last executing test programs:

19m11.481316695s ago: executing program 1 (id=320):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/firmware/timeout\x00', 0x1, 0x0)

19m10.925842335s ago: executing program 1 (id=321):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setuid(0xee01)
ioctl$sock_netdev_private(r0, 0x894c, 0x0)

19m8.24317914s ago: executing program 1 (id=323):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

19m7.15558351s ago: executing program 1 (id=326):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000019100)={0x0, 0x4, 0x3, 0x69})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000019080)={'syz', 0x3}, &(0x7f00000190c0)='):-+\x00', 0xfffffffffffffffb)
ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000019180))
socket(0x2, 0xa, 0x0)

19m6.97824956s ago: executing program 3 (id=329):
r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4a320)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0)
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1})
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]})

18m59.293216234s ago: executing program 3 (id=332):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0)
ioctl(r3, 0x5458, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/processing/default/bmControls\x00', 0x1, 0x0)
write$P9_RGETATTR(r5, &(0x7f0000000480)={0xa0, 0x19, 0x2, {0x21, {0x0, 0x0, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0x7ff, 0x7, 0x5, 0x4, 0x854a, 0xe, 0x0, 0x5, 0x80000000, 0x7d0, 0x60, 0x4, 0x2, 0x94, 0x3}}, 0xa0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008894)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x3)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0)
write$P9_RFLUSH(r5, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7)

18m59.077853079s ago: executing program 1 (id=335):
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000d00)='krb5\x00', 0x0)

18m58.832768325s ago: executing program 1 (id=337):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4)

18m58.631530795s ago: executing program 3 (id=339):
ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40789440, &(0x7f0000001340)={&(0x7f0000001300)=[{&(0x7f0000000300)="49571ba7f0af605db956c00ab464c153c49afd617cefb4ccd5336d40622e8aa7dc13aa16afeaf9040fbb45911774a085d88badc635805f14bf76ff9fba28c702796e6eeac951ede83089a4a878f3fed89fd288525bc0c5371eef78477e1bdda470de5828c655f12a48442f13a918bb1f3bdce4e843b56b1c3dbc09f9dfb7883a9263ee869c002010a9d21683c37030551093dead7a8c18f374a766e8fafd4d772f0f2c3e41e302d03a28dfb6d00e455aba245b93b9f6f2d1c8108268c8c460d21e623fe6a8e0ad0f7accb6c7826594dfcadc36c959590c08e1ba5b2ecfe65580be9ae501a2d9f9b23299e5bae7075d344bd7afab2a0ce7fa5ee666c900a2262db51809f07e14c88c2d04d5b0cd7763d775c9ebffec6035b68d491534129726d2b0832ee3ae0789d0300693d99723f0e0f926bbd4cf8d40d01d0e46c6682a84363a932340a0d1a3be62f0fdd721eb100d9446d5fb1181068e3f", 0x159}], 0x1, 0xfffffffffffffff3, 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x5})
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fddbdb2500000000", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0xa911}, 0x40000)

18m58.250141685s ago: executing program 3 (id=343):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]})
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]})
ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

18m58.122541128s ago: executing program 3 (id=344):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000019100)={0x0, 0x4, 0x3, 0x69})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000019080)={'syz', 0x3}, &(0x7f00000190c0)='):-+\x00', 0xfffffffffffffffb)
ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000019180))
socket(0x2, 0xa, 0x0)

18m53.614059816s ago: executing program 3 (id=349):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0)
ioctl(r3, 0x5458, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/processing/default/bmControls\x00', 0x1, 0x0)
write$P9_RGETATTR(r5, &(0x7f0000000480)={0xa0, 0x19, 0x2, {0x21, {0x0, 0x0, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0x7ff, 0x7, 0x5, 0x4, 0x854a, 0xe, 0x0, 0x5, 0x80000000, 0x7d0, 0x60, 0x4, 0x2, 0x94, 0x3}}, 0xa0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008894)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x3)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0)
write$P9_RFLUSH(r5, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7)

18m46.28947412s ago: executing program 2 (id=359):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000019100)={0x0, 0x4, 0x3, 0x69})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000019080)={'syz', 0x3}, &(0x7f00000190c0)='):-+\x00', 0xfffffffffffffffb)
ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000019180))
socket(0x2, 0xa, 0x0)

18m44.57575489s ago: executing program 2 (id=362):
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', 0x0, 0x0)

18m43.978784949s ago: executing program 2 (id=365):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

18m43.192825345s ago: executing program 32 (id=337):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4)

18m43.084228732s ago: executing program 2 (id=369):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101280, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYRES64=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x3, 0x5)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000)
r4 = dup2(r2, r3)
mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0)
read(r5, &(0x7f0000000500)=""/1024, 0x400)
openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
openat$fuse(0xffffff9c, &(0x7f0000000340), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x205c)
write$vhost_msg_v2(r4, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/104, 0x68, 0x0, 0x1, 0x2}}, 0x48)
mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\x06\x00[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x2, 0x11b, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2b)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000053d2)
ioctl$UBLK_U_CMD_GET_DEV_INFO(r5, 0x80207502, &(0x7f00000001c0)={0x0, 0xffff, 0x40, &(0x7f0000000040)=@ublk_ctrl_dev_info_existing={0x0, 0x0, 0x0, 0x0, 0x1000, <r6=>0x0}})
ioctl$UBLK_U_CMD_START_DEV(r5, 0xc0207506, &(0x7f0000000240)={r6, 0xffff, 0x0, 0x0, 0xffffffffffffffff})

18m40.844153296s ago: executing program 2 (id=373):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

18m40.44506091s ago: executing program 2 (id=374):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1261}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

18m33.684480638s ago: executing program 33 (id=349):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0)
ioctl(r3, 0x5458, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/processing/default/bmControls\x00', 0x1, 0x0)
write$P9_RGETATTR(r5, &(0x7f0000000480)={0xa0, 0x19, 0x2, {0x21, {0x0, 0x0, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0x7ff, 0x7, 0x5, 0x4, 0x854a, 0xe, 0x0, 0x5, 0x80000000, 0x7d0, 0x60, 0x4, 0x2, 0x94, 0x3}}, 0xa0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008894)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x3)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0)
write$P9_RFLUSH(r5, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7)

18m21.685953863s ago: executing program 34 (id=374):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1261}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

1m47.061711684s ago: executing program 5 (id=1369):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000019100)={0x0, 0x4, 0x3, 0x69})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000019080)={'syz', 0x3}, &(0x7f00000190c0)='):-+\x00', 0xfffffffffffffffb)
ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, 0x0)
socket(0x2, 0xa, 0x0)

1m45.017093472s ago: executing program 5 (id=1375):
modify_ldt$write2(0x11, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
close(0xffffffffffffffff)
syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r5, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x10}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}], 0x3}, 0x20008b88)

1m40.249364455s ago: executing program 5 (id=1378):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101280, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x3, 0x5)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000)
dup2(r1, r2)
mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0)

1m37.636732365s ago: executing program 5 (id=1383):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', &(0x7f0000000080)=""/203, 0xcb)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000002100)='usbip-vudc.0', 0xc)

1m36.883948384s ago: executing program 5 (id=1386):
r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
pread64(r5, &(0x7f0000002240)=""/236, 0xec, 0x4eb)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0xc, [[0x9ef8, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x1], [0x10000, 0x1, 0x0, 0xfffffffe, 0x8001], [0x20000006, 0xba6, 0x100001, 0x0, 0x0, 0x0, 0x100000, 0xffffffff]], '\x00', [{0x0, 0xdc8}, {0xfffffffd}, {0x7, 0x100}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000002, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xa}, {0x8000004, 0x8f96, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x65}], '\x00', 0x1002})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001800010a00200000000000"], 0x14}, 0x1, 0x0, 0x0, 0x200080c1}, 0x0)
r7 = fanotify_init(0x1a, 0x1)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
fanotify_mark(r7, 0x1, 0x1023, r8, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @empty, 0x2000001}, 0x1c)
setsockopt$sock_int(r9, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)

1m33.375239827s ago: executing program 5 (id=1389):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020)

1m17.845856731s ago: executing program 35 (id=1389):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020)

22.758821624s ago: executing program 6 (id=1498):
r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0xd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r5}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f00000003c0), &(0x7f0000000300)=@tcp6=r5, 0x1}, 0x20)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000000))
read$msr(r3, &(0x7f0000000340)=""/102400, 0x19000)
r6 = dup(r0)
r7 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(r7, &(0x7f0000001c00)={&(0x7f0000000280)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f00000017c0)=[{0x10, 0x1, 0x24}], 0x10}, 0x800)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0})
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x64, r11, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x4000)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000019380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000019340)={&(0x7f0000000200)={0x40, r11, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r9, 0x111, 0x4, 0x1, 0x4)
ioctl$KDFONTOP_SET(r8, 0x4b6a, 0x0)

20.547126454s ago: executing program 6 (id=1499):
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000002100)='usbip-vudc.0', 0xc)

17.98572159s ago: executing program 0 (id=1505):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000019100)={0x0, 0x4, 0x3, 0x69})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000019080)={'syz', 0x3}, &(0x7f00000190c0)='):-+\x00', 0xfffffffffffffffb)
ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000019180))
socket(0x2, 0xa, 0x0)

15.427587865s ago: executing program 0 (id=1510):
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f0000138000/0x4000)=nil, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r0, &(0x7f0000000300)=""/172, 0xdc)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0)
getdents(r1, &(0x7f00000001c0)=""/218, 0xda)

14.437680551s ago: executing program 6 (id=1512):
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
prlimit64(r2, 0x6, &(0x7f0000000080)={0x3, 0x209}, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
userfaultfd(0x80001)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, &(0x7f0000000140)=0xc)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

14.427177694s ago: executing program 4 (id=1513):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = timerfd_create(0x0, 0x800)
syz_open_dev$vim2m(0x0, 0x1f7ff6, 0x2)
getsockopt$inet_mptcp_buf(r3, 0x11c, 0x1, &(0x7f0000000100)=""/32, &(0x7f0000000140)=0x20)
r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc})
ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x1f, 0xfffffffffffffffe, 0xe, 0x400, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0)
read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/79, 0x4f)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$inet(0x2, 0x3, 0x5)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000004c0)={0x0, @private, @loopback}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
timerfd_settime(r3, 0x3, &(0x7f0000000200), 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

14.116053044s ago: executing program 7 (id=1514):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101280, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYRES64=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x3, 0x5)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)

10.918914075s ago: executing program 4 (id=1515):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000019100)={0x0, 0x4, 0x3, 0x69})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000019080)={'syz', 0x3}, &(0x7f00000190c0)='):-+\x00', 0xfffffffffffffffb)
ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000019180))
socket(0x2, 0xa, 0x0)

10.822677335s ago: executing program 0 (id=1516):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)}, 0x4}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94)
close(0x3)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

10.820416038s ago: executing program 7 (id=1517):
modify_ldt$write2(0x11, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
close(0xffffffffffffffff)
syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r5, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x10}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}], 0x3}, 0x20008b88)

9.665371282s ago: executing program 6 (id=1518):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x11e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0)
pwrite64(r3, &(0x7f0000000200), 0x0, 0x9)

9.518871417s ago: executing program 4 (id=1519):
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x6, 0x0)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8c)
close(0xffffffffffffffff)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03)

7.108279877s ago: executing program 4 (id=1520):
r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0xd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r5}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f00000003c0), &(0x7f0000000300)=@tcp6=r5, 0x1}, 0x20)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000000))
read$msr(r3, &(0x7f0000000340)=""/102400, 0x19000)
r6 = dup(r0)
r7 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(r7, &(0x7f0000001c00)={&(0x7f0000000280)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f00000017c0)=[{0x10, 0x1, 0x24}], 0x10}, 0x800)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0})
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x64, r11, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x4000)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000019380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000019340)={&(0x7f0000000200)={0x40, r11, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r9, 0x111, 0x4, 0x1, 0x4)
ioctl$KDFONTOP_SET(r8, 0x4b6a, 0x0)

6.987651279s ago: executing program 7 (id=1521):
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000002100)='usbip-vudc.0', 0xc)

6.938767442s ago: executing program 6 (id=1522):
r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0xd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r5, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r6}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f00000003c0), &(0x7f0000000300)=@tcp6=r6, 0x1}, 0x20)
ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000000))
read$msr(r4, &(0x7f0000000340)=""/102400, 0x19000)
r7 = dup(r0)
r8 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(r8, &(0x7f0000001c00)={&(0x7f0000000280)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f00000017c0)=[{0x10, 0x1, 0x24}], 0x10}, 0x800)
ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0})
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x64, r11, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x4000)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000019380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000019340)={&(0x7f0000000200)={0x40, r11, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r9, 0x111, 0x4, 0x1, 0x4)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b6a, 0x0)

6.918988809s ago: executing program 0 (id=1523):
r0 = socket(0xa, 0x5, 0x0)
r1 = dup(r0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x2b, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')
setns(r3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4)
syz_emit_ethernet(0x6a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x20, 0x5c, 0x64, 0x0, 0x6, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "af374149222d486ca7895e9409a659464b39e100", "0e510dd776982e11562021340b296972dfd04230653f5cb2eeb0bcdefce2b91c"}}}}}}, 0x0)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
openat$ptp0(0xffffff9c, &(0x7f00000001c0), 0x414440, 0x0)
socket(0x10, 0x3, 0x0)
mremap(&(0x7f00003af000/0x2000)=nil, 0x2000, 0x0, 0x3, 0x0)
mq_timedsend(r1, &(0x7f0000000140)="c660f7cbfa10b3ad6034235919bc499796d772784e5a33543ea00803cee6ff34610d14551d28ac5ba4eb5f5f7586f3e62f76f97e35130d5fbc7cfc33f536c68c", 0x40, 0xe, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/tracing/events/sched/sched_switch/enable\x00', 0x1, 0x0)
write(r6, &(0x7f0000000500)='0\n\x00', 0x2)

6.010874007s ago: executing program 4 (id=1524):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101280, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYRES64=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x3, 0x5)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000)
r4 = dup2(r2, r3)
mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0)
read(r5, &(0x7f0000000500)=""/1024, 0x400)
openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
openat$fuse(0xffffff9c, &(0x7f0000000340), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x205c)
write$vhost_msg_v2(r4, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/104, 0x68, 0x0, 0x1, 0x2}}, 0x48)
mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\x06\x00[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x2, 0x11b, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2b)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000053d2)
ioctl$UBLK_U_CMD_GET_DEV_INFO(r5, 0x80207502, &(0x7f00000001c0)={0x0, 0xffff, 0x40, &(0x7f0000000040)=@ublk_ctrl_dev_info_existing={0x0, 0x0, 0x0, 0x0, 0x1000, <r6=>0x0}})
ioctl$UBLK_U_CMD_START_DEV(r5, 0xc0207506, &(0x7f0000000240)={r6, 0xffff, 0x0, 0x0, 0xffffffffffffffff})

4.457137074s ago: executing program 6 (id=1525):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]})
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380))
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.375633688s ago: executing program 7 (id=1526):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = timerfd_create(0x0, 0x800)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2)
getsockopt$inet_mptcp_buf(r3, 0x11c, 0x1, 0x0, &(0x7f0000000140))
r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc})
ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x1f, 0xfffffffffffffffe, 0xe, 0x400, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0)
read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/79, 0x4f)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$inet(0x2, 0x3, 0x5)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000004c0)={0x0, @private, @loopback}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
timerfd_settime(r3, 0x3, &(0x7f0000000200), 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

4.109344948s ago: executing program 4 (id=1527):
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
prlimit64(r2, 0x6, &(0x7f0000000080)={0x3, 0x209}, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
userfaultfd(0x80001)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, &(0x7f0000000140)=0xc)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

3.967155538s ago: executing program 0 (id=1528):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000019100)={0x0, 0x4, 0x3, 0x69})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000019080)={'syz', 0x3}, &(0x7f00000190c0)='):-+\x00', 0xfffffffffffffffb)
ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000019180))
socket(0x2, 0xa, 0x0)

2.110996188s ago: executing program 7 (id=1529):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000019100)={0x0, 0x4, 0x3, 0x69})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000019080)={'syz', 0x3}, &(0x7f00000190c0)='):-+\x00', 0xfffffffffffffffb)
ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000019180))
socket(0x2, 0xa, 0x0)

671.117705ms ago: executing program 0 (id=1530):
modify_ldt$write2(0x11, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
close(0xffffffffffffffff)
syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r5, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x10}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}], 0x3}, 0x20008b88)

0s ago: executing program 7 (id=1531):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x3, 0x5)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000)
dup2(r1, r2)
mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

tooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  840.053360][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  840.071130][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  840.082039][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  842.847540][ T5624] Bluetooth: hci1: command tx timeout
[  843.265237][  T811] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  843.732533][   T32] audit: type=1800 audit(1786917004.871:14): pid=10841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.866" name="file0" dev="overlay" ino=1826 res=0 errno=0
[  844.941840][ T5624] Bluetooth: hci1: command tx timeout
[  846.962266][   T32] audit: type=1800 audit(1786917008.101:15): pid=10853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.867" name="file0" dev="overlay" ino=1840 res=0 errno=0
[  847.125765][ T5624] Bluetooth: hci1: command tx timeout
[  849.227601][ T5624] Bluetooth: hci1: command tx timeout
[  849.901541][   T13] hsr_slave_0: left promiscuous mode
[  849.914262][   T13] hsr_slave_1: left promiscuous mode
[  849.924546][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  849.934276][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  849.945979][   T13] hsr_slave_0: left promiscuous mode
[  849.952700][   T13] hsr_slave_1: left promiscuous mode
[  849.960044][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  849.972216][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  850.146079][   T13] team0 (unregistering): Port device team_slave_1 removed
[  850.165006][   T13] team0 (unregistering): Port device team_slave_0 removed
[  850.376392][   T13] team0 (unregistering): Port device team_slave_1 removed
[  850.396012][   T13] team0 (unregistering): Port device team_slave_0 removed
[  850.519889][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13
[  850.744286][T10808] wg2 speed is unknown, defaulting to 1000
[  852.721007][T10869] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  853.071835][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  853.076819][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  853.080182][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  853.104256][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  853.126641][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  855.248796][ T5624] Bluetooth: hci4: command tx timeout
[  855.772550][T10910] overlayfs: overlapping lowerdir path
[  857.327544][ T5624] Bluetooth: hci4: command tx timeout
[  858.739411][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  858.760388][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  858.805857][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  858.870684][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  858.883701][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  859.408071][ T5618] Bluetooth: hci4: command tx timeout
[  859.759473][T10883] wg2 speed is unknown, defaulting to 1000
[  860.570925][T10808] bridge0: port 1(bridge_slave_0) entered blocking state
[  860.571050][T10808] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.571874][T10808] bridge_slave_0: entered allmulticast mode
[  860.574679][T10808] bridge_slave_0: entered promiscuous mode
[  860.690107][T10808] bridge0: port 2(bridge_slave_1) entered blocking state
[  860.690249][T10808] bridge0: port 2(bridge_slave_1) entered disabled state
[  860.691051][T10808] bridge_slave_1: entered allmulticast mode
[  860.708977][T10808] bridge_slave_1: entered promiscuous mode
[  861.011267][ T5618] Bluetooth: hci5: command tx timeout
[  861.489366][ T5618] Bluetooth: hci4: command tx timeout
[  861.883187][T10808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  862.757807][T10808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  863.132399][ T5618] Bluetooth: hci5: command tx timeout
[  864.468548][T10808] team0: Port device team_slave_0 added
[  864.828694][T10808] team0: Port device team_slave_1 added
[  865.167872][ T5624] Bluetooth: hci5: command tx timeout
[  865.894966][T10808] batman_adv: batadv0: Adding interface: batadv_slave_0
[  865.895000][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  865.895040][T10808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  865.897173][T10808] batman_adv: batadv0: Adding interface: batadv_slave_1
[  865.897215][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  865.897775][T10808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  867.259483][ T5624] Bluetooth: hci5: command tx timeout
[  869.010316][T10808] hsr_slave_0: entered promiscuous mode
[  869.067174][T10808] hsr_slave_1: entered promiscuous mode
[  869.136205][T10808] debugfs: 'hsr0' already exists in 'hsr'
[  869.136544][T10808] Cannot create hsr debugfs directory
[  870.129474][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  870.129557][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  872.811760][T10930] wg2 speed is unknown, defaulting to 1000
[  873.690148][T11015] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  875.646012][T11063] binder: 11062:11063 ioctl 4018620d 0 returned -22
[  875.711061][T10883] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.718694][T10883] bridge0: port 1(bridge_slave_0) entered disabled state
[  875.726284][T10883] bridge_slave_0: entered allmulticast mode
[  875.736869][T10883] bridge_slave_0: entered promiscuous mode
[  877.167777][ T8490] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  877.314814][T11065] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  877.344626][T10883] bridge0: port 2(bridge_slave_1) entered blocking state
[  877.344950][T10883] bridge0: port 2(bridge_slave_1) entered disabled state
[  877.345397][T10883] bridge_slave_1: entered allmulticast mode
[  877.351069][T10883] bridge_slave_1: entered promiscuous mode
[  877.559306][T10883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  877.666233][T11079] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  877.675614][T11079] udc usbip-vudc.0: failed to start g1: -19
[  877.683552][T11079] UDC core: g1: couldn't find an available UDC or it's busy
[  877.706253][T10883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  877.848069][T10883] team0: Port device team_slave_0 added
[  877.925512][T10883] team0: Port device team_slave_1 added
[  878.225595][T10883] batman_adv: batadv0: Adding interface: batadv_slave_0
[  878.225633][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  878.225682][T10883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  878.237195][T10883] batman_adv: batadv0: Adding interface: batadv_slave_1
[  878.237222][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  878.240668][T10883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  878.308278][T10930] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.309204][T10930] bridge0: port 1(bridge_slave_0) entered disabled state
[  878.309402][T10930] bridge_slave_0: entered allmulticast mode
[  878.311470][T10930] bridge_slave_0: entered promiscuous mode
[  878.319094][T10930] bridge0: port 2(bridge_slave_1) entered blocking state
[  878.319590][T10930] bridge0: port 2(bridge_slave_1) entered disabled state
[  878.319735][T10930] bridge_slave_1: entered allmulticast mode
[  878.321788][T10930] bridge_slave_1: entered promiscuous mode
[  878.923241][T10883] hsr_slave_0: entered promiscuous mode
[  878.934052][T10883] hsr_slave_1: entered promiscuous mode
[  878.943815][T10883] debugfs: 'hsr0' already exists in 'hsr'
[  878.951744][T10883] Cannot create hsr debugfs directory
[  878.953001][   T13] bridge_slave_1: left allmulticast mode
[  878.953026][   T13] bridge_slave_1: left promiscuous mode
[  878.953250][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  878.990334][   T13] bridge_slave_0: left allmulticast mode
[  878.990393][   T13] bridge_slave_0: left promiscuous mode
[  878.990650][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.041158][   T13] bridge_slave_1: left allmulticast mode
[  879.041203][   T13] bridge_slave_1: left promiscuous mode
[  879.041468][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.067863][   T13] bridge_slave_0: left allmulticast mode
[  879.067920][   T13] bridge_slave_0: left promiscuous mode
[  879.084461][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  883.052654][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  883.084271][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  883.104651][   T13] bond0 (unregistering): Released all slaves
[  886.404026][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  886.437937][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  886.472184][   T13] bond0 (unregistering): Released all slaves
[  886.588438][T11138] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  886.609203][T11138] udc usbip-vudc.0: failed to start g1: -19
[  886.618077][T11138] UDC core: g1: couldn't find an available UDC or it's busy
[  886.948181][T10930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  887.009809][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13
[  887.026242][T10930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  887.198843][T11143] loop0: detected capacity change from 0 to 1024
[  888.663392][T10930] team0: Port device team_slave_0 added
[  888.701909][T11158] binder: BINDER_SET_CONTEXT_MGR already set
[  888.715238][T11158] binder: 11153:11158 ioctl 4018620d 200000000040 returned -16
[  888.748424][T10930] team0: Port device team_slave_1 added
[  889.065407][   T32] audit: type=1800 audit(1786917050.201:16): pid=11162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.911" name="file0" dev="overlay" ino=1981 res=0 errno=0
[  889.218908][T10930] batman_adv: batadv0: Adding interface: batadv_slave_0
[  889.218964][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  889.219013][T10930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  889.440412][T10930] batman_adv: batadv0: Adding interface: batadv_slave_1
[  889.440449][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  889.440500][T10930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  889.478646][T11166] overlayfs: overlapping lowerdir path
[  892.714792][   T13] hsr_slave_0: left promiscuous mode
[  892.732051][   T13] hsr_slave_1: left promiscuous mode
[  892.743338][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  892.751608][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  892.894260][   T13] hsr_slave_0: left promiscuous mode
[  892.918136][   T13] hsr_slave_1: left promiscuous mode
[  892.921031][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  892.954677][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  895.684870][   T13] team0 (unregistering): Port device team_slave_1 removed
[  896.548264][   T32] audit: type=1800 audit(1786917057.671:17): pid=11199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.919" name="file0" dev="overlay" ino=2013 res=0 errno=0
[  896.664071][   T13] team0 (unregistering): Port device team_slave_0 removed
[  897.656699][   T13] team0 (unregistering): Port device team_slave_1 removed
[  897.670749][   T13] team0 (unregistering): Port device team_slave_0 removed
[  897.886302][T10930] hsr_slave_0: entered promiscuous mode
[  897.892598][T10930] hsr_slave_1: entered promiscuous mode
[  899.592683][   T32] audit: type=1800 audit(1786917060.721:18): pid=11217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.920" name="file0" dev="overlay" ino=1993 res=0 errno=0
[  900.082563][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  900.109003][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  900.119512][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  900.132075][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  900.145798][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  902.407067][ T5618] Bluetooth: hci1: command tx timeout
[  903.366212][T11239] loop4: detected capacity change from 0 to 1024
[  904.107091][   T13] bridge_slave_1: left allmulticast mode
[  904.115223][   T13] bridge_slave_1: left promiscuous mode
[  904.158200][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.402777][T11239] ptrace attach of ""[11238] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[11239]
[  904.448330][ T5618] Bluetooth: hci1: command tx timeout
[  904.592250][   T13] bridge_slave_0: left allmulticast mode
[  904.592356][   T13] bridge_slave_0: left promiscuous mode
[  904.593157][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.712394][   T13] bridge_slave_1: left allmulticast mode
[  904.712455][   T13] bridge_slave_1: left promiscuous mode
[  904.713071][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.749027][   T13] bridge_slave_0: left allmulticast mode
[  904.749082][   T13] bridge_slave_0: left promiscuous mode
[  904.749619][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.527363][ T5618] Bluetooth: hci1: command tx timeout
[  907.760004][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  908.299821][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  908.607412][ T5618] Bluetooth: hci1: command tx timeout
[  908.629273][   T13] bond0 (unregistering): Released all slaves
[  909.179924][ T6608] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  910.570075][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  910.605549][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  910.625795][   T13] bond0 (unregistering): Released all slaves
[  912.740167][T10930] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  912.771492][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  912.803485][T10930] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  912.832024][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  912.834118][T11225] wg2 speed is unknown, defaulting to 1000
[  912.839737][T10930] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  912.875027][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  912.883817][T10930] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  912.895311][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  913.335559][T10930] 8021q: adding VLAN 0 to HW filter on device bond0
[  913.413259][T10930] 8021q: adding VLAN 0 to HW filter on device team0
[  913.449700][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  913.450045][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  913.507183][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state
[  913.507377][ T6221] bridge0: port 2(bridge_slave_1) entered forwarding state
[  913.532724][ T5618] Bluetooth: hci3: unexpected event for opcode 0x203d
[  913.573102][T11307] overlayfs: missing 'workdir'
[  913.595683][T11307] CacheFiles: Empty directory specified
[  913.615542][T11307] CacheFiles: No cache directory specified
[  913.935551][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  913.948001][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  913.955832][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  913.964663][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  913.966715][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  914.953084][   T32] audit: type=1800 audit(1786917076.081:19): pid=11318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.934" name="file0" dev="overlay" ino=2063 res=0 errno=0
[  915.246822][T11324] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  915.279964][   T13] hsr_slave_0: left promiscuous mode
[  915.285577][   T13] hsr_slave_1: left promiscuous mode
[  915.289592][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  915.301889][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  915.320989][   T13] hsr_slave_0: left promiscuous mode
[  915.326563][   T13] hsr_slave_1: left promiscuous mode
[  915.332773][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  915.334719][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  916.047772][ T5624] Bluetooth: hci2: command tx timeout
[  916.078276][T11335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'.
[  916.284466][   T13] team0 (unregistering): Port device team_slave_1 removed
[  916.302532][   T13] team0 (unregistering): Port device team_slave_0 removed
[  916.554414][   T13] team0 (unregistering): Port device team_slave_1 removed
[  916.575398][   T13] team0 (unregistering): Port device team_slave_0 removed
[  916.723125][T11335] veth0: entered promiscuous mode
[  917.473609][T11352] 0x000000000007-0x000000020000 : ""
[  917.680670][T11352] ftl_cs: FTL header corrupt!
[  918.127503][ T5624] Bluetooth: hci2: command tx timeout
[  918.932128][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  918.942011][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  918.951703][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  918.962345][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  918.976004][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  919.126936][T11225] bridge0: port 1(bridge_slave_0) entered blocking state
[  919.136066][T11225] bridge0: port 1(bridge_slave_0) entered disabled state
[  919.143568][T11225] bridge_slave_0: entered allmulticast mode
[  919.168424][T11225] bridge_slave_0: entered promiscuous mode
[  919.210658][T11225] bridge0: port 2(bridge_slave_1) entered blocking state
[  919.218158][T11225] bridge0: port 2(bridge_slave_1) entered disabled state
[  919.225509][T11225] bridge_slave_1: entered allmulticast mode
[  919.235349][T11225] bridge_slave_1: entered promiscuous mode
[  919.379151][T11225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  919.400456][T11225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  919.420774][T11314] wg2 speed is unknown, defaulting to 1000
[  920.207503][ T5618] Bluetooth: hci2: command tx timeout
[  921.148369][   T32] audit: type=1800 audit(1786917082.271:20): pid=11381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.944" name="file0" dev="overlay" ino=2097 res=0 errno=0
[  921.149194][ T5618] Bluetooth: hci4: command tx timeout
[  922.299388][ T5618] Bluetooth: hci2: command tx timeout
[  922.654632][T11225] team0: Port device team_slave_0 added
[  922.738175][T11225] team0: Port device team_slave_1 added
[  923.171198][ T5618] Bluetooth: hci4: command tx timeout
[  924.785859][T11225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  924.793474][T11225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  924.820720][T11225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  924.844169][T11225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  924.844208][T11225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  924.844256][T11225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  925.045212][T11225] hsr_slave_0: entered promiscuous mode
[  925.052195][T11225] hsr_slave_1: entered promiscuous mode
[  925.056574][T11225] debugfs: 'hsr0' already exists in 'hsr'
[  925.056652][T11225] Cannot create hsr debugfs directory
[  925.247773][ T5618] Bluetooth: hci4: command tx timeout
[  925.528268][T11401] Set syz0 is full, maxelem 0 reached
[  925.761507][T11358] wg2 speed is unknown, defaulting to 1000
[  927.328989][ T5618] Bluetooth: hci4: command tx timeout
[  931.644521][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  931.651405][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  932.599759][T11225] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  932.630079][T11225] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  932.636151][T11225] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  932.673051][T11225] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  932.837794][T11314] bridge0: port 1(bridge_slave_0) entered blocking state
[  932.877673][T11314] bridge0: port 1(bridge_slave_0) entered disabled state
[  932.878085][T11314] bridge_slave_0: entered allmulticast mode
[  932.899570][T11314] bridge_slave_0: entered promiscuous mode
[  933.734765][T11314] bridge0: port 2(bridge_slave_1) entered blocking state
[  933.735803][T11314] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.751162][T11314] bridge_slave_1: entered allmulticast mode
[  933.910373][T11314] bridge_slave_1: entered promiscuous mode
[  934.006690][T11225] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  935.288865][T11225] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  935.406645][T11225] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  935.573996][T11225] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  936.480793][T11314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  936.568582][T11314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  936.682021][   T32] audit: type=1800 audit(1786917097.821:21): pid=11484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.963" name="file0" dev="overlay" ino=2125 res=0 errno=0
[  936.728257][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13
[  936.739236][T11314] team0: Port device team_slave_0 added
[  936.764078][T11314] team0: Port device team_slave_1 added
[  937.139649][T11314] batman_adv: batadv0: Adding interface: batadv_slave_0
[  937.139700][T11314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  937.139738][T11314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  937.159013][T11314] batman_adv: batadv0: Adding interface: batadv_slave_1
[  937.159066][T11314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  937.159145][T11314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  937.431628][T11503] overlayfs: overlapping lowerdir path
[  941.180609][ T6840] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  941.262401][T11314] hsr_slave_0: entered promiscuous mode
[  941.271672][T11314] hsr_slave_1: entered promiscuous mode
[  941.286395][T11314] debugfs: 'hsr0' already exists in 'hsr'
[  941.286446][T11314] Cannot create hsr debugfs directory
[  942.984552][T11358] bridge0: port 1(bridge_slave_0) entered blocking state
[  942.985081][T11358] bridge0: port 1(bridge_slave_0) entered disabled state
[  942.985520][T11358] bridge_slave_0: entered allmulticast mode
[  943.018961][T11358] bridge_slave_0: entered promiscuous mode
[  943.129484][T11358] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.129935][T11358] bridge0: port 2(bridge_slave_1) entered disabled state
[  943.130367][T11358] bridge_slave_1: entered allmulticast mode
[  943.152597][T11358] bridge_slave_1: entered promiscuous mode
[  943.399281][T11225] 8021q: adding VLAN 0 to HW filter on device bond0
[  943.587173][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14
[  944.609616][T11358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  944.620857][   T32] audit: type=1800 audit(1786917105.761:22): pid=11558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.972" name="file0" dev="overlay" ino=2156 res=0 errno=0
[  945.625185][T11358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  945.662028][   T13] bridge_slave_1: left allmulticast mode
[  945.662080][   T13] bridge_slave_1: left promiscuous mode
[  945.662769][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  945.720995][   T13] bridge_slave_0: left allmulticast mode
[  945.721065][   T13] bridge_slave_0: left promiscuous mode
[  945.733875][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  945.789082][   T13] bridge_slave_1: left allmulticast mode
[  945.789142][   T13] bridge_slave_1: left promiscuous mode
[  945.789699][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  945.890929][   T13] bridge_slave_0: left allmulticast mode
[  945.891303][   T13] bridge_slave_0: left promiscuous mode
[  945.895985][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  949.533724][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  949.700438][   T32] audit: type=1800 audit(1786917110.781:23): pid=11591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.978" name="file0" dev="overlay" ino=2181 res=0 errno=0
[  951.275351][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  951.349444][   T13] bond0 (unregistering): Released all slaves
[  952.138385][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  952.355439][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  952.461162][   T13] bond0 (unregistering): Released all slaves
[  952.710739][T11358] team0: Port device team_slave_0 added
[  952.765032][T11358] team0: Port device team_slave_1 added
[  952.787590][T11225] 8021q: adding VLAN 0 to HW filter on device team0
[  952.858984][T11606] overlayfs: overlapping lowerdir path
[  952.890525][ T3361] bridge0: port 1(bridge_slave_0) entered blocking state
[  952.890682][ T3361] bridge0: port 1(bridge_slave_0) entered forwarding state
[  954.160782][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  954.160902][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  954.164560][T11358] batman_adv: batadv0: Adding interface: batadv_slave_0
[  954.164603][T11358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  954.164685][T11358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  954.205872][T11358] batman_adv: batadv0: Adding interface: batadv_slave_1
[  954.205930][T11358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  954.206063][T11358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  954.861344][T11358] hsr_slave_0: entered promiscuous mode
[  954.872742][T11358] hsr_slave_1: entered promiscuous mode
[  954.882658][T11358] debugfs: 'hsr0' already exists in 'hsr'
[  954.882708][T11358] Cannot create hsr debugfs directory
[  955.088772][   T13] hsr_slave_0: left promiscuous mode
[  955.096956][   T13] hsr_slave_1: left promiscuous mode
[  955.104822][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  955.113751][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  955.161048][   T13] hsr_slave_0: left promiscuous mode
[  955.176060][   T13] hsr_slave_1: left promiscuous mode
[  955.185491][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  955.196496][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  958.296892][   T13] team0 (unregistering): Port device team_slave_1 removed
[  958.504130][   T13] team0 (unregistering): Port device team_slave_0 removed
[  962.796246][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  962.813025][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  962.831319][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  962.860404][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  962.888938][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  964.192120][   T13] team0 (unregistering): Port device team_slave_1 removed
[  964.232911][   T13] team0 (unregistering): Port device team_slave_0 removed
[  965.167404][ T5618] Bluetooth: hci5: command tx timeout
[  966.530372][T11668] overlayfs: overlapping lowerdir path
[  966.539370][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15
[  967.247404][ T5618] Bluetooth: hci5: command tx timeout
[  968.388214][   T32] audit: type=1800 audit(1786917129.531:24): pid=11685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.993" name="file0" dev="overlay" ino=2245 res=0 errno=0
[  969.335276][ T5618] Bluetooth: hci5: command tx timeout
[  970.320571][T11648] wg2 speed is unknown, defaulting to 1000
[  970.367801][T11314] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  970.409192][T11314] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  970.424334][T11314] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  971.407428][ T5618] Bluetooth: hci5: command tx timeout
[  973.180570][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  973.381552][T11314] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  973.389645][T11314] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  973.461312][T11314] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  973.475888][T11314] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  973.500336][T11314] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  977.156290][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  977.173955][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  977.183989][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  977.196013][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  977.205709][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  978.593326][   T13] bridge_slave_1: left allmulticast mode
[  978.593375][   T13] bridge_slave_1: left promiscuous mode
[  978.593630][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  978.629621][   T13] bridge_slave_0: left allmulticast mode
[  978.635460][   T13] bridge_slave_0: left promiscuous mode
[  978.642180][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  978.874103][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  978.892897][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  978.909192][   T13] bond0 (unregistering): Released all slaves
[  979.170144][T11763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  979.190746][T11763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  979.202154][T11763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  979.213758][T11763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  979.223059][T11763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  979.331020][T11763] Bluetooth: hci1: command tx timeout
[  980.876094][T11731] wg2 speed is unknown, defaulting to 1000
[  980.902574][   T32] audit: type=1800 audit(1786917142.041:25): pid=11775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1003" name="file0" dev="overlay" ino=2270 res=0 errno=0
[  981.375429][T11763] Bluetooth: hci2: command tx timeout
[  981.417399][T11763] Bluetooth: hci1: command tx timeout
[  983.407688][T11763] Bluetooth: hci2: command tx timeout
[  983.530928][T11763] Bluetooth: hci1: command tx timeout
[  983.815504][T11648] bridge0: port 1(bridge_slave_0) entered blocking state
[  983.816778][T11648] bridge0: port 1(bridge_slave_0) entered disabled state
[  983.832541][T11648] bridge_slave_0: entered allmulticast mode
[  984.063017][T11648] bridge_slave_0: entered promiscuous mode
[  984.337976][T11648] bridge0: port 2(bridge_slave_1) entered blocking state
[  984.339182][T11648] bridge0: port 2(bridge_slave_1) entered disabled state
[  984.402757][T11648] bridge_slave_1: entered allmulticast mode
[  984.540203][T11648] bridge_slave_1: entered promiscuous mode
[  985.070449][T11827] 9pnet_virtio: no channels available for device syz
[  985.113419][T11648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  985.144611][T11648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  985.487516][T11763] Bluetooth: hci2: command tx timeout
[  985.567575][T11763] Bluetooth: hci1: command tx timeout
[  986.471974][T11648] team0: Port device team_slave_0 added
[  986.634987][T11648] team0: Port device team_slave_1 added
[  986.948079][T11761] wg2 speed is unknown, defaulting to 1000
[  986.992345][T11849] Set syz0 is full, maxelem 0 reached
[  987.010555][   T13] hsr_slave_0: left promiscuous mode
[  987.020480][   T13] hsr_slave_1: left promiscuous mode
[  987.028515][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  987.081384][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  987.607698][T11763] Bluetooth: hci2: command tx timeout
[  991.302890][T11871] loop0: detected capacity change from 0 to 1024
[  991.372329][T11871] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[11872] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[11871]
[  991.676399][   T13] team0 (unregistering): Port device team_slave_1 removed
[  991.732957][   T13] team0 (unregistering): Port device team_slave_0 removed
[  991.759787][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'.
[  991.820248][   T32] audit: type=1800 audit(1786917152.961:26): pid=11876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1014" name="bmControls" dev="configfs" ino=36299 res=0 errno=0
[  991.881989][T11879] openvswitch: netlink: IP tunnel dst address not specified
[  991.984756][T11648] batman_adv: batadv0: Adding interface: batadv_slave_0
[  991.984799][T11648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  991.986107][T11648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  992.054279][T11874] veth0: left allmulticast mode
[  993.415505][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  993.417500][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  998.463919][T11648] batman_adv: batadv0: Adding interface: batadv_slave_1
[  998.463971][T11648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  998.465654][T11648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  998.549917][T11879] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1014'.
[  998.881228][T11648] hsr_slave_0: entered promiscuous mode
[  998.883822][T11648] hsr_slave_1: entered promiscuous mode
[  999.108579][   T32] audit: type=1800 audit(1786917160.251:27): pid=11903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1017" name="bmControls" dev="configfs" ino=36374 res=0 errno=0
[  999.140689][T11903] openvswitch: netlink: IP tunnel dst address not specified
[ 1000.049530][T11912] overlayfs: overlapping lowerdir path
[ 1000.429725][T11921] Set syz0 is full, maxelem 0 reached
[ 1001.763545][T11731] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1001.768316][T11731] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1001.768788][T11731] bridge_slave_0: entered allmulticast mode
[ 1001.825338][T11731] bridge_slave_0: entered promiscuous mode
[ 1004.407191][T11731] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1004.407314][T11731] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1004.407492][T11731] bridge_slave_1: entered allmulticast mode
[ 1004.432628][T11731] bridge_slave_1: entered promiscuous mode
[ 1004.555729][T11941] loop0: detected capacity change from 0 to 1024
[ 1004.663851][T11941] ptrace attach of ""[11943] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[11941]
[ 1005.168909][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1009.714304][T11963] 9pnet_virtio: no channels available for device syz
[ 1009.871430][   T32] audit: type=1800 audit(1786917171.011:28): pid=11970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1023" name="bmControls" dev="configfs" ino=36525 res=0 errno=0
[ 1009.920646][T11731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1009.955899][T11971] openvswitch: netlink: IP tunnel dst address not specified
[ 1010.109044][T11761] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1010.109347][T11761] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1010.109737][T11761] bridge_slave_0: entered allmulticast mode
[ 1010.139719][T11761] bridge_slave_0: entered promiscuous mode
[ 1010.166364][T11731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1010.422940][   T32] audit: type=1800 audit(1786917171.561:29): pid=11975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1024" name="file0" dev="overlay" ino=2358 res=0 errno=0
[ 1013.120425][T11970] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1023'.
[ 1013.132446][T11761] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1013.132744][T11761] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1013.133170][T11761] bridge_slave_1: entered allmulticast mode
[ 1013.146041][T11761] bridge_slave_1: entered promiscuous mode
[ 1013.329420][   T32] audit: type=1800 audit(1786917174.461:30): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1025" name="file0" dev="overlay" ino=2372 res=0 errno=0
[ 1013.398215][T11731] team0: Port device team_slave_0 added
[ 1013.421907][T11761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1013.436783][T11761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1013.458231][T11731] team0: Port device team_slave_1 added
[ 1013.594668][T11761] team0: Port device team_slave_0 added
[ 1013.609405][T11761] team0: Port device team_slave_1 added
[ 1013.648728][T11761] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1013.655914][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1013.684815][T11761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1013.701220][T11761] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1013.709950][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1013.741776][T11761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1013.806785][T11761] hsr_slave_0: entered promiscuous mode
[ 1013.815029][T11761] hsr_slave_1: entered promiscuous mode
[ 1013.823327][T11761] debugfs: 'hsr0' already exists in 'hsr'
[ 1013.830017][T11761] Cannot create hsr debugfs directory
[ 1014.558527][T11982] Set syz0 is full, maxelem 0 reached
[ 1014.621074][T11983] overlayfs: overlapping lowerdir path
[ 1014.690108][T11731] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1014.697663][T11731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1014.698691][T11731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1014.712111][T11731] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1014.712150][T11731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1014.712223][T11731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1015.179724][T11731] hsr_slave_0: entered promiscuous mode
[ 1015.188831][T11731] hsr_slave_1: entered promiscuous mode
[ 1015.196437][T11731] debugfs: 'hsr0' already exists in 'hsr'
[ 1015.196529][T11731] Cannot create hsr debugfs directory
[ 1015.281768][   T13] bridge_slave_1: left allmulticast mode
[ 1015.281828][   T13] bridge_slave_1: left promiscuous mode
[ 1015.282355][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1015.691935][   T13] bridge_slave_0: left allmulticast mode
[ 1015.692037][   T13] bridge_slave_0: left promiscuous mode
[ 1015.712485][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1015.742584][T11994] loop4: detected capacity change from 0 to 1024
[ 1015.829012][   T13] bridge_slave_1: left allmulticast mode
[ 1015.829103][   T13] bridge_slave_1: left promiscuous mode
[ 1015.829881][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1015.850802][   T13] bridge_slave_0: left allmulticast mode
[ 1015.850896][   T13] bridge_slave_0: left promiscuous mode
[ 1015.864430][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1015.936916][T11997] Set syz0 is full, maxelem 0 reached
[ 1019.498212][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1019.551069][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1019.562393][   T13] bond0 (unregistering): Released all slaves
[ 1023.342117][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1023.363418][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1023.374434][   T13] bond0 (unregistering): Released all slaves
[ 1024.462723][T11761] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1024.538127][T11761] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1024.546333][T11761] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1024.593514][T11761] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1024.601814][T11761] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1024.648993][T11761] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1024.753557][T12019] Set syz0 is full, maxelem 0 reached
[ 1026.317666][   T13] hsr_slave_0: left promiscuous mode
[ 1026.414881][   T13] hsr_slave_1: left promiscuous mode
[ 1026.415894][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1026.438251][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1026.524153][   T13] hsr_slave_0: left promiscuous mode
[ 1026.551228][   T13] hsr_slave_1: left promiscuous mode
[ 1026.558141][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1026.679013][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1027.056146][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1027.064545][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1027.074045][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1027.104025][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1027.112990][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1027.714534][T12037] binder: 12036:12037 ioctl 4018620d 0 returned -22
[ 1029.520253][T11763] Bluetooth: hci4: command tx timeout
[ 1030.130637][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'.
[ 1030.153899][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1030.198685][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1031.644259][T11763] Bluetooth: hci4: command tx timeout
[ 1033.647512][T11763] Bluetooth: hci4: command tx timeout
[ 1035.727362][T11763] Bluetooth: hci4: command tx timeout
[ 1038.302145][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1038.331572][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1038.574483][T11761] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1038.596279][T11761] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1038.643698][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1039.362582][T11761] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1039.432630][T11761] 8021q: adding VLAN 0 to HW filter on device team0
[ 1039.490112][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1039.492168][ T7411] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1039.554313][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1039.556138][ T7411] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1039.762884][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1039.821387][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1039.837111][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1039.858141][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1039.870140][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1039.991513][T12031] wg2 speed is unknown, defaulting to 1000
[ 1040.367899][T11891] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1041.301668][T12107] Set syz0 is full, maxelem 0 reached
[ 1041.971814][T11763] Bluetooth: hci5: command tx timeout
[ 1042.275835][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1042.310316][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1042.327467][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1042.342839][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1042.358613][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1043.347942][T12116] binder: 12115:12116 ioctl 4018620d 0 returned -22
[ 1044.050348][ T5618] Bluetooth: hci5: command tx timeout
[ 1044.527691][ T5618] Bluetooth: hci1: command tx timeout
[ 1045.093474][T12127] overlayfs: overlapping lowerdir path
[ 1046.145103][ T5618] Bluetooth: hci5: command tx timeout
[ 1046.609038][ T5618] Bluetooth: hci1: command tx timeout
[ 1048.208408][ T5618] Bluetooth: hci5: command tx timeout
[ 1048.678938][T12086] wg2 speed is unknown, defaulting to 1000
[ 1048.694834][ T5618] Bluetooth: hci1: command tx timeout
[ 1049.772164][   T13] bridge_slave_1: left allmulticast mode
[ 1049.772296][   T13] bridge_slave_1: left promiscuous mode
[ 1049.778695][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1049.810680][   T13] bridge_slave_0: left allmulticast mode
[ 1049.810805][   T13] bridge_slave_0: left promiscuous mode
[ 1049.834304][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1050.767452][ T5618] Bluetooth: hci1: command tx timeout
[ 1054.023606][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1054.460713][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.461062][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.513448][T12179] binder: 12172:12179 ioctl 4018620d 0 returned -22
[ 1055.043280][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1055.217478][   T13] bond0 (unregistering): Released all slaves
[ 1062.358811][T12112] wg2 speed is unknown, defaulting to 1000
[ 1069.227083][   T13] hsr_slave_0: left promiscuous mode
[ 1069.238961][   T13] hsr_slave_1: left promiscuous mode
[ 1069.250866][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1069.263945][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1069.336833][T12220] binder: BINDER_SET_CONTEXT_MGR already set
[ 1069.348566][T12220] binder: 12219:12220 ioctl 4018620d 200000000040 returned -16
[ 1074.491427][ T3361] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1075.867297][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1076.443334][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1076.971361][T12251] 9pnet_virtio: no channels available for device syz
[ 1076.985637][T12031] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1076.994035][T12031] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1077.001726][T12031] bridge_slave_0: entered allmulticast mode
[ 1077.010213][T12031] bridge_slave_0: entered promiscuous mode
[ 1077.045470][T12031] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1077.045648][T12031] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1077.045814][T12031] bridge_slave_1: entered allmulticast mode
[ 1077.068476][T12031] bridge_slave_1: entered promiscuous mode
[ 1077.101729][T12255] Set syz0 is full, maxelem 0 reached
[ 1077.171658][T12031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1077.202771][T12031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1077.358152][T12031] team0: Port device team_slave_0 added
[ 1077.364795][T12031] team0: Port device team_slave_1 added
[ 1077.382161][   T32] audit: type=1800 audit(1786917238.521:31): pid=12264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1067" name="bmControls" dev="configfs" ino=38987 res=0 errno=0
[ 1077.661329][T12268] openvswitch: netlink: IP tunnel dst address not specified
[ 1080.874075][T12274] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1067'.
[ 1080.920404][T12031] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1080.927937][T12031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1080.954856][T12031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1081.156634][T12292] binder: BINDER_SET_CONTEXT_MGR already set
[ 1081.156678][T12292] binder: 12290:12292 ioctl 4018620d 200000000040 returned -16
[ 1081.206130][T12031] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1081.213637][T12031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1081.241152][T12031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1081.296695][   T32] audit: type=1800 audit(1786917242.431:32): pid=12291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1070" name="bmControls" dev="configfs" ino=37826 res=0 errno=0
[ 1081.336828][ T5618] Bluetooth: hci3: unexpected event for opcode 0x203d
[ 1081.349063][T12296] overlayfs: failed to resolve './file1': -2
[ 1081.357882][T12296] CacheFiles: Empty directory specified
[ 1081.358641][T12296] CacheFiles: No cache directory specified
[ 1081.370826][T12294] openvswitch: netlink: IP tunnel dst address not specified
[ 1081.892991][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1083.001080][T12031] hsr_slave_0: entered promiscuous mode
[ 1083.008585][T12031] hsr_slave_1: entered promiscuous mode
[ 1083.105481][T12086] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1083.105696][T12086] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.105848][T12086] bridge_slave_0: entered allmulticast mode
[ 1083.110957][T12086] bridge_slave_0: entered promiscuous mode
[ 1083.120905][T12086] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1083.121013][T12086] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1083.121192][T12086] bridge_slave_1: entered allmulticast mode
[ 1083.127056][T12086] bridge_slave_1: entered promiscuous mode
[ 1083.391960][T12313] overlayfs: overlapping lowerdir path
[ 1083.912882][T12294] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1070'.
[ 1083.946741][T12086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1085.442535][T12086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1086.734011][T12086] team0: Port device team_slave_0 added
[ 1086.780045][T12086] team0: Port device team_slave_1 added
[ 1086.902218][T12086] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1086.902274][T12086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1086.902781][T12086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1086.975160][T12112] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1086.975407][T12112] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1086.975849][T12112] bridge_slave_0: entered allmulticast mode
[ 1086.985893][T12112] bridge_slave_0: entered promiscuous mode
[ 1086.999476][T12086] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1086.999525][T12086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1086.999597][T12086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1087.050766][T12112] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1087.050902][T12112] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1087.051319][T12112] bridge_slave_1: entered allmulticast mode
[ 1087.071528][T12112] bridge_slave_1: entered promiscuous mode
[ 1087.134713][T12112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1087.194368][T12112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1087.274779][T12086] hsr_slave_0: entered promiscuous mode
[ 1087.281817][T12086] hsr_slave_1: entered promiscuous mode
[ 1087.288325][T12086] debugfs: 'hsr0' already exists in 'hsr'
[ 1087.294208][T12086] Cannot create hsr debugfs directory
[ 1087.326859][T12112] team0: Port device team_slave_0 added
[ 1087.370139][T12112] team0: Port device team_slave_1 added
[ 1087.389959][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1087.460842][   T13] bridge_slave_1: left allmulticast mode
[ 1087.460909][   T13] bridge_slave_1: left promiscuous mode
[ 1087.461474][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1087.475804][   T13] bridge_slave_0: left allmulticast mode
[ 1087.475883][   T13] bridge_slave_0: left promiscuous mode
[ 1087.476453][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1087.502809][   T13] bridge_slave_1: left allmulticast mode
[ 1087.502855][   T13] bridge_slave_1: left promiscuous mode
[ 1087.504817][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1087.521749][   T13] bridge_slave_0: left allmulticast mode
[ 1087.527589][   T13] bridge_slave_0: left promiscuous mode
[ 1087.533562][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1087.765950][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1087.803593][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1087.819135][   T13] bond0 (unregistering): Released all slaves
[ 1087.872698][T11763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1087.886574][T11763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1087.891414][T11763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1087.904173][T11763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1087.913206][T11763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1089.651454][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1089.789702][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1089.930252][   T13] bond0 (unregistering): Released all slaves
[ 1089.971170][T11763] Bluetooth: hci2: command tx timeout
[ 1090.504542][T12112] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1090.513240][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1090.513404][T12112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1091.310920][T12112] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1091.321363][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1091.350635][T12112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1092.076961][T11763] Bluetooth: hci2: command tx timeout
[ 1094.137497][T11763] Bluetooth: hci2: command tx timeout
[ 1094.410792][T12385] overlayfs: overlapping lowerdir path
[ 1095.223538][T12112] hsr_slave_0: entered promiscuous mode
[ 1095.230195][T12112] hsr_slave_1: entered promiscuous mode
[ 1095.234543][T12112] debugfs: 'hsr0' already exists in 'hsr'
[ 1095.234593][T12112] Cannot create hsr debugfs directory
[ 1095.539139][T12395] overlayfs: overlapping lowerdir path
[ 1095.972714][   T32] audit: type=1800 audit(1786917257.111:33): pid=12391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1083" name="file0" dev="overlay" ino=2499 res=0 errno=0
[ 1096.207377][T11763] Bluetooth: hci2: command tx timeout
[ 1099.421101][   T13] hsr_slave_0: left promiscuous mode
[ 1099.434652][   T13] hsr_slave_1: left promiscuous mode
[ 1099.445669][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1099.476232][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1099.515643][   T13] hsr_slave_0: left promiscuous mode
[ 1099.524565][   T13] hsr_slave_1: left promiscuous mode
[ 1099.532795][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1099.545437][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1099.699125][T12420] Set syz0 is full, maxelem 0 reached
[ 1099.871010][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1099.896310][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1100.194405][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1100.212414][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1100.359513][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15
[ 1100.441700][T12349] wg2 speed is unknown, defaulting to 1000
[ 1102.706935][T12445] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1103.146028][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1103.165978][T12467] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1103.174323][T12467] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1103.412886][T12469] overlayfs: overlapping lowerdir path
[ 1103.763082][T12467] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1103.775423][T12463] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1103.789975][T12467] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1103.816148][T12463] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1103.929083][T12463] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1103.950292][T12463] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1103.966090][T12463] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1104.312846][   T32] audit: type=1800 audit(1786917265.431:34): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1092" name="file0" dev="overlay" ino=2555 res=0 errno=0
[ 1105.683516][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16
[ 1105.967964][ T5618] Bluetooth: hci4: command tx timeout
[ 1106.059902][ T5618] Bluetooth: hci5: command tx timeout
[ 1106.930936][T11891] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1108.047454][ T5618] Bluetooth: hci4: command tx timeout
[ 1108.127396][ T5618] Bluetooth: hci5: command tx timeout
[ 1109.175303][T12528] overlayfs: overlapping lowerdir path
[ 1110.117520][T12349] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1110.126126][T12349] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1110.136963][T12349] bridge_slave_0: entered allmulticast mode
[ 1110.139223][ T5618] Bluetooth: hci4: command tx timeout
[ 1110.227970][ T5618] Bluetooth: hci5: command tx timeout
[ 1110.244546][T12349] bridge_slave_0: entered promiscuous mode
[ 1110.296790][T12349] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1110.309093][T12349] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1110.318696][T12349] bridge_slave_1: entered allmulticast mode
[ 1110.404557][T12349] bridge_slave_1: entered promiscuous mode
[ 1110.914276][T12349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1110.943676][T12349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1111.001800][T12461] wg2 speed is unknown, defaulting to 1000
[ 1111.064690][T12349] team0: Port device team_slave_0 added
[ 1111.079753][T12349] team0: Port device team_slave_1 added
[ 1111.167019][T12349] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1111.167074][T12349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1111.167122][T12349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1111.224075][T12349] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1111.224123][T12349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1111.224176][T12349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1111.817093][   T32] audit: type=1800 audit(1786917272.951:35): pid=12553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1101" name="file0" dev="overlay" ino=2560 res=0 errno=0
[ 1111.962433][T12349] hsr_slave_0: entered promiscuous mode
[ 1111.971114][T12349] hsr_slave_1: entered promiscuous mode
[ 1111.981771][T12349] debugfs: 'hsr0' already exists in 'hsr'
[ 1111.981819][T12349] Cannot create hsr debugfs directory
[ 1112.207337][ T5618] Bluetooth: hci4: command tx timeout
[ 1112.287461][ T5618] Bluetooth: hci5: command tx timeout
[ 1112.503347][T12460] wg2 speed is unknown, defaulting to 1000
[ 1113.615194][T12581] binder: 12580:12581 ioctl c0306201 0 returned -14
[ 1113.710537][   T13] bridge_slave_1: left allmulticast mode
[ 1113.710592][   T13] bridge_slave_1: left promiscuous mode
[ 1113.711168][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1113.732979][   T13] bridge_slave_0: left allmulticast mode
[ 1113.733034][   T13] bridge_slave_0: left promiscuous mode
[ 1113.733756][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1113.858241][   T13] bridge_slave_1: left allmulticast mode
[ 1113.864213][   T13] bridge_slave_1: left promiscuous mode
[ 1113.878001][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1113.981066][   T13] bridge_slave_0: left allmulticast mode
[ 1113.987112][   T13] bridge_slave_0: left promiscuous mode
[ 1114.002335][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1114.248428][T12596] overlayfs: overlapping lowerdir path
[ 1114.814544][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1114.861578][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1114.882632][   T13] bond0 (unregistering): Released all slaves
[ 1115.020882][T12610] Set syz0 is full, maxelem 0 reached
[ 1115.065695][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1115.094743][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1115.105542][   T13] bond0 (unregistering): Released all slaves
[ 1115.889920][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.890002][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 1120.040867][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'.
[ 1120.328545][T12642] syzkaller0: left allmulticast mode
[ 1120.415887][   T13] hsr_slave_0: left promiscuous mode
[ 1120.425073][   T13] hsr_slave_1: left promiscuous mode
[ 1120.433141][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1120.441073][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1120.459841][   T13] hsr_slave_0: left promiscuous mode
[ 1120.468638][   T13] hsr_slave_1: left promiscuous mode
[ 1120.474364][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1120.482861][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1121.026904][   T32] audit: type=1800 audit(1786917282.161:36): pid=12651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1114" name="file0" dev="overlay" ino=2630 res=0 errno=0
[ 1124.009207][T12666] overlayfs: overlapping lowerdir path
[ 1124.410862][T12667] vivid-000: kernel_thread() failed
[ 1125.712693][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1125.954210][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1127.356707][T12688] Set syz0 is full, maxelem 0 reached
[ 1127.576943][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1127.600172][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1127.953662][T12697] Set syz0 is full, maxelem 0 reached
[ 1130.865590][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'.
[ 1133.810963][T12460] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1133.818627][T12460] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1133.827971][T12460] bridge_slave_0: entered allmulticast mode
[ 1133.836331][T12460] bridge_slave_0: entered promiscuous mode
[ 1133.879502][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'.
[ 1133.919440][T12461] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1133.919941][T12461] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1133.920411][T12461] bridge_slave_0: entered allmulticast mode
[ 1133.925888][T12461] bridge_slave_0: entered promiscuous mode
[ 1133.958957][T12461] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1133.959066][T12461] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1133.960490][T12461] bridge_slave_1: entered allmulticast mode
[ 1133.969156][T12461] bridge_slave_1: entered promiscuous mode
[ 1134.008666][T12460] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1134.016135][T12460] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1134.023891][T12460] bridge_slave_1: entered allmulticast mode
[ 1134.032335][T12460] bridge_slave_1: entered promiscuous mode
[ 1134.065405][T12743] Set syz0 is full, maxelem 0 reached
[ 1134.145064][T12461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1134.162171][T12460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1134.180803][T12461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1134.228170][T12460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1134.265442][T12461] team0: Port device team_slave_0 added
[ 1134.299258][T12461] team0: Port device team_slave_1 added
[ 1134.323697][T12460] team0: Port device team_slave_0 added
[ 1134.344685][   T13] bridge_slave_1: left allmulticast mode
[ 1134.344733][   T13] bridge_slave_1: left promiscuous mode
[ 1134.356369][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1134.365595][   T13] bridge_slave_0: left allmulticast mode
[ 1134.365643][   T13] bridge_slave_0: left promiscuous mode
[ 1134.372269][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1134.466766][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1134.482352][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1134.492918][   T13] bond0 (unregistering): Released all slaves
[ 1134.513839][T12460] team0: Port device team_slave_1 added
[ 1134.544712][T12349] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1134.560240][T12349] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1134.610711][T12460] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1134.610761][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1134.611564][T12460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1134.614053][T12460] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1134.614071][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1134.614377][T12460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1134.793087][T12461] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1134.793131][T12461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1134.793184][T12461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1134.853081][T12349] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1134.860017][T12747] overlayfs: overlapping lowerdir path
[ 1134.874657][T12349] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1134.889687][T12349] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1134.940657][T12349] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1134.992087][T12461] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1135.000716][T12461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1135.000788][T12461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1135.061855][T12349] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1135.077608][T12349] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1135.127787][T12754] Set syz0 is full, maxelem 0 reached
[ 1135.336971][   T13] hsr_slave_0: left promiscuous mode
[ 1135.368548][   T13] hsr_slave_1: left promiscuous mode
[ 1135.390194][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1135.400008][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1135.503094][T12756] overlayfs: overlapping lowerdir path
[ 1135.592049][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1135.620596][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1136.338704][T12460] hsr_slave_0: entered promiscuous mode
[ 1136.345680][T12460] hsr_slave_1: entered promiscuous mode
[ 1136.422786][T12461] hsr_slave_0: entered promiscuous mode
[ 1136.424967][T12461] hsr_slave_1: entered promiscuous mode
[ 1136.428228][T12461] debugfs: 'hsr0' already exists in 'hsr'
[ 1136.428344][T12461] Cannot create hsr debugfs directory
[ 1137.911793][T12785] Set syz0 is full, maxelem 0 reached
[ 1138.185500][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'.
[ 1138.287338][ T8490] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1140.386314][T12349] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1140.499827][T12349] 8021q: adding VLAN 0 to HW filter on device team0
[ 1140.514935][ T8490] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1140.515129][ T8490] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1140.551988][ T8490] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1140.552207][ T8490] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1144.270059][   T32] audit: type=1800 audit(1786917305.411:37): pid=12825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1143" name="bmControls" dev="configfs" ino=42288 res=0 errno=0
[ 1144.402325][T12460] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1144.498552][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1144.507324][T12460] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1144.548545][T12835] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1144.556405][T12835] udc usbip-vudc.0: failed to start g1: -19
[ 1144.557092][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1144.578526][T12835] UDC core: g1: couldn't find an available UDC or it's busy
[ 1144.590100][T12460] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1144.618649][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1144.626263][T12460] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1144.698054][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1145.624484][   T32] audit: type=1800 audit(1786917306.761:38): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1148" name="bmControls" dev="configfs" ino=42368 res=0 errno=0
[ 1146.085102][T12865] openvswitch: netlink: IP tunnel dst address not specified
[ 1146.280570][T12461] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1148.341817][T12461] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1148.404086][T12461] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1148.444577][T12461] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1148.475722][T12461] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1148.542366][T12461] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1148.558603][T12461] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1148.598967][T12461] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1148.757973][T12460] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1148.836152][T12460] 8021q: adding VLAN 0 to HW filter on device team0
[ 1148.913595][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1148.913801][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1148.945378][  T811] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1148.945611][  T811] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1149.152706][T12461] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1149.202906][T12461] 8021q: adding VLAN 0 to HW filter on device team0
[ 1149.220676][T11937] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1149.220833][T11937] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1149.266279][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1149.266506][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1152.463153][T12463] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1152.479829][T12463] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1152.495355][T12463] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1152.506570][T12463] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1152.519785][T12463] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1153.113172][T12460] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1153.859849][T12461] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1154.391270][T12928] wg2 speed is unknown, defaulting to 1000
[ 1154.432906][   T32] audit: type=1800 audit(1786917315.571:39): pid=12971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1153" name="file0" dev="overlay" ino=2702 res=0 errno=0
[ 1154.480579][T12975] Set syz0 is full, maxelem 0 reached
[ 1154.610785][T12463] Bluetooth: hci1: command tx timeout
[ 1154.733970][T12460] veth0_vlan: entered promiscuous mode
[ 1155.306762][T12460] veth1_vlan: entered promiscuous mode
[ 1155.453163][T12210] bridge_slave_1: left allmulticast mode
[ 1155.453209][T12210] bridge_slave_1: left promiscuous mode
[ 1155.453477][T12210] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1155.506864][T12210] bridge_slave_0: left allmulticast mode
[ 1155.506925][T12210] bridge_slave_0: left promiscuous mode
[ 1155.520627][T12210] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1156.700138][T12463] Bluetooth: hci1: command tx timeout
[ 1158.767334][T12463] Bluetooth: hci1: command tx timeout
[ 1159.897944][T12210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1159.940228][T12210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1159.992908][T12210] bond0 (unregistering): Released all slaves
[ 1160.847463][T12463] Bluetooth: hci1: command tx timeout
[ 1161.409607][T12461] veth0_vlan: entered promiscuous mode
[ 1161.491156][T12210] hsr_slave_0: left promiscuous mode
[ 1161.497005][T12210] hsr_slave_1: left promiscuous mode
[ 1161.503833][T12210] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1161.518268][T12210] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1161.791559][T12210] team0 (unregistering): Port device team_slave_1 removed
[ 1161.813054][T12210] team0 (unregistering): Port device team_slave_0 removed
[ 1162.007080][T12461] veth1_vlan: entered promiscuous mode
[ 1162.113637][T12461] veth0_macvtap: entered promiscuous mode
[ 1162.160755][T12461] veth1_macvtap: entered promiscuous mode
[ 1162.232965][T12461] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1162.244908][T12461] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1162.281115][ T3361] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1162.284506][ T3361] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1162.284977][ T3361] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1162.285374][ T3361] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1165.225439][T12928] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1165.225606][T12928] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1165.226124][T12928] bridge_slave_0: entered allmulticast mode
[ 1165.260891][T12928] bridge_slave_0: entered promiscuous mode
[ 1165.284310][T12928] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1165.284537][T12928] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1165.285013][T12928] bridge_slave_1: entered allmulticast mode
[ 1165.316645][T12928] bridge_slave_1: entered promiscuous mode
[ 1165.452571][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1165.466855][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1165.482166][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1165.492705][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1165.500518][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1165.666643][T12928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1165.684375][T12928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1165.975527][T13080] Set syz0 is full, maxelem 0 reached
[ 1165.986905][T12463] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1166.002828][T12463] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1166.015117][T12463] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1166.025658][T12463] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1166.033942][T12463] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1166.081009][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1166.107678][T12928] team0: Port device team_slave_0 added
[ 1166.273202][T12928] team0: Port device team_slave_1 added
[ 1166.755731][T12928] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1166.755762][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1166.755802][T12928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1166.812708][T12928] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1166.812728][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1166.812758][T12928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1167.567917][T12463] Bluetooth: hci2: command tx timeout
[ 1167.833360][T12928] hsr_slave_0: entered promiscuous mode
[ 1167.834462][T12928] hsr_slave_1: entered promiscuous mode
[ 1167.851869][T12928] debugfs: 'hsr0' already exists in 'hsr'
[ 1167.851930][T12928] Cannot create hsr debugfs directory
[ 1168.081736][   T32] audit: type=1800 audit(1786917329.221:40): pid=13109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1167" name="bmControls" dev="configfs" ino=43631 res=0 errno=0
[ 1168.128638][T12463] Bluetooth: hci4: command tx timeout
[ 1168.829269][T13114] openvswitch: netlink: IP tunnel dst address not specified
[ 1169.409623][T13105] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1167'.
[ 1169.536036][T13066] wg2 speed is unknown, defaulting to 1000
[ 1169.606380][T12210] bridge_slave_1: left allmulticast mode
[ 1169.606429][T12210] bridge_slave_1: left promiscuous mode
[ 1169.607093][T12210] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1169.643498][T12210] bridge_slave_0: left allmulticast mode
[ 1169.643556][T12210] bridge_slave_0: left promiscuous mode
[ 1169.646663][T12210] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1169.655409][T12463] Bluetooth: hci2: command tx timeout
[ 1170.235793][T12463] Bluetooth: hci4: command tx timeout
[ 1170.297776][   T27] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1170.544742][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'.
[ 1171.739414][T12463] Bluetooth: hci2: command tx timeout
[ 1172.287494][T12463] Bluetooth: hci4: command tx timeout
[ 1172.947894][T12210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1172.964173][T12210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1172.981784][T12210] bond0 (unregistering): Released all slaves
[ 1173.029929][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1173.273440][T13079] wg2 speed is unknown, defaulting to 1000
[ 1173.350374][T13151] Set syz0 is full, maxelem 0 reached
[ 1173.807817][T12463] Bluetooth: hci2: command tx timeout
[ 1173.912869][T12210] hsr_slave_0: left promiscuous mode
[ 1173.919135][T12210] hsr_slave_1: left promiscuous mode
[ 1173.924894][T12210] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1173.932888][T12210] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1173.958525][T12210] veth1_vlan: left promiscuous mode
[ 1173.959711][T12210] veth0_vlan: left promiscuous mode
[ 1174.367392][T12463] Bluetooth: hci4: command tx timeout
[ 1177.330257][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.330336][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.831517][   T32] audit: type=1800 audit(1786917338.971:41): pid=13183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1178" name="bmControls" dev="configfs" ino=43879 res=0 errno=0
[ 1177.865631][T12210] team0 (unregistering): Port device team_slave_1 removed
[ 1177.885580][T12210] team0 (unregistering): Port device team_slave_0 removed
[ 1177.896365][T13186] openvswitch: netlink: IP tunnel dst address not specified
[ 1179.301402][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15
[ 1179.311547][T13193] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1178'.
[ 1179.585459][   T32] audit: type=1800 audit(1786917340.721:42): pid=13198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1182" name="file0" dev="overlay" ino=2818 res=0 errno=0
[ 1179.750474][T13202] Set syz0 is full, maxelem 0 reached
[ 1183.150318][  T811] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1183.393655][T13241] overlayfs: overlapping lowerdir path
[ 1184.828887][  T811] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1184.849391][   T32] audit: type=1800 audit(1786917345.991:43): pid=13260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1190" name="bmControls" dev="configfs" ino=44267 res=0 errno=0
[ 1184.910679][T13265] openvswitch: netlink: IP tunnel dst address not specified
[ 1185.215837][ T5277] 8021q: adding VLAN 0 to HW filter on device eth17
[ 1185.226469][T13066] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1185.234833][T13066] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1185.243690][T13066] bridge_slave_0: entered allmulticast mode
[ 1185.253829][T13066] bridge_slave_0: entered promiscuous mode
[ 1185.262352][T13260] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1190'.
[ 1185.321087][  T811] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1185.353907][T13066] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1185.354115][T13066] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1185.354278][T13066] bridge_slave_1: entered allmulticast mode
[ 1185.394515][T13066] bridge_slave_1: entered promiscuous mode
[ 1185.404772][T12928] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1185.431204][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1185.473323][T13079] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1185.473663][T13079] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1185.474036][T13079] bridge_slave_0: entered allmulticast mode
[ 1185.489983][T13079] bridge_slave_0: entered promiscuous mode
[ 1185.539392][T13066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1185.542486][T12928] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1185.558916][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1185.561261][T13079] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1185.561753][T13079] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1185.562146][T13079] bridge_slave_1: entered allmulticast mode
[ 1185.576860][T13079] bridge_slave_1: entered promiscuous mode
[ 1185.595490][T13066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1185.607586][T13278] Set syz0 is full, maxelem 0 reached
[ 1185.639819][  T811] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1185.662696][T12928] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1185.674827][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1185.685689][T12928] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1185.694790][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1192'.
[ 1185.706308][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1185.807013][T13079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1185.827951][T13066] team0: Port device team_slave_0 added
[ 1185.850520][T13079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1185.884937][T13066] team0: Port device team_slave_1 added
[ 1185.971061][T13079] team0: Port device team_slave_0 added
[ 1185.984362][T13066] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1185.985707][T13066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1185.985761][T13066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1185.997465][T13066] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1185.997509][T13066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1185.997601][T13066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1186.145097][T13079] team0: Port device team_slave_1 added
[ 1186.241185][T13079] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1186.241523][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1186.241602][T13079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1186.292380][T13079] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1186.292427][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1186.292473][T13079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1186.464559][T13066] hsr_slave_0: entered promiscuous mode
[ 1186.471076][T13066] hsr_slave_1: entered promiscuous mode
[ 1187.657077][T13079] hsr_slave_0: entered promiscuous mode
[ 1187.663683][T13079] hsr_slave_1: entered promiscuous mode
[ 1187.672704][T13079] debugfs: 'hsr0' already exists in 'hsr'
[ 1187.672744][T13079] Cannot create hsr debugfs directory
[ 1187.712110][  T811] bridge_slave_1: left allmulticast mode
[ 1187.712162][  T811] bridge_slave_1: left promiscuous mode
[ 1187.712711][  T811] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1187.735939][  T811] bridge_slave_0: left allmulticast mode
[ 1187.735990][  T811] bridge_slave_0: left promiscuous mode
[ 1187.742093][  T811] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1190.947918][  T811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1190.974267][  T811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1190.990560][  T811] bond0 (unregistering): Released all slaves
[ 1191.086930][ T5277] 8021q: adding VLAN 0 to HW filter on device eth18
[ 1193.461464][   T32] audit: type=1800 audit(1786917354.601:44): pid=13331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1199" name="bmControls" dev="configfs" ino=44401 res=0 errno=0
[ 1193.788529][T13337] Set syz0 is full, maxelem 0 reached
[ 1193.819980][  T811] hsr_slave_0: left promiscuous mode
[ 1193.826887][  T811] hsr_slave_1: left promiscuous mode
[ 1193.833446][  T811] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1193.841228][  T811] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1193.849951][  T811] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1193.859689][  T811] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1193.880901][  T811] veth1_macvtap: left promiscuous mode
[ 1193.886668][  T811] veth0_macvtap: left promiscuous mode
[ 1193.893153][  T811] veth1_vlan: left promiscuous mode
[ 1193.898764][  T811] veth0_vlan: left promiscuous mode
[ 1194.235603][  T811] team0 (unregistering): Port device team_slave_1 removed
[ 1194.271980][  T811] team0 (unregistering): Port device team_slave_0 removed
[ 1194.297828][T13340] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1194.305355][T13340] udc usbip-vudc.0: failed to start g1: -19
[ 1194.313920][T13340] UDC core: g1: couldn't find an available UDC or it's busy
[ 1196.933294][T13360] binder: 13359:13360 ioctl c0306201 0 returned -14
[ 1197.666242][T12928] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1199.245933][T12928] 8021q: adding VLAN 0 to HW filter on device team0
[ 1199.272463][T11891] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1199.272570][T11891] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1199.299608][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1199.299827][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1200.413890][T13402] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1200.414410][T13402] udc usbip-vudc.0: failed to start g1: -19
[ 1200.428207][T13402] UDC core: g1: couldn't find an available UDC or it's busy
[ 1200.816774][T13415] Set syz0 is full, maxelem 0 reached
[ 1200.948182][T13079] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1200.966504][T13079] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1200.975202][T13079] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1200.992210][T13079] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1201.002560][T13079] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1201.021564][T13079] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1201.030145][T13079] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1201.043017][T13079] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1201.057840][T13049] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1201.072481][T12928] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1201.217817][T13049] usb 5-1: Using ep0 maxpacket: 32
[ 1201.221609][T13049] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1201.233086][T13049] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 1201.233132][T13049] usb 5-1: config 0 has no interface number 0
[ 1201.233217][T13049] usb 5-1: config 0 interface 12 has no altsetting 0
[ 1201.261823][T13049] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1201.261876][T13049] usb 5-1: Product: syz
[ 1201.261909][T13049] usb 5-1: Manufacturer: syz
[ 1201.261926][T13049] usb 5-1: SerialNumber: syz
[ 1201.298123][T13049] usb 5-1: config 0 descriptor??
[ 1201.337031][T13066] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1201.356773][T13066] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1201.368007][T13066] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1201.391790][T13066] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1201.406741][T13066] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1201.432238][T13066] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1201.455996][T13066] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1201.471919][T13066] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1201.602005][T13079] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1201.652186][T13079] 8021q: adding VLAN 0 to HW filter on device team0
[ 1201.689753][T11891] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1201.689880][T11891] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1201.726166][T11891] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1201.726402][T11891] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1201.835990][T13066] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1201.884195][   T32] audit: type=1800 audit(1786917363.021:45): pid=13445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1213" name="bmControls" dev="configfs" ino=44941 res=0 errno=0
[ 1201.936486][T13445] openvswitch: netlink: IP tunnel dst address not specified
[ 1201.950490][T13066] 8021q: adding VLAN 0 to HW filter on device team0
[ 1202.022984][   T98] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1202.023211][   T98] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1202.055749][T12928] veth0_vlan: entered promiscuous mode
[ 1202.111111][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1202.111333][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1202.233832][T12928] veth1_vlan: entered promiscuous mode
[ 1202.250397][T13454] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1213'.
[ 1202.288348][   T27] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1202.496906][T12928] veth0_macvtap: entered promiscuous mode
[ 1202.576157][T12928] veth1_macvtap: entered promiscuous mode
[ 1202.782226][T12928] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1202.824302][T12928] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1202.905616][  T811] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1202.911004][T12210] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1202.911168][T12210] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1202.911310][T12210] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1204.112933][T13479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1204.113476][T13479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1204.202673][T13049] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1204.202763][T13049] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[ 1204.202784][T13049] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1204.203102][T13049] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[ 1204.287295][T13049] usb 5-1: USB disconnect, device number 6
[ 1204.393414][T12210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1204.402310][T12210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1204.532429][T13079] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1206.499248][ T6608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1206.499293][ T6608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1207.129241][T13066] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1207.283186][T13515] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1207.290782][T13515] udc usbip-vudc.0: failed to start g1: -19
[ 1207.302486][T13515] UDC core: g1: couldn't find an available UDC or it's busy
[ 1207.542187][T13079] veth0_vlan: entered promiscuous mode
[ 1207.596841][T13079] veth1_vlan: entered promiscuous mode
[ 1207.756774][T13079] veth0_macvtap: entered promiscuous mode
[ 1207.786734][T13079] veth1_macvtap: entered promiscuous mode
[ 1207.898408][T13079] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1207.980485][T13079] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1208.083538][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1208.087529][ T3361] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1208.087651][ T3361] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1208.087746][ T3361] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1208.429622][ T3361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1208.437984][ T3361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1210.081299][T13066] veth0_vlan: entered promiscuous mode
[ 1210.157976][ T3361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1210.158129][ T3361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1210.929827][T13066] veth1_vlan: entered promiscuous mode
[ 1211.011137][T13066] veth0_macvtap: entered promiscuous mode
[ 1211.022890][T13066] veth1_macvtap: entered promiscuous mode
[ 1211.071856][T13066] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1211.094070][T13066] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1211.193792][T11937] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1211.203365][  T811] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1211.203459][  T811] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1211.203528][  T811] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1211.279948][T13554] Set syz0 is full, maxelem 0 reached
[ 1211.353912][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1211.353956][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1211.421749][T13557] loop0: detected capacity change from 0 to 256
[ 1211.422073][ T3361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1211.422124][ T3361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1211.445663][T13557] exfat: Deprecated parameter 'utf8'
[ 1212.448929][T13557] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[ 1213.822022][   T32] audit: type=1800 audit(1786917374.961:46): pid=13575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1224" name="file0" dev="overlay" ino=49 res=0 errno=0
[ 1217.908495][T13602] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1217.917187][T13602] udc usbip-vudc.0: failed to start g1: -19
[ 1217.925055][T13602] UDC core: g1: couldn't find an available UDC or it's busy
[ 1218.461716][T13611] overlayfs: overlapping lowerdir path
[ 1220.885310][T13632] Set syz0 is full, maxelem 0 reached
[ 1224.500039][   T32] audit: type=1800 audit(1786917385.621:47): pid=13625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1234" name="file0" dev="overlay" ino=36 res=0 errno=0
[ 1225.501308][T13662] overlayfs: overlapping lowerdir path
[ 1233.566134][T13696] Set syz0 is full, maxelem 0 reached
[ 1233.733478][T13702] loop6: detected capacity change from 0 to 1024
[ 1233.937095][T13702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1234.509128][T13714] overlayfs: overlapping lowerdir path
[ 1234.912034][T13715] vivid-000: kernel_thread() failed
[ 1234.918216][ T3361] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1237.178556][T13066] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1238.795759][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.802875][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.606746][T13736] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1239.606933][T13736] udc usbip-vudc.0: failed to start g1: -19
[ 1239.607631][T13736] UDC core: g1: couldn't find an available UDC or it's busy
[ 1243.017863][T13778] overlayfs: overlapping lowerdir path
[ 1243.131346][T13774] Set syz0 is full, maxelem 0 reached
[ 1244.024187][T13789] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1244.192333][T13789] udc usbip-vudc.0: failed to start g1: -19
[ 1244.198638][T13789] UDC core: g1: couldn't find an available UDC or it's busy
[ 1250.396433][T13849] Set syz0 is full, maxelem 0 reached
[ 1250.427899][T13848] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1250.453123][T13848] udc usbip-vudc.0: failed to start g1: -19
[ 1250.464821][T13848] UDC core: g1: couldn't find an available UDC or it's busy
[ 1250.735698][T13860] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1250.744213][T13860] udc usbip-vudc.0: failed to start g1: -19
[ 1250.753537][T13860] UDC core: g1: couldn't find an available UDC or it's busy
[ 1250.821249][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1284'.
[ 1251.109063][T13869] binder: 13868:13869 ioctl 4018620d 0 returned -22
[ 1255.301622][T13884] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1255.615861][T13897] loop0: detected capacity change from 0 to 1024
[ 1255.917073][T13910] overlayfs: overlapping lowerdir path
[ 1256.186941][   T32] audit: type=1800 audit(1786917417.321:48): pid=13904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1297" name="file0" dev="overlay" ino=125 res=0 errno=0
[ 1256.214329][T13912] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1256.231485][T13912] udc usbip-vudc.0: failed to start g1: -19
[ 1256.244846][T13912] UDC core: g1: couldn't find an available UDC or it's busy
[ 1256.313478][T13897] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1293'.
[ 1256.788860][T13928] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1256.800695][T13928] udc usbip-vudc.0: failed to start g1: -19
[ 1256.801448][T13928] UDC core: g1: couldn't find an available UDC or it's busy
[ 1256.898540][T13929] Set syz0 is full, maxelem 0 reached
[ 1262.689765][T13972] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1262.699751][T13972] udc usbip-vudc.0: failed to start g1: -19
[ 1262.712215][T13972] UDC core: g1: couldn't find an available UDC or it's busy
[ 1262.773069][T13974] overlayfs: overlapping lowerdir path
[ 1262.779114][ T5717] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1262.936592][T13982] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1262.936874][T13982] udc usbip-vudc.0: failed to start g1: -19
[ 1262.937392][ T5717] usb 5-1: Using ep0 maxpacket: 32
[ 1262.951947][ T5717] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1262.969209][ T5717] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 1262.969243][ T5717] usb 5-1: config 0 has no interface number 0
[ 1262.969288][ T5717] usb 5-1: config 0 interface 12 has no altsetting 0
[ 1262.994301][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1262.994347][ T5717] usb 5-1: Product: syz
[ 1262.994381][ T5717] usb 5-1: Manufacturer: syz
[ 1262.994401][ T5717] usb 5-1: SerialNumber: syz
[ 1263.021040][T13982] UDC core: g1: couldn't find an available UDC or it's busy
[ 1263.039454][ T5717] usb 5-1: config 0 descriptor??
[ 1265.744345][T13998] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[ 1265.924043][T14011] Set syz0 is full, maxelem 0 reached
[ 1266.066963][T14013] overlayfs: failed to resolve './file0': -2
[ 1266.611647][ T5717] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1266.611754][ T5717] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[ 1266.611775][ T5717] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1266.612016][ T5717] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[ 1266.653433][ T5717] usb 5-1: USB disconnect, device number 7
[ 1266.936632][T11937] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1267.507318][T14028] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1267.507565][T14028] udc usbip-vudc.0: failed to start g1: -19
[ 1267.511421][T14028] UDC core: g1: couldn't find an available UDC or it's busy
[ 1267.901129][T14040] overlayfs: overlapping lowerdir path
[ 1268.014737][   T32] audit: type=1800 audit(1786917429.151:49): pid=14032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1325" name="file0" dev="overlay" ino=133 res=0 errno=0
[ 1273.434567][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1331'.
[ 1275.089611][T14083] Set syz0 is full, maxelem 0 reached
[ 1277.007518][T12463] Bluetooth: hci1: command 0x0406 tx timeout
[ 1279.378081][T14093] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1279.386285][T14093] udc usbip-vudc.0: failed to start g1: -19
[ 1279.501425][T14093] UDC core: g1: couldn't find an available UDC or it's busy
[ 1281.168848][T14106] overlayfs: overlapping lowerdir path
[ 1288.970884][T14152] loop0: detected capacity change from 0 to 1024
[ 1289.036034][T14152] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1348'.
[ 1289.195687][T14159] binder: 14158:14159 ioctl 4018620d 0 returned -22
[ 1289.768372][T14164] overlayfs: overlapping lowerdir path
[ 1290.092928][T14168] vivid-000: kernel_thread() failed
[ 1292.441560][T14179] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1292.523395][T14179] udc usbip-vudc.0: failed to start g1: -19
[ 1292.976507][T14179] UDC core: g1: couldn't find an available UDC or it's busy
[ 1293.330468][T12467] Bluetooth: hci4: command 0x0406 tx timeout
[ 1293.330942][T12467] Bluetooth: hci2: command 0x0406 tx timeout
[ 1293.426299][T14186] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[ 1293.450176][T14190] binder: 14189:14190 ioctl c0306201 0 returned -14
[ 1293.760220][T14200] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1293.771647][T14200] udc usbip-vudc.0: failed to start g1: -19
[ 1293.782147][T14200] UDC core: g1: couldn't find an available UDC or it's busy
[ 1293.791334][T14195] 0x000000000007-0x000000020000 : ""
[ 1293.806802][T14195] ftl_cs: FTL header corrupt!
[ 1293.837350][ T5810] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1293.987206][ T5810] usb 8-1: Using ep0 maxpacket: 32
[ 1293.993406][ T5810] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1294.004792][ T5810] usb 8-1: config 0 has an invalid interface number: 12 but max is 0
[ 1294.004838][ T5810] usb 8-1: config 0 has no interface number 0
[ 1294.004918][ T5810] usb 8-1: config 0 interface 12 has no altsetting 0
[ 1294.029607][ T5810] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1294.029638][ T5810] usb 8-1: Product: syz
[ 1294.029654][ T5810] usb 8-1: Manufacturer: syz
[ 1294.029670][ T5810] usb 8-1: SerialNumber: syz
[ 1294.061522][ T5810] usb 8-1: config 0 descriptor??
[ 1295.725872][T14221] binder: 14219:14221 ioctl c0306201 0 returned -14
[ 1297.514303][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1357'.
[ 1297.788580][T14238] Set syz0 is full, maxelem 0 reached
[ 1297.803083][ T5810] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1297.810856][ T5810] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71
[ 1297.818429][ T5810] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1297.826642][ T5810] f81534 8-1:0.12: probe with driver f81534 failed with error -71
[ 1298.155212][ T5810] usb 8-1: USB disconnect, device number 2
[ 1298.188868][T14239] overlayfs: overlapping lowerdir path
[ 1298.304497][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1300.210410][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.210488][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 1303.259920][T14270] loop6: detected capacity change from 0 to 256
[ 1303.261785][T14270] exfat: Deprecated parameter 'utf8'
[ 1303.302348][T14270] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[ 1303.674044][T14278] binder: 14275:14278 ioctl c0306201 0 returned -14
[ 1307.916160][T14303] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1307.916697][T14303] udc usbip-vudc.0: failed to start g1: -19
[ 1307.942524][T14303] UDC core: g1: couldn't find an available UDC or it's busy
[ 1308.017890][T14309] Set syz0 is full, maxelem 0 reached
[ 1308.067025][T14315] Set syz0 is full, maxelem 0 reached
[ 1312.912707][T14346] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1312.936049][T14346] udc usbip-vudc.0: failed to start g1: -19
[ 1312.945748][T14346] UDC core: g1: couldn't find an available UDC or it's busy
[ 1313.446778][T14351] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1313.447583][T14351] udc usbip-vudc.0: failed to start g1: -19
[ 1313.480107][T14351] UDC core: g1: couldn't find an available UDC or it's busy
[ 1317.587786][T14367] Set syz0 is full, maxelem 0 reached
[ 1318.454910][T14383] overlayfs: overlapping lowerdir path
[ 1325.114622][T14425] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1325.114859][T14425] udc usbip-vudc.0: failed to start g1: -19
[ 1325.118437][T14425] UDC core: g1: couldn't find an available UDC or it's busy
[ 1327.364551][   T32] audit: type=1800 audit(1786917488.501:50): pid=14435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1412" name="bmControls" dev="configfs" ino=49893 res=0 errno=0
[ 1327.775394][T14439] overlayfs: overlapping lowerdir path
[ 1327.881665][T12463] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1327.898426][T12463] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1327.910749][T12463] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1327.934236][T12463] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1327.945837][T12463] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1329.968784][T12463] Bluetooth: hci5: command tx timeout
[ 1330.288949][ T6840] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1330.768379][   T32] audit: type=1800 audit(1786917491.911:51): pid=14469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1421" name="bmControls" dev="configfs" ino=50004 res=0 errno=0
[ 1330.844139][T14476] openvswitch: netlink: IP tunnel dst address not specified
[ 1332.047497][T12463] Bluetooth: hci5: command tx timeout
[ 1334.127375][T12463] Bluetooth: hci5: command tx timeout
[ 1334.793703][T14479] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1421'.
[ 1335.442087][ T6840] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1335.682960][T14510] overlayfs: overlapping lowerdir path
[ 1336.207615][ T5618] Bluetooth: hci5: command tx timeout
[ 1340.794151][ T6840] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1341.032689][ T6840] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1341.109560][T14449] wg2 speed is unknown, defaulting to 1000
[ 1341.156460][T14545] Set syz0 is full, maxelem 0 reached
[ 1341.311035][ T6840] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1341.613788][   T32] audit: type=1800 audit(1786917502.721:52): pid=14550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1438" name="bmControls" dev="configfs" ino=51242 res=0 errno=0
[ 1342.430800][T14550] openvswitch: netlink: IP tunnel dst address not specified
[ 1343.267240][T14571] overlayfs: overlapping lowerdir path
[ 1344.498516][ T6840] bridge_slave_1: left allmulticast mode
[ 1344.498571][ T6840] bridge_slave_1: left promiscuous mode
[ 1344.499274][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1344.552206][ T6840] bridge_slave_0: left allmulticast mode
[ 1344.552263][ T6840] bridge_slave_0: left promiscuous mode
[ 1344.552511][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1348.258735][T14612] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1348.575431][ T6840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1348.601957][T14625] Set syz0 is full, maxelem 0 reached
[ 1348.611080][ T6840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1348.622009][ T6840] bond0 (unregistering): Released all slaves
[ 1349.504187][T14642] overlayfs: overlapping lowerdir path
[ 1357.474240][   T32] audit: type=1800 audit(1786917518.611:53): pid=14667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1459" name="file0" dev="overlay" ino=310 res=0 errno=0
[ 1360.425589][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1360.980494][T14682] loop7: detected capacity change from 0 to 1024
[ 1361.093583][T14682] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1361.170812][T14449] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1361.182774][T14449] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1361.183313][T14449] bridge_slave_0: entered allmulticast mode
[ 1361.213978][T13079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1361.276846][T14449] bridge_slave_0: entered promiscuous mode
[ 1361.292473][T14449] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1361.301189][T14449] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1361.301627][T14449] bridge_slave_1: entered allmulticast mode
[ 1361.343356][T14449] bridge_slave_1: entered promiscuous mode
[ 1361.661834][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.661930][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.681769][T14691] loop0: detected capacity change from 0 to 1024
[ 1361.716056][T14449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1361.814693][ T6840] hsr_slave_0: left promiscuous mode
[ 1361.827785][ T6840] hsr_slave_1: left promiscuous mode
[ 1361.835742][ T6840] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1361.840099][ T6840] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1361.843562][T14691] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1466'.
[ 1361.848991][ T6840] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1361.849053][ T6840] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1361.926500][ T6840] veth1_macvtap: left promiscuous mode
[ 1361.926566][ T6840] veth0_macvtap: left promiscuous mode
[ 1361.926690][ T6840] veth1_vlan: left promiscuous mode
[ 1361.926762][ T6840] veth0_vlan: left promiscuous mode
[ 1362.111688][T14702] Set syz0 is full, maxelem 0 reached
[ 1362.930547][ T3361] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1367.305002][T14729] overlayfs: overlapping lowerdir path
[ 1370.719128][T14739] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1373.727775][T14761] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1373.728342][T14761] udc usbip-vudc.0: failed to start g1: -19
[ 1373.765922][T14761] UDC core: g1: couldn't find an available UDC or it's busy
[ 1375.154779][ T6840] team0 (unregistering): Port device team_slave_1 removed
[ 1375.241194][ T6840] team0 (unregistering): Port device team_slave_0 removed
[ 1375.386843][ T5618] Bluetooth: hci3: unexpected event for opcode 0x203d
[ 1375.454125][T14774] overlayfs: missing 'workdir'
[ 1375.486052][T14774] CacheFiles: Empty directory specified
[ 1375.492145][T14774] CacheFiles: No cache directory specified
[ 1375.900757][T14784] overlayfs: overlapping lowerdir path
[ 1376.206398][T14449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1377.867502][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1378.104473][T14449] team0: Port device team_slave_0 added
[ 1378.150302][T14449] team0: Port device team_slave_1 added
[ 1378.247039][T14449] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1378.255657][T14449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1378.282459][T14449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1378.831514][T14449] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1378.831667][T14449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1378.831809][T14449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1380.128911][T14449] hsr_slave_0: entered promiscuous mode
[ 1380.136298][T14449] hsr_slave_1: entered promiscuous mode
[ 1380.143219][T14449] debugfs: 'hsr0' already exists in 'hsr'
[ 1380.150094][T14449] Cannot create hsr debugfs directory
[ 1380.205740][   T32] audit: type=1800 audit(1786917541.341:54): pid=14808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1491" name="file0" dev="overlay" ino=395 res=0 errno=0
[ 1381.702629][T14824] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1381.702872][T14824] udc usbip-vudc.0: failed to start g1: -19
[ 1381.720352][T14824] UDC core: g1: couldn't find an available UDC or it's busy
[ 1382.420282][T14449] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1382.445173][T14449] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1382.462987][T14449] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1382.492491][T14449] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1382.506211][T14449] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1384.402303][T14449] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1384.415851][T14449] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1384.449574][T14449] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1384.706422][T14449] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1384.762189][T14449] 8021q: adding VLAN 0 to HW filter on device team0
[ 1384.782571][T12190] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1384.782842][T12190] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1384.813169][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1384.813522][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1385.278733][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15
[ 1385.421973][T14865] Set syz0 is full, maxelem 0 reached
[ 1385.548827][T14868] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1387.112164][T14892] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[ 1387.112457][T14892] udc usbip-vudc.0: failed to start g1: -19
[ 1387.121601][T14892] UDC core: g1: couldn't find an available UDC or it's busy
[ 1389.213259][T12463] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1389.246783][T12463] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1389.265065][T12463] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1389.278543][T12463] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1389.288053][T12463] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1390.596324][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16
[ 1390.721093][T14934] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1390.936451][T14948] Set syz0 is full, maxelem 0 reached
[ 1391.430525][ T5618] Bluetooth: hci1: command tx timeout
[ 1393.487298][ T5618] Bluetooth: hci1: command tx timeout
[ 1395.252898][ T6608] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1395.569731][ T5618] Bluetooth: hci1: command tx timeout
[ 1397.657177][ T5618] Bluetooth: hci1: command tx timeout
[ 1398.054779][T14916] wg2 speed is unknown, defaulting to 1000
[ 1400.741019][T14994] Set syz0 is full, maxelem 0 reached
[ 1400.843562][T14988] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1405.177208][    C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[ 1405.189282][    C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 1405.197964][    C0] CPU: 0 UID: 0 PID: 15019 Comm: syz.0.1530 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1405.208914][    C0] Tainted: [L]=SOFTLOCKUP
[ 1405.213249][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1405.223310][    C0] RIP: 0010:llc_conn_state_process+0xd13/0x1380
[ 1405.229730][    C0] Code: 4c 89 f7 e8 9f 5b 69 f8 31 c0 84 db 0f 94 c0 4d 8b 36 8d 5c 00 01 b8 01 00 00 00 bd 07 00 00 00 0f 44 e8 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 1a 06 00 00 41 89 1e 43 0f b6 04 2c 84
[ 1405.249439][    C0] RSP: 0018:ffffc90000007bb0 EFLAGS: 00010246
[ 1405.255623][    C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff8880270c0000
[ 1405.263607][    C0] RDX: 8000000000000100 RSI: 0000000000000002 RDI: 0000000000000000
[ 1405.271719][    C0] RBP: 0000000000000007 R08: 0000000000000100 R09: 0000000000000005
[ 1405.279710][    C0] R10: 0000000000000005 R11: 8000000000000100 R12: 1ffff1100aef1e02
[ 1405.287728][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805778f012
[ 1405.295770][    C0] FS:  00007f616c6ec6c0(0000) GS:ffff888124cf8000(0000) knlGS:0000000000000000
[ 1405.304740][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1405.311335][    C0] CR2: 0000200000004000 CR3: 000000007068c000 CR4: 00000000003526f0
[ 1405.319313][    C0] Call Trace:
[ 1405.322668][    C0]  <IRQ>
[ 1405.325544][    C0]  llc_conn_tmr_common_cb+0x34a/0x780
[ 1405.330963][    C0]  call_timer_fn+0x18d/0x5f0
[ 1405.335598][    C0]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[ 1405.341272][    C0]  ? call_timer_fn+0xd5/0x5f0
[ 1405.345959][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1405.351145][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1405.356464][    C0]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[ 1405.362132][    C0]  __run_timer_base+0x652/0x8b0
[ 1405.367071][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 1405.372499][    C0]  ? ktime_get+0x1f5/0x220
[ 1405.376954][    C0]  ? lapic_next_event+0x11/0x20
[ 1405.381869][    C0]  run_timer_softirq+0xb7/0x170
[ 1405.386744][    C0]  handle_softirqs+0x226/0x860
[ 1405.391534][    C0]  ? __irq_exit_rcu+0xcb/0x220
[ 1405.396309][    C0]  __irq_exit_rcu+0xcb/0x220
[ 1405.400905][    C0]  irq_exit_rcu+0x9/0x30
[ 1405.405158][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1405.410869][    C0]  </IRQ>
[ 1405.413801][    C0]  <TASK>
[ 1405.416781][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1405.422805][    C0] RIP: 0010:finish_task_switch+0x413/0xc60
[ 1405.428648][    C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 37 c8 4b 0a e8 52 ef 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[ 1405.448270][    C0] RSP: 0018:ffffc9000712f6c0 EFLAGS: 00000206
[ 1405.454357][    C0] RAX: 000000000005b5bd RBX: ffff8880b863c9e0 RCX: 8000000000000001
[ 1405.462336][    C0] RDX: 0000000000000000 RSI: ffffffff8e463443 RDI: ffffffff8c6cb180
[ 1405.470319][    C0] RBP: ffffc9000712f710 R08: ffffffff9079657f R09: 1ffffffff20f2caf
[ 1405.478302][    C0] R10: dffffc0000000000 R11: fffffbfff20f2cb0 R12: ffff8880270c0000
[ 1405.486281][    C0] R13: ffff8880270c0000 R14: dffffc0000000000 R15: 1ffff110170c793c
[ 1405.494275][    C0]  __schedule+0x1b5f/0x5bc0
[ 1405.498879][    C0]  ? __pfx___schedule+0x10/0x10
[ 1405.503821][    C0]  ? lock_acquire+0x115/0x350
[ 1405.508527][    C0]  ? schedule+0x90/0x2b0
[ 1405.512781][    C0]  schedule+0x164/0x2b0
[ 1405.516951][    C0]  schedule_timeout+0x152/0x2c0
[ 1405.521840][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1405.527230][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1405.532529][    C0]  ? snd_rawmidi_write+0x360/0xbc0
[ 1405.537738][    C0]  ? snd_rawmidi_write+0x360/0xbc0
[ 1405.542877][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1405.548105][    C0]  ? snd_rawmidi_write+0x360/0xbc0
[ 1405.553292][    C0]  ? snd_rawmidi_write+0x360/0xbc0
[ 1405.558423][    C0]  snd_rawmidi_write+0x3b4/0xbc0
[ 1405.563377][    C0]  ? __pfx_snd_rawmidi_write+0x10/0x10
[ 1405.568861][    C0]  ? __pfx_default_wake_function+0x10/0x10
[ 1405.574684][    C0]  ? common_file_perm+0x20e/0x2b0
[ 1405.579819][    C0]  ? bpf_lsm_file_permission+0x9/0x20
[ 1405.585247][    C0]  ? security_file_permission+0x75/0x260
[ 1405.591019][    C0]  ? rw_verify_area+0x203/0x4c0
[ 1405.595920][    C0]  vfs_writev+0x4bb/0x990
[ 1405.600278][    C0]  ? __pfx_snd_rawmidi_write+0x10/0x10
[ 1405.605766][    C0]  ? __pfx_vfs_writev+0x10/0x10
[ 1405.610644][    C0]  ? __fget_files+0x2a/0x420
[ 1405.615247][    C0]  ? __fget_files+0x3a2/0x420
[ 1405.619930][    C0]  ? __fget_files+0x2a/0x420
[ 1405.624526][    C0]  do_writev+0x154/0x2e0
[ 1405.628784][    C0]  ? __pfx_do_writev+0x10/0x10
[ 1405.633583][    C0]  do_syscall_64+0x166/0x520
[ 1405.638245][    C0]  ? trace_irq_disable+0x3b/0x140
[ 1405.643311][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1405.649382][    C0]  ? clear_bhb_loop+0x70/0xc0
[ 1405.654106][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1405.660010][    C0] RIP: 0033:0x7f616b79e0d9
[ 1405.664462][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1405.684075][    C0] RSP: 002b:00007f616c6ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 1405.692507][    C0] RAX: ffffffffffffffda RBX: 00007f616ba25fa0 RCX: 00007f616b79e0d9
[ 1405.700514][    C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000004
[ 1405.708494][    C0] RBP: 00007f616b835024 R08: 0000000000000000 R09: 0000000000000000
[ 1405.716477][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1405.724469][    C0] R13: 00007f616ba26038 R14: 00007f616ba25fa0 R15: 00007ffdc900d3e8
[ 1405.732460][    C0]  </TASK>
[ 1405.735503][    C0] Modules linked in:
[ 1405.739533][    C0] ---[ end trace 0000000000000000 ]---
[ 1405.745036][    C0] RIP: 0010:llc_conn_state_process+0xd13/0x1380
[ 1405.745084][    C0] Code: 4c 89 f7 e8 9f 5b 69 f8 31 c0 84 db 0f 94 c0 4d 8b 36 8d 5c 00 01 b8 01 00 00 00 bd 07 00 00 00 0f 44 e8 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 1a 06 00 00 41 89 1e 43 0f b6 04 2c 84
[ 1405.745101][    C0] RSP: 0018:ffffc90000007bb0 EFLAGS: 00010246
[ 1405.745120][    C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff8880270c0000
[ 1405.745133][    C0] RDX: 8000000000000100 RSI: 0000000000000002 RDI: 0000000000000000
[ 1405.745145][    C0] RBP: 0000000000000007 R08: 0000000000000100 R09: 0000000000000005
[ 1405.745157][    C0] R10: 0000000000000005 R11: 8000000000000100 R12: 1ffff1100aef1e02
[ 1405.745171][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805778f012
[ 1405.745184][    C0] FS:  00007f616c6ec6c0(0000) GS:ffff888124cf8000(0000) knlGS:0000000000000000
[ 1405.745205][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1405.745218][    C0] CR2: 0000200000004000 CR3: 000000007068c000 CR4: 00000000003526f0
[ 1405.745246][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 1405.848238][    C0] Kernel Offset: disabled
[ 1405.852579][    C0] Rebooting in 86400 seconds..