ T5161]  loop2: unable to read partition table
[  311.703802][ T5161] loop2: partition table beyond EOD, truncated
[  311.975902][ T8853] BTRFS info (device loop1): enabling ssd optimizations
[  312.025677][ T8853] BTRFS info (device loop1): rebuilding free space tree
[  312.121460][ T8853] BTRFS info (device loop1): disabling free space tree
[  312.172774][ T8853] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  312.238259][ T8853] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  312.519134][ T8881] loop1: detected capacity change from 32768 to 64
[  312.545452][   T49] kworker/u4:3: attempt to access beyond end of device
[  312.545452][   T49] loop1: rw=6145, sector=10512, nr_sectors = 8 limit=64
[  312.654435][ T5161] Dev loop2: unable to read RDB block 7
[  312.660085][ T5161]  loop2: unable to read partition table
[  312.767445][ T5161] loop2: partition table beyond EOD, truncated
[  312.780545][   T49] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  313.087915][   T49] kworker/u4:3: attempt to access beyond end of device
[  313.087915][   T49] loop1: rw=6145, sector=10520, nr_sectors = 8 limit=64
[  313.125553][   T49] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[  313.151641][   T49] kworker/u4:3: attempt to access beyond end of device
[  313.151641][   T49] loop1: rw=6145, sector=10528, nr_sectors = 8 limit=64
[  313.191320][   T49] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0
[  313.222548][   T49] BTRFS: error (device loop1) in btrfs_commit_transaction:2511: errno=-5 IO failure (Error while writing out transaction)
[  313.282195][   T49] BTRFS info (device loop1: state E): forced readonly
[  313.373959][   T49] BTRFS warning (device loop1: state E): Skipping commit of aborted transaction.
[  313.433341][   T49] BTRFS error (device loop1: state EA): Transaction aborted (error -5)
[  313.479615][    T8] usb 4-1: can't set config #1, error -71
[  313.498821][   T49] BTRFS: error (device loop1: state EA) in cleanup_transaction:2004: errno=-5 IO failure
[  313.530441][   T49] BTRFS error (device loop1: state EA): fail to start transaction for status update: -30
[  313.536349][    T8] usb 4-1: USB disconnect, device number 4
[  314.525495][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  315.201208][ T5787] BTRFS info (device loop1: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  317.409073][ T8915] ip6_vti0 speed is unknown, defaulting to 1000
[  317.567427][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  317.600441][ T5802] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  317.765742][ T8920] fuse: Unknown parameter 'fd0x0000000000000004'
[  319.370697][ T8937] nvme_fabrics: missing parameter 'transport=%s'
[  319.412486][ T8937] nvme_fabrics: missing parameter 'nqn=%s'
[  321.782701][ T8976] fuse: Bad value for 'fd'
[  322.642323][ T9004] Driver unsupported XDP return value 0 on prog  (id 79) dev N/A, expect packet loss!
[  326.029152][ T9052] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  326.441779][ T9035] loop0: detected capacity change from 0 to 32768
[  326.563506][ T9035] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.847 (9035)
[  326.641838][ T9035] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  326.679553][ T9035] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  326.739927][ T9035] BTRFS info (device loop0): force clearing of disk cache
[  326.769591][ T9035] BTRFS info (device loop0): enabling auto defrag
[  326.788331][ T9035] BTRFS info (device loop0): max_inline at 0
[  326.810648][ T9035] BTRFS info (device loop0): enabling disk space caching
[  326.824146][ T9035] BTRFS info (device loop0): disk space caching is enabled
[  327.139910][ T9035] BTRFS info (device loop0): enabling ssd optimizations
[  327.150322][ T9035] BTRFS info (device loop0): rebuilding free space tree
[  327.237051][ T9035] BTRFS info (device loop0): disabling free space tree
[  327.270053][ T9035] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  327.342332][ T9035] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  327.651631][ T9035] loop0: detected capacity change from 32768 to 64
[  327.659879][   T49] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  328.133325][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  328.708730][ T5792] syz-executor: attempt to access beyond end of device
[  328.708730][ T5792] loop0: rw=6145, sector=10528, nr_sectors = 8 limit=64
[  328.878538][ T5792] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  328.892160][ T5792] syz-executor: attempt to access beyond end of device
[  328.892160][ T5792] loop0: rw=6145, sector=10536, nr_sectors = 8 limit=64
[  328.906226][ T5792] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[  328.917523][ T5792] syz-executor: attempt to access beyond end of device
[  328.917523][ T5792] loop0: rw=6145, sector=10544, nr_sectors = 8 limit=64
[  328.933050][ T5792] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0
[  328.944179][ T5792] syz-executor: attempt to access beyond end of device
[  328.944179][ T5792] loop0: rw=6145, sector=10552, nr_sectors = 8 limit=64
[  329.041585][ T5792] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0
[  329.080269][ T5792] syz-executor: attempt to access beyond end of device
[  329.080269][ T5792] loop0: rw=6145, sector=10560, nr_sectors = 8 limit=64
[  329.105141][ T5792] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0
[  329.136145][ T5792] syz-executor: attempt to access beyond end of device
[  329.136145][ T5792] loop0: rw=6145, sector=10568, nr_sectors = 8 limit=64
[  329.174651][ T5792] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 6, rd 0, flush 0, corrupt 0, gen 0
[  329.195248][ T5792] BTRFS: error (device loop0) in btrfs_commit_transaction:2511: errno=-5 IO failure (Error while writing out transaction)
[  329.245218][ T5792] BTRFS info (device loop0: state E): forced readonly
[  329.254892][ T5792] BTRFS warning (device loop0: state E): Skipping commit of aborted transaction.
[  329.295627][ T5792] BTRFS error (device loop0: state EA): Transaction aborted (error -5)
[  329.334992][ T5792] BTRFS: error (device loop0: state EA) in cleanup_transaction:2004: errno=-5 IO failure
[  329.746469][ T7759] BTRFS info (device loop0: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  330.398039][ T9129] pim6reg: entered allmulticast mode
[  332.828911][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  332.839312][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  332.848579][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  332.900919][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  332.909132][ T5802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  332.929831][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  333.151761][ T9158] ip6_vti0 speed is unknown, defaulting to 1000
[  333.670810][ T9158] chnl_net:caif_netlink_parms(): no params data found
[  333.801635][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.814822][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.822119][ T9158] bridge_slave_0: entered allmulticast mode
[  333.836499][ T9158] bridge_slave_0: entered promiscuous mode
[  333.848981][ T9158] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.858571][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.866846][ T9158] bridge_slave_1: entered allmulticast mode
[  333.874982][ T9158] bridge_slave_1: entered promiscuous mode
[  333.924038][ T9158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  333.937025][ T9158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  333.988739][ T9158] team0: Port device team_slave_0 added
[  333.997992][ T9158] team0: Port device team_slave_1 added
[  334.039271][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.046720][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.075117][ T9158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.088705][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.100381][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.127206][ T9158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  334.193827][ T9158] hsr_slave_0: entered promiscuous mode
[  334.200953][ T9158] hsr_slave_1: entered promiscuous mode
[  334.470967][ T9158] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  334.490249][ T9158] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  334.507590][ T9158] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  334.526516][ T9158] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  334.565090][ T9158] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.572563][ T9158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.581378][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.588625][ T9158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.613582][  T138] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.622744][  T138] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.704356][ T9158] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.730973][ T9158] 8021q: adding VLAN 0 to HW filter on device team0
[  334.744973][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.752156][ T7294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.779112][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.786375][ T7294] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.003617][ T5802] Bluetooth: hci3: command tx timeout
[  335.027216][ T9158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.276693][ T9158] veth0_vlan: entered promiscuous mode
[  335.290166][ T9158] veth1_vlan: entered promiscuous mode
[  335.322684][ T9158] veth0_macvtap: entered promiscuous mode
[  335.334161][ T9158] veth1_macvtap: entered promiscuous mode
[  335.352027][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  335.364411][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.375811][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  335.386520][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.396461][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  335.407214][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.418802][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  335.431547][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  335.442206][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.452442][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  335.463259][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.473520][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  335.488932][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.500331][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  335.517862][ T9158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  335.527102][ T9158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.536414][ T9158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.546318][ T9158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.646576][ T7294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.659203][ T7294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.692105][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.700286][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.089550][ T9226] loop2: detected capacity change from 0 to 7
[  336.108780][ T6283] Dev loop2: unable to read RDB block 7
[  336.121591][ T6283]  loop2: unable to read partition table
[  336.143308][ T6283] loop2: partition table beyond EOD, truncated
[  336.235002][ T9226] Dev loop2: unable to read RDB block 7
[  336.240684][ T9226]  loop2: unable to read partition table
[  336.291612][ T9226] loop2: partition table beyond EOD, truncated
[  336.303296][ T9226] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  336.643424][ T5861] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  336.833235][ T5861] usb 5-1: Using ep0 maxpacket: 16
[  336.862810][ T9231] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  336.899833][ T5861] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  336.947435][ T5861] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  337.022895][ T5861] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  337.083292][ T5802] Bluetooth: hci3: command tx timeout
[  337.297784][ T5861] usb 5-1: config 1 interface 0 has no altsetting 0
[  337.330974][ T5861] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  337.383274][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.563326][ T5861] usb 5-1: Product: syz
[  337.575877][ T5861] usb 5-1: Manufacturer: syz
[  337.580513][ T5861] usb 5-1: SerialNumber: syz
[  338.037926][ T9226] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  338.282052][ T5161] Dev loop2: unable to read RDB block 7
[  338.297232][ T5161]  loop2: unable to read partition table
[  338.305402][ T5161] loop2: partition table beyond EOD, truncated
[  339.163374][ T5802] Bluetooth: hci3: command tx timeout
[  340.072762][ T5861] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  340.104424][ T5861] usb 5-1: USB disconnect, device number 2
[  340.118401][ T5861] usblp0: removed
[  341.248544][ T5802] Bluetooth: hci3: command tx timeout
[  341.427805][ T9266] comedi comedi0: pcmda12: I/O port conflict (0x3,16)
[  341.444511][ T9267] loop2: detected capacity change from 0 to 7
[  341.464407][ T9267] Dev loop2: unable to read RDB block 7
[  341.484923][ T9267]  loop2: unable to read partition table
[  341.508126][ T9267] loop2: partition table beyond EOD, truncated
[  341.541414][ T9267] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  341.920833][ T9275] gretap0: entered promiscuous mode
[  343.275113][ T9296] gfs2: gfs2 mount does not exist
[  343.331100][ T5802] Bluetooth: hci3: command tx timeout
[  347.341419][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.898'.
[  349.122424][ T9374] loop2: detected capacity change from 0 to 7
[  349.136789][ T9374] Dev loop2: unable to read RDB block 7
[  350.934680][ T9374]  loop2: unable to read partition table
[  351.503529][ T9374] loop2: partition table beyond EOD, truncated
[  351.539696][ T9374] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  352.961278][ T9383] ip6_vti0 speed is unknown, defaulting to 1000
[  353.866269][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'.
[  353.931656][ T9392] bridge_slave_1: left allmulticast mode
[  353.946737][ T9392] bridge_slave_1: left promiscuous mode
[  353.961383][ T9392] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.000225][ T9392] bridge_slave_0: left allmulticast mode
[  354.007401][ T9392] bridge_slave_0: left promiscuous mode
[  354.013655][ T9392] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.553052][   T28] kauditd_printk_skb: 22 callbacks suppressed
[  355.553069][   T28] audit: type=1326 audit(1764156378.578:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9415 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaed98f749 code=0x7ffc0000
[  355.661881][   T28] audit: type=1326 audit(1764156378.578:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9415 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaed98f749 code=0x7ffc0000
[  355.744600][   T28] audit: type=1326 audit(1764156378.588:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9415 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7ffaed98f749 code=0x7ffc0000
[  355.801415][   T28] audit: type=1326 audit(1764156378.588:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9415 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaed98f749 code=0x7ffc0000
[  355.844060][   T28] audit: type=1326 audit(1764156378.588:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9415 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaed98f749 code=0x7ffc0000
[  356.058724][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'.
[  359.605029][ T9446] fuse: Bad value for 'fd'
[  359.769973][ T5802] Bluetooth: hci0: unexpected event for opcode 0x042e
[  360.124670][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'.
[  360.512810][ T9468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  362.008492][ T9453] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.017116][ T9453] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.136364][ T9476] fuse: Bad value for 'fd'
[  363.300136][ T9453] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  363.327860][ T9453] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  363.720415][ T9453] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.734898][ T9453] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.747360][ T9453] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.759208][ T9453] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.809637][ T9453] bridge1: left allmulticast mode
[  363.819033][ T9453] sit1: left allmulticast mode
[  363.873979][ T9453] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  363.889504][ T9453] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  363.901193][ T9453] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  363.911000][ T9453] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  363.920633][ T9453] geneve2: left promiscuous mode
[  363.931146][ T9453] geneve2: left allmulticast mode
[  363.973434][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'.
[  364.620126][ T9525] fuse: Bad value for 'fd'
[  365.524534][ T9516] netlink: 'syz.4.951': attribute type 4 has an invalid length.
[  366.187679][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'.
[  366.479532][ T9559] loop2: detected capacity change from 0 to 7
[  366.512266][ T9559] Dev loop2: unable to read RDB block 7
[  366.525995][ T9559]  loop2: unable to read partition table
[  366.596314][ T9559] loop2: partition table beyond EOD, truncated
[  366.623745][ T9559] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  367.124810][ T9485] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  367.329233][ T9485] usb 5-1: Using ep0 maxpacket: 16
[  367.341752][ T9485] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  367.360670][ T9485] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  367.381001][ T9485] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  367.418773][ T9485] usb 5-1: config 1 interface 0 has no altsetting 0
[  367.468087][ T9485] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  367.481729][ T9485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.496112][ T9485] usb 5-1: Product: syz
[  367.500335][ T9485] usb 5-1: Manufacturer: syz
[  367.507159][ T9485] usb 5-1: SerialNumber: syz
[  368.805793][ T5161] Dev loop2: unable to read RDB block 7
[  368.844742][ T5161]  loop2: unable to read partition table
[  368.893354][ T5161] loop2: partition table beyond EOD, truncated
[  369.100018][ T5802] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  369.331765][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'.
[  369.513503][ T5161] Dev loop2: unable to read RDB block 7
[  369.534995][ T5161]  loop2: unable to read partition table
[  369.603562][ T5161] loop2: partition table beyond EOD, truncated
[  370.901680][ T9485] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  370.976738][ T9485] usb 5-1: USB disconnect, device number 3
[  370.999921][ T9613] fuse: Bad value for 'fd'
[  371.024560][ T9485] usblp0: removed
[  371.561650][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'.
[  371.585770][ T9630] bridge_slave_1: left allmulticast mode
[  371.603397][ T9630] bridge_slave_1: left promiscuous mode
[  371.612984][ T9630] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.681954][ T9630] bridge_slave_0: left allmulticast mode
[  371.696580][ T9630] bridge_slave_0: left promiscuous mode
[  371.716181][ T9630] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.301037][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'.
[  373.868552][ T9649] loop2: detected capacity change from 0 to 7
[  373.915952][ T9649] Dev loop2: unable to read RDB block 7
[  373.950280][ T9649]  loop2: unable to read partition table
[  373.968240][ T9653] fuse: Bad value for 'fd'
[  373.993488][ T9649] loop2: partition table beyond EOD, truncated
[  373.999905][ T9649] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  374.244157][ T5161] Dev loop2: unable to read RDB block 7
[  374.253435][ T5161]  loop2: unable to read partition table
[  374.259840][ T5161] loop2: partition table beyond EOD, truncated
[  374.363861][ T9491] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  374.544191][ T9491] usb 5-1: Using ep0 maxpacket: 16
[  374.584660][ T9491] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  374.600032][ T9491] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  374.624371][ T9491] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  374.642621][ T9491] usb 5-1: config 1 interface 0 has no altsetting 0
[  374.665622][ T9491] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  374.668274][ T5161] Dev loop2: unable to read RDB block 7
[  374.688376][ T9491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.699643][ T5161]  loop2: unable to read partition table
[  374.706911][ T9491] usb 5-1: Product: syz
[  374.711119][ T9491] usb 5-1: Manufacturer: syz
[  374.715224][ T5161] loop2: partition table beyond EOD, truncated
[  374.725983][ T9491] usb 5-1: SerialNumber: syz
[  374.754648][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'.
[  374.907278][ T5161] Dev loop2: unable to read RDB block 7
[  374.925518][ T5161]  loop2: unable to read partition table
[  374.954186][ T5161] loop2: partition table beyond EOD, truncated
[  375.361072][ T5161] Dev loop2: unable to read RDB block 7
[  375.383588][ T5161]  loop2: unable to read partition table
[  375.407859][ T5161] loop2: partition table beyond EOD, truncated
[  375.445581][ T9680] fuse: Invalid rootmode
[  376.450695][ T5161] Dev loop2: unable to read RDB block 7
[  376.474116][ T5161]  loop2: unable to read partition table
[  376.500367][ T5161] loop2: partition table beyond EOD, truncated
[  376.902419][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'.
[  377.295687][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.994'.
[  378.288706][ T5161] Dev loop2: unable to read RDB block 7
[  378.331881][ T5161]  loop2: unable to read partition table
[  378.360836][ T5161] loop2: partition table beyond EOD, truncated
[  378.625397][ T5161] Dev loop2: unable to read RDB block 7
[  378.643828][ T5161]  loop2: unable to read partition table
[  378.685900][ T5161] loop2: partition table beyond EOD, truncated
[  378.797542][ T9713] fuse: Invalid rootmode
[  378.986628][ T9491] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  379.010208][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  379.015714][ T9491] usb 5-1: USB disconnect, device number 4
[  379.030478][ T9491] usblp0: removed
[  379.213750][ T9721] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1004'.
[  379.895917][ T9735] fuse: Bad value for 'fd'
[  380.080406][ T9741] netlink: 'syz.2.1013': attribute type 14 has an invalid length.
[  381.233282][ T5793] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  381.438446][ T5793] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  381.448691][ T5793] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  381.463312][ T5793] usb 5-1: config 0 interface 0 has no altsetting 0
[  381.475531][ T5793] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  381.487310][ T5793] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  381.496346][ T5793] usb 5-1: Product: syz
[  381.500704][ T5793] usb 5-1: Manufacturer: syz
[  381.506601][ T5793] usb 5-1: SerialNumber: syz
[  381.524332][ T5793] usb 5-1: config 0 descriptor??
[  381.540949][ T5793] hub 5-1:0.0: bad descriptor, ignoring hub
[  381.549170][ T5793] hub: probe of 5-1:0.0 failed with error -5
[  381.559231][ T5793] usb 5-1: selecting invalid altsetting 0
[  382.005063][ T9768] fuse: Bad value for 'rootmode'
[  382.013432][ T5793] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  382.284566][ T5793] usb 4-1: Using ep0 maxpacket: 16
[  382.289126][ T9758] usb 5-1: reset high-speed USB device number 5 using dummy_hcd
[  382.306270][ T5793] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  382.326293][ T5793] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  382.397167][ T5793] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  382.581327][ T5793] usb 4-1: config 1 interface 0 has no altsetting 0
[  382.685928][ T5793] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  382.699423][ T9758] usb 5-1: device firmware changed
[  382.720488][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.728886][ T9504] usb 5-1: USB disconnect, device number 5
[  382.850026][ T5793] usb 4-1: Product: syz
[  382.859450][ T5793] usb 4-1: Manufacturer: syz
[  382.873963][ T5793] usb 4-1: SerialNumber: syz
[  383.038514][ T5802] Bluetooth: hci3: command 0x0405 tx timeout
[  383.183270][ T9504] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  383.395921][ T9504] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  383.435474][ T9504] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  383.472189][ T9504] usb 5-1: config 0 interface 0 has no altsetting 0
[  383.500162][ T9504] usb 5-1: language id specifier not provided by device, defaulting to English
[  383.522842][ T9504] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  383.541082][ T9504] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  383.549755][ T9504] usb 5-1: Product: syz
[  383.565378][ T9504] usb 5-1: config 0 descriptor??
[  383.594633][ T9504] hub 5-1:0.0: bad descriptor, ignoring hub
[  383.607669][ T9504] hub: probe of 5-1:0.0 failed with error -5
[  383.655711][ T9504] usb 5-1: selecting invalid altsetting 0
[  384.107982][ T9491] usb 5-1: USB disconnect, device number 6
[  384.589568][ T5793] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  384.631070][ T5793] usb 4-1: USB disconnect, device number 5
[  384.662078][ T5793] usblp0: removed
[  384.717311][ T9793] fuse: Bad value for 'rootmode'
[  385.141239][ T9805] loop2: detected capacity change from 0 to 7
[  385.205993][ T9805] Dev loop2: unable to read RDB block 7
[  385.212231][ T9805]  loop2: unable to read partition table
[  385.229327][ T9805] loop2: partition table beyond EOD, truncated
[  385.239855][ T9805] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  385.653338][ T9491] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  386.023288][ T9491] usb 5-1: Using ep0 maxpacket: 16
[  386.257422][ T9491] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  386.353231][ T9491] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  386.436320][ T5161] Dev loop2: unable to read RDB block 7
[  386.458580][ T9491] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  386.472138][ T5161]  loop2: unable to read partition table
[  386.498515][ T5161] loop2: partition table beyond EOD, truncated
[  386.591642][ T9491] usb 5-1: config 1 interface 0 has no altsetting 0
[  386.790146][ T9491] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  386.817467][ T9491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.834398][ T9491] usb 5-1: Product: syz
[  386.846238][ T9491] usb 5-1: Manufacturer: syz
[  386.855840][ T9491] usb 5-1: SerialNumber: syz
[  387.597111][ T5161] Dev loop2: unable to read RDB block 7
[  387.630584][ T5161]  loop2: unable to read partition table
[  387.651430][ T5161] loop2: partition table beyond EOD, truncated
[  387.968428][ T9840] fuse: Bad value for 'rootmode'
[  388.196208][ T5161] Dev loop2: unable to read RDB block 7
[  388.217401][ T5161]  loop2: unable to read partition table
[  388.233660][ T5161] loop2: partition table beyond EOD, truncated
[  388.579041][ T5161] Dev loop2: unable to read RDB block 7
[  388.628316][ T5161]  loop2: unable to read partition table
[  388.653622][ T5161] loop2: partition table beyond EOD, truncated
[  390.367383][ T9491] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  390.421187][ T9491] usb 5-1: USB disconnect, device number 7
[  390.457874][ T9491] usblp0: removed
[  390.985669][ T9858] 9pnet_virtio: no channels available for device syz
[  391.068599][ T9863] fuse: Bad value for 'fd'
[  393.255127][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.307012][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.321243][ T9887] loop2: detected capacity change from 0 to 7
[  393.336644][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.356699][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.363856][ T9887] Dev loop2: unable to read RDB block 7
[  393.370832][ T9887]  loop2: unable to read partition table
[  393.376971][ T9887] loop2: partition table beyond EOD, truncated
[  393.388708][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.397136][ T9887] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  393.408041][ T9891] fuse: Unknown parameter 'use00000000000000000000'
[  393.415966][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.482401][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.505273][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.539780][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.579399][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.599628][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.614003][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.621818][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.634224][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.641777][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.652927][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.669934][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.690238][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.717452][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.743183][ T5915] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  393.830757][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  393.848894][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  394.797963][ T9903] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1059'.
[  394.817741][ T5915] usb 3-1: Using ep0 maxpacket: 16
[  394.828560][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  394.878922][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  394.914079][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  394.930796][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  394.942365][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  394.952230][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  394.962860][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  394.970507][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  394.978400][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.030484][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.109201][ T5915] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  395.146190][ T5802] Bluetooth: hci0: unexpected event for opcode 0x040d
[  395.171100][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.216752][ T5915] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  395.226924][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.234664][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.242204][ T5915] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  395.255439][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.263218][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.270770][ T5915] usb 3-1: config 1 interface 0 has no altsetting 0
[  395.277704][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.285397][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.292824][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.300514][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.308222][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.320370][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.328203][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.338897][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.350049][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.360732][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.369210][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.379485][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.387875][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.398434][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.407421][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.417873][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.428708][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.439266][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.447167][ T5915] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  395.458265][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.465783][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.477801][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.485858][ T5915] usb 3-1: Product: syz
[  395.490269][ T5915] usb 3-1: Manufacturer: syz
[  395.496105][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.503649][ T5915] usb 3-1: SerialNumber: syz
[  395.508542][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.517125][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.527317][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.535079][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.542783][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.552981][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.561262][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.572913][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.580889][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.591785][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.600758][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.611464][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.620488][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.631278][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.641983][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.657533][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.667523][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.678569][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.689330][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.699815][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.710062][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.720294][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.730271][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.740237][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.750221][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.760413][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.771702][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.789823][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.800613][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.811897][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.821703][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.832445][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.841974][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.854792][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.862619][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.891854][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.906683][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.947381][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.958800][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.971556][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.982164][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  395.996301][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  396.007016][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  396.018088][ T5793] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  396.045898][ T5793] hid-generic 0000:0000:0004.0001: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  396.270142][ T9924] fuse: Unknown parameter 'use00000000000000000000'
[  396.359555][ T9918] fido_id[9918]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  396.711881][ T9929] syzkaller0: entered promiscuous mode
[  396.756873][ T9929] syzkaller0: entered allmulticast mode
[  397.616480][ T9950] fuse: Bad value for 'fd'
[  397.751439][ T9953] 9pnet_virtio: no channels available for device syz
[  397.795835][ T5915] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  397.845039][ T5915] usb 3-1: USB disconnect, device number 3
[  397.866901][ T5915] usblp0: removed
[  398.020170][ T9960] syzkaller0: entered promiscuous mode
[  398.043336][ T9960] syzkaller0: entered allmulticast mode
[  398.533979][ T9973] fuse: Unknown parameter 'user_i00000000000000000000'
[  401.280141][T10002] syzkaller0: entered promiscuous mode
[  401.306925][T10002] syzkaller0: entered allmulticast mode
[  403.210250][T10018] tipc: Started in network mode
[  403.215545][T10018] tipc: Node identity , cluster identity 4711
[  403.222098][T10018] tipc: Failed to obtain node identity
[  403.229195][T10018] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  403.926572][T10024] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  404.683390][ T5802] Bluetooth: hci3: command 0x0405 tx timeout
[  405.570443][T10037] syzkaller0: entered promiscuous mode
[  405.576254][T10037] syzkaller0: entered allmulticast mode
[  405.933760][T10049] loop2: detected capacity change from 0 to 7
[  405.954101][T10049] Dev loop2: unable to read RDB block 7
[  405.967800][T10049]  loop2: unable to read partition table
[  406.004918][T10049] loop2: partition table beyond EOD, truncated
[  406.011207][T10049] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  406.413225][ T9491] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  406.613830][ T9491] usb 5-1: Using ep0 maxpacket: 16
[  406.627538][ T9491] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  406.640518][ T9491] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  406.656241][ T9491] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  406.670185][ T9491] usb 5-1: config 1 interface 0 has no altsetting 0
[  406.682938][ T9491] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  406.703969][ T9491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.712048][ T9491] usb 5-1: Product: syz
[  406.716315][ T9491] usb 5-1: Manufacturer: syz
[  406.721132][ T9491] usb 5-1: SerialNumber: syz
[  408.750412][ T9491] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  408.807900][ T9491] usb 5-1: USB disconnect, device number 8
[  408.848952][ T9491] usblp0: removed
[  411.250708][T10076] syzkaller0: entered promiscuous mode
[  411.259199][T10076] syzkaller0: entered allmulticast mode
[  411.270866][T10087] loop2: detected capacity change from 0 to 7
[  411.297640][T10087] Dev loop2: unable to read RDB block 7
[  411.306234][T10087]  loop2: unable to read partition table
[  411.313719][T10087] loop2: partition table beyond EOD, truncated
[  411.340433][T10087] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  411.494884][ T5161] Dev loop2: unable to read RDB block 7
[  411.510506][ T5161]  loop2: unable to read partition table
[  411.520452][ T5161] loop2: partition table beyond EOD, truncated
[  411.653201][ T5793] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  411.975944][ T5793] usb 5-1: Using ep0 maxpacket: 16
[  413.572817][ T5793] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  413.600526][ T5793] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  413.630789][ T5793] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  413.644780][ T5793] usb 5-1: config 1 interface 0 has no altsetting 0
[  413.703650][ T5793] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  413.739216][ T5793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.841521][ T5793] usb 5-1: Product: syz
[  413.908549][ T5793] usb 5-1: Manufacturer: syz
[  413.943003][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'.
[  413.981407][ T5793] usb 5-1: SerialNumber: syz
[  414.017944][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'.
[  414.293343][T10112] 8021q: VLANs not supported on pim6reg
[  415.045487][ T5161] Dev loop2: unable to read RDB block 7
[  415.097713][ T5161]  loop2: unable to read partition table
[  415.287043][ T5161] loop2: partition table beyond EOD, truncated
[  415.846680][ T5793] usb 5-1: can't set config #1, error -71
[  415.898098][ T5793] usb 5-1: USB disconnect, device number 9
[  416.339974][T10131] 9pnet_fd: Insufficient options for proto=fd
[  417.553725][T10141] 9pnet_virtio: no channels available for device syz
[  417.762228][T10144] 9pnet_virtio: no channels available for device syz
[  418.748157][T10158] loop2: detected capacity change from 0 to 7
[  418.795677][T10158] Dev loop2: unable to read RDB block 7
[  418.833310][T10158]  loop2: unable to read partition table
[  418.839297][T10158] loop2: partition table beyond EOD, truncated
[  418.853315][T10158] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  419.179509][T10161] syzkaller0: entered promiscuous mode
[  419.192196][T10161] syzkaller0: entered allmulticast mode
[  419.333255][ T5793] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  419.345556][T10164] 9pnet_fd: Insufficient options for proto=fd
[  419.553656][ T5793] usb 3-1: Using ep0 maxpacket: 16
[  420.565766][ T5793] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  420.639944][ T5793] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  420.657849][T10171] net_ratelimit: 10 callbacks suppressed
[  420.657867][T10171] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  420.670479][ T5793] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  420.670904][T10171] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  420.689755][ T5793] usb 3-1: config 1 interface 0 has no altsetting 0
[  421.399935][ T5793] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  421.441552][ T5793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.466808][ T5793] usb 3-1: Product: syz
[  421.478591][ T5793] usb 3-1: Manufacturer: syz
[  421.491059][ T5793] usb 3-1: SerialNumber: syz
[  422.576997][ T5793] usb 3-1: can't set config #1, error -71
[  422.604641][ T5793] usb 3-1: USB disconnect, device number 4
[  422.701656][T10191] syzkaller0: entered promiscuous mode
[  422.713314][T10191] syzkaller0: entered allmulticast mode
[  422.749967][T10193] 9pnet_fd: Insufficient options for proto=fd
[  423.302324][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'.
[  424.983799][T10207] loop4: detected capacity change from 0 to 32768
[  424.998387][T10207] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1164 (10207)
[  425.030827][T10207] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  425.110628][T10207] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  425.120173][T10207] BTRFS info (device loop4): force clearing of disk cache
[  425.128003][T10207] BTRFS info (device loop4): enabling auto defrag
[  425.136262][T10207] BTRFS info (device loop4): max_inline at 0
[  425.142325][T10207] BTRFS info (device loop4): enabling disk space caching
[  425.151707][T10207] BTRFS info (device loop4): disk space caching is enabled
[  425.226165][T10207] BTRFS info (device loop4): enabling ssd optimizations
[  425.282919][T10207] BTRFS info (device loop4): rebuilding free space tree
[  425.305247][T10207] BTRFS info (device loop4): disabling free space tree
[  425.317769][T10207] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  425.328915][T10207] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  425.560659][ T7294] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  427.449091][ T9158] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  427.676507][T10249] veth1_to_bond: entered allmulticast mode
[  427.693810][T10249] veth1_to_bond: entered promiscuous mode
[  427.701039][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'.
[  427.809721][T10249] bond0: (slave bond_slave_1): Releasing backup interface
[  427.923969][T10249] veth1_to_bond (unregistering): left promiscuous mode
[  427.955444][T10249] veth1_to_bond (unregistering): left allmulticast mode
[  429.248840][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'.
[  430.623614][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'.
[  430.638134][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'.
[  430.673872][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'.
[  430.711115][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'.
[  430.757266][T10305] loop2: detected capacity change from 0 to 7
[  430.825165][T10305] Dev loop2: unable to read RDB block 7
[  430.831034][T10305]  loop2: unable to read partition table
[  430.841515][T10305] loop2: partition table beyond EOD, truncated
[  430.853783][T10305] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  430.995028][ T5161] Dev loop2: unable to read RDB block 7
[  431.043265][ T5161]  loop2: unable to read partition table
[  431.133530][ T5161] loop2: partition table beyond EOD, truncated
[  431.265453][ T5879] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  431.453297][ T5879] usb 4-1: Using ep0 maxpacket: 16
[  431.635483][ T5879] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  431.645823][ T5879] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  431.656729][ T5879] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  431.670401][ T5879] usb 4-1: config 1 interface 0 has no altsetting 0
[  431.680834][ T5879] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  431.691035][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.699546][ T5879] usb 4-1: Product: syz
[  431.704195][ T5879] usb 4-1: Manufacturer: syz
[  431.709327][ T5879] usb 4-1: SerialNumber: syz
[  431.723823][T10314] 9pnet_virtio: no channels available for device syz
[  431.900540][ T5161] Dev loop2: unable to read RDB block 7
[  431.907527][ T5161]  loop2: unable to read partition table
[  431.913615][ T5161] loop2: partition table beyond EOD, truncated
[  432.025233][T10320] fuse: Unknown parameter '0x0000000000000004'
[  432.148597][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'.
[  432.249461][ T5161] Dev loop2: unable to read RDB block 7
[  432.303663][ T5161]  loop2: unable to read partition table
[  432.532070][ T5161] loop2: partition table beyond EOD, truncated
[  433.169847][ T5161] Dev loop2: unable to read RDB block 7
[  433.208124][ T5161]  loop2: unable to read partition table
[  433.215618][ T5161] loop2: partition table beyond EOD, truncated
[  433.530825][T10342] netlink: 'syz.2.1196': attribute type 10 has an invalid length.
[  433.572042][T10342] ªªªªª»: mtu greater than device maximum
[  433.948711][T10350] 9pnet_virtio: no channels available for device syz
[  434.202156][ T5879] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  434.237825][ T5879] usb 4-1: USB disconnect, device number 6
[  434.281162][ T5879] usblp0: removed
[  434.336238][T10354] fuse: Unknown parameter '0x0000000000000004'
[  435.331076][   T52] Bluetooth: hci3: command 0x0405 tx timeout
[  435.456062][T10375] 9pnet_virtio: no channels available for device syz
[  437.187136][T10396] loop2: detected capacity change from 0 to 7
[  437.478837][T10395] fuse: Unknown parameter 'fd0x0000000000000004'
[  437.712848][T10396] Dev loop2: unable to read RDB block 7
[  437.719713][T10396]  loop2: unable to read partition table
[  437.730985][T10396] loop2: partition table beyond EOD, truncated
[  437.737499][T10396] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  438.074863][ T5161] Dev loop2: unable to read RDB block 7
[  438.080519][ T5161]  loop2: unable to read partition table
[  438.089421][T10409] 9pnet_virtio: no channels available for device syz
[  438.171740][ T5161] loop2: partition table beyond EOD, truncated
[  438.350638][ T5848] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  438.397260][ T5161] Dev loop2: unable to read RDB block 7
[  438.404602][ T5161]  loop2: unable to read partition table
[  438.410427][ T5161] loop2: partition table beyond EOD, truncated
[  438.673599][ T5848] usb 5-1: Using ep0 maxpacket: 16
[  438.734576][ T5848] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  439.073158][ T5848] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  439.212361][ T5848] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  439.534897][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'.
[  439.544056][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'.
[  440.248414][ T5848] usb 5-1: config 1 interface 0 has no altsetting 0
[  440.374398][ T5161] Dev loop2: unable to read RDB block 7
[  440.399093][ T5161]  loop2: unable to read partition table
[  440.407045][ T5161] loop2: partition table beyond EOD, truncated
[  440.460236][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  440.748345][T10448] fuse: Unknown parameter 'fd0x0000000000000004'
[  442.182563][T10459] 9pnet_virtio: no channels available for device syz
[  442.553593][ T5848] usb 5-1: string descriptor 0 read error: -71
[  442.626939][ T5848] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  442.752292][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.723396][ T5848] usb 5-1: can't set config #1, error -71
[  443.818919][ T5848] usb 5-1: USB disconnect, device number 10
[  444.172929][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'.
[  444.219615][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'.
[  444.276065][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'.
[  444.304664][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'.
[  444.646575][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'.
[  444.655655][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1234'.
[  446.190977][T10492] fuse: Unknown parameter 'fd0x0000000000000004'
[  446.210210][T10494] 9pnet_virtio: no channels available for device syz
[  446.573654][T10505] loop2: detected capacity change from 0 to 7
[  446.618011][T10505] Dev loop2: unable to read RDB block 7
[  446.641466][T10505]  loop2: unable to read partition table
[  446.652960][T10505] loop2: partition table beyond EOD, truncated
[  446.675638][T10505] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  447.095121][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'.
[  447.116524][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'.
[  447.145620][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'.
[  447.181759][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'.
[  447.198032][T10525] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  447.644995][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'.
[  447.654129][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1246'.
[  449.789948][T10553] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1254'.
[  452.426088][T10593] kvm: pic: non byte read
[  452.431077][T10593] kvm: pic: non byte read
[  452.476143][T10593] kvm: pic: non byte read
[  452.490058][T10593] kvm: pic: non byte read
[  452.504674][T10593] kvm: pic: non byte read
[  452.511477][T10593] kvm: pic: non byte read
[  452.523615][T10593] kvm: pic: non byte read
[  452.532746][T10593] kvm: pic: non byte read
[  452.543675][T10593] kvm: pic: non byte read
[  452.561922][T10593] kvm: pic: non byte read
[  454.204845][T10620] trusted_key: encrypted_key: master key parameter 'cœYõ
Ù?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid
[  455.197761][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  456.104887][T10641] loop2: detected capacity change from 0 to 7
[  456.112678][T10641] Dev loop2: unable to read RDB block 7
[  456.119275][T10641]  loop2: unable to read partition table
[  456.132237][T10641] loop2: partition table beyond EOD, truncated
[  456.211147][T10641] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  459.524466][T10666] 9pnet_fd: Insufficient options for proto=fd
[  460.941507][T10681] syzkaller0: entered promiscuous mode
[  460.961158][T10681] syzkaller0: entered allmulticast mode
[  463.377214][T10696] 9pnet_fd: Insufficient options for proto=fd
[  465.632403][T10732] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  465.796236][T10736] 9pnet_fd: Insufficient options for proto=fd
[  468.003419][T10760] 9pnet_fd: Insufficient options for proto=fd
[  471.413637][T10790] 9pnet_fd: Insufficient options for proto=fd
[  471.590574][T10796] ip6_vti0 speed is unknown, defaulting to 1000
[  472.987860][T10809] 9pnet_virtio: no channels available for device syz
[  474.224193][T10826] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1334'.
[  474.318522][T10827] loop2: detected capacity change from 0 to 7
[  474.339980][T10827] Dev loop2: unable to read RDB block 7
[  474.370101][T10827]  loop2: unable to read partition table
[  474.407018][T10827] loop2: partition table beyond EOD, truncated
[  474.454687][T10830] 9pnet_fd: Insufficient options for proto=fd
[  474.462111][T10827] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  474.713584][    T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  475.037291][    T8] usb 3-1: Using ep0 maxpacket: 16
[  475.072296][    T8] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  475.125682][    T8] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  475.144707][    T8] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  475.158922][    T8] usb 3-1: config 1 interface 0 has no altsetting 0
[  475.488376][    T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  475.554312][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.562622][    T8] usb 3-1: Product: syz
[  475.567475][    T8] usb 3-1: Manufacturer: syz
[  475.576097][    T8] usb 3-1: SerialNumber: syz
[  476.077291][T10849] 9pnet_fd: Insufficient options for proto=fd
[  477.646225][    T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  477.694204][    T8] usb 3-1: USB disconnect, device number 5
[  477.732617][    T8] usblp0: removed
[  477.847917][T10877] 9pnet_fd: Insufficient options for proto=fd
[  478.444293][T10892] IPv6: addrconf: prefix option has invalid lifetime
[  478.625758][T10898] 9pnet_fd: Insufficient options for proto=fd
[  479.162015][T10896] loop4: detected capacity change from 0 to 32768
[  479.175960][T10896] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1360 (10896)
[  479.207755][T10896] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  479.289310][T10896] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  479.433715][T10896] BTRFS info (device loop4): force clearing of disk cache
[  479.516244][T10896] BTRFS info (device loop4): enabling auto defrag
[  479.580476][T10896] BTRFS info (device loop4): max_inline at 0
[  479.606672][T10896] BTRFS info (device loop4): enabling disk space caching
[  479.655512][T10896] BTRFS info (device loop4): disk space caching is enabled
[  479.851134][T10896] BTRFS info (device loop4): enabling ssd optimizations
[  479.862908][T10896] BTRFS info (device loop4): rebuilding free space tree
[  479.899797][T10896] BTRFS info (device loop4): disabling free space tree
[  479.947770][T10896] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  480.038272][T10896] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  480.492685][ T7301] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  480.686116][   T52] Bluetooth: hci0: unexpected event for opcode 0x0804
[  481.176031][ T9158] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  481.750671][T10948] 9pnet_fd: Insufficient options for proto=fd
[  484.390060][T10977] 9pnet_fd: Insufficient options for proto=fd
[  484.775098][   T52] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  484.785706][   T52] Bluetooth: hci0: Injecting HCI hardware error event
[  484.806167][ T5802] Bluetooth: hci0: hardware error 0x00
[  485.502590][T10975] loop2: detected capacity change from 0 to 32768
[  485.547567][T10975] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1381 (10975)
[  485.608158][T10975] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  485.618585][T10975] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  485.627924][T10975] BTRFS info (device loop2): force clearing of disk cache
[  485.635588][T10975] BTRFS info (device loop2): enabling auto defrag
[  485.647724][T10975] BTRFS info (device loop2): max_inline at 0
[  485.806261][T10975] BTRFS info (device loop2): enabling disk space caching
[  485.816167][T10975] BTRFS info (device loop2): disk space caching is enabled
[  485.953196][T10975] BTRFS info (device loop2): enabling ssd optimizations
[  486.011257][T10975] BTRFS info (device loop2): rebuilding free space tree
[  486.184990][T10975] BTRFS info (device loop2): disabling free space tree
[  486.230019][T10975] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  486.263630][T10975] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  486.789857][   T49] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  486.946666][T11029] 9pnet_fd: Insufficient options for proto=fd
[  487.003211][ T5802] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  487.303480][T11024] ip6_vti0 speed is unknown, defaulting to 1000
[  488.163906][ T5791] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  489.149582][T11054] syzkaller0: entered promiscuous mode
[  489.160576][T11054] syzkaller0: entered allmulticast mode
[  489.323568][T11056] 9pnet_fd: Insufficient options for proto=fd
[  491.320004][T11082] 9pnet_fd: Insufficient options for proto=fd
[  491.546713][T11084] syzkaller0: entered promiscuous mode
[  491.562393][T11084] syzkaller0: entered allmulticast mode
[  492.742911][T11100] binder: 11093:11100 ioctl 0 200000000040 returned -22
[  493.534608][T11106] 9pnet_fd: Insufficient options for proto=fd
[  493.790156][T11108] netlink: 'syz.2.1422': attribute type 10 has an invalid length.
[  493.816707][T11108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1422'.
[  493.835706][T11108] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  494.006220][T11108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  494.564686][T11108] orangefs_mount: mount request failed with -4
[  494.761584][T11114] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  494.768427][T11114] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  494.783001][T11114] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  494.789786][T11114] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  494.799062][T11114] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  494.805074][T11114] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  494.814934][T11114] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  496.029772][T11135] loop2: detected capacity change from 0 to 32768
[  496.040462][T11135] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1429 (11135)
[  496.108631][T11135] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  496.169895][T11135] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  496.223562][T11135] BTRFS info (device loop2): force clearing of disk cache
[  496.230784][T11135] BTRFS info (device loop2): enabling auto defrag
[  496.244893][T11143] 9pnet_fd: Insufficient options for proto=fd
[  496.271684][T11135] BTRFS info (device loop2): max_inline at 0
[  496.291645][T11135] BTRFS info (device loop2): enabling disk space caching
[  496.322612][T11135] BTRFS info (device loop2): disk space caching is enabled
[  496.426284][T11135] BTRFS info (device loop2): enabling ssd optimizations
[  496.436156][T11135] BTRFS info (device loop2): rebuilding free space tree
[  496.443348][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  496.514309][T11135] BTRFS info (device loop2): disabling free space tree
[  496.597813][T11135] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  496.628611][T11135] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  496.953443][   T52] Bluetooth: hci3: command 0x0405 tx timeout
[  496.959903][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  497.515161][T11144] netlink: 'syz.1.1433': attribute type 19 has an invalid length.
[  497.611326][ T7297] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  498.753205][ T5802] Bluetooth: hci1: command 0x0406 tx timeout
[  499.011616][ T5802] Bluetooth: hci2: command 0x0406 tx timeout
[  499.011680][   T52] Bluetooth: hci3: command 0x0405 tx timeout
[  499.972713][T11193] 9pnet_virtio: no channels available for device syz
[  500.277800][ T5791] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  500.402400][T11202] input: syz0 as /devices/virtual/input/input6
[  500.986720][T11210] 9pnet_fd: Insufficient options for proto=fd
[  501.083397][   T52] Bluetooth: hci3: command 0x0405 tx timeout
[  501.159441][T11211] binder: 11198:11211 ioctl 0 200000000040 returned -22
[  502.037827][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  502.995701][T11213] loop2: detected capacity change from 0 to 32768
[  503.014863][T11213] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1450 (11213)
[  503.135313][T11213] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  503.218131][T11189] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  503.232344][T11213] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  503.275604][T11189] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  503.318494][T11213] BTRFS info (device loop2): force clearing of disk cache
[  503.437289][T11213] BTRFS info (device loop2): enabling auto defrag
[  503.463540][T11213] BTRFS info (device loop2): max_inline at 0
[  503.478306][T11213] BTRFS info (device loop2): enabling disk space caching
[  503.489478][T11213] BTRFS info (device loop2): disk space caching is enabled
[  503.668701][T11213] BTRFS info (device loop2): enabling ssd optimizations
[  503.694292][T11213] BTRFS info (device loop2): rebuilding free space tree
[  503.760967][T11213] BTRFS info (device loop2): disabling free space tree
[  503.829960][T11213] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  503.875761][T11213] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  504.288375][   T11] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  504.945273][T11189] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.973206][T11189] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.993343][T11189] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.011259][T11189] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.168266][T11262] 9pnet_fd: Insufficient options for proto=fd
[  505.867908][ T5791] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  508.390249][T11309] netlink: 'syz.3.1473': attribute type 10 has an invalid length.
[  508.408531][T11309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1473'.
[  508.453436][T11309] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  508.515587][T11309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  509.909737][T11309] orangefs_mount: mount request failed with -4
[  511.244815][T11350] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  511.603189][ T5793] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  511.925105][ T5793] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  511.954467][ T5793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  511.973442][ T5793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  511.998131][ T5793] usb 5-1: config 0 interface 0 has no altsetting 0
[  512.019625][ T5793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  512.041805][ T5793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  512.073256][ T5793] usb 5-1: config 0 interface 0 has no altsetting 0
[  512.084903][ T5793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  512.108405][ T5793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  512.151303][ T5793] usb 5-1: config 0 interface 0 has no altsetting 0
[  512.202476][ T5793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  512.235191][ T5793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  512.265083][ T5793] usb 5-1: config 0 interface 0 has no altsetting 0
[  512.288843][ T5793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  512.305756][ T5793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  512.327286][ T5793] usb 5-1: config 0 interface 0 has no altsetting 0
[  512.348725][ T5793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  512.368170][ T5793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  512.385860][ T5793] usb 5-1: config 0 interface 0 has no altsetting 0
[  512.396218][ T5793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  512.423239][ T5793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  512.488535][ T5793] usb 5-1: config 0 interface 0 has no altsetting 0
[  512.511017][ T5793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  512.535413][ T5793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  512.572797][ T5793] usb 5-1: config 0 interface 0 has no altsetting 0
[  512.593405][ T5793] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  512.644172][ T5793] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  512.683392][ T5793] usb 5-1: Product: syz
[  512.696703][ T5793] usb 5-1: Manufacturer: syz
[  512.723547][ T5793] usb 5-1: SerialNumber: syz
[  512.754487][ T5793] usb 5-1: config 0 descriptor??
[  512.950686][ T5793] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  513.186137][ T5793] usb 5-1: USB disconnect, device number 11
[  513.231113][ T5793] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  513.916217][   T52] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1
[  513.924418][   T52] Bluetooth: hci1: unexpected event for opcode 0x203e
[  514.402653][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1500'.
[  515.697811][T11438] capability: warning: `syz.3.1512' uses deprecated v2 capabilities in a way that may be insecure
[  516.034524][T11451] xt_CT: You must specify a L4 protocol and not use inversions on it
[  516.561603][T11456] loop4: detected capacity change from 0 to 1024
[  516.591396][T11456] EXT4-fs: Ignoring removed nomblk_io_submit option
[  517.466830][T11456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.567982][T11467] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1522'.
[  517.692783][T11469] netlink: 'syz.1.1523': attribute type 4 has an invalid length.
[  517.717139][ T9158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.948122][T11472] loop3: detected capacity change from 0 to 128
[  517.958257][T11472] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  517.975255][   T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  517.985818][   T52] Bluetooth: hci1: Injecting HCI hardware error event
[  517.995787][   T52] Bluetooth: hci1: hardware error 0x00
[  518.061192][T11472] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  518.714078][ T9487] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  518.873231][ T9487] usb 5-1: device descriptor read/64, error -71
[  519.593590][ T9487] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  519.764286][ T9487] usb 5-1: device descriptor read/64, error -71
[  519.899146][ T9487] usb usb5-port1: attempt power cycle
[  520.043153][   T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  520.334250][ T9487] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  520.413906][ T9487] usb 5-1: device descriptor read/8, error -71
[  520.582306][T11517] loop2: detected capacity change from 0 to 128
[  520.602607][T11517] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  520.655217][T11517] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  520.693223][ T9487] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  520.762883][ T9487] usb 5-1: device descriptor read/8, error -71
[  520.893369][ T9487] usb usb5-port1: unable to enumerate USB device
[  521.116831][T11521] loop2: detected capacity change from 0 to 256
[  521.177309][T11521] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  521.777714][T11535] loop3: detected capacity change from 0 to 2048
[  521.816674][   T52] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  522.066996][T11535] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  524.482466][T11566] loop2: detected capacity change from 0 to 512
[  524.517581][T11566] EXT4-fs: Ignoring removed i_version option
[  524.575591][T11566] EXT4-fs: Ignoring removed bh option
[  524.871014][T11566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  524.898902][T11566] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  525.334935][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.505735][T11593] 9pnet_fd: Insufficient options for proto=fd
[  526.594245][T11594] loop4: detected capacity change from 0 to 8
[  529.789894][T11621] loop2: detected capacity change from 0 to 128
[  530.593544][T11629] 9pnet_fd: Insufficient options for proto=fd
[  531.016323][T11636] loop3: detected capacity change from 0 to 512
[  531.034900][T11636] EXT4-fs: Ignoring removed i_version option
[  531.072174][T11636] EXT4-fs: Ignoring removed bh option
[  531.224834][T11636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  531.354958][T11636] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  531.662521][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.069619][T11654] loop3: detected capacity change from 0 to 1024
[  532.515296][T11654] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  532.704968][T11654] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.1582: lblock 2 mapped to illegal pblock 2 (length 1)
[  532.774880][T11659] 9pnet_fd: Insufficient options for proto=fd
[  532.872735][T11654] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  532.903562][T11654] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.1582: lblock 0 mapped to illegal pblock 48 (length 1)
[  532.985489][T11654] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  533.007390][T11654] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1582: Failed to acquire dquot type 0
[  533.046738][T11654] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem
[  533.109057][T11654] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.1582: mark_inode_dirty error
[  533.232008][T11654] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117)
[  533.272866][T11654] EXT4-fs (loop3): 1 orphan inode deleted
[  533.281048][T11654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.297213][ T7496] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:49: lblock 1 mapped to illegal pblock 1 (length 1)
[  533.558907][ T7496] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  534.101030][ T7496] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:49: Failed to release dquot type 0
[  534.411040][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.461280][   T49] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  534.467463][   T49] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  534.467514][   T49] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:3: Failed to release dquot type 0
[  534.494629][ T5796] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0
[  534.503085][ T5796] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem
[  534.504143][ T5796] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  534.671493][T11684] 9pnet_fd: Insufficient options for proto=fd
[  535.260238][T11693] ALSA: seq fatal error: cannot create timer (-22)
[  535.659901][T11703] 9pnet_fd: Insufficient options for proto=fd
[  535.875923][T11563] syz.1.1554 (11563) used greatest stack depth: 17576 bytes left
[  536.050940][T11719] loop2: detected capacity change from 0 to 1024
[  536.315482][T11723] fuse: Bad value for 'group_id'
[  536.345599][   T49] hfsplus: b-tree write err: -5, ino 4
[  536.564496][T11730] 9pnet_fd: Insufficient options for proto=fd
[  536.753554][ T5879] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  536.973129][ T5879] usb 3-1: Using ep0 maxpacket: 16
[  536.993132][ T5879] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  537.019463][ T5879] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  537.029303][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  537.039081][ T5879] usb 3-1: SerialNumber: syz
[  537.346189][ T5879] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  537.372349][ T5879] cdc_acm 3-1:1.0: This needs exactly 3 endpoints
[  537.398605][ T5879] cdc_acm: probe of 3-1:1.0 failed with error -22
[  539.568373][ T9487] usb 3-1: USB disconnect, device number 6
[  539.692740][T11752] fuse: Bad value for 'group_id'
[  545.503217][ T9487] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  545.703328][ T9487] usb 3-1: Using ep0 maxpacket: 16
[  545.721663][ T9487] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  545.751872][ T9487] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  545.771334][ T9487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  545.789605][ T9487] usb 3-1: SerialNumber: syz
[  545.825156][ T9487] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  545.843370][ T9487] cdc_acm 3-1:1.0: This needs exactly 3 endpoints
[  545.860485][ T9487] cdc_acm: probe of 3-1:1.0 failed with error -22
[  545.955942][T11795] fuse: Bad value for 'group_id'
[  547.745506][ T5915] usb 3-1: USB disconnect, device number 7
[  548.073213][T11806] netlink: 'syz.1.1640': attribute type 19 has an invalid length.
[  558.573490][ T9485] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  558.783123][ T9485] usb 5-1: Using ep0 maxpacket: 16
[  558.799909][ T9485] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  558.813148][ T9487] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  558.835063][ T9485] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  558.840775][T11892] loop2: detected capacity change from 0 to 512
[  558.867198][ T9485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  558.902411][ T9485] usb 5-1: SerialNumber: syz
[  558.909883][T11892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  558.924078][T11892] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  558.964778][ T9485] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  558.972686][ T9485] cdc_acm 5-1:1.0: This needs exactly 3 endpoints
[  559.009651][ T9485] cdc_acm: probe of 5-1:1.0 failed with error -22
[  559.023865][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  559.033203][ T9487] usb 4-1: Using ep0 maxpacket: 16
[  559.045310][ T9487] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  559.084646][ T9487] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  559.109231][ T9487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  560.806276][ T9487] usb 4-1: SerialNumber: syz
[  560.814425][ T9491] usb 5-1: USB disconnect, device number 16
[  560.835820][ T9487] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  560.856244][ T9487] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[  560.876078][ T9487] cdc_acm: probe of 4-1:1.0 failed with error -22
[  562.525221][ T5915] usb 4-1: USB disconnect, device number 7
[  563.336913][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  565.162877][T11927] loop4: detected capacity change from 0 to 1024
[  565.163861][T11925] loop3: detected capacity change from 0 to 1024
[  565.184378][T11927] EXT4-fs: Ignoring removed orlov option
[  565.229538][T11927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  565.316120][T11925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  565.345706][T11925] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  565.386374][T11925] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.1670: inode has both inline data and extents flags
[  565.439325][T11925] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.1670: inode has both inline data and extents flags
[  565.473666][ T9158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.543460][ T5915] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  565.564517][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.733191][ T5915] usb 3-1: Using ep0 maxpacket: 16
[  565.758732][ T5915] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  565.801768][ T5915] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  565.819070][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  565.828358][ T5915] usb 3-1: SerialNumber: syz
[  565.842201][ T5915] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  565.860517][ T5915] cdc_acm 3-1:1.0: This needs exactly 3 endpoints
[  565.871682][ T5915] cdc_acm: probe of 3-1:1.0 failed with error -22
[  568.124977][ T9485] usb 3-1: USB disconnect, device number 8
[  568.663282][ T9487] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  568.853207][ T9487] usb 5-1: Using ep0 maxpacket: 16
[  568.863910][ T9487] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  568.904749][ T9487] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  568.933372][ T9487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  568.946804][ T9487] usb 5-1: SerialNumber: syz
[  568.968443][ T9487] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  568.983128][ T9487] cdc_acm 5-1:1.0: This needs exactly 3 endpoints
[  569.000022][ T9487] cdc_acm: probe of 5-1:1.0 failed with error -22
[  570.836560][ T5915] usb 5-1: USB disconnect, device number 17
[  571.104119][T11996] syz.3.1702[11996] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  571.104409][T11996] syz.3.1702[11996] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  571.609950][T12010] fuse: Unknown parameter 'grou00000000000000000000'
[  576.197874][T12025] wg2: entered promiscuous mode
[  576.203587][T12025] wg2: entered allmulticast mode
[  581.589166][T12093] ip6_vti0 speed is unknown, defaulting to 1000
[  589.328616][T12176] fuse: Unknown parameter 'group_id00000000000000000000'
[  592.431331][T12206] fuse: Unknown parameter 'group_id00000000000000000000'
[  593.031438][T12231] fuse: Bad value for 'user_id'
[  593.764054][T12257] fuse: Bad value for 'user_id'
[  596.722432][T12286] fuse: Bad value for 'user_id'
[  599.754655][T12310] fuse: Bad value for 'fd'
[  600.597651][T12335] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  600.655325][T12335] syzkaller0: entered promiscuous mode
[  600.664893][T12335] syzkaller0: entered allmulticast mode
[  600.667452][T12337] fuse: Bad value for 'fd'
[  607.616792][T12360] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1847'.
[  607.774184][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.806726][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  607.859223][T12392] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  607.921742][T12392] syzkaller0: entered promiscuous mode
[  607.936634][T12392] syzkaller0: entered allmulticast mode
[  608.004955][T12401] veth0_vlan: entered allmulticast mode
[  608.097130][T12404] ªªªªªª: renamed from vlan0
[  608.401947][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.413981][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  611.975971][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.986531][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  612.121076][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.143171][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  612.254673][T12446] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  612.289460][T12446] syzkaller0: entered promiscuous mode
[  612.295544][T12446] syzkaller0: entered allmulticast mode
[  612.320296][T12452] veth0_vlan: entered allmulticast mode
[  613.295780][T12470] syz.1.1883[12470] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  613.295930][T12470] syz.1.1883[12470] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  615.933900][T12453] ªªªªªª: renamed from vlan0
[  618.829065][T12549] ip6_vti0 speed is unknown, defaulting to 1000
[  619.434450][T12572] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  619.506489][T12572] syzkaller0: entered promiscuous mode
[  619.535023][T12572] syzkaller0: entered allmulticast mode
[  623.641861][   T49] hsr_slave_0: left promiscuous mode
[  623.713230][   T49] hsr_slave_1: left promiscuous mode
[  623.758730][   T49] bridge_slave_1: left allmulticast mode
[  623.769589][   T49] bridge_slave_1: left promiscuous mode
[  623.783913][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.800114][   T49] bridge_slave_0: left allmulticast mode
[  623.807506][   T49] bridge_slave_0: left promiscuous mode
[  623.840085][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.920546][   T49] veth1_macvtap: left promiscuous mode
[  623.931599][   T49] veth0_macvtap: left promiscuous mode
[  623.943851][   T49] veth1_vlan: left promiscuous mode
[  623.960080][   T49] veth0_vlan: left promiscuous mode
[  624.499932][   T49] pim6reg (unregistering): left allmulticast mode
[  624.767712][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  625.728741][   T49] team0 (unregistering): Port device team_slave_1 removed
[  625.804850][   T49] team0 (unregistering): Port device team_slave_0 removed
[  625.900837][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  626.002622][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  627.073394][   T49] bond0 (unregistering): Released all slaves
[  627.170603][T12626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1943'.
[  627.399676][T12662] pim6reg1: entered promiscuous mode
[  627.410862][T12662] pim6reg1: entered allmulticast mode
[  628.181059][T12686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1956'.
[  628.210638][T12685] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  628.265231][T12685] syzkaller0: entered promiscuous mode
[  628.273622][T12685] syzkaller0: entered allmulticast mode
[  631.199337][T12714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1967'.
[  632.281556][T12750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1978'.
[  632.904628][T12775] veth1_macvtap: left promiscuous mode
[  632.944853][T12775] macsec0: entered promiscuous mode
[  633.240647][T12786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1989'.
[  633.854790][T12807] pim6reg1: entered promiscuous mode
[  633.880264][T12807] pim6reg1: entered allmulticast mode
[  637.217165][T12893] syzkaller0: entered promiscuous mode
[  637.227959][T12893] syzkaller0: entered allmulticast mode
[  638.382419][T12925] ip6_vti0 speed is unknown, defaulting to 1000
[  638.819556][T12935] syzkaller0: entered promiscuous mode
[  638.839569][T12935] syzkaller0: entered allmulticast mode
[  641.061069][T12990] ip6_vti0 speed is unknown, defaulting to 1000
[  641.143381][ T9487] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  641.379839][ T9487] usb 5-1: Using ep0 maxpacket: 16
[  641.412742][ T9487] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  641.448329][ T9487] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  641.476535][ T9487] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  641.522940][ T9487] usb 5-1: config 1 interface 0 has no altsetting 0
[  641.559988][ T9487] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  641.595287][ T9487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.622587][ T9487] usb 5-1: Product: syz
[  641.637212][ T9487] usb 5-1: Manufacturer: syz
[  641.651942][ T9487] usb 5-1: SerialNumber: syz
[  644.704687][ T9487] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  644.754982][ T9487] usb 5-1: USB disconnect, device number 18
[  644.804432][ T9487] usblp0: removed
[  644.960114][T13070] syz.2.2078[13070] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  644.960258][T13070] syz.2.2078[13070] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  645.913084][ T9487] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  646.250967][T13101] wg2: entered promiscuous mode
[  646.256138][ T9487] usb 3-1: Using ep0 maxpacket: 16
[  646.268985][T13101] wg2: entered allmulticast mode
[  646.315290][ T9487] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  646.390415][ T9487] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  646.489781][ T9487] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  646.633894][ T9487] usb 3-1: config 1 interface 0 has no altsetting 0
[  646.653336][ T9487] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  646.662435][ T9487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.792768][ T9487] usb 3-1: Product: syz
[  646.928901][ T9487] usb 3-1: Manufacturer: syz
[  646.963271][ T9487] usb 3-1: SerialNumber: syz
[  648.141872][T13140] syzkaller0: entered promiscuous mode
[  648.164544][T13140] syzkaller0: entered allmulticast mode
[  648.711231][ T9487] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  648.772039][ T9487] usb 3-1: USB disconnect, device number 9
[  648.813784][ T9487] usblp0: removed
[  650.696801][ T5915] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  650.708443][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  650.880247][ T5915] usb 3-1: device descriptor read/64, error -32
[  651.174671][ T5915] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  651.393139][ T5915] usb 3-1: Using ep0 maxpacket: 16
[  652.199220][ T5915] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  652.209351][ T5915] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  652.232292][ T5915] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  652.257876][ T5915] usb 3-1: config 1 interface 0 has no altsetting 0
[  652.348470][ T5915] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  652.357820][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.423057][ T5915] usb 3-1: Product: syz
[  652.427316][ T5915] usb 3-1: Manufacturer: syz
[  652.445733][ T5915] usb 3-1: SerialNumber: syz
[  654.478993][ T5915] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  654.523767][ T5915] usb 3-1: USB disconnect, device number 11
[  654.550570][ T5915] usblp0: removed
[  654.661110][T13239] syzkaller0: entered promiscuous mode
[  654.667385][T13239] syzkaller0: entered allmulticast mode
[  655.251836][T13259] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2132'.
[  655.317284][T13263] syz.1.2135[13263] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  655.317538][T13263] syz.1.2135[13263] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  655.773236][ T9490] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  656.905008][T13278] ip6_vti0 speed is unknown, defaulting to 1000
[  658.600382][T13312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2145'.
[  660.013251][ T9491] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  660.263128][ T9491] usb 4-1: Using ep0 maxpacket: 16
[  660.306655][ T9491] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  660.335598][ T9491] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  660.363347][ T9491] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  660.380922][ T9491] usb 4-1: config 1 interface 0 has no altsetting 0
[  660.384485][T13356] ip6_vti0 speed is unknown, defaulting to 1000
[  660.449317][ T9491] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  660.465758][ T9491] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.763547][ T9491] usb 4-1: Product: syz
[  660.807665][ T9491] usb 4-1: Manufacturer: syz
[  660.920884][ T9491] usb 4-1: SerialNumber: syz
[  663.500093][T13416] pim6reg1: entered promiscuous mode
[  663.513241][T13416] pim6reg1: entered allmulticast mode
[  663.622785][ T9491] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  663.669629][ T9491] usb 4-1: USB disconnect, device number 9
[  663.698781][ T9491] usblp0: removed
[  664.187551][T13437] ip6_vti0 speed is unknown, defaulting to 1000
[  665.473283][ T5915] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  665.673290][ T5915] usb 3-1: Using ep0 maxpacket: 16
[  665.753111][ T5915] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  665.785355][ T5915] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  665.869989][ T5915] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  665.911913][ T5915] usb 3-1: config 1 interface 0 has no altsetting 0
[  665.959544][ T5915] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  666.000427][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.028053][ T5915] usb 3-1: Product: syz
[  666.037770][ T5915] usb 3-1: Manufacturer: syz
[  666.042647][ T5915] usb 3-1: SerialNumber: syz
[  667.300643][T13499] ip6_vti0 speed is unknown, defaulting to 1000
[  669.037213][ T5915] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  669.112705][ T5915] usb 3-1: USB disconnect, device number 12
[  669.143936][ T5915] usblp0: removed
[  669.699219][T13553] ip6_vti0 speed is unknown, defaulting to 1000
[  671.019343][T13585] ip6_vti0 speed is unknown, defaulting to 1000
[  671.203087][ T5793] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  671.403310][ T5793] usb 4-1: Using ep0 maxpacket: 16
[  671.434176][ T5793] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  671.464471][ T5793] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  671.497557][ T5793] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  671.538107][ T5793] usb 4-1: config 1 interface 0 has no altsetting 0
[  671.570850][ T5793] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  671.591495][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.612634][ T5793] usb 4-1: Product: syz
[  671.620526][ T5793] usb 4-1: Manufacturer: syz
[  671.633047][ T5793] usb 4-1: SerialNumber: syz
[  675.084283][T11477] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  675.121969][T11477] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  675.137769][T11477] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  675.147994][T11477] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  675.164205][T11477] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  675.203151][T11477] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  675.380682][ T5793] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  675.395684][ T5793] usb 4-1: USB disconnect, device number 10
[  675.404002][ T5793] usblp0: removed
[  677.211287][T13629] ip6_vti0 speed is unknown, defaulting to 1000
[  677.323283][   T52] Bluetooth: hci4: command tx timeout
[  677.472620][T13624] ip6_vti0 speed is unknown, defaulting to 1000
[  679.068413][ T9490] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  679.280160][ T9490] usb 3-1: Using ep0 maxpacket: 16
[  679.325501][ T9490] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  679.336940][ T9490] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  679.369178][ T9490] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  679.402247][ T9490] usb 3-1: config 1 interface 0 has no altsetting 0
[  679.409178][   T52] Bluetooth: hci4: command tx timeout
[  679.431966][ T9490] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  679.441308][ T9490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.449603][ T9490] usb 3-1: Product: syz
[  679.454269][ T9490] usb 3-1: Manufacturer: syz
[  679.458953][ T9490] usb 3-1: SerialNumber: syz
[  681.483422][   T52] Bluetooth: hci4: command tx timeout
[  681.766204][T13624] chnl_net:caif_netlink_parms(): no params data found
[  681.842780][ T9490] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  681.900195][ T9490] usb 3-1: USB disconnect, device number 13
[  681.939361][ T9490] usblp0: removed
[  682.059838][T13665] pim6reg1: entered promiscuous mode
[  682.071568][T13665] pim6reg1: entered allmulticast mode
[  682.236786][T13624] bridge0: port 1(bridge_slave_0) entered blocking state
[  682.245441][T13624] bridge0: port 1(bridge_slave_0) entered disabled state
[  682.252786][T13624] bridge_slave_0: entered allmulticast mode
[  682.261093][T13624] bridge_slave_0: entered promiscuous mode
[  682.272625][T13624] bridge0: port 2(bridge_slave_1) entered blocking state
[  682.281348][T13624] bridge0: port 2(bridge_slave_1) entered disabled state
[  682.288939][T13624] bridge_slave_1: entered allmulticast mode
[  682.302166][T13624] bridge_slave_1: entered promiscuous mode
[  683.289826][ T9491] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  683.298782][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[  683.462051][ T9491] usb 3-1: device descriptor read/64, error -32
[  683.568420][   T52] Bluetooth: hci4: command tx timeout
[  683.765800][ T9491] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  683.968731][ T9491] usb 3-1: Using ep0 maxpacket: 16
[  684.096584][ T9491] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  684.106719][ T9491] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  684.121302][ T9491] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  684.134495][ T9491] usb 3-1: config 1 interface 0 has no altsetting 0
[  684.188272][ T9491] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  684.197717][ T9491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.206105][ T9491] usb 3-1: Product: syz
[  684.210323][ T9491] usb 3-1: Manufacturer: syz
[  684.215131][ T9491] usb 3-1: SerialNumber: syz
[  685.814450][ T9491] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  685.863351][ T9491] usb 3-1: USB disconnect, device number 15
[  685.898399][ T9491] usblp0: removed
[  686.013640][T13624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  686.036775][T13624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  686.054435][T13689] ip6_vti0 speed is unknown, defaulting to 1000
[  686.179632][T13624] team0: Port device team_slave_0 added
[  686.201131][T13624] team0: Port device team_slave_1 added
[  686.213001][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  686.391218][T13624] batman_adv: batadv0: Adding interface: batadv_slave_0
[  686.413096][T13624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  686.470215][T13624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  686.509297][T13624] batman_adv: batadv0: Adding interface: batadv_slave_1
[  686.546159][T13624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  686.592237][T13624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  686.724341][T13624] hsr_slave_0: entered promiscuous mode
[  686.734677][T13624] hsr_slave_1: entered promiscuous mode
[  686.751603][T13624] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  686.759979][T13624] Cannot create hsr debugfs directory
[  687.643266][T13624] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  687.664697][T13624] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  687.682242][T13624] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  687.703506][T13624] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  687.830937][T13729] syzkaller0: entered promiscuous mode
[  687.843180][T13729] syzkaller0: entered allmulticast mode
[  688.202107][T13731] ip6_vti0 speed is unknown, defaulting to 1000
[  688.288532][T13624] 8021q: adding VLAN 0 to HW filter on device bond0
[  688.371688][T13624] 8021q: adding VLAN 0 to HW filter on device team0
[  688.417651][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  688.424928][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  688.448714][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  688.456058][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  688.761995][T13624] 8021q: adding VLAN 0 to HW filter on device batadv0
[  688.810957][T13624] veth0_vlan: entered promiscuous mode
[  688.826546][T13624] veth1_vlan: entered promiscuous mode
[  688.862046][T13624] veth0_macvtap: entered promiscuous mode
[  688.895449][T13624] veth1_macvtap: entered promiscuous mode
[  688.948070][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  688.959553][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  688.969597][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  688.980492][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  688.992108][T13624] batman_adv: batadv0: Interface activated: batadv_slave_0
[  689.012377][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  689.023758][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.035102][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  689.045642][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.057073][T13624] batman_adv: batadv0: Interface activated: batadv_slave_1
[  689.069891][T13624] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  689.078811][T13624] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  689.088041][T13624] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  689.097700][T13624] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  689.232180][ T7288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  689.244446][ T7288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  689.282286][ T7288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  689.290644][ T7288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  691.518618][ T9485] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  691.713075][ T9485] usb 4-1: Using ep0 maxpacket: 16
[  691.721598][ T9485] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  691.741139][ T9485] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  691.756394][ T9485] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  691.771042][ T9485] usb 4-1: config 1 interface 0 has no altsetting 0
[  691.791125][ T9485] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  691.809468][ T9485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.822628][ T9485] usb 4-1: Product: syz
[  691.833596][ T9485] usb 4-1: Manufacturer: syz
[  691.838405][ T9485] usb 4-1: SerialNumber: syz
[  693.629662][ T9485] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  693.672165][ T9485] usb 4-1: USB disconnect, device number 11
[  693.704060][ T9485] usblp0: removed
[  696.255054][T13887] wg2: left promiscuous mode
[  696.259744][T13887] wg2: left allmulticast mode
[  696.288271][ T5915] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  696.535274][ T5915] usb 5-1: Using ep0 maxpacket: 16
[  696.675912][ T5915] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  696.703048][ T5915] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  696.741546][ T5915] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  696.766727][ T5915] usb 5-1: config 1 interface 0 has no altsetting 0
[  696.778012][ T5915] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  696.793018][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.821517][ T5915] usb 5-1: Product: syz
[  696.833096][ T5915] usb 5-1: Manufacturer: syz
[  696.837777][ T5915] usb 5-1: SerialNumber: syz
[  699.069537][ T5915] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  699.086277][ T5915] usb 5-1: USB disconnect, device number 19
[  699.102776][ T5915] usblp0: removed
[  701.806015][T13970] ip6_vti0 speed is unknown, defaulting to 1000
[  702.230643][T13981] pim6reg1: entered promiscuous mode
[  702.236686][T13981] pim6reg1: entered allmulticast mode
[  702.248746][T13984] 
[  702.251132][T13984] ============================================
[  702.257312][T13984] WARNING: possible recursive locking detected
[  702.263518][T13984] syzkaller #0 Not tainted
[  702.267966][T13984] --------------------------------------------
[  702.274249][T13984] syz.2.2368/13984 is trying to acquire lock:
[  702.280439][T13984] ffff88802ca54a38 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x96/0x6a0
[  702.289482][T13984] 
[  702.289482][T13984] but task is already holding lock:
[  702.296883][T13984] ffff88802d641238 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xca/0xea0
[  702.305839][T13984] 
[  702.305839][T13984] other info that might help us debug this:
[  702.313934][T13984]  Possible unsafe locking scenario:
[  702.313934][T13984] 
[  702.321425][T13984]        CPU0
[  702.324742][T13984]        ----
[  702.328052][T13984]   lock(&trie->lock);
[  702.332165][T13984]   lock(&trie->lock);
[  702.336373][T13984] 
[  702.336373][T13984]  *** DEADLOCK ***
[  702.336373][T13984] 
[  702.344636][T13984]  May be due to missing lock nesting notation
[  702.344636][T13984] 
[  702.353086][T13984] 3 locks held by syz.2.2368/13984:
[  702.358333][T13984]  #0: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x41d/0x720
[  702.368439][T13984]  #1: ffff88802d641238 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xca/0xea0
[  702.377832][T13984]  #2: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xfd/0x420
[  702.387211][T13984] 
[  702.387211][T13984] stack backtrace:
[  702.393174][T13984] CPU: 0 PID: 13984 Comm: syz.2.2368 Not tainted syzkaller #0
[  702.400687][T13984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  702.411303][T13984] Call Trace:
[  702.414629][T13984]  <TASK>
[  702.417606][T13984]  dump_stack_lvl+0x16c/0x230
[  702.422342][T13984]  ? show_regs_print_info+0x20/0x20
[  702.427602][T13984]  ? print_deadlock_bug+0x435/0x5d0
[  702.432852][T13984]  __lock_acquire+0x5d40/0x7c80
[  702.437768][T13984]  ? mark_lock+0x94/0x320
[  702.442143][T13984]  ? verify_lock_unused+0x140/0x140
[  702.447394][T13984]  ? __lock_acquire+0x1260/0x7c80
[  702.452536][T13984]  lock_acquire+0x197/0x410
[  702.457086][T13984]  ? trie_delete_elem+0x96/0x6a0
[  702.462077][T13984]  ? verify_lock_unused+0x140/0x140
[  702.467318][T13984]  ? page_counter_try_charge+0x293/0x2c0
[  702.473006][T13984]  ? read_lock_is_recursive+0x20/0x20
[  702.478423][T13984]  ? try_charge_memcg+0x1342/0x1810
[  702.483676][T13984]  _raw_spin_lock_irqsave+0xa8/0xf0
[  702.488914][T13984]  ? trie_delete_elem+0x96/0x6a0
[  702.493902][T13984]  ? _raw_spin_lock+0x40/0x40
[  702.498642][T13984]  trie_delete_elem+0x96/0x6a0
[  702.503463][T13984]  ? __cant_sleep+0x210/0x210
[  702.508210][T13984]  bpf_prog_1c0c44170264bb34+0x45/0x49
[  702.513733][T13984]  bpf_trace_run4+0x1f9/0x420
[  702.519261][T13984]  ? bpf_trace_run4+0xfd/0x420
[  702.524088][T13984]  ? bpf_trace_run3+0x400/0x400
[  702.528988][T13984]  ? percpu_ref_put+0xef/0x180
[  702.533833][T13984]  ? __memcg_kmem_charge_page+0x264/0x380
[  702.539603][T13984]  __alloc_pages+0x429/0x460
[  702.544251][T13984]  ? zone_statistics+0x170/0x170
[  702.549252][T13984]  ? bpf_map_get_memcg+0x4e/0x4e0
[  702.554333][T13984]  ? __lock_acquire+0x7c80/0x7c80
[  702.559405][T13984]  ? __rwlock_init+0x150/0x150
[  702.564430][T13984]  __kmalloc_large_node+0x8c/0x1e0
[  702.569912][T13984]  ? bpf_map_kmalloc_node+0xbc/0x1b0
[  702.575258][T13984]  __kmalloc_node+0x10f/0x230
[  702.580001][T13984]  ? _raw_spin_lock+0x40/0x40
[  702.584733][T13984]  bpf_map_kmalloc_node+0xbc/0x1b0
[  702.589908][T13984]  trie_update_elem+0x166/0xea0
[  702.594830][T13984]  ? asm_exc_page_fault+0x26/0x30
[  702.599931][T13984]  bpf_map_update_value+0x660/0x720
[  702.605210][T13984]  map_update_elem+0x57b/0x700
[  702.610144][T13984]  __sys_bpf+0x652/0x800
[  702.614452][T13984]  ? bpf_link_show_fdinfo+0x350/0x350
[  702.619884][T13984]  ? lock_chain_count+0x20/0x20
[  702.624791][T13984]  __x64_sys_bpf+0x7c/0x90
[  702.629255][T13984]  do_syscall_64+0x55/0xb0
[  702.633730][T13984]  ? clear_bhb_loop+0x40/0x90
[  702.638456][T13984]  ? clear_bhb_loop+0x40/0x90
[  702.643194][T13984]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  702.649144][T13984] RIP: 0033:0x7ffaed98f749
[  702.653607][T13984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  702.673259][T13984] RSP: 002b:00007ffaee7e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  702.681721][T13984] RAX: ffffffffffffffda RBX: 00007ffaedbe5fa0 RCX: 00007ffaed98f749
[  702.689816][T13984] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000002
[  702.697857][T13984] RBP: 00007ffaeda13f91 R08: 0000000000000000 R09: 0000000000000000
[  702.706049][T13984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  702.714044][T13984] R13: 00007ffaedbe6038 R14: 00007ffaedbe5fa0 R15: 00007fffd7d4ede8
[  702.722153][T13984]  </TASK>
[  702.809901][T13989] ip6_vti0 speed is unknown, defaulting to 1000