last executing test programs:

14m39.045546127s ago: executing program 3 (id=4):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc)

14m34.378504153s ago: executing program 3 (id=13):
r0 = io_uring_setup(0x177f, &(0x7f0000000400)={0x0, 0x7ba2, 0x400, 0x0, 0x40800000})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

14m33.189862319s ago: executing program 3 (id=14):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x8, r3)
ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78})
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5})
mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x1, 0x8010000000000084)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r6, &(0x7f0000000400)=""/4096, 0x1000)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
getdents64(r7, 0x0, 0x203e17d0)

14m27.606070285s ago: executing program 3 (id=21):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2b, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000001240)="b9ff0307680426", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c00078008001340000017e505000500020000000500010006000000cbe5c1a2d85f0b6aded94425b9"], 0x54}, 0x1, 0x0, 0x0, 0x4008085}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000000000ff00000900020073797a31000000000500010007f2ff001c0007800c00018008000140fffffffe0c0002800800014004"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x80)

14m24.172351108s ago: executing program 1 (id=27):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001c80)={0x934, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x918, 0x8, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}]}, {0x4}, {0x694, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x34c, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2f8, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @loopback, 0x6}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x401}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e76413abe9921bf02e5c8bd6a6a359ba85d551827057303dca6a06b7c6410dc9"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @mcast1, 0x8}}]}, {0x138, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xcc, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}]}, 0x934}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008855)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1602000004000000ff0000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1600000002000000040000000100008018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_usb_connect(0x5, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r8)
r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x33)
write$P9_RSTATu(r9, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224)
syz_usb_control_io$printer(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000"], 0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

14m20.343473119s ago: executing program 1 (id=31):
syz_emit_ethernet(0x5a, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

14m20.018204938s ago: executing program 1 (id=33):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x40000}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800)
syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="042ff904aaaaaaaaaa10ff"], 0x3fc)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

14m18.825696469s ago: executing program 1 (id=34):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000640)="26b3b0fbfbc83c273f3b76adeb298388619be5c1a512383555c745908d87c6e56cc551a8d2bb997f0fe63b899912e95d72fb5464aeb47f41e2d462d29554059d03408c67b82012ae4d44dacae0d8784e5b9751758c094c1df4363c3c2c647d128042fa3388d2111467cd9dfc85b5199bc3e2e77d14cf9f517add75df0f2dd0b050c2c4d516ea3ae7ad7c0afaba5b54629baea46c94d8dd0a7de675aa5bd6bc63f8724bf96bc552d43316b3654e98eca8d9a2aa246f441fcb11ed31ca39fc622c01cdd5afea73f0f529b907bafc22ca1417184e96ee", 0xd5, 0x4810, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

14m18.699944319s ago: executing program 1 (id=35):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fff700e8"], 0x14}, 0x1, 0x0, 0x0, 0x40004801}, 0x24004880)
socket$inet_mptcp(0x2, 0x1, 0x106)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
landlock_create_ruleset(0x0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha3-224-generic,ctr-blowfish-asm)\x00'}, 0x58)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r2)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c)
listen(r3, 0x9)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74)

14m17.72431933s ago: executing program 3 (id=36):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000640)="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", 0x1ae, 0x4810, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

14m17.074878702s ago: executing program 1 (id=37):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7fffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0x3)
open_by_handle_at(r4, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000006500)={0x2020}, 0x2020)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x4, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
rseq(0x0, 0x0, 0x0, 0x0)
r6 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07})
mq_getsetattr(r6, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf)

14m16.81273656s ago: executing program 3 (id=41):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
getdents64(r2, &(0x7f0000002080)=""/4108, 0x100c)
getdents64(r2, 0x0, 0x0)

13m59.808226839s ago: executing program 32 (id=37):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7fffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0x3)
open_by_handle_at(r4, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000006500)={0x2020}, 0x2020)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x4, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
rseq(0x0, 0x0, 0x0, 0x0)
r6 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07})
mq_getsetattr(r6, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf)

13m59.640304607s ago: executing program 33 (id=41):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
getdents64(r2, &(0x7f0000002080)=""/4108, 0x100c)
getdents64(r2, 0x0, 0x0)

13m8.022039489s ago: executing program 4 (id=153):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, &(0x7f0000000640)="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", 0x342, 0x4810, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

13m6.154500027s ago: executing program 4 (id=154):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = getpid()
syz_pidfd_open(r3, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
setns(0xffffffffffffffff, 0x66020000)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0})

13m3.962719615s ago: executing program 4 (id=157):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
mknod$loop(0x0, 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
epoll_create1(0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0100000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000500)=""/84, 0x54}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)=""/150, 0x96}, {0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f0000003a00)=""/4107, 0x100b}, {&(0x7f00000021c0)=""/165, 0xa5}, {&(0x7f0000000480)=""/64, 0x40}], 0xe}, 0xfffffeff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0)

13m1.912779699s ago: executing program 4 (id=160):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
accept4$inet6(r2, 0x0, &(0x7f00000001c0), 0x100000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0)

12m57.993167913s ago: executing program 4 (id=167):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r2, r1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
lseek(r0, 0x851, 0x0)

12m57.717569346s ago: executing program 4 (id=169):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
clock_nanosleep(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0)
ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x68, 0x0, &(0x7f00000003c0)=[@register_looper, @free_buffer, @dead_binder_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x300}, @fda={0x66646185, 0x9, 0x2, 0x8}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x34}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
sendfile(r4, r5, 0x0, 0x8000002b)

12m42.431534613s ago: executing program 34 (id=169):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
clock_nanosleep(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0)
ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x68, 0x0, &(0x7f00000003c0)=[@register_looper, @free_buffer, @dead_binder_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x300}, @fda={0x66646185, 0x9, 0x2, 0x8}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x34}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
sendfile(r4, r5, 0x0, 0x8000002b)

11.123889552s ago: executing program 0 (id=1105):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = userfaultfd(0x1)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10162, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

10.606425831s ago: executing program 0 (id=1106):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

9.11883003s ago: executing program 0 (id=1108):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = gettid()
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

7.979806665s ago: executing program 0 (id=1111):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)

4.244728479s ago: executing program 2 (id=1112):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

4.031748755s ago: executing program 0 (id=1113):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xa56b}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x6, &(0x7f00000001c0)=[{0x6, 0x0, 0xfd, 0x80000002}, {0x5, 0x4, 0x7, 0xffffff96}, {0x8, 0x0, 0x9, 0xfffffffa}, {0x8, 0x80, 0x3, 0x5}, {0x2, 0x9, 0x80, 0x2}, {0x4, 0x7, 0xb, 0x80000000}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000440)={0x76b, <r2=>r0, 0x1})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000540)=0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
fsmount(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000000200)={0x0, 0xfffffffffffffd27, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100070000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd1b642383656d4d2449155037", 0x55}], 0x1}, 0x4000080)

4.015295998s ago: executing program 2 (id=1114):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbdf250700000008000500ac1e000105080100010000000800040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x24000040)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)

2.839709065s ago: executing program 2 (id=1115):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)

1.679986676s ago: executing program 2 (id=1116):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x0)

600.876038ms ago: executing program 2 (id=1117):
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0xfffffffb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0xd30}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xf357}, 0x1c)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7})
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0xffffff94)

599.05148ms ago: executing program 0 (id=1118):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = gettid()
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

0s ago: executing program 2 (id=1119):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5)
syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x27)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800)

kernel console output (not intermixed with test programs):

p interface
[  390.660807][ T1005] bond0 (unregistering): Released all slaves
[  390.819089][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  390.897698][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  390.939356][ T1005] bond0 (unregistering): Released all slaves
[  391.137997][ T7233] hsr_slave_0: entered promiscuous mode
[  391.139667][ T7233] hsr_slave_1: entered promiscuous mode
[  391.140835][ T7233] debugfs: 'hsr0' already exists in 'hsr'
[  391.140864][ T7233] Cannot create hsr debugfs directory
[  392.654813][ T7234] hsr_slave_0: entered promiscuous mode
[  392.656514][ T7234] hsr_slave_1: entered promiscuous mode
[  392.660235][ T7234] debugfs: 'hsr0' already exists in 'hsr'
[  392.660271][ T7234] Cannot create hsr debugfs directory
[  392.901929][ T7575] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  392.901960][ T7575] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  392.951475][ T7575] vhci_hcd vhci_hcd.0: Device attached
[  393.010701][   T38] audit: type=1326 audit(1765127698.027:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7561 comm="syz.2.405" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26692cf749 code=0x0
[  393.217036][ T5987] usb 38-1: SetAddress Request (2) to port 0
[  393.217131][ T5987] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[  393.299965][ T7577] vhci_hcd: connection reset by peer
[  393.306143][ T1181] vhci_hcd vhci_hcd.2: stop threads
[  393.306214][ T1181] vhci_hcd vhci_hcd.2: release socket
[  393.310705][ T1181] vhci_hcd vhci_hcd.2: disconnect device
[  393.341723][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.342132][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.342292][ T7331] bridge_slave_0: entered allmulticast mode
[  393.344245][ T7331] bridge_slave_0: entered promiscuous mode
[  393.519951][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.521309][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.531193][ T7331] bridge_slave_1: entered allmulticast mode
[  393.549197][ T7331] bridge_slave_1: entered promiscuous mode
[  394.041699][ T7331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.050152][ T7331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.367827][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  394.446450][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  394.517933][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  394.552905][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  394.627150][ T1005] hsr_slave_0: left promiscuous mode
[  394.668909][ T1005] hsr_slave_1: left promiscuous mode
[  394.670019][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  394.718136][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  395.316027][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  395.842759][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  398.327152][ T5987] usb 38-1: device descriptor read/8, error -110
[  398.719443][ T5987] usb usb38-port1: attempt power cycle
[  400.155026][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  400.376561][ T5987] usb usb38-port1: unable to enumerate USB device
[  400.721086][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  400.780622][ T7637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.423'.
[  401.507950][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  401.707404][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  404.718379][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  404.878199][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  406.147943][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  406.152707][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  406.154012][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  406.155264][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  406.156525][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  406.598962][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  406.611043][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  406.621863][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  406.633152][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  406.633964][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  406.911361][ T7331] team0: Port device team_slave_0 added
[  407.172206][ T7331] team0: Port device team_slave_1 added
[  408.741293][ T5118] Bluetooth: hci5: command tx timeout
[  408.741781][   T61] Bluetooth: hci0: command tx timeout
[  409.134686][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_0
[  409.134707][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.134736][ T7331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  409.150272][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_1
[  409.150299][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.150333][ T7331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  410.587503][ T7699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.438'.
[  410.814639][ T5118] Bluetooth: hci5: command tx timeout
[  410.814739][   T61] Bluetooth: hci0: command tx timeout
[  411.458494][ T7707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.440'.
[  412.920162][   T61] Bluetooth: hci0: command tx timeout
[  412.920330][   T61] Bluetooth: hci5: command tx timeout
[  414.510065][ T7331] hsr_slave_0: entered promiscuous mode
[  414.511666][ T7331] hsr_slave_1: entered promiscuous mode
[  414.967239][   T61] Bluetooth: hci5: command tx timeout
[  415.846934][   T61] Bluetooth: hci0: command tx timeout
[  415.944985][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'.
[  418.457702][ T7671] chnl_net:caif_netlink_parms(): no params data found
[  420.711087][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'.
[  420.786508][ T7667] chnl_net:caif_netlink_parms(): no params data found
[  421.094157][ T7331] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  421.524582][ T7331] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  421.755498][ T7331] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  421.782839][ T7671] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.783078][ T7671] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.783298][ T7671] bridge_slave_0: entered allmulticast mode
[  421.786479][ T7671] bridge_slave_0: entered promiscuous mode
[  421.824950][ T7671] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.825085][ T7671] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.825349][ T7671] bridge_slave_1: entered allmulticast mode
[  421.840929][ T7671] bridge_slave_1: entered promiscuous mode
[  421.859171][ T7331] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  424.044511][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  424.868354][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  425.038937][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  425.252041][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  425.267505][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  427.225935][ T7671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.248529][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.248742][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.249003][ T7667] bridge_slave_0: entered allmulticast mode
[  427.251162][ T7667] bridge_slave_0: entered promiscuous mode
[  427.610980][ T5118] Bluetooth: hci1: command tx timeout
[  427.629717][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.629870][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.630283][ T7667] bridge_slave_1: entered allmulticast mode
[  427.634537][ T7667] bridge_slave_1: entered promiscuous mode
[  427.660489][ T7671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  428.524691][ T7667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.496359][ T7671] team0: Port device team_slave_0 added
[  429.509451][ T7667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.662190][ T7671] team0: Port device team_slave_1 added
[  429.686951][ T5118] Bluetooth: hci1: command tx timeout
[  430.013028][ T7831] netlink: 'syz.0.463': attribute type 15 has an invalid length.
[  431.766942][ T5118] Bluetooth: hci1: command tx timeout
[  433.713654][ T7667] team0: Port device team_slave_0 added
[  433.836082][ T7671] batman_adv: batadv0: Adding interface: batadv_slave_0
[  433.836117][ T7671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  433.836182][ T7671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  433.847285][ T5118] Bluetooth: hci1: command tx timeout
[  434.236479][ T7667] team0: Port device team_slave_1 added
[  434.303779][ T7671] batman_adv: batadv0: Adding interface: batadv_slave_1
[  434.303836][ T7671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  434.303919][ T7671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  435.992896][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_0
[  435.992916][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  435.992944][ T7667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.237526][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.237542][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  436.237564][ T7667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.643148][ T7671] hsr_slave_0: entered promiscuous mode
[  436.645036][ T7671] hsr_slave_1: entered promiscuous mode
[  436.646659][ T7671] debugfs: 'hsr0' already exists in 'hsr'
[  436.646689][ T7671] Cannot create hsr debugfs directory
[  437.082545][ T7667] hsr_slave_0: entered promiscuous mode
[  437.084979][ T7667] hsr_slave_1: entered promiscuous mode
[  437.087914][ T7667] debugfs: 'hsr0' already exists in 'hsr'
[  437.087949][ T7667] Cannot create hsr debugfs directory
[  438.423420][ T7875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.469'.
[  441.895208][ T7903] netlink: 'syz.2.474': attribute type 15 has an invalid length.
[  443.422548][ T7799] chnl_net:caif_netlink_parms(): no params data found
[  445.607896][ T7929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.480'.
[  446.197106][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  446.197231][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  446.471649][ T7799] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.471881][ T7799] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.472858][ T7799] bridge_slave_0: entered allmulticast mode
[  446.475981][ T7799] bridge_slave_0: entered promiscuous mode
[  446.641169][ T7799] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.641340][ T7799] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.641563][ T7799] bridge_slave_1: entered allmulticast mode
[  446.644485][ T7799] bridge_slave_1: entered promiscuous mode
[  452.370762][ T7671] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  452.512176][ T7799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  452.569799][ T7671] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  452.626478][ T7799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.633198][ T7671] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  452.961022][ T7671] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  453.163012][ T7799] team0: Port device team_slave_0 added
[  453.181488][ T1005] bridge_slave_1: left allmulticast mode
[  453.181523][ T1005] bridge_slave_1: left promiscuous mode
[  453.181809][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.591989][ T1005] bridge_slave_0: left allmulticast mode
[  453.592039][ T1005] bridge_slave_0: left promiscuous mode
[  453.594936][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.824705][ T1005] bridge_slave_1: left allmulticast mode
[  453.824775][ T1005] bridge_slave_1: left promiscuous mode
[  453.884008][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.139376][ T1005] bridge_slave_0: left allmulticast mode
[  454.139408][ T1005] bridge_slave_0: left promiscuous mode
[  454.139670][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.381351][ T1005] bridge_slave_1: left allmulticast mode
[  454.381386][ T1005] bridge_slave_1: left promiscuous mode
[  454.381632][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.482705][ T1005] bridge_slave_0: left allmulticast mode
[  454.482740][ T1005] bridge_slave_0: left promiscuous mode
[  454.483096][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.868511][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  454.948230][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  455.017921][ T1005] bond0 (unregistering): Released all slaves
[  455.307896][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  455.409498][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  455.470499][ T1005] bond0 (unregistering): Released all slaves
[  455.684796][ T7979] syz.2.490 uses obsolete (PF_INET,SOCK_PACKET)
[  456.290256][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  457.188950][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  457.278879][ T1005] bond0 (unregistering): Released all slaves
[  457.380933][ T7799] team0: Port device team_slave_1 added
[  459.152047][ T7799] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.152068][ T7799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.152099][ T7799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.237749][ T7799] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.237770][ T7799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.237801][ T7799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.315578][ T7667] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  459.360179][ T7667] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  459.428528][ T7667] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  459.807125][ T1005] hsr_slave_0: left promiscuous mode
[  459.837150][ T1005] hsr_slave_1: left promiscuous mode
[  459.838422][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  459.915354][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.276992][ T1005] hsr_slave_0: left promiscuous mode
[  460.317002][ T5118] Bluetooth: hci2: unexpected event for opcode 0x200b
[  460.317135][ T1005] hsr_slave_1: left promiscuous mode
[  460.317990][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  460.468062][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.537114][ T1005] hsr_slave_0: left promiscuous mode
[  460.578702][ T1005] hsr_slave_1: left promiscuous mode
[  460.585453][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  460.608436][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  462.424214][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  462.482234][ T8015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.500'.
[  463.146464][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  464.357944][ T5118] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  464.358279][ T5118] Bluetooth: hci2: Injecting HCI hardware error event
[  464.363353][   T61] Bluetooth: hci2: hardware error 0x00
[  466.490094][   T61] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  467.287634][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  467.329428][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  467.336077][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  467.344120][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  467.345389][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  467.346590][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  467.487987][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  468.268988][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  468.287319][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  468.294855][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  468.298911][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  468.300564][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  468.802802][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  469.019931][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  469.461809][ T5118] Bluetooth: hci3: command tx timeout
[  469.958623][ T7667] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  470.327076][ T5118] Bluetooth: hci6: command tx timeout
[  470.340808][ T7799] hsr_slave_0: entered promiscuous mode
[  470.343999][ T7799] hsr_slave_1: entered promiscuous mode
[  470.948464][ T8044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.506'.
[  471.553447][ T5118] Bluetooth: hci3: command tx timeout
[  472.294197][ T8055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.509'.
[  472.407086][ T5118] Bluetooth: hci6: command tx timeout
[  473.686849][ T5118] Bluetooth: hci3: command tx timeout
[  474.493026][ T5118] Bluetooth: hci6: command tx timeout
[  475.499273][ T7667] syz-executor (7667) used greatest stack depth: 16520 bytes left
[  475.768609][ T5118] Bluetooth: hci3: command tx timeout
[  477.278996][ T5118] Bluetooth: hci6: command tx timeout
[  483.568671][ T8112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.519'.
[  485.035132][   T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  485.134536][   T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  485.160823][   T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  485.181226][   T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  485.195538][   T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  487.377001][ T5118] Bluetooth: hci0: command tx timeout
[  489.466201][ T5118] Bluetooth: hci0: command tx timeout
[  490.189260][ T8029] chnl_net:caif_netlink_parms(): no params data found
[  491.517316][ T8035] chnl_net:caif_netlink_parms(): no params data found
[  491.566405][ T5118] Bluetooth: hci0: command tx timeout
[  492.777118][ T8029] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.777416][ T8029] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.777675][ T8029] bridge_slave_0: entered allmulticast mode
[  492.783912][ T8029] bridge_slave_0: entered promiscuous mode
[  493.288846][ T8029] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.289027][ T8029] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.289234][ T8029] bridge_slave_1: entered allmulticast mode
[  493.293515][ T8029] bridge_slave_1: entered promiscuous mode
[  493.606934][ T5118] Bluetooth: hci0: command tx timeout
[  493.959370][ T8035] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.959600][ T8035] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.959861][ T8035] bridge_slave_0: entered allmulticast mode
[  493.964555][ T8035] bridge_slave_0: entered promiscuous mode
[  494.245443][ T8035] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.245554][ T8035] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.245710][ T8035] bridge_slave_1: entered allmulticast mode
[  494.276995][ T8035] bridge_slave_1: entered promiscuous mode
[  494.671144][ T8029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  494.768560][ T8220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.541'.
[  494.868916][ T8029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  494.890734][ T8118] chnl_net:caif_netlink_parms(): no params data found
[  495.641602][ T8225] binder_alloc: 8224: pid 8224 spamming oneway? 1 buffers allocated for a total size of 4096
[  495.642401][ T8225] binder_alloc: 8224: pid 8224 spamming oneway? 2 buffers allocated for a total size of 5120
[  495.750372][ T8035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.130348][ T8035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.133558][ T8029] team0: Port device team_slave_0 added
[  496.549125][ T8029] team0: Port device team_slave_1 added
[  498.929736][ T8241] syz.2.546 (8241) used greatest stack depth: 16016 bytes left
[  499.378701][ T8245] syz.2.546 (8245) used greatest stack depth: 15784 bytes left
[  499.908224][ T8255] netlink: 48 bytes leftover after parsing attributes in process `syz.2.550'.
[  501.646254][ T8257] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  501.714489][ T8035] team0: Port device team_slave_0 added
[  501.828931][ T8035] team0: Port device team_slave_1 added
[  501.830244][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  501.830261][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.830291][ T8029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  501.979186][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  501.979206][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.979235][ T8029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  502.520066][ T8035] batman_adv: batadv0: Adding interface: batadv_slave_0
[  502.520085][ T8035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  502.520113][ T8035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  502.520989][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.521673][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.521868][ T8118] bridge_slave_0: entered allmulticast mode
[  502.525563][ T8118] bridge_slave_0: entered promiscuous mode
[  502.539532][ T8035] batman_adv: batadv0: Adding interface: batadv_slave_1
[  502.539547][ T8035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  502.539567][ T8035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  502.792581][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.795487][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.795699][ T8118] bridge_slave_1: entered allmulticast mode
[  502.864081][ T8118] bridge_slave_1: entered promiscuous mode
[  503.325211][ T8029] hsr_slave_0: entered promiscuous mode
[  503.337542][ T8029] hsr_slave_1: entered promiscuous mode
[  503.338354][ T8029] debugfs: 'hsr0' already exists in 'hsr'
[  503.338374][ T8029] Cannot create hsr debugfs directory
[  504.115083][ T8118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.533417][ T8118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.620952][ T8035] hsr_slave_0: entered promiscuous mode
[  504.622875][ T8035] hsr_slave_1: entered promiscuous mode
[  504.640098][ T8035] debugfs: 'hsr0' already exists in 'hsr'
[  504.640448][ T8035] Cannot create hsr debugfs directory
[  505.943768][ T8118] team0: Port device team_slave_0 added
[  506.384564][ T8118] team0: Port device team_slave_1 added
[  507.612306][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  507.612359][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  508.099476][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_0
[  508.099492][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  508.099514][ T8118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  508.183860][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_1
[  508.183876][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  508.183897][ T8118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  510.770969][ T8118] hsr_slave_0: entered promiscuous mode
[  510.772640][ T8118] hsr_slave_1: entered promiscuous mode
[  510.773911][ T8118] debugfs: 'hsr0' already exists in 'hsr'
[  510.773940][ T8118] Cannot create hsr debugfs directory
[  513.867190][ T1005] bridge_slave_1: left allmulticast mode
[  513.867222][ T1005] bridge_slave_1: left promiscuous mode
[  513.867497][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.994013][ T1005] bridge_slave_0: left allmulticast mode
[  513.994047][ T1005] bridge_slave_0: left promiscuous mode
[  513.994354][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.084087][ T1005] bridge_slave_1: left allmulticast mode
[  514.084123][ T1005] bridge_slave_1: left promiscuous mode
[  514.084403][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.359938][ T1005] bridge_slave_0: left allmulticast mode
[  514.359979][ T1005] bridge_slave_0: left promiscuous mode
[  514.360247][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.459245][ T1005] bridge_slave_1: left allmulticast mode
[  514.459277][ T1005] bridge_slave_1: left promiscuous mode
[  514.459563][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.663262][ T1005] bridge_slave_0: left allmulticast mode
[  514.663299][ T1005] bridge_slave_0: left promiscuous mode
[  514.666135][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.167552][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  515.297808][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  515.379425][ T1005] bond0 (unregistering): Released all slaves
[  515.757813][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  515.887983][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  515.969517][ T1005] bond0 (unregistering): Released all slaves
[  516.221039][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  516.317580][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  516.380010][ T1005] bond0 (unregistering): Released all slaves
[  517.672856][ T1005] hsr_slave_0: left promiscuous mode
[  517.692800][ T1005] hsr_slave_1: left promiscuous mode
[  517.693850][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  517.737943][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  518.578203][ T1005] hsr_slave_0: left promiscuous mode
[  518.646294][ T1005] hsr_slave_1: left promiscuous mode
[  518.647625][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  518.733198][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  518.917073][ T1005] hsr_slave_0: left promiscuous mode
[  518.940126][ T1005] hsr_slave_1: left promiscuous mode
[  518.941284][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  518.997088][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  520.120301][ T8435] binder_alloc: 8434: pid 8434 spamming oneway? 1 buffers allocated for a total size of 4096
[  520.120763][ T8435] binder_alloc: 8434: pid 8434 spamming oneway? 2 buffers allocated for a total size of 5120
[  520.207486][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  520.428331][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  524.688376][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  524.997605][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  530.470597][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  530.470885][   T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  530.519857][   T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  530.524713][   T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  530.548491][   T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  530.566540][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  530.601548][   T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  530.622568][   T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  530.681848][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  530.759670][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  531.775741][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  532.849855][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  533.670038][ T5812] Bluetooth: hci1: command tx timeout
[  533.938300][ T5812] Bluetooth: hci5: command tx timeout
[  535.697203][ T5812] Bluetooth: hci1: command tx timeout
[  536.007016][ T5812] Bluetooth: hci5: command tx timeout
[  537.737752][ T8485] chnl_net:caif_netlink_parms(): no params data found
[  537.767615][ T5812] Bluetooth: hci1: command tx timeout
[  537.798215][ T8480] chnl_net:caif_netlink_parms(): no params data found
[  538.138116][ T5812] Bluetooth: hci5: command tx timeout
[  539.857390][ T5812] Bluetooth: hci1: command tx timeout
[  540.166934][ T5812] Bluetooth: hci5: command tx timeout
[  541.791628][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.796668][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.803226][ T8485] bridge_slave_0: entered allmulticast mode
[  541.809618][ T8485] bridge_slave_0: entered promiscuous mode
[  542.217560][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.217717][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.217928][ T8485] bridge_slave_1: entered allmulticast mode
[  542.220046][ T8485] bridge_slave_1: entered promiscuous mode
[  542.223769][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.223937][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.224126][ T8480] bridge_slave_0: entered allmulticast mode
[  542.226148][ T8480] bridge_slave_0: entered promiscuous mode
[  542.355756][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.355955][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.356175][ T8480] bridge_slave_1: entered allmulticast mode
[  542.405108][ T8480] bridge_slave_1: entered promiscuous mode
[  542.639528][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.752172][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.772178][ T8480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.940411][ T8480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  544.677859][ T8485] team0: Port device team_slave_0 added
[  546.293486][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  546.305701][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  546.318050][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  546.319386][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  546.320207][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  546.447125][ T8485] team0: Port device team_slave_1 added
[  546.584634][ T8480] team0: Port device team_slave_0 added
[  546.721386][ T8480] team0: Port device team_slave_1 added
[  546.773106][ T1005] bridge_slave_1: left allmulticast mode
[  546.773141][ T1005] bridge_slave_1: left promiscuous mode
[  546.773373][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.838030][ T1005] bridge_slave_0: left allmulticast mode
[  546.838056][ T1005] bridge_slave_0: left promiscuous mode
[  546.838265][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.933388][ T1005] bridge_slave_1: left allmulticast mode
[  546.933422][ T1005] bridge_slave_1: left promiscuous mode
[  546.933685][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.988109][ T1005] bridge_slave_0: left allmulticast mode
[  546.988134][ T1005] bridge_slave_0: left promiscuous mode
[  546.988361][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.377935][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  547.807877][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  548.463961][ T5812] Bluetooth: hci3: command tx timeout
[  548.639088][ T1005] bond0 (unregistering): Released all slaves
[  548.847597][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  548.927994][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  548.989059][ T1005] bond0 (unregistering): Released all slaves
[  549.722254][ T8610] Mount JFS Failure: -22
[  549.722331][ T8610] jfs_mount failed w/return code = -22
[  550.612466][ T5812] Bluetooth: hci3: command tx timeout
[  550.718461][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.718482][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.718511][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  551.113806][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.113821][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  551.113841][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  551.115215][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_0
[  551.115231][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  551.115257][ T8480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  551.229551][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.229566][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  551.229586][ T8480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  552.695039][ T5812] Bluetooth: hci3: command tx timeout
[  553.111351][ T1005] hsr_slave_0: left promiscuous mode
[  553.140986][ T1005] hsr_slave_1: left promiscuous mode
[  553.142112][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  553.182624][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  553.326864][ T1005] hsr_slave_0: left promiscuous mode
[  553.348458][ T1005] hsr_slave_1: left promiscuous mode
[  553.349253][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  553.370439][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  554.437002][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  554.697753][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  554.726807][ T5812] Bluetooth: hci3: command tx timeout
[  557.257613][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  557.407628][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  559.187135][ T8485] hsr_slave_0: entered promiscuous mode
[  559.188794][ T8485] hsr_slave_1: entered promiscuous mode
[  559.488298][ T8480] hsr_slave_0: entered promiscuous mode
[  559.490795][ T8480] hsr_slave_1: entered promiscuous mode
[  559.498971][ T8480] debugfs: 'hsr0' already exists in 'hsr'
[  559.499003][ T8480] Cannot create hsr debugfs directory
[  562.225116][ T8585] chnl_net:caif_netlink_parms(): no params data found
[  567.958537][ T8485] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  568.036307][ T8485] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  568.360302][ T8485] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  568.858047][ T8485] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  568.930721][ T8585] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.933189][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.933402][ T8585] bridge_slave_0: entered allmulticast mode
[  568.967996][ T8585] bridge_slave_0: entered promiscuous mode
[  569.055820][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  569.055897][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  569.058455][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.058634][ T8585] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.058957][ T8585] bridge_slave_1: entered allmulticast mode
[  569.105902][ T8585] bridge_slave_1: entered promiscuous mode
[  569.555528][ T8585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  569.678507][ T8585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  569.792335][ T8737] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  569.792365][ T8737] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  569.841439][ T8737] vhci_hcd vhci_hcd.0: Device attached
[  569.877638][ T8480] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  569.952721][   T38] audit: type=1326 audit(1765127874.977:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8728 comm="syz.2.635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26692cf749 code=0x0
[  570.069761][ T8480] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  570.107234][ T5858] usb 38-1: SetAddress Request (6) to port 0
[  570.107305][ T5858] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd
[  570.234366][ T8585] team0: Port device team_slave_0 added
[  570.235786][ T8480] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  571.695113][ T8585] team0: Port device team_slave_1 added
[  571.695249][ T8480] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  571.727975][ T8738] vhci_hcd: connection reset by peer
[  571.731398][ T3098] vhci_hcd vhci_hcd.2: stop threads
[  571.731420][ T3098] vhci_hcd vhci_hcd.2: release socket
[  571.731625][ T3098] vhci_hcd vhci_hcd.2: disconnect device
[  575.207059][ T5858] usb 38-1: device descriptor read/8, error -110
[  575.777286][ T5858] usb usb38-port1: attempt power cycle
[  575.984360][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_0
[  575.984382][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  575.984411][ T8585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  576.043044][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_1
[  576.043063][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  576.043093][ T8585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  576.113341][ T1005] bridge_slave_1: left allmulticast mode
[  576.113375][ T1005] bridge_slave_1: left promiscuous mode
[  576.113693][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.198567][ T1005] bridge_slave_0: left allmulticast mode
[  576.198602][ T1005] bridge_slave_0: left promiscuous mode
[  576.198894][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.382349][ T5858] usb usb38-port1: unable to enumerate USB device
[  576.738319][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  577.053422][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  577.193202][ T8775] fuse: Bad value for 'group_id'
[  577.193251][ T8775] fuse: Bad value for 'group_id'
[  578.161873][ T1005] bond0 (unregistering): Released all slaves
[  582.785294][ T8798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  582.791409][ T8585] hsr_slave_0: entered promiscuous mode
[  582.792439][ T8585] hsr_slave_1: entered promiscuous mode
[  582.793152][ T8585] debugfs: 'hsr0' already exists in 'hsr'
[  582.793179][ T8585] Cannot create hsr debugfs directory
[  582.825591][ T8798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  583.007551][ T1005] hsr_slave_0: left promiscuous mode
[  583.047508][ T1005] hsr_slave_1: left promiscuous mode
[  583.048760][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  583.098858][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  583.859883][ T1005] team0 (unregistering): Port device team_slave_1 removed
[  584.197586][ T1005] team0 (unregistering): Port device team_slave_0 removed
[  585.609981][ T8807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.650'.
[  587.485843][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0
[  589.005263][ T8485] 8021q: adding VLAN 0 to HW filter on device team0
[  589.108589][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.111248][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  589.342889][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.343691][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state
[  589.865087][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  589.901576][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  589.917640][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  589.922766][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  589.950603][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  590.782929][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  590.788424][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  590.789991][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  590.847937][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  590.849859][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  591.358896][ T8840] netlink: 56 bytes leftover after parsing attributes in process `syz.0.656'.
[  592.212177][ T5812] Bluetooth: hci0: command tx timeout
[  593.237858][ T5812] Bluetooth: hci1: command tx timeout
[  594.251696][ T5812] Bluetooth: hci0: command tx timeout
[  594.799439][ T8585] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  594.918915][ T8585] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  595.007327][ T8585] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  595.118097][ T8585] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  595.288260][ T5812] Bluetooth: hci1: command tx timeout
[  596.354260][ T5812] Bluetooth: hci0: command tx timeout
[  597.373179][ T5812] Bluetooth: hci1: command tx timeout
[  598.522419][ T5812] Bluetooth: hci0: command tx timeout
[  599.448668][ T8832] chnl_net:caif_netlink_parms(): no params data found
[  599.868870][ T5812] Bluetooth: hci1: command tx timeout
[  601.359575][ T8869] syz.2.660 (8869) used greatest stack depth: 14320 bytes left
[  601.491504][ T1298] bridge_slave_1: left allmulticast mode
[  601.491537][ T1298] bridge_slave_1: left promiscuous mode
[  601.491824][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state
[  601.669252][ T1298] bridge_slave_0: left allmulticast mode
[  601.669287][ T1298] bridge_slave_0: left promiscuous mode
[  601.669616][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.320649][ T8895] netlink: 'syz.2.666': attribute type 15 has an invalid length.
[  604.307752][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  604.387997][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  604.467175][ T1298] bond0 (unregistering): Released all slaves
[  605.049266][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  605.052267][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  605.057514][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  605.064464][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  605.065481][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  605.687089][ T1298] hsr_slave_0: left promiscuous mode
[  605.718947][ T1298] hsr_slave_1: left promiscuous mode
[  605.720226][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  605.759089][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  607.311177][ T5812] Bluetooth: hci5: command tx timeout
[  608.265416][ T8924] fuse: Unknown parameter 'group_i00000000000000000000'
[  609.556751][ T5812] Bluetooth: hci5: command tx timeout
[  610.862434][ T1298] team0 (unregistering): Port device team_slave_1 removed
[  611.027335][ T1298] team0 (unregistering): Port device team_slave_0 removed
[  611.607005][ T5812] Bluetooth: hci5: command tx timeout
[  612.799946][ T8835] chnl_net:caif_netlink_parms(): no params data found
[  612.837378][ T8832] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.837603][ T8832] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.837871][ T8832] bridge_slave_0: entered allmulticast mode
[  612.840826][ T8832] bridge_slave_0: entered promiscuous mode
[  612.877923][ T8832] bridge0: port 2(bridge_slave_1) entered blocking state
[  612.878140][ T8832] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.878595][ T8832] bridge_slave_1: entered allmulticast mode
[  612.884769][ T8832] bridge_slave_1: entered promiscuous mode
[  613.398529][ T8947] netlink: 'syz.0.675': attribute type 15 has an invalid length.
[  613.687182][ T5812] Bluetooth: hci5: command tx timeout
[  616.260651][ T8832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  616.332300][ T8832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  617.115902][ T8832] team0: Port device team_slave_0 added
[  617.262652][ T8832] team0: Port device team_slave_1 added
[  617.262910][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.263058][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.263196][ T8835] bridge_slave_0: entered allmulticast mode
[  617.266211][ T8835] bridge_slave_0: entered promiscuous mode
[  617.276656][ T8835] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.311657][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.311872][ T8835] bridge_slave_1: entered allmulticast mode
[  617.336528][ T8835] bridge_slave_1: entered promiscuous mode
[  618.530736][ T8832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  618.530758][ T8832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  618.530789][ T8832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  618.791181][ T8835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  618.792302][ T8832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  618.792320][ T8832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  618.792351][ T8832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  620.216020][ T8835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  623.303249][ T8993] netlink: 'syz.0.684': attribute type 15 has an invalid length.
[  623.307025][ T8835] team0: Port device team_slave_0 added
[  623.344671][ T8835] team0: Port device team_slave_1 added
[  623.804471][ T8832] hsr_slave_0: entered promiscuous mode
[  623.806304][ T8832] hsr_slave_1: entered promiscuous mode
[  623.823676][ T8832] debugfs: 'hsr0' already exists in 'hsr'
[  623.823709][ T8832] Cannot create hsr debugfs directory
[  626.661626][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_0
[  626.661641][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  626.661663][ T8835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  626.908037][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_1
[  626.908057][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  626.908091][ T8835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  630.503959][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  630.504043][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  630.619520][ T8906] chnl_net:caif_netlink_parms(): no params data found
[  631.425358][ T9030] netlink: 56 bytes leftover after parsing attributes in process `syz.2.690'.
[  631.953286][ T8835] hsr_slave_0: entered promiscuous mode
[  631.954323][ T8835] hsr_slave_1: entered promiscuous mode
[  631.955002][ T8835] debugfs: 'hsr0' already exists in 'hsr'
[  631.955025][ T8835] Cannot create hsr debugfs directory
[  634.112926][ T9040] netlink: 'syz.0.692': attribute type 15 has an invalid length.
[  635.373247][ T8906] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.373447][ T8906] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.373702][ T8906] bridge_slave_0: entered allmulticast mode
[  635.375877][ T8906] bridge_slave_0: entered promiscuous mode
[  635.485571][ T8906] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.485742][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.486030][ T8906] bridge_slave_1: entered allmulticast mode
[  635.509890][ T8906] bridge_slave_1: entered promiscuous mode
[  638.545826][ T8906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  638.669331][ T8906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  639.253844][ T9066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.700'.
[  640.110298][ T8906] team0: Port device team_slave_0 added
[  640.233222][ T8906] team0: Port device team_slave_1 added
[  640.965904][ T8906] batman_adv: batadv0: Adding interface: batadv_slave_0
[  640.965929][ T8906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  640.981857][ T8906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  641.013316][ T8906] batman_adv: batadv0: Adding interface: batadv_slave_1
[  641.013374][ T8906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  641.013457][ T8906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  642.664270][ T8906] hsr_slave_0: entered promiscuous mode
[  642.665941][ T8906] hsr_slave_1: entered promiscuous mode
[  642.670683][ T8906] debugfs: 'hsr0' already exists in 'hsr'
[  642.670719][ T8906] Cannot create hsr debugfs directory
[  649.326372][ T1298] bridge_slave_1: left allmulticast mode
[  649.326397][ T1298] bridge_slave_1: left promiscuous mode
[  649.326571][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.393264][ T1298] bridge_slave_0: left allmulticast mode
[  649.393295][ T1298] bridge_slave_0: left promiscuous mode
[  649.395575][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.500038][ T1298] bridge_slave_1: left allmulticast mode
[  649.500076][ T1298] bridge_slave_1: left promiscuous mode
[  649.500283][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.568028][ T1298] bridge_slave_0: left allmulticast mode
[  649.568064][ T1298] bridge_slave_0: left promiscuous mode
[  649.568301][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.108414][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  650.217041][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  650.503600][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  650.532379][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  650.534848][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  650.558043][ T1298] bond0 (unregistering): Released all slaves
[  651.385692][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  651.397696][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  651.892980][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  651.903208][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  651.949573][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  651.951930][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  651.953238][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  653.448684][ T5812] Bluetooth: hci3: command tx timeout
[  654.026978][ T5812] Bluetooth: hci6: command tx timeout
[  654.197786][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  654.257491][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  654.301738][ T1298] bond0 (unregistering): Released all slaves
[  656.026779][ T5812] Bluetooth: hci3: command tx timeout
[  656.074155][ T9136] comedi comedi0: Minor 47 could not be opened
[  656.087766][ T5811] Bluetooth: hci6: command tx timeout
[  658.786514][ T1298] hsr_slave_0: left promiscuous mode
[  658.827153][ T1298] hsr_slave_1: left promiscuous mode
[  658.829349][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  659.305920][ T5811] Bluetooth: hci6: command tx timeout
[  659.306026][ T5812] Bluetooth: hci3: command tx timeout
[  659.307136][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  660.356844][ T1298] hsr_slave_0: left promiscuous mode
[  661.250128][ T1298] hsr_slave_1: left promiscuous mode
[  661.250913][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  661.277473][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  661.367176][ T5811] Bluetooth: hci6: command tx timeout
[  661.367232][ T5812] Bluetooth: hci3: command tx timeout
[  662.185913][ T1298] team0 (unregistering): Port device team_slave_1 removed
[  662.297528][ T1298] team0 (unregistering): Port device team_slave_0 removed
[  663.397443][ T1298] team0 (unregistering): Port device team_slave_1 removed
[  663.557906][ T1298] team0 (unregistering): Port device team_slave_0 removed
[  665.840905][ T5811] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  665.845936][ T5811] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  665.848160][ T5811] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  665.862349][ T5811] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  665.887284][ T5811] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  667.976804][ T5812] Bluetooth: hci7: command tx timeout
[  669.090747][   T38] audit: type=1326 audit(1765127974.127:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9188 comm="syz.0.730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f374e5df749 code=0x0
[  670.086901][ T5812] Bluetooth: hci7: command tx timeout
[  671.430834][ T9122] chnl_net:caif_netlink_parms(): no params data found
[  672.169064][ T5812] Bluetooth: hci7: command tx timeout
[  672.810916][ T9113] chnl_net:caif_netlink_parms(): no params data found
[  673.643112][ T9245] netlink: 48 bytes leftover after parsing attributes in process `syz.2.742'.
[  674.490335][ T5812] Bluetooth: hci7: command tx timeout
[  675.701150][ T9176] chnl_net:caif_netlink_parms(): no params data found
[  675.940880][ T9122] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.941039][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.941255][ T9122] bridge_slave_0: entered allmulticast mode
[  675.944659][ T9122] bridge_slave_0: entered promiscuous mode
[  676.180305][ T9122] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.180474][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.180754][ T9122] bridge_slave_1: entered allmulticast mode
[  676.188733][ T9122] bridge_slave_1: entered promiscuous mode
[  678.211265][ T9299] binder: 9293:9299 ioctl c0306201 0 returned -14
[  679.517028][ T9113] bridge0: port 1(bridge_slave_0) entered blocking state
[  679.517282][ T9113] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.517714][ T9113] bridge_slave_0: entered allmulticast mode
[  679.520639][ T9113] bridge_slave_0: entered promiscuous mode
[  679.671219][ T9122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  679.719018][ T9113] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.719165][ T9113] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.719408][ T9113] bridge_slave_1: entered allmulticast mode
[  679.722452][ T9113] bridge_slave_1: entered promiscuous mode
[  679.731516][ T9122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  680.278391][ T9320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.754'.
[  682.759497][ T9334] binder: 9333:9334 ioctl c0306201 0 returned -14
[  683.101800][ T9176] bridge0: port 1(bridge_slave_0) entered blocking state
[  683.102070][ T9176] bridge0: port 1(bridge_slave_0) entered disabled state
[  683.102308][ T9176] bridge_slave_0: entered allmulticast mode
[  683.104374][ T9176] bridge_slave_0: entered promiscuous mode
[  684.160125][ T9113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  684.164152][ T9122] team0: Port device team_slave_0 added
[  684.164658][ T9176] bridge0: port 2(bridge_slave_1) entered blocking state
[  684.164967][ T9176] bridge0: port 2(bridge_slave_1) entered disabled state
[  684.165194][ T9176] bridge_slave_1: entered allmulticast mode
[  684.177780][ T9176] bridge_slave_1: entered promiscuous mode
[  684.198428][ T9113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  684.318699][ T9122] team0: Port device team_slave_1 added
[  685.236017][ T9176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  685.245033][ T9113] team0: Port device team_slave_0 added
[  685.304147][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_0
[  685.304168][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  685.304199][ T9122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  685.415402][ T9353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.763'.
[  686.292282][ T9176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  686.294958][ T9113] team0: Port device team_slave_1 added
[  686.323120][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_1
[  686.323142][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  686.323165][ T9122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  686.600769][ T9359] binder: 9358:9359 ioctl c0306201 0 returned -14
[  687.102972][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_0
[  687.102987][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  687.103008][ T9113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  687.152887][ T9176] team0: Port device team_slave_0 added
[  687.157955][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_1
[  687.157976][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  687.158009][ T9113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  687.310990][ T9176] team0: Port device team_slave_1 added
[  687.945772][ T9122] hsr_slave_0: entered promiscuous mode
[  687.961527][ T9122] hsr_slave_1: entered promiscuous mode
[  688.341973][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_0
[  688.341995][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  688.342027][ T9176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  688.518466][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_1
[  688.518489][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  688.518523][ T9176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  688.578570][ T9113] hsr_slave_0: entered promiscuous mode
[  688.580060][ T9113] hsr_slave_1: entered promiscuous mode
[  688.580889][ T9113] debugfs: 'hsr0' already exists in 'hsr'
[  688.580910][ T9113] Cannot create hsr debugfs directory
[  689.267224][ T1298] bridge_slave_1: left allmulticast mode
[  689.267260][ T1298] bridge_slave_1: left promiscuous mode
[  689.267578][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state
[  689.533913][ T1298] bridge_slave_0: left allmulticast mode
[  689.533941][ T1298] bridge_slave_0: left promiscuous mode
[  689.534166][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.615326][ T1298] bridge_slave_1: left allmulticast mode
[  689.615355][ T1298] bridge_slave_1: left promiscuous mode
[  689.615545][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state
[  689.679185][ T1298] bridge_slave_0: left allmulticast mode
[  689.679212][ T1298] bridge_slave_0: left promiscuous mode
[  689.679422][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state
[  690.267239][ T9386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.773'.
[  690.512361][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  691.021928][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  691.218146][ T1298] bond0 (unregistering): Released all slaves
[  692.119994][ T9394] comedi comedi0: Minor 47 could not be opened
[  692.535743][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  692.535824][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  692.947749][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  693.017765][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  693.080204][ T1298] bond0 (unregistering): Released all slaves
[  694.930355][ T9176] hsr_slave_0: entered promiscuous mode
[  694.931432][ T9176] hsr_slave_1: entered promiscuous mode
[  694.932160][ T9176] debugfs: 'hsr0' already exists in 'hsr'
[  694.932179][ T9176] Cannot create hsr debugfs directory
[  695.809480][ T1298] hsr_slave_0: left promiscuous mode
[  695.829947][ T1298] hsr_slave_1: left promiscuous mode
[  695.830789][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  695.858670][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  696.010505][ T1298] hsr_slave_0: left promiscuous mode
[  696.040074][ T1298] hsr_slave_1: left promiscuous mode
[  696.040880][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  696.078871][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  699.426474][ T9427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.785'.
[  699.739292][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'.
[  701.106393][ T1298] team0 (unregistering): Port device team_slave_1 removed
[  701.390286][ T1298] team0 (unregistering): Port device team_slave_0 removed
[  704.299052][ T1298] team0 (unregistering): Port device team_slave_1 removed
[  704.438082][ T1298] team0 (unregistering): Port device team_slave_0 removed
[  705.303597][ T9427] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  705.311045][ T9427] gretap1: entered promiscuous mode
[  705.311118][ T9427] gretap1: entered allmulticast mode
[  708.936087][ T9463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.794'.
[  711.731082][ T9122] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  711.772449][ T9122] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  711.816128][ T9122] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  712.019020][ T9122] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  714.451164][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  714.503463][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  714.505028][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  714.536543][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  714.545176][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  715.149788][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  715.164262][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  715.166994][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  715.168494][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  715.170001][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  716.806967][ T5118] Bluetooth: hci0: command tx timeout
[  717.457495][ T5118] Bluetooth: hci1: command tx timeout
[  719.216842][ T5118] Bluetooth: hci0: command tx timeout
[  719.537433][ T5118] Bluetooth: hci1: command tx timeout
[  719.916182][ T9558] comedi comedi0: Minor 47 could not be opened
[  722.358018][ T5118] Bluetooth: hci0: command tx timeout
[  722.358506][ T5118] Bluetooth: hci1: command tx timeout
[  722.494022][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.810'.
[  724.756068][ T5811] Bluetooth: hci0: command tx timeout
[  724.756128][ T5118] Bluetooth: hci1: command tx timeout
[  729.857220][ T9176] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  730.750194][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  730.788207][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  730.797664][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  730.802870][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  730.804566][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  731.142848][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.819'.
[  733.322412][ T9503] chnl_net:caif_netlink_parms(): no params data found
[  733.607210][ T5811] Bluetooth: hci3: command tx timeout
[  733.609432][ T9512] chnl_net:caif_netlink_parms(): no params data found
[  735.202450][ T1298] bridge_slave_1: left allmulticast mode
[  735.202486][ T1298] bridge_slave_1: left promiscuous mode
[  735.202784][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.328491][ T1298] bridge_slave_0: left allmulticast mode
[  735.328524][ T1298] bridge_slave_0: left promiscuous mode
[  735.328808][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.410157][ T1298] bridge_slave_1: left allmulticast mode
[  735.410184][ T1298] bridge_slave_1: left promiscuous mode
[  735.410377][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.548275][ T1298] bridge_slave_0: left allmulticast mode
[  735.548308][ T1298] bridge_slave_0: left promiscuous mode
[  735.548584][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.686778][ T5811] Bluetooth: hci3: command tx timeout
[  736.163136][ T9671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.828'.
[  737.197675][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  737.277875][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  737.560361][ T1298] bond0 (unregistering): Released all slaves
[  737.941129][ T5811] Bluetooth: hci3: command tx timeout
[  738.297617][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  738.389094][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  738.728900][ T1298] bond0 (unregistering): Released all slaves
[  739.461668][ T9503] bridge0: port 1(bridge_slave_0) entered blocking state
[  739.461926][ T9503] bridge0: port 1(bridge_slave_0) entered disabled state
[  739.462375][ T9503] bridge_slave_0: entered allmulticast mode
[  739.465977][ T9503] bridge_slave_0: entered promiscuous mode
[  740.671609][ T5811] Bluetooth: hci3: command tx timeout
[  741.653592][ T9503] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.653769][ T9503] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.654049][ T9503] bridge_slave_1: entered allmulticast mode
[  741.657227][ T9503] bridge_slave_1: entered promiscuous mode
[  741.952470][ T9512] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.955916][ T9512] bridge0: port 1(bridge_slave_0) entered disabled state
[  741.956196][ T9512] bridge_slave_0: entered allmulticast mode
[  741.959433][ T9512] bridge_slave_0: entered promiscuous mode
[  742.149844][ T9512] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.149993][ T9512] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.150216][ T9512] bridge_slave_1: entered allmulticast mode
[  742.154510][ T9512] bridge_slave_1: entered promiscuous mode
[  742.264432][ T9503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  742.424782][ T9699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.836'.
[  745.278370][ T1298] hsr_slave_0: left promiscuous mode
[  745.536856][ T1298] hsr_slave_1: left promiscuous mode
[  745.537927][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  746.538120][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  748.060324][ T9717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.842'.
[  748.984789][ T1298] hsr_slave_0: left promiscuous mode
[  749.229482][ T1298] hsr_slave_1: left promiscuous mode
[  749.230595][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  749.818239][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  751.688213][ T1298] team0 (unregistering): Port device team_slave_1 removed
[  751.797550][ T1298] team0 (unregistering): Port device team_slave_0 removed
[  753.097418][ T1298] team0 (unregistering): Port device team_slave_1 removed
[  753.289298][ T1298] team0 (unregistering): Port device team_slave_0 removed
[  753.398691][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  753.398771][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  753.511767][ T1154] kworker/u8:8 (1154) used greatest stack depth: 11912 bytes left
[  754.282135][ T9733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.846'.
[  755.268188][ T9503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  756.690277][ T9512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  757.483410][ T9512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  757.498575][ T9503] team0: Port device team_slave_0 added
[  758.497685][ T9503] team0: Port device team_slave_1 added
[  758.857080][ T9762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.855'.
[  760.518909][ T9512] team0: Port device team_slave_0 added
[  760.658149][ T9512] team0: Port device team_slave_1 added
[  760.733675][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_0
[  760.733697][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  760.733729][ T9503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  761.118875][ T9779] fuse: Bad value for 'fd'
[  761.979257][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_1
[  761.979281][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.979316][ T9503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  762.741949][ T9512] batman_adv: batadv0: Adding interface: batadv_slave_0
[  762.741971][ T9512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  762.742001][ T9512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  762.749957][ T9512] batman_adv: batadv0: Adding interface: batadv_slave_1
[  762.749978][ T9512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  762.750008][ T9512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  763.099454][ T9607] chnl_net:caif_netlink_parms(): no params data found
[  763.858372][ T9503] hsr_slave_0: entered promiscuous mode
[  763.860208][ T9503] hsr_slave_1: entered promiscuous mode
[  764.056950][ T9804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.865'.
[  764.982792][ T9512] hsr_slave_0: entered promiscuous mode
[  764.984334][ T9512] hsr_slave_1: entered promiscuous mode
[  764.985373][ T9512] debugfs: 'hsr0' already exists in 'hsr'
[  764.985401][ T9512] Cannot create hsr debugfs directory
[  765.203848][ T9808] fuse: Bad value for 'fd'
[  768.789234][ T9837] loop2: detected capacity change from 0 to 7
[  768.997077][ T9837] Dev loop2: unable to read RDB block 7
[  768.997130][ T9837]  loop2: unable to read partition table
[  768.997302][ T9837] loop2: partition table beyond EOD, truncated
[  768.997339][ T9837] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  769.133390][ T9840] fuse: Bad value for 'fd'
[  770.259895][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state
[  770.260169][ T9607] bridge0: port 1(bridge_slave_0) entered disabled state
[  770.260736][ T9607] bridge_slave_0: entered allmulticast mode
[  770.263656][ T9607] bridge_slave_0: entered promiscuous mode
[  770.325850][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state
[  770.345834][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state
[  770.346106][ T9607] bridge_slave_1: entered allmulticast mode
[  770.349488][ T9607] bridge_slave_1: entered promiscuous mode
[  771.833842][ T9607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  771.946471][ T9607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  772.752302][ T9607] team0: Port device team_slave_0 added
[  772.942171][ T9607] team0: Port device team_slave_1 added
[  774.278127][ T9883] comedi comedi0: Minor 47 could not be opened
[  775.958778][ T9886] loop2: detected capacity change from 0 to 7
[  776.175426][ T9886] Dev loop2: unable to read RDB block 7
[  776.175488][ T9886]  loop2: unable to read partition table
[  776.205059][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  776.229611][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  776.231226][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  776.232639][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  776.233968][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  776.377010][ T9886] loop2: partition table beyond EOD, truncated
[  776.377050][ T9886] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  777.021930][ T9900] fuse: Invalid rootmode
[  778.249564][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  778.859547][ T5118] Bluetooth: hci5: command tx timeout
[  778.942785][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  778.998892][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  779.005021][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  779.006072][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  780.886845][ T5811] Bluetooth: hci5: command tx timeout
[  781.046799][ T5811] Bluetooth: hci6: command tx timeout
[  782.014051][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_0
[  782.014072][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  782.014102][ T9607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  783.333686][ T5118] Bluetooth: hci6: command tx timeout
[  783.336780][ T5812] Bluetooth: hci5: command tx timeout
[  784.334766][ T9937] loop2: detected capacity change from 0 to 7
[  784.336223][ T9937] Dev loop2: unable to read RDB block 7
[  784.336279][ T9937]  loop2: unable to read partition table
[  784.336520][ T9937] loop2: partition table beyond EOD, truncated
[  784.336542][ T9937] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  785.243497][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_1
[  785.243518][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  785.243543][ T9607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  785.367165][ T5811] Bluetooth: hci6: command tx timeout
[  785.369672][ T5812] Bluetooth: hci5: command tx timeout
[  786.359406][ T9607] hsr_slave_0: entered promiscuous mode
[  786.360906][ T9607] hsr_slave_1: entered promiscuous mode
[  786.361982][ T9607] debugfs: 'hsr0' already exists in 'hsr'
[  786.362006][ T9607] Cannot create hsr debugfs directory
[  787.447099][ T5812] Bluetooth: hci6: command tx timeout
[  788.397542][ T9981] comedi comedi0: Minor 47 could not be opened
[  791.729565][ T1298] bridge_slave_1: left allmulticast mode
[  791.729601][ T1298] bridge_slave_1: left promiscuous mode
[  791.760492][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state
[  793.336436][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  793.369076][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  793.374928][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  793.438187][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  793.445909][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  793.916465][ T1298] bridge_slave_0: left allmulticast mode
[  793.916490][ T1298] bridge_slave_0: left promiscuous mode
[  793.917247][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.152666][ T1298] bridge_slave_1: left allmulticast mode
[  795.152728][ T1298] bridge_slave_1: left promiscuous mode
[  795.153030][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state
[  795.479533][ T1298] bridge_slave_0: left allmulticast mode
[  795.479568][ T1298] bridge_slave_0: left promiscuous mode
[  795.479861][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.837734][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  795.846838][ T5811] Bluetooth: hci0: command tx timeout
[  795.928674][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  795.990306][ T1298] bond0 (unregistering): Released all slaves
[  796.330681][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  796.392617][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  796.468929][ T1298] bond0 (unregistering): Released all slaves
[  796.770612][T10024] loop2: detected capacity change from 0 to 7
[  796.773321][T10024] Dev loop2: unable to read RDB block 7
[  796.773357][T10024]  loop2: unable to read partition table
[  796.773516][T10024] loop2: partition table beyond EOD, truncated
[  796.774361][T10024] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  797.531905][ T1298] hsr_slave_0: left promiscuous mode
[  797.569678][ T1298] hsr_slave_1: left promiscuous mode
[  797.571263][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  797.603866][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  797.776911][ T1298] hsr_slave_0: left promiscuous mode
[  797.816944][ T1298] hsr_slave_1: left promiscuous mode
[  797.818834][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  797.867928][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  797.944451][ T5811] Bluetooth: hci0: command tx timeout
[  800.123967][ T5811] Bluetooth: hci0: command tx timeout
[  800.587896][ T1298] team0 (unregistering): Port device team_slave_1 removed
[  801.051146][ T1298] team0 (unregistering): Port device team_slave_0 removed
[  802.166876][ T5811] Bluetooth: hci0: command tx timeout
[  802.698842][ T1298] team0 (unregistering): Port device team_slave_1 removed
[  802.877544][ T1298] team0 (unregistering): Port device team_slave_0 removed
[  804.633848][T10075] loop2: detected capacity change from 0 to 7
[  804.665895][T10075] Dev loop2: unable to read RDB block 7
[  804.665931][T10075]  loop2: unable to read partition table
[  804.666099][T10075] loop2: partition table beyond EOD, truncated
[  804.666113][T10075] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  804.725158][ T9887] chnl_net:caif_netlink_parms(): no params data found
[  804.886425][ T9902] chnl_net:caif_netlink_parms(): no params data found
[  809.467780][ T9887] bridge0: port 1(bridge_slave_0) entered blocking state
[  809.467944][ T9887] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.468153][ T9887] bridge_slave_0: entered allmulticast mode
[  809.472761][ T9887] bridge_slave_0: entered promiscuous mode
[  809.918163][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state
[  809.918329][ T9887] bridge0: port 2(bridge_slave_1) entered disabled state
[  809.918548][ T9887] bridge_slave_1: entered allmulticast mode
[  809.937142][ T9887] bridge_slave_1: entered promiscuous mode
[  809.987295][ T9902] bridge0: port 1(bridge_slave_0) entered blocking state
[  809.987438][ T9902] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.988043][ T9902] bridge_slave_0: entered allmulticast mode
[  810.024934][ T9902] bridge_slave_0: entered promiscuous mode
[  811.252812][ T9902] bridge0: port 2(bridge_slave_1) entered blocking state
[  811.252945][ T9902] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.253201][ T9902] bridge_slave_1: entered allmulticast mode
[  811.256227][ T9902] bridge_slave_1: entered promiscuous mode
[  811.365231][T10129] loop2: detected capacity change from 0 to 7
[  811.382602][T10074] Dev loop2: unable to read RDB block 7
[  811.382656][T10074]  loop2: unable to read partition table
[  811.382937][T10074] loop2: partition table beyond EOD, truncated
[  811.384181][T10129] Dev loop2: unable to read RDB block 7
[  811.384228][T10129]  loop2: unable to read partition table
[  811.384469][T10129] loop2: partition table beyond EOD, truncated
[  811.384489][T10129] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  812.974562][ T9887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  813.198722][ T9887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  813.472495][ T9902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  813.472893][T10002] chnl_net:caif_netlink_parms(): no params data found
[  814.077791][ T9902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  814.842764][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  814.842981][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  814.978542][ T9887] team0: Port device team_slave_0 added
[  817.448837][ T9887] team0: Port device team_slave_1 added
[  817.452019][ T9902] team0: Port device team_slave_0 added
[  817.599493][T10160] loop2: detected capacity change from 0 to 7
[  817.604214][T10160] Dev loop2: unable to read RDB block 7
[  817.604265][T10160]  loop2: unable to read partition table
[  817.604502][T10160] loop2: partition table beyond EOD, truncated
[  817.604523][T10160] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  817.770313][ T9902] team0: Port device team_slave_1 added
[  817.815804][ T1298] bridge_slave_1: left allmulticast mode
[  817.815828][ T1298] bridge_slave_1: left promiscuous mode
[  817.816006][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state
[  817.925042][ T1298] bridge_slave_0: left allmulticast mode
[  817.925070][ T1298] bridge_slave_0: left promiscuous mode
[  817.925295][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.236502][ T1298] bridge_slave_1: left allmulticast mode
[  818.236536][ T1298] bridge_slave_1: left promiscuous mode
[  818.237468][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state
[  819.220380][ T1298] bridge_slave_0: left allmulticast mode
[  819.220414][ T1298] bridge_slave_0: left promiscuous mode
[  819.220687][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state
[  819.255836][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'.
[  820.230804][ T1298] bridge_slave_1: left allmulticast mode
[  820.230839][ T1298] bridge_slave_1: left promiscuous mode
[  820.231101][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state
[  820.308327][ T1298] bridge_slave_0: left allmulticast mode
[  820.308362][ T1298] bridge_slave_0: left promiscuous mode
[  820.308648][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state
[  820.914267][T10179] comedi comedi0: Minor 47 could not be opened
[  821.887636][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  821.997707][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  822.063363][ T1298] bond0 (unregistering): Released all slaves
[  822.357703][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  822.447583][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  822.896178][ T1298] bond0 (unregistering): Released all slaves
[  825.268952][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  825.327691][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  825.441815][ T1298] bond0 (unregistering): Released all slaves
[  826.805869][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_0
[  826.805890][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  826.805923][ T9887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  828.462697][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_1
[  828.462713][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  828.462734][ T9887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  828.464649][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_0
[  828.464668][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  828.464699][ T9902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  828.645767][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_1
[  828.645788][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  828.645820][ T9902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  828.691809][T10002] bridge0: port 1(bridge_slave_0) entered blocking state
[  828.692265][T10002] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.692529][T10002] bridge_slave_0: entered allmulticast mode
[  828.695842][T10002] bridge_slave_0: entered promiscuous mode
[  828.769767][T10002] bridge0: port 2(bridge_slave_1) entered blocking state
[  828.769928][T10002] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.778677][T10002] bridge_slave_1: entered allmulticast mode
[  828.790502][T10002] bridge_slave_1: entered promiscuous mode
[  829.396891][ T1298] hsr_slave_0: left promiscuous mode
[  829.416972][ T1298] hsr_slave_1: left promiscuous mode
[  829.418424][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  829.467799][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  829.607002][ T1298] hsr_slave_0: left promiscuous mode
[  829.626797][ T1298] hsr_slave_1: left promiscuous mode
[  829.627706][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  829.668901][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  829.817228][ T1298] hsr_slave_0: left promiscuous mode
[  829.837070][ T1298] hsr_slave_1: left promiscuous mode
[  829.837904][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  829.889007][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  831.363508][T10221] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  833.927630][ T1298] team0 (unregistering): Port device team_slave_1 removed
[  834.078864][ T1298] team0 (unregistering): Port device team_slave_0 removed
[  835.188190][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  835.202101][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  835.204482][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  835.234758][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  835.244341][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  835.739061][ T1298] team0 (unregistering): Port device team_slave_1 removed
[  836.027072][T10234] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  836.027115][T10234] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  836.027427][T10234] vhci_hcd vhci_hcd.0: Device attached
[  836.038768][   T38] audit: type=1326 audit(1765128141.067:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10227 comm="syz.0.955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f374e5df749 code=0x0
[  836.117505][ T1298] team0 (unregistering): Port device team_slave_0 removed
[  836.306824][ T5921] usb 34-1: SetAddress Request (10) to port 0
[  836.306920][ T5921] usb 34-1: new SuperSpeed USB device number 10 using vhci_hcd
[  836.675182][T10235] vhci_hcd: connection reset by peer
[  836.681290][ T1005] vhci_hcd vhci_hcd.0: stop threads
[  836.681312][ T1005] vhci_hcd vhci_hcd.0: release socket
[  836.683574][ T1005] vhci_hcd vhci_hcd.0: disconnect device
[  837.286930][ T5812] Bluetooth: hci1: command tx timeout
[  838.169576][ T1298] team0 (unregistering): Port device team_slave_1 removed
[  838.542318][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  838.548976][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  838.569191][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  838.570882][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  838.572003][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  838.617583][ T1298] team0 (unregistering): Port device team_slave_0 removed
[  839.533088][ T5811] Bluetooth: hci1: command tx timeout
[  840.254860][T10002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  840.280128][ T9887] hsr_slave_0: entered promiscuous mode
[  840.281836][ T9887] hsr_slave_1: entered promiscuous mode
[  840.463612][T10002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  840.674598][ T5811] Bluetooth: hci3: command tx timeout
[  840.903200][T10002] team0: Port device team_slave_0 added
[  840.974915][T10002] team0: Port device team_slave_1 added
[  841.366910][ T5921] usb 34-1: device descriptor read/8, error -110
[  841.475793][T10251] loop2: detected capacity change from 0 to 7
[  841.538765][T10242] Dev loop2: unable to read RDB block 7
[  841.538818][T10242]  loop2: unable to read partition table
[  841.539085][T10242] loop2: partition table beyond EOD, truncated
[  841.555539][T10251] Dev loop2: unable to read RDB block 7
[  841.555598][T10251]  loop2: unable to read partition table
[  841.555860][T10251] loop2: partition table beyond EOD, truncated
[  841.556282][T10251] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  841.607426][ T5811] Bluetooth: hci1: command tx timeout
[  841.779799][ T5921] usb usb34-port1: attempt power cycle
[  842.727807][ T5811] Bluetooth: hci3: command tx timeout
[  843.687239][ T5811] Bluetooth: hci1: command tx timeout
[  844.835124][ T5811] Bluetooth: hci3: command tx timeout
[  845.239366][ T5921] usb usb34-port1: unable to enumerate USB device
[  845.254019][T10263] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  846.083189][T10267] Bluetooth: MGMT ver 1.23
[  846.267978][T10002] batman_adv: batadv0: Adding interface: batadv_slave_0
[  846.268010][T10002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  846.268043][T10002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  846.925393][ T5118] Bluetooth: hci3: command tx timeout
[  847.313802][T10002] batman_adv: batadv0: Adding interface: batadv_slave_1
[  847.313822][T10002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  847.313857][T10002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  850.392089][T10002] hsr_slave_0: entered promiscuous mode
[  850.394198][T10002] hsr_slave_1: entered promiscuous mode
[  850.396273][T10002] debugfs: 'hsr0' already exists in 'hsr'
[  850.396297][T10002] Cannot create hsr debugfs directory
[  850.832854][T10292] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  851.403025][T10292] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  851.403418][T10292] overlayfs: failed to look up (tracing) for ino (-66)
[  854.416087][T10241] chnl_net:caif_netlink_parms(): no params data found
[  854.567624][T10230] chnl_net:caif_netlink_parms(): no params data found
[  854.937194][T10241] bridge0: port 1(bridge_slave_0) entered blocking state
[  854.937430][T10241] bridge0: port 1(bridge_slave_0) entered disabled state
[  854.937690][T10241] bridge_slave_0: entered allmulticast mode
[  854.940200][T10241] bridge_slave_0: entered promiscuous mode
[  855.168350][T10241] bridge0: port 2(bridge_slave_1) entered blocking state
[  855.168491][T10241] bridge0: port 2(bridge_slave_1) entered disabled state
[  855.168706][T10241] bridge_slave_1: entered allmulticast mode
[  855.171734][T10241] bridge_slave_1: entered promiscuous mode
[  855.272212][T10244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  855.278651][T10244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  855.285856][T10244] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  855.321534][T10244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  855.327703][T10244] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  855.487539][T10230] bridge0: port 1(bridge_slave_0) entered blocking state
[  855.487803][T10230] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.488070][T10230] bridge_slave_0: entered allmulticast mode
[  855.491294][T10230] bridge_slave_0: entered promiscuous mode
[  855.638170][T10230] bridge0: port 2(bridge_slave_1) entered blocking state
[  855.639184][T10230] bridge0: port 2(bridge_slave_1) entered disabled state
[  855.639411][T10230] bridge_slave_1: entered allmulticast mode
[  855.657791][T10230] bridge_slave_1: entered promiscuous mode
[  855.676425][T10241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  855.762688][ T1298] bridge_slave_1: left allmulticast mode
[  855.762721][ T1298] bridge_slave_1: left promiscuous mode
[  855.763018][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state
[  855.808794][ T1298] bridge_slave_0: left allmulticast mode
[  855.808827][ T1298] bridge_slave_0: left promiscuous mode
[  855.809225][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.902176][ T1298] bridge_slave_1: left allmulticast mode
[  855.902202][ T1298] bridge_slave_1: left promiscuous mode
[  855.902382][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state
[  855.957968][ T1298] bridge_slave_0: left allmulticast mode
[  855.957992][ T1298] bridge_slave_0: left promiscuous mode
[  855.958186][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state
[  856.728471][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  856.833721][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  856.921081][ T1298] bond0 (unregistering): Released all slaves
[  857.373493][T10244] Bluetooth: hci5: command tx timeout
[  857.680020][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  857.787399][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  857.828961][ T1298] bond0 (unregistering): Released all slaves
[  857.923982][T10241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  859.232597][T10230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  859.446782][T10244] Bluetooth: hci5: command tx timeout
[  859.977310][T10230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  860.011278][T10241] team0: Port device team_slave_0 added
[  860.722240][T10241] team0: Port device team_slave_1 added
[  861.527333][T10244] Bluetooth: hci5: command tx timeout
[  861.658756][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  861.724825][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  862.297377][ T1298] hsr_slave_0: left promiscuous mode
[  862.364956][ T1298] hsr_slave_1: left promiscuous mode
[  862.382337][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  862.506033][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  862.814067][T10341] comedi comedi0: Minor 47 could not be opened
[  863.023912][T10345] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  863.606776][T10244] Bluetooth: hci5: command tx timeout
[  863.839075][T10345] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  863.839900][T10345] overlayfs: failed to look up (tracing) for ino (-66)
[  864.027584][ T1298] team0 (unregistering): Port device team_slave_1 removed
[  864.167523][ T1298] team0 (unregistering): Port device team_slave_0 removed
[  865.860368][ T1298] team0 (unregistering): Port device team_slave_1 removed
[  866.185314][ T1298] team0 (unregistering): Port device team_slave_0 removed
[  869.735561][T10377] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  870.315782][T10377] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  870.316108][T10377] overlayfs: failed to look up (tracing) for ino (-66)
[  870.816029][T10230] team0: Port device team_slave_0 added
[  871.141596][T10230] team0: Port device team_slave_1 added
[  871.142893][T10241] batman_adv: batadv0: Adding interface: batadv_slave_0
[  871.142910][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  871.142936][T10241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  871.583465][T10241] batman_adv: batadv0: Adding interface: batadv_slave_1
[  871.583481][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  871.583504][T10241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  871.903832][T10230] batman_adv: batadv0: Adding interface: batadv_slave_0
[  871.903855][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  871.903888][T10230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  871.919229][T10230] batman_adv: batadv0: Adding interface: batadv_slave_1
[  871.919253][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  871.919288][T10230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  873.245216][T10241] hsr_slave_0: entered promiscuous mode
[  873.248402][T10241] hsr_slave_1: entered promiscuous mode
[  873.572776][T10230] hsr_slave_0: entered promiscuous mode
[  873.574281][T10230] hsr_slave_1: entered promiscuous mode
[  873.575201][T10230] debugfs: 'hsr0' already exists in 'hsr'
[  873.575232][T10230] Cannot create hsr debugfs directory
[  876.642793][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  876.643080][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  876.833732][T10317] chnl_net:caif_netlink_parms(): no params data found
[  877.487747][T10415] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  879.067192][T10425] comedi comedi0: Minor 47 could not be opened
[  882.574168][T10317] bridge0: port 1(bridge_slave_0) entered blocking state
[  882.574986][T10317] bridge0: port 1(bridge_slave_0) entered disabled state
[  882.575218][T10317] bridge_slave_0: entered allmulticast mode
[  882.618684][T10317] bridge_slave_0: entered promiscuous mode
[  882.648509][T10317] bridge0: port 2(bridge_slave_1) entered blocking state
[  882.648904][T10317] bridge0: port 2(bridge_slave_1) entered disabled state
[  882.649171][T10317] bridge_slave_1: entered allmulticast mode
[  882.704861][T10317] bridge_slave_1: entered promiscuous mode
[  883.279974][T10317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  883.323237][T10317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  883.417799][T10241] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  883.590765][T10241] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  883.647408][T10317] team0: Port device team_slave_0 added
[  883.653051][T10241] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  883.712552][T10317] team0: Port device team_slave_1 added
[  883.819879][T10241] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  885.338649][T10317] batman_adv: batadv0: Adding interface: batadv_slave_0
[  885.338665][T10317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  885.338686][T10317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  885.516380][T10453] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  886.223027][T10453] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  886.223588][T10453] overlayfs: failed to look up (tracing) for ino (-66)
[  886.424505][T10317] batman_adv: batadv0: Adding interface: batadv_slave_1
[  886.424526][T10317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  886.424557][T10317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  887.862568][T10230] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  889.752385][T10230] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  892.482213][T10230] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  892.722079][T10317] hsr_slave_0: entered promiscuous mode
[  892.723666][T10317] hsr_slave_1: entered promiscuous mode
[  892.724791][T10317] debugfs: 'hsr0' already exists in 'hsr'
[  892.724820][T10317] Cannot create hsr debugfs directory
[  892.759593][T10230] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  893.865962][T10481] comedi comedi0: Minor 47 could not be opened
[  899.125611][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  899.145581][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  899.147606][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  899.149044][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  899.176895][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  900.348884][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  900.372108][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  900.373578][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  900.375335][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  900.376252][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  900.505131][T10504] loop2: detected capacity change from 0 to 7
[  900.506147][T10504] Dev loop2: unable to read RDB block 7
[  900.506185][T10504]  loop2: unable to read partition table
[  900.506366][T10504] loop2: partition table beyond EOD, truncated
[  900.506390][T10504] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  901.416258][T10244] Bluetooth: hci6: command tx timeout
[  903.209501][T10244] Bluetooth: hci1: command tx timeout
[  904.258906][ T5118] Bluetooth: hci6: command tx timeout
[  905.287122][ T5118] Bluetooth: hci1: command tx timeout
[  906.527604][ T5118] Bluetooth: hci6: command tx timeout
[  907.368826][ T5118] Bluetooth: hci1: command tx timeout
[  908.566787][ T5118] Bluetooth: hci6: command tx timeout
[  909.120151][T10496] chnl_net:caif_netlink_parms(): no params data found
[  909.464789][ T5118] Bluetooth: hci1: command tx timeout
[  914.440624][T10317] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  915.440051][T10317] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  915.548396][T10496] bridge0: port 1(bridge_slave_0) entered blocking state
[  915.548631][T10496] bridge0: port 1(bridge_slave_0) entered disabled state
[  915.548876][T10496] bridge_slave_0: entered allmulticast mode
[  915.551821][T10496] bridge_slave_0: entered promiscuous mode
[  915.571386][T10496] bridge0: port 2(bridge_slave_1) entered blocking state
[  915.571664][T10496] bridge0: port 2(bridge_slave_1) entered disabled state
[  915.572012][T10496] bridge_slave_1: entered allmulticast mode
[  915.616911][T10496] bridge_slave_1: entered promiscuous mode
[  915.721434][ T2076] bridge_slave_1: left allmulticast mode
[  915.721468][ T2076] bridge_slave_1: left promiscuous mode
[  915.721781][ T2076] bridge0: port 2(bridge_slave_1) entered disabled state
[  915.799854][ T2076] bridge_slave_0: left allmulticast mode
[  915.799889][ T2076] bridge_slave_0: left promiscuous mode
[  915.800167][ T2076] bridge0: port 1(bridge_slave_0) entered disabled state
[  916.227772][ T2076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  916.307475][ T2076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  916.369125][ T2076] bond0 (unregistering): Released all slaves
[  916.509630][T10505] chnl_net:caif_netlink_parms(): no params data found
[  918.081418][T10244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  918.118265][T10244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  918.122829][T10244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  918.145616][T10244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  918.151518][T10244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  918.165662][T10496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  918.274102][T10496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  918.758432][ T2076] hsr_slave_0: left promiscuous mode
[  918.776981][ T2076] hsr_slave_1: left promiscuous mode
[  918.788939][ T2076] batman_adv: batadv0: Removing interface: batadv_slave_0
[  918.840076][ T2076] batman_adv: batadv0: Removing interface: batadv_slave_1
[  919.265206][T10588] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1037'.
[  920.166864][T10244] Bluetooth: hci3: command tx timeout
[  922.247355][T10244] Bluetooth: hci3: command tx timeout
[  923.748744][ T2076] team0 (unregistering): Port device team_slave_1 removed
[  924.431383][T10244] Bluetooth: hci3: command tx timeout
[  924.507218][ T2076] team0 (unregistering): Port device team_slave_0 removed
[  925.104253][   T38] audit: type=1326 audit(1765128230.137:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10611 comm="syz.2.1044" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26692cf749 code=0x0
[  926.509488][T10244] Bluetooth: hci3: command tx timeout
[  927.987042][T10496] team0: Port device team_slave_0 added
[  928.110137][T10496] team0: Port device team_slave_1 added
[  928.899878][T10496] batman_adv: batadv0: Adding interface: batadv_slave_0
[  928.899893][T10496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  928.899913][T10496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  928.971432][T10496] batman_adv: batadv0: Adding interface: batadv_slave_1
[  928.971453][T10496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  928.971485][T10496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  929.004694][T10505] bridge0: port 1(bridge_slave_0) entered blocking state
[  929.004854][T10505] bridge0: port 1(bridge_slave_0) entered disabled state
[  929.005018][T10505] bridge_slave_0: entered allmulticast mode
[  929.007787][T10505] bridge_slave_0: entered promiscuous mode
[  929.232233][T10505] bridge0: port 2(bridge_slave_1) entered blocking state
[  929.232368][T10505] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.232659][T10505] bridge_slave_1: entered allmulticast mode
[  929.234619][T10505] bridge_slave_1: entered promiscuous mode
[  929.861113][T10505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  929.991794][T10505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  930.038167][T10496] hsr_slave_0: entered promiscuous mode
[  930.039711][T10496] hsr_slave_1: entered promiscuous mode
[  930.040686][T10496] debugfs: 'hsr0' already exists in 'hsr'
[  930.040712][T10496] Cannot create hsr debugfs directory
[  930.659303][T10505] team0: Port device team_slave_0 added
[  931.737262][T10505] team0: Port device team_slave_1 added
[  932.437973][T10649] comedi comedi0: Minor 47 could not be opened
[  935.284196][T10505] batman_adv: batadv0: Adding interface: batadv_slave_0
[  935.284219][T10505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  935.284251][T10505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  935.798870][T10505] batman_adv: batadv0: Adding interface: batadv_slave_1
[  935.798930][T10505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  935.799019][T10505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  937.705387][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  937.705443][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  939.431424][T10670] fuse: Unknown parameter '0x0000000000000007'
[  942.851837][T10505] hsr_slave_0: entered promiscuous mode
[  942.852971][T10505] hsr_slave_1: entered promiscuous mode
[  942.853771][T10505] debugfs: 'hsr0' already exists in 'hsr'
[  942.853798][T10505] Cannot create hsr debugfs directory
[  948.303504][T10579] chnl_net:caif_netlink_parms(): no params data found
[  950.249011][T10708] fuse: Unknown parameter '0x0000000000000007'
[  953.131531][T10579] bridge0: port 1(bridge_slave_0) entered blocking state
[  953.131992][T10579] bridge0: port 1(bridge_slave_0) entered disabled state
[  953.132445][T10579] bridge_slave_0: entered allmulticast mode
[  953.165354][T10579] bridge_slave_0: entered promiscuous mode
[  953.235458][T10579] bridge0: port 2(bridge_slave_1) entered blocking state
[  953.245598][T10579] bridge0: port 2(bridge_slave_1) entered disabled state
[  953.246441][T10579] bridge_slave_1: entered allmulticast mode
[  953.326000][T10579] bridge_slave_1: entered promiscuous mode
[  953.869039][T10579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  954.243370][T10722] fuse: Unknown parameter 'group_id00000000000000000000'
[  954.253843][T10722] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  954.253927][T10722] overlayfs: overlapping lowerdir path
[  954.400869][T10579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  958.090118][T10579] team0: Port device team_slave_0 added
[  958.093586][T10579] team0: Port device team_slave_1 added
[  958.521544][T10579] batman_adv: batadv0: Adding interface: batadv_slave_0
[  958.521561][T10579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  958.521584][T10579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  958.524186][T10579] batman_adv: batadv0: Adding interface: batadv_slave_1
[  958.524202][T10579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  958.524225][T10579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  958.851775][T10579] hsr_slave_0: entered promiscuous mode
[  958.853404][T10579] hsr_slave_1: entered promiscuous mode
[  958.854410][T10579] debugfs: 'hsr0' already exists in 'hsr'
[  958.854437][T10579] Cannot create hsr debugfs directory
[  958.863604][ T2076] bridge_slave_1: left allmulticast mode
[  958.863637][ T2076] bridge_slave_1: left promiscuous mode
[  958.863913][ T2076] bridge0: port 2(bridge_slave_1) entered disabled state
[  958.989931][ T2076] bridge_slave_0: left allmulticast mode
[  958.989957][ T2076] bridge_slave_0: left promiscuous mode
[  958.990151][ T2076] bridge0: port 1(bridge_slave_0) entered disabled state
[  959.051810][T10740] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  959.415815][ T2076] bridge_slave_1: left allmulticast mode
[  959.415892][ T2076] bridge_slave_1: left promiscuous mode
[  959.420570][ T2076] bridge0: port 2(bridge_slave_1) entered disabled state
[  959.532959][T10740] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  959.533858][T10740] overlayfs: failed to look up (tracing) for ino (-66)
[  960.014504][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  960.029470][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  960.031025][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  960.034821][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  960.036221][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  960.103872][ T2076] bridge_slave_0: left allmulticast mode
[  960.103905][ T2076] bridge_slave_0: left promiscuous mode
[  960.104164][ T2076] bridge0: port 1(bridge_slave_0) entered disabled state
[  961.023212][T10756] fuse: Unknown parameter '0x0000000000000007'
[  962.246726][T10244] Bluetooth: hci5: command tx timeout
[  966.799724][T10244] Bluetooth: hci5: command tx timeout
[  967.078556][ T2076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  967.187577][ T2076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  967.213128][T10244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  967.231122][T10244] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  967.238867][T10244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  967.250346][T10244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  967.251405][T10244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  968.105287][ T2076] bond0 (unregistering): Released all slaves
[  968.830313][T10244] Bluetooth: hci5: command tx timeout
[  968.916896][T10783] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  968.916929][T10783] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  968.917112][T10783] vhci_hcd vhci_hcd.0: Device attached
[  969.186807][T10784] vhci_hcd: connection closed
[  969.188186][   T12] vhci_hcd vhci_hcd.2: stop threads
[  969.188214][   T12] vhci_hcd vhci_hcd.2: release socket
[  969.188255][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  969.286706][T10244] Bluetooth: hci7: command tx timeout
[  970.143799][ T2076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  970.514596][T10790] fuse: Unknown parameter '0x0000000000000007'
[  970.887672][T10244] Bluetooth: hci5: command tx timeout
[  971.369387][T10244] Bluetooth: hci7: command tx timeout
[  971.547516][ T2076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  971.763428][ T2076] bond0 (unregistering): Released all slaves
[  972.546186][T10797] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1083'.
[  973.446956][T10244] Bluetooth: hci7: command tx timeout
[  975.528928][T10244] Bluetooth: hci7: command tx timeout
[  978.126887][ T2076] hsr_slave_0: left promiscuous mode
[  978.206827][ T2076] hsr_slave_1: left promiscuous mode
[  978.207953][ T2076] batman_adv: batadv0: Removing interface: batadv_slave_0
[  978.238175][ T2076] batman_adv: batadv0: Removing interface: batadv_slave_1
[  978.564055][ T2076] hsr_slave_0: left promiscuous mode
[  978.578061][ T2076] hsr_slave_1: left promiscuous mode
[  978.601096][ T2076] batman_adv: batadv0: Removing interface: batadv_slave_0
[  978.622957][ T2076] batman_adv: batadv0: Removing interface: batadv_slave_1
[  978.644674][ T5118] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  978.681644][ T5118] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  978.687468][ T5118] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  978.689708][ T5118] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  978.690799][ T5118] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  980.727233][ T5118] Bluetooth: hci8: command tx timeout
[  981.770779][ T2076] team0 (unregistering): Port device team_slave_1 removed
[  982.807129][ T5118] Bluetooth: hci8: command tx timeout
[  982.900284][ T2076] team0 (unregistering): Port device team_slave_0 removed
[  984.914136][ T5118] Bluetooth: hci8: command tx timeout
[  986.990740][ T5118] Bluetooth: hci8: command tx timeout
[  990.084754][ T2076] team0 (unregistering): Port device team_slave_1 removed
[  991.443495][ T2076] team0 (unregistering): Port device team_slave_0 removed
[  999.140653][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  999.140734][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1000.356885][T10944] netlink: 'syz.0.1113': attribute type 15 has an invalid length.
[ 1002.967145][   T39] INFO: task syz-executor:10002 blocked for more than 144 seconds.
[ 1002.967179][   T39]       Not tainted syzkaller #0
[ 1002.967191][   T39]       Blocked by coredump.
[ 1002.967199][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1002.967215][   T39] task:syz-executor    state:D stack:22184 pid:10002 tgid:10002 ppid:1      task_flags:0x40054c flags:0x00080003
[ 1002.967288][   T39] Call Trace:
[ 1002.967304][   T39]  <TASK>
[ 1002.967320][   T39]  __schedule+0x1480/0x50a0
[ 1002.967550][   T39]  ? __lock_acquire+0x6b6/0x2cf0
[ 1002.967659][   T39]  ? __pfx___schedule+0x10/0x10
[ 1002.967702][   T39]  ? schedule+0x91/0x360
[ 1002.967732][   T39]  schedule+0x165/0x360
[ 1002.967761][   T39]  schedule_timeout+0x9a/0x270
[ 1002.967828][   T39]  ? __pfx_schedule_timeout+0x10/0x10
[ 1002.967869][   T39]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1002.967898][   T39]  ? lockdep_hardirqs_on+0x98/0x140
[ 1002.967952][   T39]  ? wait_for_completion+0x267/0x5d0
[ 1002.967983][   T39]  wait_for_completion+0x2bf/0x5d0
[ 1002.968027][   T39]  ? __pfx_wait_for_completion+0x10/0x10
[ 1002.968064][   T39]  ? __flush_work+0xce/0xd20
[ 1002.968261][   T39]  ? __flush_work+0xce/0xd20
[ 1002.968294][   T39]  __flush_work+0x9c1/0xd20
[ 1002.968329][   T39]  ? __flush_work+0xce/0xd20
[ 1002.968363][   T39]  ? __pfx___flush_work+0x10/0x10
[ 1002.968395][   T39]  ? __pfx_wq_barrier_func+0x10/0x10
[ 1002.968441][   T39]  ? __pfx___cancel_work+0x10/0x10
[ 1002.968472][   T39]  ? __pfx___might_resched+0x10/0x10
[ 1002.968505][   T39]  ? __cancel_work+0x254/0x2c0
[ 1002.968539][   T39]  ? __cancel_work_sync+0x5c/0x110
[ 1002.968574][   T39]  __cancel_work_sync+0xbe/0x110
[ 1002.968607][   T39]  hci_cmd_sync_clear+0x30/0x230
[ 1002.968706][   T39]  hci_unregister_dev+0x194/0x5b0
[ 1002.968786][   T39]  vhci_release+0x155/0x1b0
[ 1002.968907][   T39]  ? __pfx_vhci_release+0x10/0x10
[ 1002.968935][   T39]  __fput+0x45b/0xa80
[ 1002.969006][   T39]  task_work_run+0x1d4/0x260
[ 1002.969046][   T39]  ? __pfx_task_work_run+0x10/0x10
[ 1002.969081][   T39]  ? do_exit+0x6c0/0x2310
[ 1002.969137][   T39]  ? do_exit+0x6c0/0x2310
[ 1002.969176][   T39]  do_exit+0x6c5/0x2310
[ 1002.969209][   T39]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1002.969252][   T39]  ? __pfx_do_exit+0x10/0x10
[ 1002.969436][   T39]  ? rt_mutex_slowunlock+0x493/0x8a0
[ 1002.969460][   T39]  ? rt_spin_lock+0x1c1/0x3e0
[ 1002.969499][   T39]  do_group_exit+0x21c/0x2d0
[ 1002.969535][   T39]  ? rt_spin_unlock+0x161/0x200
[ 1002.969561][   T39]  get_signal+0x125d/0x1310
[ 1002.969614][   T39]  arch_do_signal_or_restart+0x9a/0x7a0
[ 1002.969672][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1002.969726][   T39]  ? exit_to_user_mode_loop+0x55/0x4f0
[ 1002.969785][   T39]  exit_to_user_mode_loop+0x87/0x4f0
[ 1002.969817][   T39]  ? rcu_is_watching+0x15/0xb0
[ 1002.969845][   T39]  do_syscall_64+0x2e3/0xf80
[ 1002.969907][   T39]  ? rcu_is_watching+0x15/0xb0
[ 1002.969928][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1002.969977][   T39]  ? clear_bhb_loop+0x60/0xb0
[ 1002.970018][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1002.970041][   T39] RIP: 0033:0x7f9b3a3815dc
[ 1002.970066][   T39] RSP: 002b:00007ffec822b6f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1002.970092][   T39] RAX: 0000000000000064 RBX: 00007f9b3b104620 RCX: 00007f9b3a3815dc
[ 1002.970109][   T39] RDX: 0000000000000064 RSI: 00007f9b3b104670 RDI: 0000000000000003
[ 1002.970132][   T39] RBP: 0000000000000000 R08: 00007ffec822b744 R09: 000000000000000c
[ 1002.970147][   T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 1002.970162][   T39] R13: 0000000000000000 R14: 00007f9b3b104670 R15: 0000000000000000
[ 1002.970198][   T39]  </TASK>
[ 1002.970239][   T39] 
[ 1002.970239][   T39] Showing all locks held in the system:
[ 1002.970252][   T39] 1 lock held by khungtaskd/39:
[ 1002.970266][   T39]  #0: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1002.970374][   T39] 4 locks held by kworker/u8:13/2076:
[ 1002.970389][   T39]  #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 1002.970591][   T39]  #1: ffffc90005907b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 1002.970651][   T39]  #2: ffffffff8e88de20 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0
[ 1002.970788][   T39]  #3: ffffffff8e89af38 (rtnl_mutex){+.+.}-{4:4}, at: fib6_rules_net_exit_batch+0x20/0xc0
[ 1002.970908][   T39] 2 locks held by getty/5558:
[ 1002.970922][   T39]  #0: ffff8881437cb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1002.971072][   T39]  #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460
[ 1002.971142][   T39] 3 locks held by kworker/u9:4/5811:
[ 1002.971155][   T39]  #0: ffff8880291a2138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 1002.971212][   T39]  #1: ffffc90004ce7b80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 1002.971270][   T39]  #2: ffff88805744cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[ 1002.971333][   T39] 3 locks held by kworker/1:9/5987:
[ 1002.971352][   T39] 1 lock held by syz-executor/10505:
[ 1002.971365][   T39]  #0: ffffffff8e89af38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[ 1002.971515][   T39] 1 lock held by syz-executor/10745:
[ 1002.971528][   T39]  #0: ffffffff8e89af38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90
[ 1002.971772][   T39] 1 lock held by syz-executor/10769:
[ 1002.971786][   T39]  #0: ffffffff8e89af38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90
[ 1002.971845][   T39] 2 locks held by syz-executor/10819:
[ 1002.971857][   T39]  #0: ffffffff8edaa058 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1002.972106][   T39]  #1: ffffffff8e89af38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90
[ 1002.972177][   T39] 1 lock held by dhcpcd-run-hook/10951:
[ 1002.972193][   T39] 
[ 1002.972199][   T39] =============================================
[ 1002.972199][   T39] 
[ 1002.972209][   T39] NMI backtrace for cpu 0
[ 1002.972237][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1002.972262][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1002.972275][   T39] Call Trace:
[ 1002.972284][   T39]  <TASK>
[ 1002.972293][   T39]  dump_stack_lvl+0x189/0x250
[ 1002.972336][   T39]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1002.972364][   T39]  ? __pfx__printk+0x10/0x10
[ 1002.972397][   T39]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1002.972511][   T39]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1002.972550][   T39]  ? __pfx__printk+0x10/0x10
[ 1002.972578][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1002.972606][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1002.972646][   T39]  sys_info+0x135/0x170
[ 1002.972678][   T39]  watchdog+0xf95/0xfe0
[ 1002.972717][   T39]  ? watchdog+0x20a/0xfe0
[ 1002.972752][   T39]  kthread+0x711/0x8a0
[ 1002.972792][   T39]  ? __pfx_watchdog+0x10/0x10
[ 1002.972817][   T39]  ? __pfx_kthread+0x10/0x10
[ 1002.972846][   T39]  ? rt_spin_unlock+0x150/0x200
[ 1002.972873][   T39]  ? rt_spin_unlock+0x161/0x200
[ 1002.972894][   T39]  ? __pfx_kthread+0x10/0x10
[ 1002.972926][   T39]  ret_from_fork+0x599/0xb30
[ 1002.972955][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[ 1002.972992][   T39]  ? __switch_to_asm+0x39/0x70
[ 1002.973023][   T39]  ? __switch_to_asm+0x33/0x70
[ 1002.973055][   T39]  ? __pfx_kthread+0x10/0x10
[ 1002.973088][   T39]  ret_from_fork_asm+0x1a/0x30
[ 1002.973147][   T39]  </TASK>
[ 1002.973173][   T39] Sending NMI from CPU 0 to CPUs 1:
[ 1002.973201][    C1] NMI backtrace for cpu 1
[ 1002.973219][    C1] CPU: 1 UID: 0 PID: 5987 Comm: kworker/1:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1002.973241][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1002.973254][    C1] Workqueue: events_power_efficient wg_ratelimiter_gc_entries
[ 1002.973332][    C1] RIP: 0010:lock_acquire+0x153/0x340
[ 1002.973359][    C1] Code: ff ff ff 65 0f c1 05 7c 0f 14 10 83 f8 01 0f 85 c9 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 <0f> 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 b4
[ 1002.973384][    C1] RSP: 0018:ffffc900058e77e0 EFLAGS: 00000046
[ 1002.973400][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 468b3095c0f8b400
[ 1002.973413][    C1] RDX: 0000000080edc000 RSI: ffffffff8cfd5e7a RDI: ffffffff8b3eef60
[ 1002.973428][    C1] RBP: ffffffff8ad504fa R08: ffffffff8ad504fa R09: ffffffff8dfee718
[ 1002.973443][    C1] R10: dffffc0000000000 R11: fffffbfff1db516f R12: 0000000000000000
[ 1002.973456][    C1] R13: ffffffff8dfee718 R14: 0000000000000001 R15: 0000000000000046
[ 1002.973469][    C1] FS:  0000000000000000(0000) GS:ffff888126e12000(0000) knlGS:0000000000000000
[ 1002.973486][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1002.973499][    C1] CR2: 00005617e90ac048 CR3: 000000006777e000 CR4: 00000000003526f0
[ 1002.973517][    C1] Call Trace:
[ 1002.973524][    C1]  <TASK>
[ 1002.973539][    C1]  _raw_spin_lock_irqsave+0xa7/0xf0
[ 1002.973563][    C1]  ? rt_spin_lock+0x14a/0x3e0
[ 1002.973580][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 1002.973610][    C1]  rt_spin_lock+0x14a/0x3e0
[ 1002.973629][    C1]  ? __pfx_rt_spin_lock+0x10/0x10
[ 1002.973650][    C1]  ? rt_spin_unlock+0x161/0x200
[ 1002.973670][    C1]  wg_ratelimiter_gc_entries+0x5d/0x480
[ 1002.973689][    C1]  ? process_scheduled_works+0x9ef/0x1770
[ 1002.973712][    C1]  process_scheduled_works+0xad1/0x1770
[ 1002.973750][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1002.973781][    C1]  worker_thread+0x8a0/0xda0
[ 1002.973805][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1002.973833][    C1]  ? __kthread_parkme+0x7b/0x200
[ 1002.973863][    C1]  kthread+0x711/0x8a0
[ 1002.973890][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1002.973942][    C1]  ? __pfx_kthread+0x10/0x10
[ 1002.973967][    C1]  ? rt_spin_unlock+0x150/0x200
[ 1002.973987][    C1]  ? rt_spin_unlock+0x161/0x200
[ 1002.974004][    C1]  ? __pfx_kthread+0x10/0x10
[ 1002.974031][    C1]  ret_from_fork+0x599/0xb30
[ 1002.974053][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1002.974079][    C1]  ? __switch_to_asm+0x39/0x70
[ 1002.974106][    C1]  ? __switch_to_asm+0x33/0x70
[ 1002.974134][    C1]  ? __pfx_kthread+0x10/0x10
[ 1002.974160][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1002.974198][    C1]  </TASK>
[ 1002.975486][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[ 1002.975509][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1002.975536][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1002.975550][   T39] Call Trace:
[ 1002.975559][   T39]  <TASK>
[ 1002.975569][   T39]  dump_stack_lvl+0x99/0x250
[ 1002.975600][   T39]  ? __asan_memcpy+0x40/0x70
[ 1002.975647][   T39]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1002.975678][   T39]  ? __pfx__printk+0x10/0x10
[ 1002.975714][   T39]  vpanic+0x237/0x6d0
[ 1002.975746][   T39]  ? __pfx_vpanic+0x10/0x10
[ 1002.975779][   T39]  ? preempt_schedule_common+0x83/0xd0
[ 1002.975813][   T39]  panic+0xb9/0xc0
[ 1002.975844][   T39]  ? __pfx_panic+0x10/0x10
[ 1002.975875][   T39]  ? preempt_schedule_thunk+0x16/0x30
[ 1002.975905][   T39]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1002.975945][   T39]  watchdog+0xfdf/0xfe0
[ 1002.975976][   T39]  ? watchdog+0x20a/0xfe0
[ 1002.976009][   T39]  kthread+0x711/0x8a0
[ 1002.976044][   T39]  ? __pfx_watchdog+0x10/0x10
[ 1002.976070][   T39]  ? __pfx_kthread+0x10/0x10
[ 1002.976113][   T39]  ? rt_spin_unlock+0x150/0x200
[ 1002.976148][   T39]  ? rt_spin_unlock+0x161/0x200
[ 1002.976168][   T39]  ? __pfx_kthread+0x10/0x10
[ 1002.976202][   T39]  ret_from_fork+0x599/0xb30
[ 1002.976230][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[ 1002.976267][   T39]  ? __switch_to_asm+0x39/0x70
[ 1002.976299][   T39]  ? __switch_to_asm+0x33/0x70
[ 1002.976330][   T39]  ? __pfx_kthread+0x10/0x10
[ 1002.976364][   T39]  ret_from_fork_asm+0x1a/0x30
[ 1002.976415][   T39]  </TASK>
[ 1002.976800][   T39] Kernel Offset: disabled