last executing test programs:

9m43.011082994s ago: executing program 2 (id=514):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4886)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

9m41.811513772s ago: executing program 2 (id=525):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000440))

9m41.690676025s ago: executing program 2 (id=528):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$set_reqkey_keyring(0xf, 0xfffffffb)
socket$l2tp(0x2, 0x2, 0x73)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

9m40.543708723s ago: executing program 2 (id=529):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xc}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0)

9m28.369728784s ago: executing program 2 (id=535):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4886)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

9m26.944743416s ago: executing program 2 (id=543):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(0x3)

9m11.815395294s ago: executing program 32 (id=543):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(0x3)

4m15.604552565s ago: executing program 4 (id=2114):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x48}}, 0x0)

4m14.698515539s ago: executing program 4 (id=2116):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

4m14.618613621s ago: executing program 4 (id=2118):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, 0x0, 0x4886)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

4m14.561390882s ago: executing program 4 (id=2121):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x14)
mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0)

4m13.449451349s ago: executing program 4 (id=2123):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

4m13.283819831s ago: executing program 4 (id=2126):
r0 = socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

4m13.218335303s ago: executing program 33 (id=2126):
r0 = socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

4m8.692928484s ago: executing program 0 (id=2145):
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x2000200007, 0x1, 0x4000, 0x0, 0x6, 0x403f, {0x0, 0x80000001, 0x0, 0x100, 0x0, 0x5aa65e4b, 0xfffffffc, 0x1, 0x5, 0x4000, 0x0, r2, r3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

4m8.683724074s ago: executing program 1 (id=2146):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4(r0, 0x0, &(0x7f0000000140), 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000015}, 0x4000)
r3 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r3, 0x0, 0x0)

4m7.655394231s ago: executing program 1 (id=2148):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4(r0, 0x0, &(0x7f0000000140), 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000015}, 0x4000)
r3 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r3, 0x0, 0x0)

4m7.573776941s ago: executing program 0 (id=2138):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005c80)={@map, 0xffffffffffffffff, 0x1d, 0x201e}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000200)=0x8)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r3, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x10101, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)

4m7.475644733s ago: executing program 1 (id=2139):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8002, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004)

4m4.822746855s ago: executing program 1 (id=2143):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x14)
mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0)

4m4.700441937s ago: executing program 1 (id=2144):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0xe52ab000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x31)
memfd_create(&(0x7f0000001300)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3e\x9d\xf1\x91\x17\x02\xfbWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1b\xe6\x15\t\xd1.\x88\xe6\xeb\xce\xd5V=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y', 0xe)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0)
shutdown(r2, 0x1)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
close(r3)

4m3.286592689s ago: executing program 1 (id=2153):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0)

4m3.135986361s ago: executing program 34 (id=2153):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0)

4m3.128813441s ago: executing program 0 (id=2155):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a79960f9f1610940e67e30611d9873d1e6cb9c4cce44c999c49ff52a6400192fd021d7158438d7686a6f66778022c93c544189b684754e7e0f77a4f498609e53"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x1c, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r3)

4m3.026552713s ago: executing program 0 (id=2157):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, r0)
mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x14)
mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0)

4m2.995232313s ago: executing program 0 (id=2158):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = userfaultfd(0x801)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000280)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r5 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, &(0x7f0000000040))
close(0xffffffffffffffff)

3m56.562467734s ago: executing program 0 (id=2166):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, r0)
mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x14)
mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0)

3m56.368926878s ago: executing program 35 (id=2166):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, r0)
mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x14)
mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0)

11.181869155s ago: executing program 8 (id=2816):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
mount(0x0, 0x0, 0x0, 0x8000, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

10.254232149s ago: executing program 8 (id=2817):
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
listen(r1, 0x3)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r0, 0x3)

10.22172713s ago: executing program 8 (id=2818):
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

5.264603687s ago: executing program 3 (id=2819):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = dup(0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, 0x0, 0xfffffeb7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x10, 0x1403, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000000)={0xe0, "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"})

5.211338858s ago: executing program 8 (id=2821):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)

4.325138842s ago: executing program 3 (id=2823):
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x25, 0x1, 0x5)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)

4.176370895s ago: executing program 8 (id=2826):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x31)
memfd_create(&(0x7f0000001300)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3e\x9d\xf1\x91\x17\x02\xfbWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1b\xe6\x15\t\xd1.\x88\xe6\xeb\xce\xd5V=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y', 0xe)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0)
shutdown(r2, 0x1)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
close(r4)

3.690331052s ago: executing program 7 (id=2831):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4)
ioctl$SIOCAX25GETINFO(r3, 0x89ed, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94)

2.861848285s ago: executing program 3 (id=2834):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004)

2.522698181s ago: executing program 3 (id=2837):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x17, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f088a86000000e00001100630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)

2.450549232s ago: executing program 3 (id=2838):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e22f000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000a04", 0x56}], 0x1)

2.362889683s ago: executing program 3 (id=2840):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fremovexattr(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xea}}, &(0x7f00000004c0)='GPL\x00', 0x80, 0xf, &(0x7f0000000540)=""/15, 0x40f00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xacb6}, 0x94)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080))

2.265209245s ago: executing program 6 (id=2841):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r7, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

2.136833996s ago: executing program 6 (id=2842):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x56, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0xb, {0xb, 0x31, "e6045b424409e995fc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.746530713s ago: executing program 7 (id=2843):
r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000000c0))
r2 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000600)=@hci={0x1f, 0xfb88, 0x31}, 0x14, 0x0}, 0x20000880)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000000)=0x6c6faa58f0714c15)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000240)=0x2, 0x4)
bind$inet(r4, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f00000001c0)="1c", &(0x7f0000000000), 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
r6 = syz_open_dev$dri(&(0x7f0000000100), 0x202, 0x4100c0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0x18, 0x0, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f0000000080)=0x5, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000009c0)={0x1, 0x4, 0xffffffff})

1.652715624s ago: executing program 7 (id=2844):
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x25, 0x1, 0x5)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)

1.493734387s ago: executing program 6 (id=2845):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = dup(0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, 0x0, 0xfffffeb7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x10, 0x1403, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000000)={0xe0, "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"})

1.181198881s ago: executing program 5 (id=2846):
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

1.180402431s ago: executing program 6 (id=2847):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8002, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004)

1.047902704s ago: executing program 5 (id=2849):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
sendmmsg(r0, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

864.436927ms ago: executing program 5 (id=2850):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e22f000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000a04", 0x56}], 0x1)

842.129847ms ago: executing program 6 (id=2851):
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r1, 0x3)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r0, 0x3)

705.120529ms ago: executing program 5 (id=2852):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r7, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

654.36872ms ago: executing program 6 (id=2853):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fanotify_init(0x4c, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, 0x0)
shutdown(0xffffffffffffffff, 0x1)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c})
fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
socket$inet6(0xa, 0x5, 0x6)
syz_usb_connect(0x3, 0x36, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)

603.382711ms ago: executing program 7 (id=2854):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/82, 0x52}], 0x1}, 0x6}], 0x1, 0x28101, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4040}, 0x20008004)

334.559625ms ago: executing program 7 (id=2855):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040), 0xc)
connect$qrtr(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180))
writev(0xffffffffffffffff, 0x0, 0x0)

332.771095ms ago: executing program 5 (id=2856):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}}, 0x0)

144.785028ms ago: executing program 5 (id=2857):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/197, 0xc5}, {0x0}, {0x0}, {&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f0000000440)=""/77, 0x4d}], 0x5, 0x3, 0xfffffff8)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x44084)

124.063558ms ago: executing program 7 (id=2858):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = dup(0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, 0x0, 0xfffffeb7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x10, 0x1403, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000000)={0xe0, "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"})

0s ago: executing program 8 (id=2859):
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

yscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000
[  282.385295][   T27] audit: type=1326 audit(538.369:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.0.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000
[  282.414028][   T27] audit: type=1326 audit(538.369:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.0.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000
[  282.432463][   T27] audit: type=1326 audit(538.379:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.0.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=69 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000
[  282.456483][   T27] audit: type=1326 audit(538.379:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.0.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000
[  282.480316][   T27] audit: type=1326 audit(538.379:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.0.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=190 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000
[  282.498077][   T27] audit: type=1326 audit(538.379:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.0.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000
[  282.517021][   T27] audit: type=1326 audit(538.379:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.0.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000
[  282.539288][   T27] audit: type=1326 audit(538.379:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.0.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000
[  282.570329][   T27] audit: type=1326 audit(538.379:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.0.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000
[  282.742420][   T55] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  283.478112][ T7166] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  284.380834][ T7178] netlink: 96 bytes leftover after parsing attributes in process `syz.4.821'.
[  285.872319][ T7210] fuse: Bad value for 'fd'
[  286.043861][ T7219] lo speed is unknown, defaulting to 1000
[  286.134709][ T7223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.193659][ T7226] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  286.816029][ T7223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.040582][ T7266] fuse: Bad value for 'fd'
[  289.064421][ T7269] netlink: 44 bytes leftover after parsing attributes in process `syz.1.848'.
[  290.295764][ T7296] input: syz1 as /devices/virtual/input/input4
[  290.390425][ T7298] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  292.760852][ T7323] fuse: Bad value for 'fd'
[  295.553464][ T7383] netlink: 828 bytes leftover after parsing attributes in process `syz.3.876'.
[  298.029786][ T7430] netlink: 828 bytes leftover after parsing attributes in process `syz.3.890'.
[  300.766750][ T7463] binder: 7459:7463 ioctl c0306201 20000080 returned -14
[  300.771844][ T7463] binder: 7459:7463 tried to acquire reference to desc 0, got 1 instead
[  300.780917][ T7463] binder: cannot allocate buffer
[  300.781011][ T7463] binder: 7459:7463 transaction async to 7459:0 failed 5/29201/-22, size -208-65352 line 3239
[  300.832952][   T14] binder: undelivered TRANSACTION_ERROR: 29201
[  300.879866][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.882504][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.965772][ T7473] netlink: 828 bytes leftover after parsing attributes in process `syz.3.903'.
[  301.519078][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.521726][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.468864][ T7508] netlink: 'syz.4.917': attribute type 72 has an invalid length.
[  302.478693][ T7508] netlink: 'syz.4.917': attribute type 8 has an invalid length.
[  302.887989][ T7513] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  302.890720][ T7513] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  302.903169][ T4343] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  303.465386][ T7514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.469694][ T7514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.912751][ T7528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.918605][ T7528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.927055][ T4343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.930096][ T4343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.932784][ T4343] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  303.940487][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.945489][ T4343] usb 1-1: config 0 descriptor??
[  304.086482][ T4365] wlan1: Trigger new scan to find an IBSS to join
[  304.834109][    C0] vcan0: j1939_tp_rxtimer: 0x0000000007cafb26: rx timeout, send abort
[  304.938156][ T4343] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  304.942540][ T4343] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  304.975017][ T7545] netlink: 'syz.5.930': attribute type 72 has an invalid length.
[  304.977349][ T7545] netlink: 'syz.5.930': attribute type 8 has an invalid length.
[  304.980700][ T4343] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0001/input/input5
[  305.037803][ T4343] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0
[  305.228818][ T4498] usb 1-1: USB disconnect, device number 14
[  305.337560][    C0] vcan0: j1939_tp_rxtimer: 0x0000000007cafb26: abort rx timeout. Force session deactivation
[  305.343787][ T7546] fido_id[7546]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  307.078665][ T7577] netlink: 'syz.3.941': attribute type 72 has an invalid length.
[  307.080875][ T7577] netlink: 'syz.3.941': attribute type 8 has an invalid length.
[  307.428996][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.453527][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.333099][   T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  308.362565][ T7592] fuse: Bad value for 'fd'
[  308.544419][   T24] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[  308.547711][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.549987][   T24] usb 1-1: Product: syz
[  308.551397][   T24] usb 1-1: Manufacturer: syz
[  308.552749][   T24] usb 1-1: SerialNumber: syz
[  308.562032][   T24] usb 1-1: config 0 descriptor??
[  308.568467][   T24] usb 1-1: interface 1 not found
[  308.771218][   T24] usb 1-1: USB disconnect, device number 15
[  308.780580][ T7607] netlink: 892 bytes leftover after parsing attributes in process `syz.4.952'.
[  309.124742][ T6690] wlan1: Trigger new scan to find an IBSS to join
[  309.513421][ T7625] fuse: Bad value for 'fd'
[  309.879273][ T7635] process 'syz.1.959' launched '/dev/fd/7' with NULL argv: empty string added
[  310.310701][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  310.312534][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  310.423330][ T7643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.426049][ T7643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.439361][ T7642] netlink: 892 bytes leftover after parsing attributes in process `syz.5.965'.
[  310.449380][ T4365] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00
[  310.626083][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.628852][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.564293][ T7659] fuse: Bad value for 'fd'
[  311.989398][ T7670] xt_CT: You must specify a L4 protocol and not use inversions on it
[  312.365264][ T7668] sp0: Synchronizing with TNC
[  312.597666][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.5.976'.
[  312.688298][ T7681] netlink: 892 bytes leftover after parsing attributes in process `syz.3.978'.
[  312.843517][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.862263][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.451694][ T7700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.456167][ T7700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.976284][ T6690] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  314.613814][ T7722] xt_CT: You must specify a L4 protocol and not use inversions on it
[  315.344613][ T6690] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  315.527485][ T7730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.542456][ T7730] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.613878][   T24] libceph: connect (1)[c::]:6789 error -101
[  315.616361][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  315.620735][   T24] libceph: connect (1)[c::]:6789 error -101
[  315.622546][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  315.885372][   T24] libceph: connect (1)[c::]:6789 error -101
[  315.887357][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  316.370547][ T7734] ceph: No mds server is up or the cluster is laggy
[  316.411902][   T24] libceph: connect (1)[c::]:6789 error -101
[  316.413676][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  316.444038][ T7751] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  316.959465][ T7764] xt_CT: You must specify a L4 protocol and not use inversions on it
[  318.964774][ T7789] bridge0: port 3(syz_tun) entered blocking state
[  318.975025][ T7789] bridge0: port 3(syz_tun) entered disabled state
[  319.140477][ T7789] device syz_tun entered promiscuous mode
[  319.153180][ T7789] bridge0: port 3(syz_tun) entered blocking state
[  319.155318][ T7789] bridge0: port 3(syz_tun) entered forwarding state
[  320.696258][ T7823] xt_CT: You must specify a L4 protocol and not use inversions on it
[  321.562504][ T7839] trusted_key: encrypted_key: insufficient parameters specified
[  321.724060][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.731746][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.551799][ T7851] [U] ¦
[  322.689867][ T7861] lo speed is unknown, defaulting to 1000
[  322.803012][ T7872] netlink: 'syz.4.1043': attribute type 21 has an invalid length.
[  322.824719][ T7872] netlink: 'syz.4.1043': attribute type 6 has an invalid length.
[  322.833637][ T7872] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1043'.
[  323.030063][ T7878] xt_CT: You must specify a L4 protocol and not use inversions on it
[  323.157048][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'.
[  323.752062][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'.
[  323.771824][ T7881] xt_CT: You must specify a L4 protocol and not use inversions on it
[  323.833355][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'.
[  324.219888][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.222510][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.686788][ T7907] lo speed is unknown, defaulting to 1000
[  326.101780][ T7952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.109241][ T7952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.721947][ T7981] 9pnet_virtio: no channels available for device 127.0.0.1
[  328.850547][ T8004] lo speed is unknown, defaulting to 1000
[  331.441955][ T8076] lo speed is unknown, defaulting to 1000
[  332.218439][ T8136] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2
[  332.220999][ T8136] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0
[  334.707538][ T8176] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[  334.710087][ T8176] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[  335.828570][ T8184] lo speed is unknown, defaulting to 1000
[  335.883736][ T8175] lo speed is unknown, defaulting to 1000
[  335.885518][ T8175] lo speed is unknown, defaulting to 1000
[  335.887720][ T8175] lo speed is unknown, defaulting to 1000
[  335.892028][ T8175] infiniband s…z0: RDMA CMA: cma_listen_on_dev, error -98
[  335.902214][ T8175] lo speed is unknown, defaulting to 1000
[  335.908069][ T8175] lo speed is unknown, defaulting to 1000
[  335.910108][ T8175] lo speed is unknown, defaulting to 1000
[  335.912132][ T8175] lo speed is unknown, defaulting to 1000
[  335.914368][ T8175] lo speed is unknown, defaulting to 1000
[  335.917311][ T8175] lo speed is unknown, defaulting to 1000
[  336.769855][ T8229] fuse: Bad value for 'fd'
[  337.576497][ T8235] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  337.578943][ T8235] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  337.978093][ T8254] lo speed is unknown, defaulting to 1000
[  338.716908][ T8254] lo speed is unknown, defaulting to 1000
[  339.044334][ T8288] fuse: Bad value for 'group_id'
[  339.514721][ T8305] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  339.517204][ T8305] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  340.439057][ T8329] fuse: Bad value for 'group_id'
[  340.793188][ T8338] lo speed is unknown, defaulting to 1000
[  340.795504][ T8338] lo speed is unknown, defaulting to 1000
[  342.725806][ T8406] tipc: Enabled bearer <ib:caif0>, priority 10
[  343.094626][ T4306] Bluetooth: hci5: command 0x0406 tx timeout
[  343.925933][   T24] tipc: Node number set to 3388176701
[  344.054365][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  344.054378][   T27] audit: type=1326 audit(600.029:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f5a9a8 code=0x7ffc0000
[  344.189789][   T27] audit: type=1326 audit(600.169:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=284 compat=0 ip=0xffff88f5a9a8 code=0x7ffc0000
[  344.210329][   T27] audit: type=1326 audit(600.169:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f5a9a8 code=0x7ffc0000
[  344.216434][   T27] audit: type=1326 audit(600.189:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f5a9a8 code=0x7ffc0000
[  344.414926][ T8442] tipc: Enabled bearer <ib:caif0>, priority 10
[  344.599564][ T8454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1203'.
[  344.602006][ T8454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1203'.
[  344.606157][ T8454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1203'.
[  344.608547][ T8454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1203'.
[  345.093570][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'.
[  345.096794][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'.
[  345.099364][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'.
[  345.102677][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'.
[  345.105366][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'.
[  345.124872][ T4347] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  345.313664][ T4347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  345.317894][ T4347] usb 1-1: config 0 has no interfaces?
[  345.326878][ T4347] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  345.336782][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.561170][   T24] tipc: Node number set to 2886997007
[  345.680220][ T4347] usb 1-1: config 0 descriptor??
[  346.624523][ T8494] tipc: Failed to obtain node identity
[  346.626248][ T8494] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  346.779857][ T8503] device bridge0 entered promiscuous mode
[  349.264344][   T14] usb 1-1: USB disconnect, device number 16
[  349.366816][ T8534] tipc: Enabled bearer <ib:caif0>, priority 10
[  350.399140][ T4343] tipc: Node number set to 2147483648
[  351.094627][ T8553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'.
[  351.237222][ T8553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'.
[  354.591343][ T8606] fuse: Unknown parameter 'grou00000000000000000000'
[  354.620064][ T8588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  354.622605][ T8588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.320106][ T8652] fuse: Unknown parameter 'grou00000000000000000000'
[  360.010613][ T8683] fuse: Unknown parameter 'grou00000000000000000000'
[  361.610001][ T8720] fuse: Unknown parameter 'group_i00000000000000000000'
[  361.673408][ T8716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.684026][ T8716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.301963][ T6754] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  366.343040][ T8758] fuse: Unknown parameter 'group_i00000000000000000000'
[  366.440644][ T8764] lo speed is unknown, defaulting to 1000
[  366.442874][ T8764] lo speed is unknown, defaulting to 1000
[  367.336110][ T8772] netlink: 'syz.4.1321': attribute type 1 has an invalid length.
[  367.440385][ T8777] device gtp0 entered promiscuous mode
[  367.653695][ T8788] fuse: Unknown parameter 'group_i00000000000000000000'
[  368.870751][ T8818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.887036][ T8821] fuse: Unknown parameter 'group_id00000000000000000000'
[  368.892301][ T8818] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.193420][ T8837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.222140][ T8837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.305069][ T8852] fuse: Unknown parameter 'group_id00000000000000000000'
[  370.835839][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'.
[  371.715610][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  371.717352][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  371.812507][ T8885] fuse: Unknown parameter 'group_id00000000000000000000'
[  373.213107][ T8917] fuse: Bad value for 'user_id'
[  373.623804][ T8930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.694158][ T8930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.353363][ T8952] fuse: Bad value for 'user_id'
[  378.122770][ T8988] fuse: Bad value for 'user_id'
[  378.164683][ T4343] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  378.345620][ T4343] usb 1-1: not running at top speed; connect to a high speed hub
[  378.348790][ T4343] usb 1-1: config 7 has an invalid interface number: 40 but max is 0
[  378.350964][ T4343] usb 1-1: config 7 has no interface number 0
[  378.359712][ T4343] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=cc.d4
[  378.362142][ T4343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.364273][ T4343] usb 1-1: Product: syz
[  378.380229][ T4343] usb 1-1: Manufacturer: syz
[  378.381545][ T4343] usb 1-1: SerialNumber: syz
[  378.464015][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  378.500311][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.302860][ T4343] kvaser_usb 1-1:7.40: Cannot get usb endpoint(s)
[  379.308115][ T4343] usb 1-1: USB disconnect, device number 17
[  379.457735][ T9009] loop2: detected capacity change from 0 to 7
[  379.475693][ T9009] Dev loop2: unable to read RDB block 7
[  379.477406][ T9009]  loop2: unable to read partition table
[  379.479088][ T9009] loop2: partition table beyond EOD, truncated
[  379.491456][ T9009] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  380.354385][ T9022] fuse: Bad value for 'fd'
[  382.329645][ T9050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.332252][ T9050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.454356][ T9061] fuse: Bad value for 'fd'
[  383.769999][ T9095] fuse: Bad value for 'fd'
[  385.049871][ T9124] fuse: Bad value for 'fd'
[  385.176936][ T9130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.186062][ T9130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.230683][ T9132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.233194][ T9132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.415662][ T9130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.418329][ T9130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.381016][ T9162] fuse: Bad value for 'fd'
[  386.775448][ T9186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.785223][ T9186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.082090][ T9207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.084642][ T9207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.624114][ T9209] fuse: Bad value for 'fd'
[  388.983599][ T1963] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  389.723727][ T1963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  389.737210][ T1963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.757879][ T1963] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  389.773573][ T1963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.808287][ T1963] usb 1-1: config 0 descriptor??
[  390.899934][ T1963] usb 1-1: string descriptor 0 read error: -22
[  391.103235][ T1963] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input6
[  391.130589][ T1963] uclogic 0003:256C:006D.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[  391.898587][   T24] usb 1-1: USB disconnect, device number 18
[  391.960433][ T9239] fido_id[9239]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  391.977025][ T9242] fuse: Invalid rootmode
[  392.685900][ T9269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.688444][ T9269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.866096][ T9294] fuse: Invalid rootmode
[  395.941365][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.946836][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.087460][ T9324] fuse: Invalid rootmode
[  397.565251][ T4386] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  398.798332][ T9359] fuse: Bad value for 'rootmode'
[  398.801547][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  398.806280][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  398.924621][   T14] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  400.601357][   T14] usb 1-1: Using ep0 maxpacket: 16
[  400.668686][   T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  400.681296][   T14] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  400.695207][   T14] usb 1-1: config 0 interface 0 has no altsetting 0
[  400.697065][   T14] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  400.699519][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.719957][   T14] usb 1-1: config 0 descriptor??
[  400.748790][   T14] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  401.587611][   T14] usb 1-1: USB disconnect, device number 19
[  401.734748][ T9398] fuse: Bad value for 'rootmode'
[  401.982885][ T9414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  401.985575][ T9414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  404.349417][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  404.351909][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.580628][ T9448] fuse: Bad value for 'rootmode'
[  407.707276][ T9481] fuse: Unknown parameter 'use00000000000000000000'
[  408.534723][ T4343] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  408.831265][ T4343] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  408.833581][ T4343] usb 1-1: config 0 has no interface number 0
[  408.841314][ T4343] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  408.871941][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.364290][ T4343] usb 1-1: config 0 descriptor??
[  410.818523][ T4343] usb 1-1: selecting invalid altsetting 1
[  410.824260][ T4343] dvb_ttusb_budget: ttusb_init_controller: error
[  410.826546][ T4343] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  410.878214][ T4343] DVB: Unable to find symbol cx22700_attach()
[  410.909424][ T9514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.917090][ T9514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.935325][ T9524] fuse: Unknown parameter 'use00000000000000000000'
[  410.978898][ T4343] DVB: Unable to find symbol tda10046_attach()
[  410.980790][ T4343] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  410.994711][ T4343] usb 1-1: USB disconnect, device number 20
[  413.255796][ T9562] fuse: Unknown parameter 'use00000000000000000000'
[  415.541689][ T9592] fuse: Unknown parameter 'user_i00000000000000000000'
[  416.617423][ T9597] lo speed is unknown, defaulting to 1000
[  416.619513][ T9597] lo speed is unknown, defaulting to 1000
[  418.989113][ T9642] fuse: Unknown parameter 'user_i00000000000000000000'
[  419.392357][ T9662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.413334][ T9662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.377152][ T9676] fuse: Unknown parameter 'user_i00000000000000000000'
[  421.823743][ T9687] Cannot find map_set index 0 as target
[  422.730504][ T9704] fuse: Unknown parameter 'user_id00000000000000000000'
[  423.587213][    T9] Bluetooth: hci0: Frame reassembly failed (-84)
[  425.604689][ T4306] Bluetooth: hci0: command 0x1003 tx timeout
[  425.606926][ T4313] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  426.002822][ T9732] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1662'.
[  426.655394][ T9739] fuse: Unknown parameter 'user_id00000000000000000000'
[  428.138979][ T9509] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  428.943483][ T9509] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  428.951892][ T9509] usb 1-1: config 0 has no interfaces?
[  428.953625][ T9509] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  428.977457][ T9509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.016387][ T9509] usb 1-1: config 0 descriptor??
[  429.420875][ T9780] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1681'.
[  430.179005][ T9787] fuse: Unknown parameter 'user_id00000000000000000000'
[  430.447167][ T8117] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  431.401187][ T9812] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1693'.
[  431.706921][ T4425] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  432.505265][ T9817] fuse: Bad value for 'fd'
[  433.337234][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  433.339184][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  433.353411][ T9826] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1696'.
[  433.801618][ T9509] usb 1-1: USB disconnect, device number 21
[  435.852734][ T9849] lo speed is unknown, defaulting to 1000
[  435.892393][ T9849] lo speed is unknown, defaulting to 1000
[  436.919266][ T9864] fuse: Bad value for 'fd'
[  437.461595][ T9877] lo speed is unknown, defaulting to 1000
[  437.467417][ T9877] lo speed is unknown, defaulting to 1000
[  438.257915][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.260487][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.366117][ T9897] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1718'.
[  439.647215][ T9905] fuse: Bad value for 'fd'
[  443.067837][ T9930] lo speed is unknown, defaulting to 1000
[  443.073717][ T9930] lo speed is unknown, defaulting to 1000
[  444.652486][ T9944] fuse: Unknown parameter '0x0000000000000003'
[  444.993898][ T9950] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1738'.
[  445.025619][ T9950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1738'.
[  445.028113][ T9950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1738'.
[  446.912667][ T9970] lo speed is unknown, defaulting to 1000
[  446.914831][ T9970] lo speed is unknown, defaulting to 1000
[  447.863257][ T9977] fuse: Unknown parameter '0x0000000000000003'
[  449.083813][T10000] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  449.098272][T10000] vhci_hcd: default hub control req: 6001 v8001 i0001 l0
[  449.664604][T10009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.403441][T10009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.792584][T10029] fuse: Unknown parameter '0x0000000000000003'
[  451.154572][T10031] lo speed is unknown, defaulting to 1000
[  451.160296][T10031] lo speed is unknown, defaulting to 1000
[  454.108757][T10068] fuse: Unknown parameter '0x0000000000000003'
[  456.770766][T10110] fuse: Unknown parameter '0x0000000000000003'
[  458.475042][T10131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.503317][T10131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.519072][T10146] device syz_tun left promiscuous mode
[  460.551922][T10146] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.554331][T10146] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.057624][T10166] fuse: Unknown parameter '0x0000000000000003'
[  461.124594][ T4313] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  461.127204][ T4313] Bluetooth: hci4: Injecting HCI hardware error event
[  461.130644][ T4306] Bluetooth: hci4: hardware error 0x00
[  461.241723][T10146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  461.270063][T10146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  461.668939][T10146] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  461.671565][T10146] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  461.674198][T10146] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  461.676931][T10146] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  463.009350][T10194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.039561][T10194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.066098][T10196] fuse: Unknown parameter 'fd0x0000000000000003'
[  463.350381][T10206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.370015][T10206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.445134][ T4306] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  463.785489][ T5148] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  464.908954][T10231] fuse: Unknown parameter 'fd0x0000000000000003'
[  465.011946][T10233] [U] 
[  465.970153][T10274] fuse: Unknown parameter 'fd0x0000000000000003'
[  466.000381][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.009405][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.021269][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.023530][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.052566][   T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  470.661779][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  470.664745][   T24] usb 1-1: config 0 has no interfaces?
[  470.666230][   T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  470.668638][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.676930][   T24] usb 1-1: config 0 descriptor??
[  474.951595][ T4438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.954008][ T4438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.958058][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  475.057216][T10436] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  475.059921][T10436] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  475.062682][   T24] usb 1-1: can't set config #0, error -71
[  475.067452][   T24] usb 1-1: USB disconnect, device number 22
[  476.874881][   T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  477.475015][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  477.477799][   T24] usb 1-1: config 0 has no interfaces?
[  477.479453][   T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  477.481915][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.646568][   T24] usb 1-1: config 0 descriptor??
[  479.675791][ T1963] usb 1-1: USB disconnect, device number 23
[  485.143426][T10643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.152887][T10643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.294577][ T4423] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  485.507115][ T4423] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  485.510175][ T4423] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  485.513237][ T4423] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  485.520648][ T4423] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  485.523172][ T4423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.526665][ T4423] usb 1-1: Product: syz
[  485.527945][ T4423] usb 1-1: Manufacturer: syz
[  485.529254][ T4423] usb 1-1: SerialNumber: syz
[  485.540474][T10636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  485.545914][ T4423] usb 1-1: bad CDC descriptors
[  485.757004][   T14] usb 1-1: USB disconnect, device number 24
[  486.352871][T10672] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1964'.
[  486.518024][T10682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  486.520611][T10682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.895940][T10701] xt_CT: No such helper "snmp"
[  487.989884][T10709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.997053][T10709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.099321][T10732] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1984'.
[  489.298936][T10740] netlink: 'syz.5.1985': attribute type 16 has an invalid length.
[  489.368826][T10745] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  489.370657][T10745] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  489.373856][T10745] vhci_hcd vhci_hcd.0: Device attached
[  489.467570][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  489.487457][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  489.489711][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  489.536328][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  489.538596][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  489.540847][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  489.543019][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  490.110671][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  490.128552][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  490.157362][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  490.179016][T10754] device bridge_slave_0 left promiscuous mode
[  490.197337][T10754] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.256468][T10754] device bridge_slave_1 left promiscuous mode
[  490.258437][T10754] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.304545][ T4423] usb 2-1: new high-speed USB device number 2 using vhci_hcd
[  490.304990][T10754] bond0: (slave bond_slave_0): Releasing backup interface
[  490.361459][T10754] bond0: (slave bond_slave_1): Releasing backup interface
[  491.163277][T10754] team0: Port device team_slave_0 removed
[  491.255263][T10754] team0: Port device team_slave_1 removed
[  491.257521][T10754] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.277838][T10754] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.296026][T10754] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.330467][T10754] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.515185][T10775] netlink: 'syz.1.1991': attribute type 10 has an invalid length.
[  491.534946][T10775] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1991'.
[  491.563767][T10775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.586259][T10775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.599614][T10775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.614299][T10775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.696155][T10775] team0: Port device geneve0 added
[  491.941915][T10783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.967682][T10783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.418227][T10796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.420708][T10796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.502491][T10746] vhci_hcd: connection reset by peer
[  492.504191][ T6682] vhci_hcd: stop threads
[  492.509103][ T6682] vhci_hcd: release socket
[  492.529551][ T6682] vhci_hcd: disconnect device
[  492.665768][T10796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.668521][T10796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.951628][T10813] autofs4:pid:10813:autofs_fill_super: called with bogus options
[  494.352260][T10816] 9pnet_fd: Insufficient options for proto=fd
[  494.811523][ T4492] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  494.878771][T10820] netlink: 'syz.5.2004': attribute type 10 has an invalid length.
[  494.888717][T10820] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2004'.
[  494.920041][T10820] team0: Port device geneve0 added
[  495.046066][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  495.047874][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  495.404796][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  495.415126][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.444662][ T4423] vhci_hcd: vhci_device speed not set
[  495.495904][T10842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  495.502543][T10842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.581979][T10845] autofs4:pid:10845:autofs_fill_super: called with bogus options
[  496.219497][T10859] netlink: 'syz.0.2020': attribute type 10 has an invalid length.
[  496.221695][T10859] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2020'.
[  497.082971][T10859] team0: Port device geneve0 added
[  497.237023][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2023'.
[  497.277685][T10876] autofs4:pid:10876:autofs_fill_super: called with bogus options
[  497.503530][T10883] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2029'.
[  497.602254][T10881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.623302][T10881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.049368][T10917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.062774][T10915] netlink: 'syz.4.2039': attribute type 10 has an invalid length.
[  500.062796][T10915] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2039'.
[  500.063202][T10917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.134806][T10915] team0: Port device geneve0 added
[  500.473622][   T27] audit: type=1326 audit(756.449:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.1.2047" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000
[  500.485865][   T27] audit: type=1326 audit(756.449:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.1.2047" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000
[  500.511933][   T27] audit: type=1326 audit(756.459:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.1.2047" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=74 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000
[  500.558782][   T27] audit: type=1326 audit(756.459:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.1.2047" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000
[  500.588432][   T27] audit: type=1326 audit(756.459:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.1.2047" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000
[  502.702875][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  502.710175][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  502.727148][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  502.735616][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  502.940190][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  502.944186][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.195241][T10989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.267220][T10989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  505.616482][T11012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.618950][T11012] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.302863][T11026] 9pnet_fd: Insufficient options for proto=fd
[  508.146773][T11034] ALSA: mixer_oss: invalid index 40000
[  508.806618][T11053] netlink: 'syz.3.2086': attribute type 1 has an invalid length.
[  508.810134][T11053] netlink: 'syz.3.2086': attribute type 2 has an invalid length.
[  508.812552][T11053] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2086'.
[  510.515545][ T4306] Bluetooth: hci5: command 0x0405 tx timeout
[  510.648932][T11065] 9pnet_fd: Insufficient options for proto=fd
[  511.944642][   T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  512.583806][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  512.586919][   T24] usb 1-1: config 0 has no interfaces?
[  512.588419][   T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  512.590980][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.637321][   T24] usb 1-1: config 0 descriptor??
[  512.757631][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2100'.
[  512.765313][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2100'.
[  512.788412][   T27] audit: type=1326 audit(768.769:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.4.2100" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8815a9a8 code=0x0
[  515.094752][ T9509] usb 1-1: USB disconnect, device number 25
[  515.214786][T11125] 9pnet_fd: Insufficient options for proto=fd
[  517.563582][T11160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  517.583358][T11160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  517.661985][T11164] 9pnet_fd: Insufficient options for proto=fd
[  518.559403][T11170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2125'.
[  519.954810][ T4306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  519.958558][ T4306] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  519.961199][ T4306] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  519.963883][ T4306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  519.967268][ T4306] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  519.969586][ T4306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  520.413868][T11183] lo speed is unknown, defaulting to 1000
[  520.433337][T11183] lo speed is unknown, defaulting to 1000
[  520.741548][T11183] chnl_net:caif_netlink_parms(): no params data found
[  520.778960][T11183] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.781048][T11183] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.783686][T11183] device bridge_slave_0 entered promiscuous mode
[  520.788346][T11183] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.790411][T11183] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.793235][T11183] device bridge_slave_1 entered promiscuous mode
[  520.820596][T11183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.826493][T11183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.844384][T11183] team0: Port device team_slave_0 added
[  520.850072][T11183] team0: Port device team_slave_1 added
[  520.862485][T11183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  520.870371][T11183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.877780][T11183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  520.889524][T11199] bridge0: port 3(syz_tun) entered disabled state
[  520.936530][T11199] device syz_tun left promiscuous mode
[  520.938062][T11199] bridge0: port 3(syz_tun) entered disabled state
[  520.958689][T11183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  520.960589][T11183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.967611][T11183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  521.026566][T11183] device hsr_slave_0 entered promiscuous mode
[  521.065013][T11183] device hsr_slave_1 entered promiscuous mode
[  521.104657][T11183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  521.106769][T11183] Cannot create hsr debugfs directory
[  521.428614][    T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.518082][    T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.549794][T11183] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  521.587905][T11183] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  521.696422][    T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.700587][T11183] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  521.736882][T11183] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  521.836301][    T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.890722][T11183] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.899280][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  521.901948][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  521.908078][T11183] 8021q: adding VLAN 0 to HW filter on device team0
[  521.912446][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  521.916762][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  521.919332][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.921376][ T8117] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.923762][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  521.935570][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  521.938347][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  521.940891][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.942834][ T8117] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.948240][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  521.953433][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  521.962757][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  521.969640][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  521.972626][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  521.991109][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  521.994159][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  522.002295][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  522.005290][ T4306] Bluetooth: hci0: command 0x0409 tx timeout
[  522.011425][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  522.014742][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  522.020477][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  522.039981][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  522.187957][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  522.190192][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  522.196257][T11183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.380776][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  522.383792][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  522.536776][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  522.539408][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  522.542650][T11183] device veth0_vlan entered promiscuous mode
[  522.546660][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  522.549535][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  522.560454][T11183] device veth1_vlan entered promiscuous mode
[  522.635944][T11183] device veth0_macvtap entered promiscuous mode
[  522.640274][T11183] device veth1_macvtap entered promiscuous mode
[  522.651622][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  522.654363][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  522.658142][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  522.661082][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  522.663785][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  522.719227][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  522.722248][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.725475][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  522.728286][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.730935][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  522.733993][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.737962][T11183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  522.740124][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  522.742640][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  522.745629][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  522.750751][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.753544][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.757172][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.759959][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.762629][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.765813][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.769942][T11183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  522.772105][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  522.775624][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  522.780863][T11183] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  522.783265][T11183] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  522.786717][T11183] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  522.789083][T11183] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  522.980505][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.982877][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.989163][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  523.057587][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.060024][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.065219][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  524.087562][ T4306] Bluetooth: hci0: command 0x041b tx timeout
[  524.128693][ T4306] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  524.132402][ T4306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  524.135516][ T4306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  524.138902][ T4306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  524.141350][ T4306] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  524.144035][ T4306] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  524.452166][T11279] 9pnet_fd: Insufficient options for proto=fd
[  525.839258][ T8117] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  526.164641][ T4306] Bluetooth: hci4: command 0x0409 tx timeout
[  526.166905][ T4306] Bluetooth: hci0: command 0x040f tx timeout
[  526.344510][T11305] usb usb8: usbfs: process 11305 (syz.3.2141) did not claim interface 0 before use
[  527.406521][T11268] lo speed is unknown, defaulting to 1000
[  527.408566][T11268] lo speed is unknown, defaulting to 1000
[  528.244699][ T4313] Bluetooth: hci0: command 0x0419 tx timeout
[  528.246459][ T4313] Bluetooth: hci4: command 0x041b tx timeout
[  528.377714][T11316] bond0: (slave syz_tun): Releasing backup interface
[  528.424077][T11323] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[  528.426716][T11323] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[  528.547549][    T9] device hsr_slave_0 left promiscuous mode
[  528.590484][    T9] device hsr_slave_1 left promiscuous mode
[  528.655739][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  528.657784][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  528.661064][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  528.664299][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  528.674201][    T9] device bridge_slave_1 left promiscuous mode
[  528.679603][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.713163][    T9] device bridge_slave_0 left promiscuous mode
[  528.716229][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.791619][    T9] device bridge0 left promiscuous mode
[  528.875112][    T9] device veth1_macvtap left promiscuous mode
[  528.876877][    T9] device veth0_macvtap left promiscuous mode
[  528.878525][    T9] device veth1_vlan left promiscuous mode
[  528.881133][    T9] device veth0_vlan left promiscuous mode
[  528.906843][ T4313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  528.910366][ T4313] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  528.913370][ T4313] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  528.921497][ T4313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  528.926086][ T4313] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  528.928399][ T4313] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  529.575393][    T9] team0 (unregistering): Port device geneve0 removed
[  530.303226][T11370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  530.309771][T11370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  530.324577][ T4306] Bluetooth: hci4: command 0x040f tx timeout
[  530.964645][ T4306] Bluetooth: hci1: command 0x0409 tx timeout
[  531.706689][    T9] team0 (unregistering): Port device team_slave_1 removed
[  531.895972][    T9] team0 (unregistering): Port device team_slave_0 removed
[  532.075418][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  532.256119][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  532.404655][ T4306] Bluetooth: hci4: command 0x0419 tx timeout
[  533.044661][ T4313] Bluetooth: hci1: command 0x041b tx timeout
[  534.772114][    T9] bond0 (unregistering): Released all slaves
[  535.118084][ T4423] lo speed is unknown, defaulting to 1000
[  535.120521][T11372] lo speed is unknown, defaulting to 1000
[  535.124824][ T4306] Bluetooth: hci1: command 0x040f tx timeout
[  535.190953][T11354] lo speed is unknown, defaulting to 1000
[  535.336150][T11268] chnl_net:caif_netlink_parms(): no params data found
[  537.208207][ T4306] Bluetooth: hci1: command 0x0419 tx timeout
[  537.444291][T11354] chnl_net:caif_netlink_parms(): no params data found
[  537.538853][T11268] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.546032][T11268] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.568658][T11268] device bridge_slave_0 entered promiscuous mode
[  537.624972][T11268] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.634787][T11268] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.637500][T11268] device bridge_slave_1 entered promiscuous mode
[  537.763164][ T4313] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  537.796420][ T4313] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  537.809157][ T4313] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  537.813188][ T4313] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  537.817109][ T4313] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  537.821901][ T4313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  537.842481][T11422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.847622][T11422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.861232][T11268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  537.881435][T11268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  537.899513][T11354] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.912973][T11354] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.922077][T11354] device bridge_slave_0 entered promiscuous mode
[  537.979444][T11354] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.990112][T11354] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.993117][T11354] device bridge_slave_1 entered promiscuous mode
[  538.038197][T11268] team0: Port device team_slave_0 added
[  538.072341][T11434] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2173'.
[  538.082866][T11268] team0: Port device team_slave_1 added
[  538.089298][T11354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  538.106296][T11354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  538.203943][T11268] batman_adv: batadv0: Adding interface: batadv_slave_0
[  538.213496][T11268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.217120][T11438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.225049][T11268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  538.225863][T11438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.229687][T11268] batman_adv: batadv0: Adding interface: batadv_slave_1
[  538.232057][T11268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.254492][T11268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  538.267396][T11354] team0: Port device team_slave_0 added
[  538.271948][T11354] team0: Port device team_slave_1 added
[  538.314349][T11423] lo speed is unknown, defaulting to 1000
[  538.326668][T11354] batman_adv: batadv0: Adding interface: batadv_slave_0
[  538.328611][T11354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.343162][T11354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  538.386969][T11268] device hsr_slave_0 entered promiscuous mode
[  538.424919][T11268] device hsr_slave_1 entered promiscuous mode
[  538.454906][T11268] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  538.457007][T11268] Cannot create hsr debugfs directory
[  538.475387][T11354] batman_adv: batadv0: Adding interface: batadv_slave_1
[  538.477361][T11354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.484335][T11354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  538.733331][T11354] device hsr_slave_0 entered promiscuous mode
[  538.796101][T11354] device hsr_slave_1 entered promiscuous mode
[  538.854959][T11354] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  538.857193][T11354] Cannot create hsr debugfs directory
[  539.863673][ T4313] Bluetooth: hci3: command 0x0409 tx timeout
[  540.037284][T11423] chnl_net:caif_netlink_parms(): no params data found
[  541.000529][T11423] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.002475][T11423] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.008445][T11423] device bridge_slave_0 entered promiscuous mode
[  541.143281][T11423] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.145624][T11423] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.148282][T11423] device bridge_slave_1 entered promiscuous mode
[  541.201449][T11423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  541.206850][T11423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  541.247645][T11423] team0: Port device team_slave_0 added
[  541.252217][T11423] team0: Port device team_slave_1 added
[  541.495649][T11423] batman_adv: batadv0: Adding interface: batadv_slave_0
[  541.497596][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  541.504293][T11423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  541.519462][T11423] batman_adv: batadv0: Adding interface: batadv_slave_1
[  541.521510][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  541.532887][T11423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  541.617476][    T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.728130][T11423] device hsr_slave_0 entered promiscuous mode
[  541.795066][T11423] device hsr_slave_1 entered promiscuous mode
[  541.824761][T11423] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  541.827080][T11423] Cannot create hsr debugfs directory
[  541.876352][    T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.885728][T11268] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  541.925012][ T4313] Bluetooth: hci3: command 0x041b tx timeout
[  541.993357][    T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.998547][T11268] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  542.139095][    T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.143454][T11268] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  542.206347][T11268] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  542.282859][T11354] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  542.344663][T11354] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  542.385453][T11354] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  542.463609][T11354] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  542.716723][T11423] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  542.757183][T11423] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  542.809773][T11268] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.825549][    T9] tipc: Disabling bearer <ib:caif0>
[  542.827382][    T9] tipc: Left network mode
[  542.831214][T11423] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  542.885073][T11423] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  542.920930][T11268] 8021q: adding VLAN 0 to HW filter on device team0
[  542.925350][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  542.928061][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  542.942526][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  542.946473][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  542.949098][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.951060][ T6682] bridge0: port 1(bridge_slave_0) entered forwarding state
[  542.958653][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  542.973222][T11354] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.977284][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  542.980030][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  542.982565][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.984528][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  542.987455][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  542.997117][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  543.000489][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  543.007345][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  543.019801][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  543.022820][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  543.026725][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  543.029226][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  543.033085][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  543.039305][T11354] 8021q: adding VLAN 0 to HW filter on device team0
[  543.046046][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  543.048782][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  543.051671][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.053559][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  543.177141][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  543.179706][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  543.182474][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  543.193767][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  543.197525][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  543.200118][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  543.202852][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  543.217175][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.219106][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.221368][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  543.233877][T11268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  543.290492][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  543.312720][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  543.316527][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  543.324917][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  543.328172][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  543.358772][T11423] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.371497][T11354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  543.374365][T11354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  543.439465][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  543.442160][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  543.445805][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  543.450033][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  543.453399][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  543.473368][T11423] 8021q: adding VLAN 0 to HW filter on device team0
[  543.484779][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  543.487583][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  543.490165][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  543.493644][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  543.505430][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  543.507959][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.509870][ T6682] bridge0: port 1(bridge_slave_0) entered forwarding state
[  543.513349][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  543.624624][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  543.628887][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  543.631555][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.633585][ T8117] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.643524][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  543.646302][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  543.662855][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  543.680029][T11268] 8021q: adding VLAN 0 to HW filter on device batadv0
[  543.692651][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  543.757996][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  543.761443][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  543.788673][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  543.791380][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  543.793570][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  543.807866][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  543.810867][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  543.817932][T11354] 8021q: adding VLAN 0 to HW filter on device batadv0
[  543.885149][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  543.887926][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  543.890678][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  543.895737][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  543.912624][T11423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  544.005525][ T4313] Bluetooth: hci3: command 0x040f tx timeout
[  544.224388][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  544.236611][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  544.242981][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  544.246533][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  544.340593][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  544.342864][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  544.366038][T11423] 8021q: adding VLAN 0 to HW filter on device batadv0
[  544.382494][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  544.385774][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  544.388539][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  544.400838][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  544.403612][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  544.409777][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  544.412326][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  544.421610][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  544.790427][T11354] device veth0_vlan entered promiscuous mode
[  544.792900][T11268] device veth0_vlan entered promiscuous mode
[  544.808377][T11354] device veth1_vlan entered promiscuous mode
[  544.849613][T11268] device veth1_vlan entered promiscuous mode
[  544.890806][T11354] device veth0_macvtap entered promiscuous mode
[  544.895170][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  544.897714][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  544.900271][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  544.902823][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  544.927121][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  544.940336][T11354] device veth1_macvtap entered promiscuous mode
[  545.181445][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  545.184245][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  545.187343][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  545.219594][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.222536][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.237953][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.240751][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.243395][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.249764][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.255562][T11354] batman_adv: batadv0: Interface activated: batadv_slave_0
[  545.260489][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  545.263272][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  545.268013][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  545.271607][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  545.329906][    T9] device hsr_slave_0 left promiscuous mode
[  545.384730][    T9] device hsr_slave_1 left promiscuous mode
[  545.595197][    T9] device veth1_macvtap left promiscuous mode
[  545.596936][    T9] device veth0_macvtap left promiscuous mode
[  545.598643][    T9] device veth1_vlan left promiscuous mode
[  545.600314][    T9] device veth0_vlan left promiscuous mode
[  545.920105][    T9] team0 (unregistering): Port device geneve0 removed
[  546.085202][ T4306] Bluetooth: hci3: command 0x0419 tx timeout
[  550.959452][    T9] bond0 (unregistering): Released all slaves
[  551.195330][T11268] device veth0_macvtap entered promiscuous mode
[  551.200265][T11268] device veth1_macvtap entered promiscuous mode
[  551.214698][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  551.233331][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.237251][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.239877][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.242628][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.248833][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.251538][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.256756][T11354] batman_adv: batadv0: Interface activated: batadv_slave_1
[  551.278362][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  551.281387][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  551.288316][T11354] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.290641][T11354] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.293055][T11354] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.295904][T11354] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  551.307386][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.310230][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.312901][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.325342][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.328108][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.330882][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.333553][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.343572][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.348743][T11268] batman_adv: batadv0: Interface activated: batadv_slave_0
[  551.363255][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  551.366804][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  551.389029][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  551.391843][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  551.395630][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.398366][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.401015][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.403707][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.406950][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.409844][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.412472][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.416793][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.421143][T11268] batman_adv: batadv0: Interface activated: batadv_slave_1
[  551.425502][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  551.435383][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  551.466560][T11268] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.469046][T11268] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.471379][T11268] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.473682][T11268] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  551.487218][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  551.489991][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  551.493148][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  551.505515][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  551.509918][T11423] device veth0_vlan entered promiscuous mode
[  551.538972][T11423] device veth1_vlan entered promiscuous mode
[  551.587284][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  551.589938][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  551.592486][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  551.596558][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  551.662010][T11423] device veth0_macvtap entered promiscuous mode
[  551.672434][T11423] device veth1_macvtap entered promiscuous mode
[  551.701678][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.709537][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.712321][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.719171][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.721937][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.729996][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.732661][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.738655][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.741341][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.744229][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.753157][T11423] batman_adv: batadv0: Interface activated: batadv_slave_0
[  551.766482][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  551.772347][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  551.778677][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  551.781549][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  551.785820][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.788112][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  551.793071][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  551.805851][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.808798][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.811448][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.814258][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.817538][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.820318][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.822946][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.825986][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.828550][T11423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.831370][T11423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.837659][T11423] batman_adv: batadv0: Interface activated: batadv_slave_1
[  551.843376][T11423] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.846180][T11423] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.848597][T11423] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.851308][T11423] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  551.865674][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  551.868852][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  551.879513][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.882309][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  551.885697][ T5160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.887904][ T5160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  551.892972][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  551.898886][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  551.992577][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.999363][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.014007][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  552.114997][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.117354][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.124214][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  552.133486][ T8117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.138389][ T8117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.175666][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  552.213647][T11679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.254863][T11679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.524784][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  556.526362][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  556.769578][T11735] team0: Device vlan2 is already an upper device of the team interface
[  557.818370][T11749] 9pnet_fd: Insufficient options for proto=fd
[  564.145102][T11826] 9pnet_fd: Insufficient options for proto=fd
[  566.822544][T11838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.838657][T11838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  568.783287][T11851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  569.875144][T11851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.317103][T11890] 9pnet_fd: Insufficient options for proto=fd
[  572.078609][ T8129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.186210][ T8129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.308932][ T8129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.486761][ T8129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.795092][ T8129] tipc: Disabling bearer <ib:caif0>
[  572.815229][ T8129] tipc: Left network mode
[  572.870972][   T27] audit: type=1326 audit(828.849:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a9a8 code=0x7ffc0000
[  572.995458][   T27] audit: type=1326 audit(828.979:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8ab58ed4 code=0x7ffc0000
[  573.012421][   T27] audit: type=1326 audit(828.979:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a9a8 code=0x7ffc0000
[  573.044125][   T27] audit: type=1326 audit(828.979:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a9a8 code=0x7ffc0000
[  575.429422][T11949] 9pnet_fd: Insufficient options for proto=fd
[  576.579456][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2237'.
[  576.582012][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2237'.
[  576.600285][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2240'.
[  577.643155][T11975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  577.763342][T11975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  577.771313][   T27] audit: type=1326 audit(833.749:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff5a9a8 code=0x7ffc0000
[  577.786991][   T27] audit: type=1326 audit(833.749:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffff9ff5a9a8 code=0x7ffc0000
[  577.792946][   T27] audit: type=1326 audit(833.749:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff5a9a8 code=0x7ffc0000
[  577.848143][   T27] audit: type=1326 audit(833.769:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff9ff5a9a8 code=0x7ffc0000
[  577.884738][   T27] audit: type=1326 audit(833.769:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff5a9a8 code=0x7ffc0000
[  577.890402][   T27] audit: type=1326 audit(833.769:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff5a9a8 code=0x7ffc0000
[  577.935937][   T27] audit: type=1326 audit(833.769:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9ff5a9a8 code=0x7ffc0000
[  577.942246][   T27] audit: type=1326 audit(833.769:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff5a9a8 code=0x7ffc0000
[  577.948488][   T27] audit: type=1326 audit(833.769:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff5a9a8 code=0x7ffc0000
[  577.973259][   T27] audit: type=1326 audit(833.769:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff9ff5a9a8 code=0x7ffc0000
[  578.711904][   T27] audit: type=1326 audit(833.769:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff5a9a8 code=0x7ffc0000
[  578.732982][   T27] audit: type=1326 audit(833.769:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff5a9a8 code=0x7ffc0000
[  578.754535][   T27] audit: type=1326 audit(833.779:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff9ff5a9a8 code=0x7ffc0000
[  578.782117][   T27] audit: type=1326 audit(833.919:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff5a9a8 code=0x7ffc0000
[  580.498905][T11987] 9pnet_fd: Insufficient options for proto=fd
[  581.018064][ T8129] device hsr_slave_0 left promiscuous mode
[  581.075036][ T8129] device hsr_slave_1 left promiscuous mode
[  581.314930][ T8129] batman_adv: batadv0: Removing interface: batadv_slave_0
[  582.052194][ T8129] batman_adv: batadv0: Removing interface: batadv_slave_1
[  582.065019][ T8129] device bridge_slave_1 left promiscuous mode
[  582.066755][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.119867][ T8129] device bridge_slave_0 left promiscuous mode
[  582.121813][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.079787][ T8129] team0 (unregistering): Port device geneve0 removed
[  583.563157][T12052] mmap: syz.6.2263 (12052) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  584.449328][T12064] 9pnet_fd: Insufficient options for proto=fd
[  584.488079][T12073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.490404][T12073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  585.395985][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  585.399934][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  586.015774][ T8129] team0 (unregistering): Port device team_slave_1 removed
[  586.216654][ T8129] team0 (unregistering): Port device team_slave_0 removed
[  586.405250][ T8129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  586.586395][ T8129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  589.708051][ T8129] bond0 (unregistering): Released all slaves
[  590.303851][T12041] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  590.306706][T12041] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  590.384070][T12095] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2275'.
[  590.386865][T12095] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2275'.
[  590.391558][T12095] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2275'.
[  594.874908][T12131] 9pnet_fd: Insufficient options for proto=fd
[  599.831830][T12172] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  599.834600][T12172] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  600.652147][T12182] 9pnet_fd: Insufficient options for proto=fd
[  603.574703][T12202] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.514567][T12205] netlink: 'syz.6.2299': attribute type 10 has an invalid length.
[  604.516693][T12205] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2299'.
[  605.372468][T12205] team0: Port device geneve0 added
[  605.646436][T12202] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.589323][T12237] 9pnet_fd: Insufficient options for proto=fd
[  606.788016][T12202] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.844881][T12235] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  606.847445][T12235] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  607.585041][T12202] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.873844][ T4313] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  607.876548][ T4313] Bluetooth: hci4: Injecting HCI hardware error event
[  607.879824][ T4306] Bluetooth: hci4: hardware error 0x00
[  608.087528][T12255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.090074][T12255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.102356][T12202] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  608.119312][T12202] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  608.178130][T12202] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  608.200974][T12202] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  608.298441][T12263] binder: 12240:12263 tried to acquire reference to desc 0, got 1 instead
[  608.547978][T12272] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  608.554089][T12272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  608.556541][T12272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  608.563607][T12272] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  611.246324][ T4306] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  611.580658][T12305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  611.583232][T12305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  611.777926][T12307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  611.789828][T12307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  611.884255][T12311] 9pnet_fd: Insufficient options for proto=fd
[  612.829840][ T1963] binder: undelivered transaction 10, process died.
[  612.849911][ T1963] binder: undelivered TRANSACTION_COMPLETE
[  614.102159][T12328] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  614.104965][T12328] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  615.383703][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  615.387575][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  615.389738][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  615.391803][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  615.393930][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  615.396362][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  615.398530][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  615.401936][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  615.408485][T12353] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  615.725337][T12357] input: syz0 as /devices/virtual/input/input8
[  617.445826][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  617.447711][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  618.541217][T12377] 9pnet_fd: Insufficient options for proto=fd
[  620.060099][T12405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2342'.
[  620.094272][T12404] lo speed is unknown, defaulting to 1000
[  620.683086][T12423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  620.687401][T12423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  620.689617][T12423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  620.693931][T12423] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  621.584921][T12431] 9pnet_fd: Insufficient options for proto=fd
[  621.968857][T12447] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  621.988022][T12447] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  622.011159][T12447] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  622.024754][T12447] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  622.047616][T12447] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  622.060328][T12447] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  622.075242][T12447] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  623.925809][T12449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  625.188219][T12456] lo speed is unknown, defaulting to 1000
[  626.455730][T12505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  626.458273][T12505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  627.157038][T12507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  627.161176][T12507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  627.163297][T12507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  627.168354][T12507] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  628.312710][ T4306] Bluetooth: hci3: link tx timeout
[  628.314362][ T4306] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  628.415760][T12543] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  629.664716][T12564] 9pnet_fd: Insufficient options for proto=fd
[  630.010894][T12571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.024866][T12571] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.326727][ T4306] Bluetooth: hci3: command 0x0406 tx timeout
[  635.164766][T12625] 9pnet_fd: Insufficient options for proto=fd
[  635.912262][T12636] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2386'.
[  636.283054][T12654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  636.285844][T12654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.507897][T12670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.510465][T12670] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.724700][T12679] 9pnet_fd: Insufficient options for proto=fd
[  641.146066][T12720] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2403'.
[  642.548404][T12749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.555073][T12749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.047985][ T4313] Bluetooth: hci3: command 0x0405 tx timeout
[  645.124709][ T4313] Bluetooth: hci0: command 0x0406 tx timeout
[  645.903594][T12781] lo speed is unknown, defaulting to 1000
[  647.552626][T12810] block device autoloading is deprecated and will be removed.
[  647.764188][T12820] netlink: 'syz.3.2424': attribute type 12 has an invalid length.
[  651.580915][T12862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  651.594959][T12862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  655.375703][ T4306] Bluetooth: hci1: command 0x0406 tx timeout
[  656.380852][T12931] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready
[  662.762865][T13024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  662.814571][T13024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.031418][T13045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  664.719566][T13045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.862477][T13057] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9
[  668.681529][T13109] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10
[  670.558683][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2491'.
[  671.718884][T13157] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11
[  671.816140][T13163] binder: 13162:13163 ioctl 40046210 0 returned -14
[  675.591286][T13216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  675.655568][T13216] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  677.377169][ T4313] Bluetooth: hci0: ISO packet for unknown connection handle 0
[  677.381547][T13246] binder: 13245:13246 ioctl 40046210 0 returned -14
[  677.430721][T13250] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12
[  679.460219][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  679.462194][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  681.067051][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  681.067063][   T27] audit: type=1326 audit(937.049:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.6.2526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf55a9a8 code=0x7ffc0000
[  681.105037][   T27] audit: type=1326 audit(937.089:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.6.2526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffaf55a9a8 code=0x7ffc0000
[  681.755260][   T27] audit: type=1326 audit(937.719:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.6.2526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf55a9a8 code=0x7ffc0000
[  681.787953][   T27] audit: type=1326 audit(937.719:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.6.2526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf55a9a8 code=0x7ffc0000
[  681.815480][   T27] audit: type=1326 audit(937.719:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.6.2526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffffaf55a9a8 code=0x7ffc0000
[  681.821309][   T27] audit: type=1326 audit(937.719:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.6.2526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf55a9a8 code=0x7ffc0000
[  681.878384][   T27] audit: type=1326 audit(937.719:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.6.2526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf55a9a8 code=0x7ffc0000
[  681.884387][   T27] audit: type=1326 audit(937.719:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.6.2526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffaf55a9a8 code=0x7ffc0000
[  682.702720][   T27] audit: type=1326 audit(937.719:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.6.2526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf55a9a8 code=0x7ffc0000
[  682.928024][   T27] audit: type=1326 audit(937.729:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.6.2526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf55a9a8 code=0x7ffc0000
[  683.196992][ T4313] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  683.226581][T13319] binder: 13318:13319 ioctl 40046210 0 returned -14
[  684.138744][T13332] Bluetooth: MGMT ver 1.22
[  686.635928][   T27] kauditd_printk_skb: 18 callbacks suppressed
[  686.635941][   T27] audit: type=1326 audit(942.619:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f5a9a8 code=0x7ffc0000
[  686.651886][   T27] audit: type=1326 audit(942.629:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffb0f5a9a8 code=0x7ffc0000
[  686.667739][   T27] audit: type=1326 audit(942.629:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f5a9a8 code=0x7ffc0000
[  686.681173][   T27] audit: type=1326 audit(942.639:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffffb0f5a9a8 code=0x7ffc0000
[  686.694571][   T27] audit: type=1326 audit(942.639:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f5a9a8 code=0x7ffc0000
[  686.741241][   T27] audit: type=1326 audit(942.639:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffb0f5a9a8 code=0x7ffc0000
[  686.777981][   T27] audit: type=1326 audit(942.639:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f5a9a8 code=0x7ffc0000
[  686.804286][   T27] audit: type=1326 audit(942.639:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f5a9a8 code=0x7ffc0000
[  686.810858][   T27] audit: type=1326 audit(942.639:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffb0f5a9a8 code=0x7ffc0000
[  686.817522][   T27] audit: type=1326 audit(942.639:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f5a9a8 code=0x7ffc0000
[  688.074344][ T4313] Bluetooth: hci3: ISO packet for unknown connection handle 0
[  688.078708][T13389] binder: 13385:13389 ioctl 40046210 0 returned -14
[  692.237236][T13425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.275179][T13425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  693.016824][   T27] kauditd_printk_skb: 16 callbacks suppressed
[  693.016836][   T27] audit: type=1326 audit(948.996:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8275a9a8 code=0x7ffc0000
[  693.024969][   T27] audit: type=1326 audit(949.006:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8275a9a8 code=0x7ffc0000
[  693.047443][   T27] audit: type=1326 audit(949.006:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff8275a9a8 code=0x7ffc0000
[  693.087097][   T27] audit: type=1326 audit(949.006:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8275a9a8 code=0x7ffc0000
[  693.093429][   T27] audit: type=1326 audit(949.006:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8275a9a8 code=0x7ffc0000
[  693.143099][   T27] audit: type=1326 audit(949.046:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffff8275a9a8 code=0x7ffc0000
[  693.194256][   T27] audit: type=1326 audit(949.046:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8275a9a8 code=0x7ffc0000
[  693.240980][   T27] audit: type=1326 audit(949.046:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8275a9a8 code=0x7ffc0000
[  693.267988][   T27] audit: type=1326 audit(949.046:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff8275a9a8 code=0x7ffc0000
[  693.289519][   T27] audit: type=1326 audit(949.046:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8275a9a8 code=0x7ffc0000
[  695.871533][T13493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  695.874251][T13493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  699.627964][   T27] kauditd_printk_skb: 19 callbacks suppressed
[  699.627976][   T27] audit: type=1326 audit(955.606:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a9a8 code=0x7ffc0000
[  699.640000][   T27] audit: type=1326 audit(955.616:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff8ab5a9a8 code=0x7ffc0000
[  699.672153][   T27] audit: type=1326 audit(955.646:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a9a8 code=0x7ffc0000
[  699.862807][   T27] audit: type=1326 audit(955.646:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffff8ab5a9a8 code=0x7ffc0000
[  699.928958][   T27] audit: type=1326 audit(955.646:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a9a8 code=0x7ffc0000
[  701.019910][   T27] audit: type=1326 audit(955.646:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff8ab5a9a8 code=0x7ffc0000
[  701.026234][   T27] audit: type=1326 audit(955.646:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a9a8 code=0x7ffc0000
[  701.031872][   T27] audit: type=1326 audit(955.646:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a9a8 code=0x7ffc0000
[  701.091262][   T27] audit: type=1326 audit(955.656:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8ab5a9a8 code=0x7ffc0000
[  701.130145][   T27] audit: type=1326 audit(955.656:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a9a8 code=0x7ffc0000
[  702.755802][T13574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  702.758419][T13574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.872754][T13647] capability: warning: `syz.8.2593' uses deprecated v2 capabilities in a way that may be insecure
[  709.732907][T13654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  709.735555][T13654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  710.122052][T13669] netlink: 'syz.7.2599': attribute type 4 has an invalid length.
[  713.575281][T13725] netlink: 'syz.6.2617': attribute type 4 has an invalid length.
[  713.577326][T13725] netlink: 'syz.6.2617': attribute type 2 has an invalid length.
[  716.233607][T13751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  716.239072][T13751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  717.241334][T13757] IPv6: ADDRCONF(NETDEV_CHANGE): rose6: link becomes ready
[  720.971515][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): rose8: link becomes ready
[  723.401004][T13836] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2654'.
[  723.403534][T13836] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2654'.
[  724.971710][T13862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  724.979062][T13862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  728.406597][T13905] IPv6: ADDRCONF(NETDEV_CHANGE): rose5: link becomes ready
[  730.110901][T13946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  730.113512][T13946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  730.124803][T13944] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2692'.
[  735.404577][T14021] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2717'.
[  735.434738][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2717'.
[  736.208697][T14024] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2718'.
[  737.920546][T14024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  737.960523][T14024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  738.001988][T14024] bond0 (unregistering): Released all slaves
[  738.266060][T14064] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2738'.
[  739.212964][T14069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  739.218499][T14069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  740.325344][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  740.327156][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  741.329356][T14064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  741.381927][T14064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  741.431147][T14064] bond0 (unregistering): Released all slaves
[  741.958957][ T8129] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.098049][ T8129] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.104189][T14111] device virt_wifi0 entered promiscuous mode
[  742.226319][ T8129] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  743.104542][ T8129] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  744.514941][T14149] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2750'.
[  745.582311][T14157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  745.606196][T14157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  747.564980][T14149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  747.602608][T14149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  747.650946][T14149] bond0 (unregistering): Released all slaves
[  748.145195][ T8129] tipc: Disabling bearer <ib:caif0>
[  748.148118][ T8129] tipc: Left network mode
[  752.137046][T14260] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2775'.
[  753.195971][T14267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  753.198463][T14267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  755.313907][T14316] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2789'.
[  757.005605][T14316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  757.041495][T14355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  757.044799][T14355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  757.051488][T14355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  757.054414][T14355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  757.066043][T14355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  757.068628][T14355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  757.081338][T14316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  757.137769][T14316] bond0 (unregistering): Released all slaves
[  758.756041][T14380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  758.758539][T14380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  758.789251][T14392] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2809'.
[  758.860831][ T8129] device hsr_slave_0 left promiscuous mode
[  758.956815][ T8129] device hsr_slave_1 left promiscuous mode
[  759.085044][ T8129] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  759.090545][ T8129] batman_adv: batadv0: Removing interface: batadv_slave_0
[  759.097100][ T8129] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  759.102519][ T8129] batman_adv: batadv0: Removing interface: batadv_slave_1
[  759.117014][ T8129] device bridge_slave_1 left promiscuous mode
[  759.121605][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.537272][ T8129] device bridge_slave_0 left promiscuous mode
[  759.580114][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state
[  760.024723][ T8129] device veth1_macvtap left promiscuous mode
[  760.026518][ T8129] device veth0_macvtap left promiscuous mode
[  760.028788][ T8129] device veth1_vlan left promiscuous mode
[  760.030470][ T8129] device veth0_vlan left promiscuous mode
[  760.340761][ T8129] team0 (unregistering): Port device geneve0 removed
[  762.887585][ T8129] team0 (unregistering): Port device team_slave_1 removed
[  763.077496][ T8129] team0 (unregistering): Port device team_slave_0 removed
[  763.275725][ T8129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  763.508337][ T8129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  766.206964][ T8129] bond0 (unregistering): Released all slaves
[  766.584616][T14413] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2815'.
[  766.588685][   T22] lo speed is unknown, defaulting to 1000
[  768.394288][T14457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  768.397700][T14457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  769.227548][T14493] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2835'.
[  769.799464][T14518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  769.806835][T14518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  770.923520][T14548] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2849'.
[  771.093616][ T4306] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  771.098097][ T4306] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  771.101323][ T4306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  771.103815][ T4306] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  771.110328][ T4306] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  771.112488][ T4306] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  771.491526][T14561] lo speed is unknown, defaulting to 1000
[  771.495497][T14561] lo speed is unknown, defaulting to 1000
[  771.497848][T14561] lo speed is unknown, defaulting to 1000
[  771.559316][T14561] infiniband s
z1: set active
[  771.560786][T14561] infiniband s
z1: added lo
[  771.571519][ T4345] lo speed is unknown, defaulting to 1000
[  771.626670][T14561] RDS/IB: s
z1: added
[  771.628338][T14561] smc: adding ib device s
z1 with port count 1
[  771.630145][T14561] smc:    ib device s
z1 port 1 has pnetid 
[  771.670620][T14561] lo speed is unknown, defaulting to 1000
[  772.324539][    C1] ------------[ cut here ]------------
[  772.326522][    C1] refcount_t: addition on 0; use-after-free.
[  772.328522][    C1] WARNING: CPU: 1 PID: 455 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8
[  772.331022][    C1] Modules linked in:
[  772.332013][    C1] CPU: 1 PID: 455 Comm: kworker/u4:5 Not tainted 6.1.141-syzkaller #0
[  772.334255][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  772.336968][    C1] Workqueue: netns cleanup_net
[  772.338278][    C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  772.340359][    C1] pc : refcount_warn_saturate+0x134/0x1f8
[  772.341882][    C1] lr : refcount_warn_saturate+0x134/0x1f8
[  772.343489][    C1] sp : ffff800008017700
[  772.344623][    C1] x29: ffff800008017700 x28: ffff0000f67e5000 x27: ffff0000d087b208
[  772.346861][    C1] x26: ffff0000d197b8c0 x25: dfff800000000000 x24: 1fffe0001a10f641
[  772.349049][    C1] x23: ffff0000db816400 x22: ffff0000de998154 x21: ffff0000d1cec080
[  772.351202][    C1] x20: ffff0000de998154 x19: ffff800017a32000 x18: ffff800011a7bce0
[  772.353390][    C1] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000
[  772.355511][    C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100
[  772.357651][    C1] x11: ff0080000819149c x10: 0000000000000000 x9 : 4885c6b3e431be00
[  772.359807][    C1] x8 : 4885c6b3e431be00 x7 : 0000000000000001 x6 : 0000000000000001
[  772.361956][    C1] x5 : ffff800008017198 x4 : ffff800015154700 x3 : ffff80000852da40
[  772.364185][    C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000000
[  772.366331][    C1] Call trace:
[  772.367224][    C1]  refcount_warn_saturate+0x134/0x1f8
[  772.368677][    C1]  tipc_crypto_xmit+0x1518/0x2014
[  772.370111][    C1]  tipc_crypto_clone_msg+0x98/0x150
[  772.371528][    C1]  tipc_crypto_xmit+0x1684/0x2014
[  772.372924][    C1]  tipc_bearer_xmit_skb+0x1f0/0x384
[  772.374367][    C1]  tipc_disc_timeout+0x4c8/0x608
[  772.375673][    C1]  call_timer_fn+0x1b8/0x964
[  772.376964][    C1]  __run_timers+0x460/0x6bc
[  772.378191][    C1]  run_timer_softirq+0x7c/0x114
[  772.379565][    C1]  handle_softirqs+0x318/0xc6c
[  772.380867][    C1]  __do_softirq+0x14/0x20
[  772.382007][    C1]  ____do_softirq+0x14/0x20
[  772.383219][    C1]  call_on_irq_stack+0x24/0x4c
[  772.384439][    C1]  do_softirq_own_stack+0x20/0x2c
[  772.385773][    C1]  __irq_exit_rcu+0x23c/0x43c
[  772.387054][    C1]  irq_exit_rcu+0x14/0x84
[  772.388253][    C1]  el1_interrupt+0x38/0x54
[  772.389499][    C1]  el1h_64_irq_handler+0x18/0x24
[  772.390823][    C1]  el1h_64_irq+0x64/0x68
[  772.391996][    C1]  finish_lock_switch+0xb8/0x1c4
[  772.393475][    C1]  finish_task_switch+0x120/0x620
[  772.394886][    C1]  __schedule+0xdd8/0x1b2c
[  772.396072][    C1]  preempt_schedule_irq+0x8c/0x1b8
[  772.397469][    C1]  arm64_preempt_schedule_irq+0x44/0x58
[  772.398992][    C1]  el1_interrupt+0x3c/0x54
[  772.400209][    C1]  el1h_64_irq_handler+0x18/0x24
[  772.401499][    C1]  el1h_64_irq+0x64/0x68
[  772.402610][    C1]  put_cpu_partial+0x17c/0x1fc
[  772.403948][    C1]  __slab_free+0x1a8/0x274
[  772.405119][    C1]  ___cache_free+0x16c/0x19c
[  772.406385][    C1]  qlink_free+0x5c/0xa4
[  772.407497][    C1]  qlist_free_all+0x3c/0xcc
[  772.408701][    C1]  kasan_quarantine_reduce+0x124/0x130
[  772.410191][    C1]  __kasan_slab_alloc+0x2c/0x88
[  772.411523][    C1]  slab_post_alloc_hook+0x74/0x43c
[  772.412887][    C1]  __kmem_cache_alloc_node+0x278/0x320
[  772.414444][    C1]  __kmalloc_node+0xdc/0x17c
[  772.415729][    C1]  kvmalloc_node+0x88/0x1dc
[  772.416934][    C1]  __nf_hook_entries_try_shrink+0x25c/0x554
[  772.418533][    C1]  __nf_unregister_net_hook+0x3f8/0x5ec
[  772.420124][    C1]  nf_unregister_net_hooks+0xe0/0x140
[  772.421607][    C1]  ebt_unregister_table_pre_exit+0xf4/0x130
[  772.423195][    C1]  frame_nat_net_pre_exit+0x28/0x38
[  772.424648][    C1]  cleanup_net+0x470/0xa74
[  772.425879][    C1]  process_one_work+0x7f4/0x13a8
[  772.427339][    C1]  worker_thread+0x8c8/0xfbc
[  772.428619][    C1]  kthread+0x250/0x2d8
[  772.429790][    C1]  ret_from_fork+0x10/0x20
[  772.430981][    C1] irq event stamp: 4152327
[  772.432175][    C1] hardirqs last  enabled at (4152326): [<ffff800008307d18>] __up_console_sem+0xb4/0x100
[  772.434836][    C1] hardirqs last disabled at (4152327): [<ffff80001191c930>] el1_dbg+0x24/0x80
[  772.437205][    C1] softirqs last  enabled at (4151234): [<ffff8000113894fc>] tipc_node_pre_cleanup_net+0x1f0/0x32c
[  772.440085][    C1] softirqs last disabled at (4152281): [<ffff800008020164>] __do_softirq+0x14/0x20
[  772.442566][    C1] ---[ end trace 0000000000000000 ]---
[  772.444219][    C1] ------------[ cut here ]------------
[  772.445727][    C1] refcount_t: underflow; use-after-free.
[  772.447529][    C1] WARNING: CPU: 1 PID: 455 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8
[  772.450083][    C1] Modules linked in:
[  772.451135][    C1] CPU: 1 PID: 455 Comm: kworker/u4:5 Tainted: G        W          6.1.141-syzkaller #0
[  772.453834][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  772.456676][    C1] Workqueue: netns cleanup_net
[  772.458056][    C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  772.460289][    C1] pc : refcount_warn_saturate+0x154/0x1f8
[  772.461865][    C1] lr : refcount_warn_saturate+0x154/0x1f8
[  772.463546][    C1] sp : ffff800008017700
[  772.464642][    C1] x29: ffff800008017700 x28: ffff0000f67e5000 x27: 0000000000000000
[  772.466813][    C1] x26: ffff0000d197b8c0 x25: dfff800000000000 x24: 1fffe0001a32f722
[  772.469032][    C1] x23: 1fffe00019583379 x22: ffff0000d087b200 x21: 00000000c0000000
[  772.471222][    C1] x20: ffff0000de998154 x19: ffff800017a32000 x18: ffff800011a7bce0
[  772.473465][    C1] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000
[  772.475713][    C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100
[  772.477936][    C1] x11: ff0080000819149c x10: 0000000000000000 x9 : 4885c6b3e431be00
[  772.480140][    C1] x8 : 4885c6b3e431be00 x7 : 0000000000000001 x6 : 0000000000000001
[  772.482421][    C1] x5 : ffff800008017198 x4 : ffff800015154700 x3 : ffff8000083115f4
[  772.484649][    C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000000
[  772.486818][    C1] Call trace:
[  772.487705][    C1]  refcount_warn_saturate+0x154/0x1f8
[  772.489218][    C1]  tipc_crypto_xmit+0x1664/0x2014
[  772.490569][    C1]  tipc_crypto_clone_msg+0x98/0x150
[  772.491969][    C1]  tipc_crypto_xmit+0x1684/0x2014
[  772.493392][    C1]  tipc_bearer_xmit_skb+0x1f0/0x384
[  772.494819][    C1]  tipc_disc_timeout+0x4c8/0x608
[  772.496244][    C1]  call_timer_fn+0x1b8/0x964
[  772.497463][    C1]  __run_timers+0x460/0x6bc
[  772.498689][    C1]  run_timer_softirq+0x7c/0x114
[  772.500029][    C1]  handle_softirqs+0x318/0xc6c
[  772.501352][    C1]  __do_softirq+0x14/0x20
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  772.502543][    C1]  ____do_softirq+0x14/0x20
[  772.503807][    C1]  call_on_irq_stack+0x24/0x4c
[  772.505138][    C1]  do_softirq_own_stack+0x20/0x2c
[  772.506529][    C1]  __irq_exit_rcu+0x23c/0x43c
[  772.507808][    C1]  irq_exit_rcu+0x14/0x84
[  772.508985][    C1]  el1_interrupt+0x38/0x54
[  772.510238][    C1]  el1h_64_irq_handler+0x18/0x24
[  772.511652][    C1]  el1h_64_irq+0x64/0x68
[  772.512790][    C1]  finish_lock_switch+0xb8/0x1c4
[  772.514167][    C1]  finish_task_switch+0x120/0x620
[  772.515523][    C1]  __schedule+0xdd8/0x1b2c
[  772.516772][    C1]  preempt_schedule_irq+0x8c/0x1b8
[  772.518152][    C1]  arm64_preempt_schedule_irq+0x44/0x58
[  772.519658][    C1]  el1_interrupt+0x3c/0x54
[  772.520900][    C1]  el1h_64_irq_handler+0x18/0x24
[  772.522290][    C1]  el1h_64_irq+0x64/0x68
[  772.523492][    C1]  put_cpu_partial+0x17c/0x1fc
[  772.524805][    C1]  __slab_free+0x1a8/0x274
[  772.526031][    C1]  ___cache_free+0x16c/0x19c
[  772.527307][    C1]  qlink_free+0x5c/0xa4
[  772.528500][    C1]  qlist_free_all+0x3c/0xcc
[  772.529746][    C1]  kasan_quarantine_reduce+0x124/0x130
[  772.531224][    C1]  __kasan_slab_alloc+0x2c/0x88
[  772.532534][    C1]  slab_post_alloc_hook+0x74/0x43c
[  772.533902][    C1]  __kmem_cache_alloc_node+0x278/0x320
[  772.535446][    C1]  __kmalloc_node+0xdc/0x17c
[  772.536753][    C1]  kvmalloc_node+0x88/0x1dc
[  772.538037][    C1]  __nf_hook_entries_try_shrink+0x25c/0x554
[  772.539668][    C1]  __nf_unregister_net_hook+0x3f8/0x5ec
[  772.541227][    C1]  nf_unregister_net_hooks+0xe0/0x140
[  772.542677][    C1]  ebt_unregister_table_pre_exit+0xf4/0x130
[  772.544311][    C1]  frame_nat_net_pre_exit+0x28/0x38
[  772.545725][    C1]  cleanup_net+0x470/0xa74
[  772.546918][    C1]  process_one_work+0x7f4/0x13a8
[  772.548249][    C1]  worker_thread+0x8c8/0xfbc
[  772.549493][    C1]  kthread+0x250/0x2d8
[  772.550593][    C1]  ret_from_fork+0x10/0x20
[  772.551845][    C1] irq event stamp: 4152359
[  772.553035][    C1] hardirqs last  enabled at (4152358): [<ffff800008307d18>] __up_console_sem+0xb4/0x100
[  772.555657][    C1] hardirqs last disabled at (4152359): [<ffff80001191c930>] el1_dbg+0x24/0x80
[  772.558143][    C1] softirqs last  enabled at (4151234): [<ffff8000113894fc>] tipc_node_pre_cleanup_net+0x1f0/0x32c
[  772.561039][    C1] softirqs last disabled at (4152281): [<ffff800008020164>] __do_softirq+0x14/0x20
[  772.563552][    C1] ---[ end trace 0000000000000000 ]---
[  772.565413][    C1] ------------[ cut here ]------------
[  772.566810][    C1] refcount_t: saturated; leaking memory.
[  772.568570][    C1] WARNING: CPU: 1 PID: 455 at lib/refcount.c:22 refcount_warn_saturate+0x1b4/0x1f8
[  772.570978][    C1] Modules linked in:
[  772.572009][    C1] CPU: 1 PID: 455 Comm: kworker/u4:5 Tainted: G        W          6.1.141-syzkaller #0
[  772.574509][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  772.577240][    C1] Workqueue: netns cleanup_net
[  772.578492][    C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  772.580605][    C1] pc : refcount_warn_saturate+0x1b4/0x1f8
[  772.582189][    C1] lr : refcount_warn_saturate+0x1b4/0x1f8
[  772.583724][    C1] sp : ffff8000080178c0
[  772.584839][    C1] x29: ffff8000080178c0 x28: ffff0000f2fb5800 x27: ffff0000d087dc08
[  772.586999][    C1] x26: ffff0000d9788370 x25: dfff800000000000 x24: 1fffe0001a10fb81
[  772.589305][    C1] x23: ffff0000db816400 x22: ffff0000de998154 x21: 000000007ffffffe
[  772.591485][    C1] x20: ffff0000de998154 x19: ffff800017a32000 x18: ffff800011a7bce0
[  772.593676][    C1] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000
[  772.595857][    C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100
[  772.598045][    C1] x11: ff0080000819149c x10: 0000000000000000 x9 : 4885c6b3e431be00
[  772.600249][    C1] x8 : 4885c6b3e431be00 x7 : 0000000000000001 x6 : 0000000000000001
[  772.602417][    C1] x5 : ffff800008017358 x4 : ffff800015154700 x3 : ffff80000a83c7ec
[  772.604573][    C1] x2 : ffff00019f738cd0 x1 : 0000000000000101 x0 : 0000000000000000
[  772.606870][    C1] Call trace:
[  772.607738][    C1]  refcount_warn_saturate+0x1b4/0x1f8
[  772.609294][    C1]  tipc_crypto_xmit+0x1518/0x2014
[  772.610672][    C1]  tipc_bearer_xmit_skb+0x1f0/0x384
[  772.612055][    C1]  tipc_disc_timeout+0x4c8/0x608
[  772.613398][    C1]  call_timer_fn+0x1b8/0x964
[  772.614600][    C1]  __run_timers+0x460/0x6bc
[  772.615778][    C1]  run_timer_softirq+0x7c/0x114
[  772.617060][    C1]  handle_softirqs+0x318/0xc6c
[  772.618324][    C1]  __do_softirq+0x14/0x20
[  772.619459][    C1]  ____do_softirq+0x14/0x20
[  772.620614][    C1]  call_on_irq_stack+0x24/0x4c
[  772.621911][    C1]  do_softirq_own_stack+0x20/0x2c
[  772.623251][    C1]  __irq_exit_rcu+0x23c/0x43c
[  772.624493][    C1]  irq_exit_rcu+0x14/0x84
[  772.625630][    C1]  el1_interrupt+0x38/0x54
[  772.626816][    C1]  el1h_64_irq_handler+0x18/0x24
[  772.628150][    C1]  el1h_64_irq+0x64/0x68
[  772.629358][    C1]  finish_lock_switch+0xb8/0x1c4
[  772.630713][    C1]  finish_task_switch+0x120/0x620
[  772.632035][    C1]  __schedule+0xdd8/0x1b2c
[  772.633253][    C1]  preempt_schedule_irq+0x8c/0x1b8
[  772.634639][    C1]  arm64_preempt_schedule_irq+0x44/0x58
[  772.636155][    C1]  el1_interrupt+0x3c/0x54
[  772.637325][    C1]  el1h_64_irq_handler+0x18/0x24
[  772.638694][    C1]  el1h_64_irq+0x64/0x68
[  772.639804][    C1]  put_cpu_partial+0x17c/0x1fc
[  772.641069][    C1]  __slab_free+0x1a8/0x274
[  772.642258][    C1]  ___cache_free+0x16c/0x19c
[  772.643524][    C1]  qlink_free+0x5c/0xa4
[  772.644646][    C1]  qlist_free_all+0x3c/0xcc
[  772.645895][    C1]  kasan_quarantine_reduce+0x124/0x130
[  772.647371][    C1]  __kasan_slab_alloc+0x2c/0x88
[  772.648671][    C1]  slab_post_alloc_hook+0x74/0x43c
[  772.650067][    C1]  __kmem_cache_alloc_node+0x278/0x320
[  772.651595][    C1]  __kmalloc_node+0xdc/0x17c
[  772.652855][    C1]  kvmalloc_node+0x88/0x1dc
[  772.654062][    C1]  __nf_hook_entries_try_shrink+0x25c/0x554
[  772.655701][    C1]  __nf_unregister_net_hook+0x3f8/0x5ec
[  772.657140][    C1]  nf_unregister_net_hooks+0xe0/0x140
[  772.658526][    C1]  ebt_unregister_table_pre_exit+0xf4/0x130
[  772.660114][    C1]  frame_nat_net_pre_exit+0x28/0x38
[  772.661477][    C1]  cleanup_net+0x470/0xa74
[  772.662701][    C1]  process_one_work+0x7f4/0x13a8
[  772.664102][    C1]  worker_thread+0x8c8/0xfbc
[  772.665370][    C1]  kthread+0x250/0x2d8
[  772.666531][    C1]  ret_from_fork+0x10/0x20
[  772.667728][    C1] irq event stamp: 4152489
[  772.668928][    C1] hardirqs last  enabled at (4152488): [<ffff800008307d18>] __up_console_sem+0xb4/0x100
[  772.671606][    C1] hardirqs last disabled at (4152489): [<ffff80001191c930>] el1_dbg+0x24/0x80
[  772.674117][    C1] softirqs last  enabled at (4151234): [<ffff8000113894fc>] tipc_node_pre_cleanup_net+0x1f0/0x32c
[  772.676986][    C1] softirqs last disabled at (4152281): [<ffff800008020164>] __do_softirq+0x14/0x20
[  772.679529][    C1] ---[ end trace 0000000000000000 ]---
[  772.737744][T11550] lo speed is unknown, defaulting to 1000
[  772.788131][T14561] lo speed is unknown, defaulting to 1000
[  772.822935][T14561] lo speed is unknown, defaulting to 1000
[  772.856460][T14561] lo speed is unknown, defaulting to 1000
[  773.037910][T14561] lo speed is unknown, defaulting to 1000
[  773.071840][T14561] lo speed is unknown, defaulting to 1000
[  773.108979][  T455] ------------[ cut here ]------------
[  773.110555][  T455] refcount_t: saturated; leaking memory.
[  773.112404][  T455] WARNING: CPU: 1 PID: 455 at lib/refcount.c:19 refcount_warn_saturate+0x174/0x1f8
[  773.114884][  T455] Modules linked in:
[  773.116006][  T455] CPU: 1 PID: 455 Comm: kworker/u4:5 Tainted: G        W          6.1.141-syzkaller #0
[  773.118612][  T455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  773.121338][  T455] Workqueue: netns cleanup_net
[  773.122612][  T455] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  773.124696][  T455] pc : refcount_warn_saturate+0x174/0x1f8
[  773.126232][  T455] lr : refcount_warn_saturate+0x174/0x1f8
[  773.127734][  T455] sp : ffff800021797280
[  773.128834][  T455] x29: ffff800021797280 x28: 1ffff000042f2e58 x27: dfff800000000000
[  773.131062][  T455] x26: 00000000c0000000 x25: 00000000c0000000 x24: ffff0000de998154
[  773.133203][  T455] x23: 0000000000000046 x22: 0000000000000cc0 x21: 000000007ffffffe
[  773.135350][  T455] x20: ffff0000de998154 x19: ffff800017a32000 x18: ffff800011a7bce0
[  773.137532][  T455] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000
[  773.139715][  T455] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100
[  773.141874][  T455] x11: ff0080000819149c x10: 0000000000000000 x9 : 4885c6b3e431be00
[  773.144088][  T455] x8 : 4885c6b3e431be00 x7 : 0000000000000001 x6 : 0000000000000001
[  773.146249][  T455] x5 : ffff800021796d18 x4 : ffff800015154700 x3 : ffff80000852da40
[  773.148393][  T455] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
[  773.150603][  T455] Call trace:
[  773.151495][  T455]  refcount_warn_saturate+0x174/0x1f8
[  773.152987][  T455]  nf_nat_masq_schedule+0x478/0x54c
[  773.154384][  T455]  masq_device_event+0x9c/0xe0
[  773.155651][  T455]  raw_notifier_call_chain+0xd4/0x164
[  773.157131][  T455]  dev_close_many+0x2cc/0x440
[  773.158383][  T455]  unregister_netdevice_many+0x3c4/0x1740
[  773.159960][  T455]  unregister_netdevice_queue+0x2ac/0x2f8
[  773.161664][  T455]  nsim_destroy+0x58/0x164
[  773.162855][  T455]  __nsim_dev_port_del+0x144/0x1a4
[  773.164227][  T455]  nsim_dev_reload_destroy+0x240/0x43c
[  773.165666][  T455]  nsim_dev_reload_down+0x9c/0xd4
[  773.167114][  T455]  devlink_reload+0x1b4/0x570
[  773.168430][  T455]  devlink_pernet_pre_exit+0x118/0x2a8
[  773.169963][  T455]  cleanup_net+0x470/0xa74
[  773.171208][  T455]  process_one_work+0x7f4/0x13a8
[  773.172681][  T455]  worker_thread+0x8c8/0xfbc
[  773.173950][  T455]  kthread+0x250/0x2d8
[  773.175124][  T455]  ret_from_fork+0x10/0x20
[  773.176346][  T455] irq event stamp: 4153950
[  773.177598][  T455] hardirqs last  enabled at (4153949): [<ffff800008307d18>] __up_console_sem+0xb4/0x100
[  773.180269][  T455] hardirqs last disabled at (4153950): [<ffff80001191c930>] el1_dbg+0x24/0x80
[  773.182760][  T455] softirqs last  enabled at (4153928): [<ffff80000cf8d1b4>] pppoe_device_event+0x48c/0x4bc
[  773.185492][  T455] softirqs last disabled at (4153926): [<ffff80000cf8ce04>] pppoe_device_event+0xdc/0x4bc
[  773.188199][  T455] ---[ end trace 0000000000000000 ]---
[  773.194386][ T4306] Bluetooth: hci5: command 0x0409 tx timeout
[  773.199413][  T455] ------------[ cut here ]------------
[  773.200879][  T455] WARNING: CPU: 1 PID: 455 at lib/ref_tracker.c:77 ref_tracker_alloc+0x230/0x3cc
[  773.203351][  T455] Modules linked in:
[  773.204355][  T455] CPU: 1 PID: 455 Comm: kworker/u4:5 Tainted: G        W          6.1.141-syzkaller #0
[  773.207026][  T455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  773.209728][  T455] Workqueue: netns cleanup_net
[  773.210993][  T455] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  773.213117][  T455] pc : ref_tracker_alloc+0x230/0x3cc
[  773.214600][  T455] lr : ref_tracker_alloc+0x230/0x3cc
[  773.216044][  T455] sp : ffff800021797160
[  773.217150][  T455] x29: ffff800021797240 x28: 1ffff000042f2e58 x27: dfff800000000000
[  773.219345][  T455] x26: dfff800000000000 x25: ffff7000042f2e2c x24: ffff0000c3a47308
[  773.221462][  T455] x23: ffff800021797160 x22: ffff0000de9981a4 x21: ffff0000c3a47350
[  773.223653][  T455] x20: 0000000000000cc0 x19: ffff0000de998158 x18: ffff800011a7bce0
[  773.225797][  T455] x17: ffff8000181a1000 x16: ffff8000082d1c00 x15: ffff800010a233ec
[  773.227978][  T455] x14: ffff80000d4f3814 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100
[  773.230138][  T455] x11: ff0080000aa23d44 x10: 0000000000000000 x9 : ffff80000aa23d44
[  773.232278][  T455] x8 : ffff0000cac19bc0 x7 : 0000000000000000 x6 : 000000000000003f
[  773.234496][  T455] x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000004
[  773.236693][  T455] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff800021797180
[  773.238844][  T455] Call trace:
[  773.239687][  T455]  ref_tracker_alloc+0x230/0x3cc
[  773.241041][  T455]  nf_nat_masq_schedule+0x328/0x54c
[  773.242490][  T455]  masq_device_event+0x9c/0xe0
[  773.243755][  T455]  raw_notifier_call_chain+0xd4/0x164
[  773.245268][  T455]  dev_close_many+0x2cc/0x440
[  773.246510][  T455]  unregister_netdevice_many+0x3c4/0x1740
[  773.248033][  T455]  unregister_netdevice_queue+0x2ac/0x2f8
[  773.249528][  T455]  nsim_destroy+0x58/0x164
[  773.250686][  T455]  __nsim_dev_port_del+0x144/0x1a4
[  773.252113][  T455]  nsim_dev_reload_destroy+0x240/0x43c
[  773.253646][  T455]  nsim_dev_reload_down+0x9c/0xd4
[  773.255031][  T455]  devlink_reload+0x1b4/0x570
[  773.256300][  T455]  devlink_pernet_pre_exit+0x118/0x2a8
[  773.257820][  T455]  cleanup_net+0x470/0xa74
[  773.258989][  T455]  process_one_work+0x7f4/0x13a8
[  773.260354][  T455]  worker_thread+0x8c8/0xfbc
[  773.261568][  T455]  kthread+0x250/0x2d8
[  773.262712][  T455]  ret_from_fork+0x10/0x20
[  773.263920][  T455] irq event stamp: 4154272
[  773.265149][  T455] hardirqs last  enabled at (4154271): [<ffff800011a07d24>] _raw_spin_unlock_irqrestore+0x48/0xac
[  773.268088][  T455] hardirqs last disabled at (4154272): [<ffff80001191c930>] el1_dbg+0x24/0x80
[  773.270452][  T455] softirqs last  enabled at (4154262): [<ffff8000081a8e70>] handle_softirqs+0xaf8/0xc6c
[  773.273285][  T455] softirqs last disabled at (4153953): [<ffff800008020164>] __do_softirq+0x14/0x20
[  773.275863][  T455] ---[ end trace 0000000000000000 ]---
[  773.294911][ T9971] ------------[ cut here ]------------
[  773.296640][ T9971] WARNING: CPU: 1 PID: 9971 at lib/ref_tracker.c:110 ref_tracker_free+0x484/0x694
[  773.299095][ T9971] Modules linked in:
[  773.300117][ T9971] CPU: 1 PID: 9971 Comm: kworker/1:2 Tainted: G        W          6.1.141-syzkaller #0
[  773.302643][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  773.305310][ T9971] Workqueue: events iterate_cleanup_work
[  773.306834][ T9971] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  773.309076][ T9971] pc : ref_tracker_free+0x484/0x694
[  773.310504][ T9971] lr : ref_tracker_free+0x484/0x694
[  773.311943][ T9971] sp : ffff800021257940
[  773.313085][ T9971] x29: ffff800021257a40 x28: ffff00019f750800 x27: ffff0000c3a47300
[  773.315162][ T9971] x26: dfff800000000000 x25: ffff70000424af2c x24: ffff800021257aa0
[  773.317502][ T9971] x23: ffff70000424af54 x22: ffff800021257960 x21: ffff0000de9981a4
[  773.319705][ T9971] x20: ffff0000c3a47350 x19: ffff0000de998158 x18: ffff800011a7bce0
[  773.321936][ T9971] x17: ffff80018a773000 x16: ffff8000082d0750 x15: ffff800017c81fc0
[  773.324252][ T9971] x14: 00000000ffff8000 x13: 000000000417e5d5 x12: 0000000000ff0100
[  773.326438][ T9971] x11: ff0080000aa2441c x10: 0000000000000000 x9 : ffff80000aa2441c
[  773.328637][ T9971] x8 : ffff0000c9931bc0 x7 : 0000000000000000 x6 : 000000000000003f
[  773.330803][ T9971] x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000004
[  773.332989][ T9971] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff800021257980
[  773.335250][ T9971] Call trace:
[  773.336156][ T9971]  ref_tracker_free+0x484/0x694
[  773.337513][ T9971]  iterate_cleanup_work+0xe8/0x230
[  773.338998][ T9971]  process_one_work+0x7f4/0x13a8
[  773.340424][ T9971]  worker_thread+0x8c8/0xfbc
[  773.341662][ T9971]  kthread+0x250/0x2d8
[  773.342804][ T9971]  ret_from_fork+0x10/0x20
[  773.344030][ T9971] irq event stamp: 169002
[  773.345202][ T9971] hardirqs last  enabled at (169001): [<ffff8000081a8044>] __local_bh_enable_ip+0x1f8/0x380
[  773.347902][ T9971] hardirqs last disabled at (169002): [<ffff80001191c930>] el1_dbg+0x24/0x80
[  773.350375][ T9971] softirqs last  enabled at (169000): [<ffff8000081a8e70>] handle_softirqs+0xaf8/0xc6c
[  773.353001][ T9971] softirqs last disabled at (168923): [<ffff800008020164>] __do_softirq+0x14/0x20
[  773.355495][ T9971] ---[ end trace 0000000000000000 ]---
[  773.442314][  T455] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.612519][  T455] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.786727][  T455] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.908187][  T455] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.155240][  T455] tipc: Disabling bearer <udp:syz2>
[  774.156932][  T455] tipc: Left network mode
[  776.209915][  T455] device hsr_slave_0 left promiscuous mode
[  776.254822][  T455] device hsr_slave_1 left promiscuous mode
[  776.334673][  T455] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  776.336942][  T455] batman_adv: batadv0: Removing interface: batadv_slave_0
[  776.339833][  T455] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  776.341924][  T455] batman_adv: batadv0: Removing interface: batadv_slave_1
[  776.344410][  T455] device bridge_slave_1 left promiscuous mode
[  776.346459][  T455] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.405474][  T455] device bridge_slave_0 left promiscuous mode
[  776.407217][  T455] bridge0: port 1(bridge_slave_0) entered disabled state
[  776.574813][  T455] device veth1_macvtap left promiscuous mode
[  776.576534][  T455] device veth0_macvtap left promiscuous mode
[  776.578294][  T455] device veth1_vlan left promiscuous mode
[  776.580002][  T455] device veth0_vlan left promiscuous mode
[  779.349083][  T455] team0 (unregistering): Port device team_slave_1 removed
[  779.556372][  T455] team0 (unregistering): Port device team_slave_0 removed