last executing test programs:

4m2.303522449s ago: executing program 4 (id=836):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffd, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}, 0x0)

4m1.997710688s ago: executing program 4 (id=838):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0x5, &(0x7f0000000080))
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4, 0x260, 0xffff}, 'syz0\x00'})
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15)
ioctl$UI_DEV_CREATE(r0, 0x5501)
add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0)
keyctl$link(0x8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r2)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x200)
rmdir(&(0x7f0000000040)='./control\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', 0x0)
r3 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6049, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xc8, 0xc0, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)

3m58.055556827s ago: executing program 4 (id=848):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffd, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}, 0x0)

22.138180556s ago: executing program 4 (id=853):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0x44}}, 0xc801)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsync(r3)
getdents64(r3, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50, 0xffffffffffffffda, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000042c0)={'wlan0\x00'})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x7fff, 0x2, 0x1, 0x1, 0x8d6, 0x8000}, 0x20)

21.135285938s ago: executing program 4 (id=855):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup, 0xffffffffffffffff, 0x4, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

20.412881467s ago: executing program 4 (id=856):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="c21504239e1dc595f0766418b856f059", 0xfffffe99}], 0x2, &(0x7f0000001a00)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000800)}}, {{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000b00)=""/149, 0x95}], 0x2}, 0x6cb}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000030c0)=""/4087, 0xff7}], 0x1}, 0xa8}], 0x3, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "46e6be6fd15cf8388c987e440717e7304fe9d4b5256a05221bc207a185d1c335af366e639445069c3fc541cd9308302ce03dda9f8687a9847f51d554cd2b51af"}, 0x48, 0xfffffffffffffffe)
keyctl$get_security(0x11, r3, 0x0, 0x0)
r4 = socket(0x40000000002, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001080)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x6c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000300000000000000000000000000000000000000000000ffffffff0000000000000000b7650000065f18a00f8be51d4b0bc4a16dfc00007fffffff000000000000020000000000ffffffff0100000003000000000000000000726f736530020000000000000000000069705f767469300000000000000000fc68706464700100000000000000000000e318716c30000000f5ff00000000eddcaaaaaaaaaa00ffffff165e6e0000ffffffff000200000000000070000000f0000000280100003830325f3300000000000000003f000000000000000000000000000000bf0600080000000000000000000180004000006e6661634f6c00000000fbfaffffffffffffff0000000000000000bbf9000000280000000000000073797a3100006de00aa91eb21ad80000fa00050000000000000000000000000000000000000300006d61fe6b00000000000000000000000019bf3efa54c2da8100ff0100000000000000000000a1fa19a6ffffffff000000000000000000000000000000660500000000000000000000000000000000000000001802000000c27b6a760001000000ffffffff00000000"]}, 0x230)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa2000000000000f8ffffffb703000008000000b704003e0600000085000000010000009585c80d7f9ad9635abeb890b036b466ead8acbc7ca02411bb411ccb3f09a319441ab718f0a2fb5f161db78ea5806ebcc4acb3578e7a5beb7da0a0b6f26acbe7c79b48acac5a6d61d112b346ba3db711d1216e1713cbf243b34205f1c10001d4eae38206c1f9f96202e8be3f00e86c2d488f16a9ab417a466cd08f139730597a9f25d5f9503861caa0df1910bfeedb7b7d55a248d389f326ec35b34032c9b7737342aed2dbe6e10fae50e03fcfcdcf21613b76d36b00"/254], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x10000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, &(0x7f00000002c0)}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
syz_emit_ethernet(0xffffffffffffffdf, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000b8a78e00b8e786dd604868a300003300fc020000000000000000000000000001fe8000000000000000e600000000aa00"], 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x800, 0x9}]})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x59, 0xf1, 0x10, 0x582, 0xe6, 0x4e06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xe2, 0xb2}}]}}]}}, 0x0)

16.565594916s ago: executing program 3 (id=867):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1100420}, 0xc, &(0x7f00000009c0)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYBLOB="020026bd7000fbdbdf2500000000", @ANYBLOB="0400028008000100", @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65", @ANYRES32=0x0, @ANYBLOB="14006424844b05f146fe8145602b9f32b6e3ae99b671334449549096ec788dba02429d8040baf9dbd562637b4994ab1cf12a2412df5861cbbc3d725b9ddd53a62404b0caa65398", @ANYRES8=r0, @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0x48090}, 0x20044004)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
umount2(&(0x7f0000000500)='./file0\x00', 0xc)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
io_uring_setup(0x336b, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r1})
r2 = socket(0x2b, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYRES8], 0x1c}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20)
close_range(r1, r0, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000600)="5bfd78448e224f04431bf7784033bc2087cf3372758220d29319ea32d2f52c5aec43df28767d02a62ead9460f904ba09c51f0ad4a9dc6c7baf93ace452eae3d0cf212b967d52f1dfb69bfa8d5b25cfbd7bf72339d019d89cc651fa0878779e5fa2e276cde759388e0ea1816615da508f35322c980430890203282c64db19e4c462cae9d4353dc11fceb83299014df5e6b52dd42a99d6c4ad7e066f091304475d4dc3b6157ded8e700e3709fbaf146cbc0a9f22a6b95702592bd843bde932543b1bc5b7b95c37b04888", &(0x7f00000001c0)=""/28}, 0x20)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno\x00', 0xb)
shutdown(r6, 0x2)

12.862822s ago: executing program 3 (id=871):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000200)="2227a019d5e7f8e7f37b8483f12eb9716ddff30653c2fcc91a7b93d9032615e616b9cce3b11b24eaacf7cd5730342f767c2264cea4847dd424cf02e86f062c640259dca922a664d47b586c99e65c4f1ef29c5911746568639e844f7ab079f91b7e24d3cf0f21", 0x66}], 0x1}}], 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0)
lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f00000000c0)=0x10, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0xc274, {0x2, 0x90, 0x200, 0x3ff, 0xfffffffb, 0x1}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

12.537373483s ago: executing program 0 (id=873):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_open_dev$radio(0x0, 0x1, 0x2)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000140), 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_ZONE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000100), &(0x7f0000000180)=0x4)
socket$inet(0x2, 0x0, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x0)
sendto$inet6(r2, &(0x7f0000000540)="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", 0x1000, 0x40, &(0x7f00000003c0)={0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r3 = gettid()
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

11.566077892s ago: executing program 3 (id=875):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000240)=0x5, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x2, 0x7, 0x4b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7, 0x8}})
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904"], 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x8)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x23, 0x0, "093f38050b94725997f7ff898a3f9a7518bf274943a186c89a051c531b5ad251ff1e26aefe42b30d4edd4dc049ad87c56cd0c3628976cc00"}, 0xd8)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r4)
read$char_usb(r5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x0, 0x3d, 0x0, 0x3, 0x24, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, 0x8, 0x40, 0x6, 0x7}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x0, [0x2], [0x80ffff], [], [0x3ffffffffffffff]})

11.326476753s ago: executing program 1 (id=876):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180))
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x1, 0x0, 0x1, 0x2}})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e00000000000100050000e000700000000a0700", @ANYRES32, @ANYBLOB='!\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000003000000040000000a00"/24, @ANYRES32, @ANYBLOB], 0x50)
r6 = dup3(0xffffffffffffffff, r5, 0x80000)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={@local, 0x74})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r7, &(0x7f0000000280)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="15000000080000000200"/20, @ANYRES32, @ANYBLOB="00000000ffff00000008d9000000000000000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r10, 0x0, 0x0}, 0x10)
dup3(r9, r8, 0x0)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x402, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0)

11.120156936s ago: executing program 0 (id=877):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x3, &(0x7f0000000040)=0xfffffffffffffe01)
unshare(0xa000400)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/nfsfs\x00')
write$P9_ROPEN(r0, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
flock(0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil)
shmctl$IPC_SET(r4, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x10001, 0x59, 0x4, 0xf, 0x0, 0x0, 0xfff8})
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r3, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="53a1b228144d4835415007b390c577cc8a52baa9acba00f1dd7513f66663907dd44196b10d83678ae900d813987c30ec", 0x30}, {&(0x7f0000000540)="0b8b61a9d3983220d21a6c51b2595f671ffd4f674d81bec0e74d44fc1f87c6699a37d7dc912a573f5160648d2dc6dcb9b7fadbfa5f6d0b77afb8e72fc808ca522704d3a40c10a4ec42cef49e0f14cfed658cd906fbfbd5662ad2d46f866d5822", 0x60}, {&(0x7f0000000700)="ecb0cf337e24fac56e2538eeef46cfc55416975a2b339dc2fd50692d3a8701efab83f5d5522b4d66e05b95861dbd39ec103f21789acad70354be14337dee47726ee004957151164ff869fd080c8aba3cbbb98dc6833516bd27cea00e2bcf832865128a661ee2d8bb45952d584728fc7b3d9031f3fca7780d3345a6386a1380b311cbf7dcfcc6f0cc62cef4971d77e32d4df628932e98b716b22833c4f753ae66f24ad52ad704929d72860c28223013a4e9e1f1d0457b2ced6397ba", 0xbb}, {&(0x7f0000000340)="88b1b408f4505cceda1a52bd9275c1cee323958beab018ed3fcfbda5a40856fff0e5775f3964edba0dffc9d6d5781f0cd36e643553f83c877d4abcf0197bdc9e0420107e5ce648500ee9d4e1d6f9b70f882178e1d16aedb5ac18916125c173da0679e5256e3494915f76f31d", 0x6c}, {&(0x7f0000000880)="f3800fa39c041d1b847639be7e710c9d84b36d726fd1c0c270e96d7301800d1474a8eb421e917e4356d41fe994c2f77cbe4d1c995b1457fe265375b93d0921e88a50b1ecd43d26e80ac566f640c663150d78beb087b3b94a4abfe1f4595f787d80ddb07bd31da39d135514a9bb1489bef35ef7a524ce59fcada09cab615172ab3d844b24bb76d2b1443a7942708f845d143499446d609aba4d95531eb7396d6606b9d0e6f559fb04ec9352e6dc104d1f6d89e4157200fea77e", 0xb9}, {&(0x7f00000009c0)="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", 0x145}, {&(0x7f00000007c0)="3efce8a8cebdc7241cb440f11fea781548d34d5e722a5dba696e4537ea944559f4e059a3fe4330959c11510fa33e1c42452283b13d4c83a23330b6408a9be851c6236b43a9ea7afb34e1a990513670a5c28bc7e3214ef988fed2004e84214e139f098cdd67c5f34c9080698ef5b3624d7da6c42114782f19b032ea52", 0x7c}, {&(0x7f0000000940)="c8", 0x1}, {&(0x7f0000000640)='i', 0x1}], 0x9}}], 0x1, 0x7c9ce320e12db95)
sendfile(r3, r2, 0x0, 0x4000000000010046)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
read(r2, &(0x7f0000000000)=""/21, 0x15)

10.044503393s ago: executing program 1 (id=878):
socket$isdn(0x22, 0x2, 0x25)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x8000002}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f00000003c0)=0xe03, 0x4)
r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0xc, 0x2000, @fd_index=0x2, 0x1, 0x0, 0x0, 0xa, 0x1, {0xfffe, r0}})
r1 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_0\x00'}]}, 0x3c}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x2f4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, 0x9b}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0xffff9c6c, @private1={0xfc, 0x1, '\x00', 0x1}, 0xbc5}, @in6={0xa, 0x4e23, 0x3, @remote, 0x7}, @in6={0xa, 0x4e24, 0x4, @empty, 0x99}, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}, 0x7180}], 0xbc)
socket$kcm(0x10, 0x2, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x3, r6, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})
ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000080)={0x28, 0x7, r6, r6, 0x1e, 0xfffffffffffffffc})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x62, 0xa, 0xc}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af34514000cc0080020000700020006001f0006000000f6a6bf9082545314000056a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e45", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

9.912938829s ago: executing program 0 (id=879):
r0 = getpid()
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='\xc7\xb1\xed\xa2\x8b\xca\xca\xbe\xa0\xc1\xd0\xfbi\xa4b\xfc\x8a\xb1{\xd0O\xf5\xfaG\x16\x81ry\x05m=\x9a461\x91`g\xc8}V\xda\x9af:\xd1\x8c\xd6\xd6\x8a\xf4 \xcb\x99\x8a\x95\x17\xd6', 0x0)
r4 = fsopen(&(0x7f0000000000)='udf\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0xfffd)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_pidfd_open(r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file0\x00'})
futex(&(0x7f0000000080)=0x2, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1, 0x0)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffffc, @loopback, 0x7fff0}, 0x1c)

9.235901078s ago: executing program 1 (id=880):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8.854944966s ago: executing program 2 (id=881):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000580)={0x2c, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x10)

8.773889856s ago: executing program 0 (id=882):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0)
copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x7, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000c80))
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
r2 = dup(r1)
write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00', {}, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x776], [0x5, 0x0, 0x0, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1]}, 0x45c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0)
close(r3)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000000000000000000002001000000004d521"], 0x20}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b1b, &(0x7f0000000000)={'virt_wifi0\x00', @random})
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x25)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
fallocate(r4, 0x4, 0x4, 0x6)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="24005a8020000180140003000000000000000000000000000000b070"], 0x40}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000140)={0x5, 0x2, 0x73, 0x9}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xea7e8000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bda000/0x4000)=nil, 0x4000, 0x0)
pipe(&(0x7f0000000280))
write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7)

8.689604044s ago: executing program 2 (id=883):
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0)
keyctl$setperm(0x5, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009c9abc0825105f0029fe0102030109021200caa70000000904"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x0)
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, "d57f8080fc2b719aeafe679ea1376f83f99dfa2c00ff00"})
socket$xdp(0x2c, 0x3, 0x0)

8.145493866s ago: executing program 1 (id=884):
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0)
keyctl$setperm(0x5, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009c9abc0825105f0029fe0102030109021200caa70000000904"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x0)
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, "d57f8080fc2b719aeafe679ea1376f83f99dfa2c00ff00"}) (fail_nth: 1)
socket$xdp(0x2c, 0x3, 0x0)

7.64951142s ago: executing program 3 (id=885):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800008e"])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x12c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_USERDATA={0xf5, 0xd, 0x1, 0x0, "f621dbc8fd5d27fa3b430353d6bb2d663c75093ee7be45489c595eb6fa24e86b11241b06f44b02d46ad9c0999560bca297c42f6201b9a5d50429f6da822e8a664f8c4549ab2db7c8229d3b7d0931fb6e161cb6818573a2271c20255e824e77482d9627594ded91a50e7168775a64f9ddbca5148d9d657ac977cafa7efaab668626b830455c8526e507058150ef7f6d0a7f7939087658f942dce74d398efa31908aad5327b542c619f7701342838c2dbdf506fa3cf541bb2804767cdd846ea6ab6bd11f4b27058850f4e1bdbdab13828ede4723a981b66c047c8013bb263c4e647f2cea0f6e73d398c49156c11a893ec59e"}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0x1ec}}, 0x0)
r6 = dup(r4)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="9a92bbdf6dbabed28994e4b6759616a43ff8f024d589ccd0", 0x18)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
setsockopt(r8, 0x65, 0x1, &(0x7f0000000080), 0x1d0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000001"])
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000f103"])
bind$can_raw(r8, &(0x7f0000000000), 0x10)
r12 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r12, 0x65, 0x1, &(0x7f0000000080), 0x1d0)
bind$can_raw(r12, &(0x7f0000000000), 0x10)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r15=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r15}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x54}}, 0x0)
dup3(r7, r8, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r6, 0x0)

6.966955678s ago: executing program 3 (id=886):
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x1a7)
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x8012, r1, 0x0)
r2 = syz_io_uring_setup(0x7667, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000000)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100))
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0})
io_uring_enter(r2, 0x2ec, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x40000)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x2)
r7 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r7, 0x0, 0xcf, 0xfffffffffffffffe, &(0x7f0000000080)=0xfffffffffffffce1)
mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r6, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000000c0)=0x10)
keyctl$setperm(0x5, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009c9abc0825105f0029fe0102030109021200caa70000000904"], 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'wrr\x00'}, 0x2c)
sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r10 = syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x0)
ioctl$EVIOCSKEYCODE_V2(r10, 0x40284504, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, "d57f8080fc2b719aeafe679ea1376f83f99dfa2c00ff00"})
socket$xdp(0x2c, 0x3, 0x0)

6.94541674s ago: executing program 0 (id=887):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
gettid()
ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000080), 0x1003)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x4c}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000000000000700000044042ef100000000825ed8e369ddfca1ef5d7f380f451b49d66c90080d88905feb5327ebf26cd53e0400b880a76dbd9ca12a2a425f8162111f0d7ec234c9b2d2ffcd75515386c8efe3a3954fa770b8d2bba40fb56dda7b602d262b0cb6fb75f7123f22dbcce3541b87b84b42cfbe2ec8aaa0b1bcd5936fae1e3d1e8c3c6fa17e83"], 0x18}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x377000, 0x2)
sendto$inet(r2, &(0x7f0000000000)='o', 0x1, 0x8041, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={0x0}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f00000000c0)=0x401, 0x4)
getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f00000002c0)=""/2, &(0x7f0000000200)=0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="240100001600010000d61300000000000000200a0000000000000000000000000000e0000002000000000000000000e5ffffff000b00000000000000208000e2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000006c000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000010000800000000009000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff0000000000000000000000000000000000000000000000003210000008001e000000000024001b0002000000000000000000000000000000000000001000"/220], 0x124}}, 0x0)

6.43800736s ago: executing program 2 (id=888):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}})
io_uring_enter(r1, 0x6b4d, 0x0, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x3a0, 0xe0, 0x188, 0xffffffff, 0x188, 0xe0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @empty, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400)

6.321176641s ago: executing program 2 (id=889):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xf}]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r3, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500280600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c20000907800001e143500000000000000ff030000000000000000"], 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00')
pread64(r5, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)
socket$inet_sctp(0x2, 0x4, 0x84)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xfc)
listen(r4, 0x2000)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r6, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{}, "3f968a231afa0e18", "4a952e4ea416ad75f769d6386c3c044b", '\by\x00', "e4eb37b07ad86ed7"}, 0x28)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082104, 0x0)
pipe2(&(0x7f0000000080)={<r7=>0xffffffffffffffff}, 0x80800)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/4096, 0x1000, 0x0, &(0x7f0000000240)=""/65, 0x41}, &(0x7f0000000300)=0x40)
ioctl$EVIOCGVERSION(r7, 0x80044501, &(0x7f0000000180)=""/175)

5.517037572s ago: executing program 1 (id=890):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x3, 0x3a, 0xfffffffe}, 0x1c)
getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020711e0f200000000000010902240001000000f2080400000103000000092100000001220500090581030000000000"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
mknodat(r3, &(0x7f0000000080)='./file0\x00', 0xfff, 0x0)
execveat(r3, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x9)
sendmmsg$inet(r4, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0x2, 0x3, @remote}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x20}}], 0x2, 0x0)
syz_usb_control_io(r1, &(0x7f0000000080)={0x18, &(0x7f00000000c0)={0x0, 0x0, 0x6, {0x6, 0x0, "57e13f22"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newsa={0xf8, 0x10, 0x1, 0x1, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev, 0x4e23, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0xa0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, @in=@multicast1, {0x0, 0x3, 0x0, 0x0, 0x3, 0x2}, {0x1000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa}, [@tfcpad={0x8, 0x16, 0x30f5e9ae}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40444}, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x3, 0x3a, 0xfffffffe}, 0x1c) (async)
getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020711e0f200000000000010902240001000000f2080400000103000000092100000001220500090581030000000000"], 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r2, 0x0, 0x0) (async)
mknodat(r3, &(0x7f0000000080)='./file0\x00', 0xfff, 0x0) (async)
execveat(r3, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) (async)
socket$inet(0x2, 0x3, 0x9) (async)
sendmmsg$inet(r4, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0x2, 0x3, @remote}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x20}}], 0x2, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000080)={0x18, &(0x7f00000000c0)={0x0, 0x0, 0x6, {0x6, 0x0, "57e13f22"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newsa={0xf8, 0x10, 0x1, 0x1, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev, 0x4e23, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0xa0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, @in=@multicast1, {0x0, 0x3, 0x0, 0x0, 0x3, 0x2}, {0x1000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa}, [@tfcpad={0x8, 0x16, 0x30f5e9ae}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40444}, 0x0) (async)

5.074053486s ago: executing program 2 (id=891):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
syz_emit_ethernet(0xbe, &(0x7f0000000380)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "28dbacc4f5645e596404a651f9a61eca168d7b087c8f3fe443309c37fc7ee69e", "985fe22813768a93c3763a1c308281ad32d5528a087b03960637190405bfbe087a52c50b59594f8c3dddfa53044757ae", "9446f7322682c738a2613923bbdfddb5fb2ee2172ca7482974683918", {"0ae9abd73b569218436e7d801fb4d226", "db7a7ab493df90f1e3d0ca638add0f29"}}}}}}}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_012={0x0, 0x1, 0x2}, @local=@item_012={0x2, 0x2, 0xa, "39c9"}, @global]}}, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000380)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "28dbacc4f5645e596404a651f9a61eca168d7b087c8f3fe443309c37fc7ee69e", "985fe22813768a93c3763a1c308281ad32d5528a087b03960637190405bfbe087a52c50b59594f8c3dddfa53044757ae", "9446f7322682c738a2613923bbdfddb5fb2ee2172ca7482974683918", {"0ae9abd73b569218436e7d801fb4d226", "db7a7ab493df90f1e3d0ca638add0f29"}}}}}}}, 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) (async)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_012={0x0, 0x1, 0x2}, @local=@item_012={0x2, 0x2, 0xa, "39c9"}, @global]}}, 0x0}, 0x0) (async)

249.656247ms ago: executing program 0 (id=892):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f000001aa80)=""/102380, 0x18fec}], 0x1, 0x0, 0x2000042)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0)
recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r2 = fcntl$getown(r1, 0x9)
ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x10000, 0x2002)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x20044020)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000780)=""/76, 0x1c, 0x4c, 0x0, 0xb, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x5e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
iopl(0x3)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x30000)
bpf$BPF_GET_PROG_INFO(0x15, 0x0, 0x0)
r3 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x7)
write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12)
write$proc_mixer(r3, 0x0, 0x150)
r5 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\bxJzp4/\xf90\xa4\xadA\t\x00\x00\x00\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b/p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bAS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x7f\xfa$E\xc4\x16\x87\xf6\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x01\xe7\xfe\'\xfeUtI\xe7\xe1\xe2\xb9*\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x001\xa7\xfa\xe8\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\x96\rN\xc9\x91\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xb0\xf9\xf7p\xb5;\xb3^\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x8b\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \x06\x00\x00\x00\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x17\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\x87J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x00\x00\x00\x00\b\xb6\xd5\xe8\xb5:\xbd\xb8\x01}\xfeH\x1c\xa1\xc5\x9b\xf2u\xa8x\xe2\x8cZ\xd1o\xd6\xc9E\x19u&[\xabet\x1b\xc6\xfe\xfc\xc7U\"bm`\xfa\x1d\"\xac\x1cw\xe4\xb3\xc2\xe9\x17\x9e\xadP\xa5\x84mOG\x85E\x9d\xdc~\x02\x81!#\x1e\xe5\aLK\xe1m\xc0\x93Cz\x8c\xadh\xde\xaf\xad\xbc\xd3\x98\xba\xb9\x94\xb4\x9e\f\x89\x82\xdc\xd9e\xe7\x8b\xa2O\x1c\r\x9fq\xc0Ew\x00\xdb\xbf\x19*\xb7\xb0\xa42\xd1\x9a\xfa\xc1\x0e\xbe\xf0m\xea\xdf\x12\xc8G\xc2\xfc\xa8\xe7\xbc\x93\xe8\xd4\xcbd\x1f\xf8g5\xe3\xf0o\x8a\xca\xfc5B\x90\xc0{\xaa\x01x\xecc\x80\x97\xbeK\xb6v\xcb\xd7E\xc7\x90/O\x95D\xc1\xd6\x99\xe7\'\xc6\x00'/1315, 0x6)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000001180)={0x6, '\x00', {}, 0x8})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x3}})
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0)
io_uring_setup(0x506f, &(0x7f00000006c0)={0x0, 0x32d6, 0x4, 0x3, 0x1c4, 0x0, r4})

248.890619ms ago: executing program 3 (id=893):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x48)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
process_madvise(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="38231520", 0x4}], 0x1, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x48) (async)
getpid() (async)
syz_pidfd_open(r0, 0x0) (async)
process_madvise(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="38231520", 0x4}], 0x1, 0x3, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) (async)

88.129308ms ago: executing program 2 (id=894):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000200)={0x1, 0x0, [{0x80000008, 0xfff, 0xfffffff9, 0x7, 0x5}]})
socket$nl_netfilter(0x10, 0x3, 0xc)

0s ago: executing program 1 (id=895):
socket$nl_xfrm(0x10, 0x3, 0x6)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000540)={0x80000001, 0x5, 0x0, 'queue0\x00', 0x6})
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, 0x0, &(0x7f0000001dc0))
r0 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\"\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
r1 = fcntl$dupfd(r0, 0x0, r0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffff1f, 0x12, r1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x0, 0x400}}, {{@in=@private, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8)
r3 = socket$netlink(0x10, 0x3, 0x6)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700000000000000000000000000dd80d18a", 0x48}], 0x1)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
preadv(r1, &(0x7f0000000280)=[{0x0, 0x41}, {&(0x7f0000000080)=""/146, 0x92}], 0x2, 0x0, 0x0)
r4 = syz_io_uring_setup(0x7b50, &(0x7f0000000440)={0x0, 0x8518, 0x200, 0x2, 0x296}, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_setup(0x561e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x11b, 0x0, r4})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x82, &(0x7f0000000100)={r6}, 0x8)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x7, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x6e6bb5, 0x2, {0x6, 0x3c, 0xbc, 0x4, 0x0, 0xe49c, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x26}, @in=@remote}}]}, 0x50}, 0x1, 0x7}, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockname(r8, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

 idProduct=0ce6, bcdDevice= 0.00
[  329.310600][ T8936] Dev loop4: unable to read RDB block 7
[  329.320897][ T1848] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  329.333425][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.342379][ T8936]  loop4: unable to read partition table
[  329.351455][ T5277] usb 5-1: config 0 descriptor??
[  329.357481][ T8936] loop4: partition table beyond EOD, truncated
[  329.364581][ T8936] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  329.364581][ T8936] 
) failed (rc=-5)
[  329.495126][ T1848] usb 4-1: Using ep0 maxpacket: 8
[  329.517328][ T1848] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  329.533623][ T1848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.541659][ T1848] usb 4-1: Product: syz
[  329.563680][ T1848] usb 4-1: Manufacturer: syz
[  329.568332][ T1848] usb 4-1: SerialNumber: syz
[  329.576121][ T1848] usb 4-1: config 0 descriptor??
[  329.789646][ T1848] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  329.806134][ T5277] usbhid 5-1:0.0: can't add hid device: -71
[  329.818152][ T5277] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  329.858131][ T5277] usb 5-1: USB disconnect, device number 51
[  330.165995][ T1848] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  330.180312][ T1848] usb 4-1: USB disconnect, device number 29
[  330.315319][    T9] Error reading MAC address
[  330.340473][   T29] audit: type=1326 audit(1727006406.766:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.2.736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd15ff7def9 code=0x0
[  330.383703][    T9] usb 2-1: USB disconnect, device number 36
[  330.500923][ T8958] netlink: 'syz.4.740': attribute type 8 has an invalid length.
[  330.530544][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'.
[  330.713653][ T1848] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  330.763674][ T5283] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  330.873669][ T1848] usb 4-1: Using ep0 maxpacket: 32
[  330.880499][ T1848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.891807][ T1848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.901994][ T5283] usb 1-1: device descriptor read/64, error -71
[  330.908356][ T1848] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  330.917893][ T1848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.929634][ T1848] usb 4-1: config 0 descriptor??
[  330.945698][ T1848] hub 4-1:0.0: USB hub found
[  331.163803][ T5283] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  331.179819][ T1848] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  331.201816][ T1848] usbhid 4-1:0.0: can't add hid device: -71
[  331.208376][ T1848] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  331.244986][ T1848] usb 4-1: USB disconnect, device number 30
[  331.304087][ T5283] usb 1-1: device descriptor read/64, error -71
[  331.425638][ T5283] usb usb1-port1: attempt power cycle
[  331.794105][ T5283] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  331.832065][ T5283] usb 1-1: device descriptor read/8, error -71
[  331.845667][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.756'.
[  331.880913][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.756'.
[  332.093850][ T5283] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  332.104886][ T9006] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  332.144719][ T5283] usb 1-1: device descriptor read/8, error -71
[  332.166908][ T9016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.179536][   T29] audit: type=1326 audit(1727006408.606:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.4.750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa9a97def9 code=0x0
[  332.254054][ T5283] usb usb1-port1: unable to enumerate USB device
[  332.303690][ T5229] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  332.352146][ T9020] netlink: 172 bytes leftover after parsing attributes in process `syz.4.750'.
[  332.433690][ T5229] usb 4-1: device descriptor read/64, error -71
[  332.673695][ T5229] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  332.803984][ T5229] usb 4-1: device descriptor read/64, error -71
[  332.914170][ T5229] usb usb4-port1: attempt power cycle
[  333.064137][    T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  333.223723][    T9] usb 2-1: Using ep0 maxpacket: 8
[  333.249745][    T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  333.257561][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  333.262133][ T5229] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  333.269237][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  333.288188][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  333.313270][    T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  333.315155][ T5229] usb 4-1: device descriptor read/8, error -71
[  333.321099][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  333.338374][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  333.349555][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  333.372785][    T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  333.380481][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  333.393615][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  333.413339][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  333.448033][    T9] usb 2-1: string descriptor 0 read error: -22
[  333.466715][    T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  333.478702][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.510587][    T9] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  333.583858][ T5229] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  333.614281][ T5229] usb 4-1: device descriptor read/8, error -71
[  333.663758][    T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  333.712188][    T9] usb 2-1: USB disconnect, device number 37
[  333.735859][ T5229] usb usb4-port1: unable to enumerate USB device
[  333.836928][    T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  333.855820][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  333.871954][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  333.884065][    T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  333.897825][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  333.914470][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  333.927054][ T9022] adutux: No device or device unplugged -19
[  333.950114][    T8] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  333.960794][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.969618][    T8] usb 3-1: Product: syz
[  333.977689][    T8] usb 3-1: Manufacturer: syz
[  333.982487][    T8] usb 3-1: SerialNumber: syz
[  334.018481][    T8] usb 3-1: config 0 descriptor??
[  334.031854][    T8] iguanair 3-1:0.0: probe with driver iguanair failed with error -12
[  334.292642][    T8] usb 3-1: USB disconnect, device number 38
[  334.360338][ T9045] usb usb8: usbfs: process 9045 (syz.4.768) did not claim interface 0 before use
[  334.501209][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.769'.
[  334.510896][ T5283] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  334.613697][ T5277] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  334.673719][ T5283] usb 1-1: Using ep0 maxpacket: 16
[  334.681001][ T5283] usb 1-1: config index 0 descriptor too short (expected 64036, got 36)
[  334.696226][ T5283] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  334.708682][ T5283] usb 1-1: config 0 has no interfaces?
[  334.714381][ T5283] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  334.727307][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.737434][ T5283] usb 1-1: config 0 descriptor??
[  334.783922][ T5277] usb 5-1: Using ep0 maxpacket: 16
[  334.790942][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  334.808841][ T5277] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  334.818091][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.827273][ T5277] usb 5-1: Product: syz
[  334.833619][ T5277] usb 5-1: Manufacturer: syz
[  334.833664][ T1848] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  334.838262][ T5277] usb 5-1: SerialNumber: syz
[  334.872869][ T5277] usb 5-1: config 0 descriptor??
[  335.003759][ T1848] usb 2-1: Using ep0 maxpacket: 8
[  335.013514][ T1848] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  335.024318][ T1848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.041666][ T1848] usb 2-1: Product: syz
[  335.046186][ T1848] usb 2-1: Manufacturer: syz
[  335.050846][ T1848] usb 2-1: SerialNumber: syz
[  335.066065][ T1848] usb 2-1: config 0 descriptor??
[  335.681103][    T8] usb 5-1: USB disconnect, device number 52
[  335.888484][ T1848] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[  335.915747][ T1848] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[  335.939817][ T1848] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw
[  336.814866][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'.
[  337.147071][ T9056] coredump: 195(syz.2.772): written to core: VMAs: 36, size 97419264; core: 60029690 bytes, pos 97427456
[  337.216396][ T9084] block device autoloading is deprecated and will be removed.
[  337.243163][ T9084] syz.3.780: attempt to access beyond end of device
[  337.243163][ T9084] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  337.303815][    T9] usb 1-1: USB disconnect, device number 34
[  337.620354][ T9091] AppArmor: change_hat: Invalid input '0m0000000000000002^'
[  337.824341][ T5282] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  338.116343][ T5282] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  338.167270][ T5282] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  338.194007][ T5282] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  338.194027][    T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  338.252277][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.329604][ T9089] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  338.343675][    T8] usb 4-1: Using ep0 maxpacket: 32
[  338.351003][    T8] usb 4-1: descriptor type invalid, skip
[  338.359479][    T8] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  338.362531][ T5282] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  338.407607][    T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  338.450359][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.479696][    T8] usb 4-1: Product: syz
[  338.495102][    T8] usb 4-1: Manufacturer: syz
[  338.513411][ T9100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.787'.
[  338.541817][    T8] usb 4-1: SerialNumber: syz
[  338.579646][    T8] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  338.779497][ T5283] usb 4-1: USB disconnect, device number 35
[  338.825170][    T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  339.003763][ T5282] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  339.015413][    T9] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  339.029464][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  339.059369][    T9] usb 5-1: config 0 has no interface number 0
[  339.068082][    T9] usb 5-1: config 0 interface 255 has no altsetting 0
[  339.078342][    T9] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  339.091643][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.119851][    T9] usb 5-1: config 0 descriptor??
[  339.148186][    T9] usb 5-1: selecting invalid altsetting 0
[  339.165276][ T5282] usb 3-1: Using ep0 maxpacket: 16
[  339.178201][ T5282] usb 3-1: config 0 has an invalid interface number: 4 but max is 0
[  339.196164][ T5282] usb 3-1: config 0 has no interface number 0
[  339.214059][ T5282] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.245307][ T5282] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.256255][ T5282] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  339.267133][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.281756][ T5282] usb 3-1: config 0 descriptor??
[  339.346548][    T9] usb 5-1: USB disconnect, device number 53
[  339.993370][ T9107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.030195][ T9107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.114039][ T5282] usbhid 3-1:0.4: can't add hid device: -71
[  340.168138][ T5282] usbhid 3-1:0.4: probe with driver usbhid failed with error -71
[  340.201932][ T5282] usb 3-1: USB disconnect, device number 39
[  340.304720][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.795'.
[  340.369601][ T9135] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  340.378656][ T9135] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  340.387753][ T9135] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  340.396608][ T9135] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  340.427876][ T9135] vxlan0: entered promiscuous mode
[  340.489842][ T5229] usb 1-1: USB disconnect, device number 35
[  340.933702][ T5229] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  341.042910][ T8756] syz_tun (unregistering): left promiscuous mode
[  341.074090][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.804'.
[  341.115560][ T5229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.134554][ T5229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.147561][ T5229] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  341.157154][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.167781][ T5229] usb 1-1: config 0 descriptor??
[  341.394896][ T5277] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  341.544000][ T5277] usb 4-1: device descriptor read/64, error -71
[  341.572444][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  341.584547][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  341.595438][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  341.605623][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  341.621388][ T5229] isku 0003:1E7D:319C.000F: unknown main item tag 0x0
[  341.636754][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  341.644000][ T5229] isku 0003:1E7D:319C.000F: unbalanced collection at end of report description
[  341.654432][ T5229] isku 0003:1E7D:319C.000F: parse failed
[  341.656574][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  341.660159][ T5229] isku 0003:1E7D:319C.000F: probe with driver isku failed with error -22
[  341.823130][ T5277] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  341.840286][ T5229] usb 1-1: USB disconnect, device number 36
[  341.895139][ T9173] netlink: 'syz.2.808': attribute type 9 has an invalid length.
[  341.911638][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'.
[  341.925044][ T9173] xfrm1: entered promiscuous mode
[  341.930254][ T9173] xfrm1: entered allmulticast mode
[  341.940158][ T9168] chnl_net:caif_netlink_parms(): no params data found
[  341.983674][ T5277] usb 4-1: device descriptor read/64, error -71
[  342.115645][ T5277] usb usb4-port1: attempt power cycle
[  342.178120][ T9168] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.217192][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.247810][ T9168] bridge_slave_0: entered allmulticast mode
[  342.278012][ T9168] bridge_slave_0: entered promiscuous mode
[  342.296232][ T9168] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.307110][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.315298][ T9168] bridge_slave_1: entered allmulticast mode
[  342.325046][ T9168] bridge_slave_1: entered promiscuous mode
[  342.343800][ T5229] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  342.372727][ T9186] netlink: 'syz.1.811': attribute type 29 has an invalid length.
[  342.420735][ T9168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  342.449042][ T9168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.471207][ T9187] netlink: 'syz.1.811': attribute type 29 has an invalid length.
[  342.479827][ T5277] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  342.510842][ T5229] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  342.520715][ T5277] usb 4-1: device descriptor read/8, error -71
[  342.563783][ T5229] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  342.618209][ T5229] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  342.646043][ T9168] team0: Port device team_slave_0 added
[  342.653030][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.656847][ T9191] loop2: detected capacity change from 0 to 7
[  342.666945][ T9168] team0: Port device team_slave_1 added
[  342.693791][ T9191] Dev loop2: unable to read RDB block 7
[  342.696173][ T9182] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  342.728950][ T5229] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  342.742528][ T9191]  loop2: unable to read partition table
[  342.759845][ T9191] loop2: partition table beyond EOD, truncated
[  342.786116][ T9193] netlink: 'syz.1.813': attribute type 30 has an invalid length.
[  342.803733][ T5277] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  342.814397][ T9191] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  342.869166][ T9191] usb usb6: usbfs: process 9191 (syz.1.813) did not claim interface 0 before use
[  342.905795][ T9193] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  342.936236][ T5277] usb 4-1: device descriptor read/8, error -71
[  342.962393][ T9193] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  343.017218][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.039253][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.073337][ T9168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.074645][ T5277] usb usb4-port1: unable to enumerate USB device
[  343.088107][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.098670][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.127912][ T9168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.205841][ T9168] hsr_slave_0: entered promiscuous mode
[  343.212873][ T9168] hsr_slave_1: entered promiscuous mode
[  343.223990][ T9168] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  343.232915][ T9168] Cannot create hsr debugfs directory
[  343.273815][ T5229] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  343.402720][ T9168] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.439059][ T5229] usb 1-1: Using ep0 maxpacket: 32
[  343.451936][ T5229] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  343.508687][ T5229] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  343.524955][ T5229] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  343.535739][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.546987][ T5229] usb 1-1: config 0 descriptor??
[  343.569055][ T9168] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.597640][ T5229] hub 1-1:0.0: bad descriptor, ignoring hub
[  343.607269][ T5229] hub 1-1:0.0: probe with driver hub failed with error -5
[  343.624519][ T5229] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  343.725754][ T9168] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.744650][ T5233] Bluetooth: hci1: command tx timeout
[  343.849576][ T9168] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.034211][ T9168] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  344.059680][ T9168] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  344.081431][ T9168] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  344.101368][ T9168] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  344.401103][ T9168] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.477230][ T9168] 8021q: adding VLAN 0 to HW filter on device team0
[  344.530975][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.538224][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.563272][ T2577] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.570663][ T2577] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.808606][ T9209] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  344.832767][ T9211] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  344.840218][ T9168] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.025013][ T5278] usb 3-1: USB disconnect, device number 40
[  345.057104][ T9168] veth0_vlan: entered promiscuous mode
[  345.113591][ T9168] veth1_vlan: entered promiscuous mode
[  345.262165][ T9168] veth0_macvtap: entered promiscuous mode
[  345.319122][ T9168] veth1_macvtap: entered promiscuous mode
[  345.357770][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.370971][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.403811][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.438071][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.448832][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.460624][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.474736][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.512390][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.538571][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.570086][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.581071][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.600685][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.615401][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.636660][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.656850][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.687914][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.716600][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.726987][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.737978][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.748581][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.760131][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.770634][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.801264][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.823799][ T5233] Bluetooth: hci1: command tx timeout
[  345.832639][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.854508][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.875490][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.936313][ T9168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.961803][ T9168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.977518][ T9168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.993033][ T9219] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  346.002768][ T9219] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  346.011095][ T9168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.030640][ T9219] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  346.087991][ T9219] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  346.148521][ T9219] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  346.206855][ T9219] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  346.221870][ T9219] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  346.274325][ T9219] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  346.296304][ T9219] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  346.302259][ T9219] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  346.309070][ T8590] usb 1-1: USB disconnect, device number 37
[  346.339039][ T9219] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  346.491687][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.502884][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.558356][ T2577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.568453][ T2577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.713790][ T8590] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  346.774757][ T5282] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  346.883866][ T8590] usb 4-1: Using ep0 maxpacket: 32
[  346.913192][ T8590] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  346.921576][ T8590] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  346.958043][ T8590] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  346.984360][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.996574][ T8590] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  347.017990][ T8590] usb 4-1: config 0 interface 0 has no altsetting 0
[  347.028650][ T8590] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  347.061550][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.063295][ T8590] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  347.089489][ T5282] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  347.102499][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.138532][ T8590] usb 4-1: Product: syz
[  347.147826][ T5282] usb 3-1: config 0 descriptor??
[  347.173144][ T8590] usb 4-1: Manufacturer: syz
[  347.185180][ T8590] usb 4-1: SerialNumber: syz
[  347.206781][ T8590] usb 4-1: config 0 descriptor??
[  347.241096][ T8590] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  347.298621][ T8590] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  347.441385][ T8590] usb 4-1: USB disconnect, device number 40
[  347.470669][ T8590] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  347.635319][ T5282] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  347.662382][ T5282] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  347.692666][ T5282] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  347.730227][ T5282] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  347.744545][ T5282] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  347.752415][ T5282] isku 0003:1E7D:319C.0010: item fetching failed at offset 5/7
[  347.762080][ T5282] isku 0003:1E7D:319C.0010: parse failed
[  347.775672][ T5282] isku 0003:1E7D:319C.0010: probe with driver isku failed with error -22
[  347.843443][   T29] audit: type=1326 audit(1727006424.266:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.4.833" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f909b77def9 code=0x0
[  347.903709][ T5233] Bluetooth: hci0: command 0x0c1a tx timeout
[  348.002747][ T5283] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  348.064037][ T5233] Bluetooth: hci4: command 0x0c1a tx timeout
[  348.070119][ T5233] Bluetooth: hci3: command 0x0c1a tx timeout
[  348.216790][ T5283] usb 1-1: unable to get BOS descriptor or descriptor too short
[  348.235058][ T5233] Bluetooth: hci2: command 0x0c1a tx timeout
[  348.243352][ T5283] usb 1-1: not running at top speed; connect to a high speed hub
[  348.279883][ T5283] usb 1-1: config 81 has an invalid interface number: 106 but max is 0
[  348.301076][ T5283] usb 1-1: config 81 has no interface number 0
[  348.324230][ T5283] usb 1-1: config 81 interface 106 altsetting 196 endpoint 0x1 has invalid wMaxPacketSize 0
[  348.361945][ T5283] usb 1-1: config 81 interface 106 altsetting 196 has an endpoint descriptor with address 0x99, changing to 0x89
[  348.383752][ T5233] Bluetooth: hci1: command 0x0419 tx timeout
[  348.593748][ T5283] usb 1-1: config 81 interface 106 has no altsetting 0
[  350.146822][ T5233] Bluetooth: hci4: command 0x0c1a tx timeout
[  350.202927][ T6201] usb 3-1: USB disconnect, device number 41
[  350.304369][ T5233] Bluetooth: hci2: command 0x0c1a tx timeout
[  350.415032][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'.
[  350.480605][ T5233] Bluetooth: hci1: command 0x0419 tx timeout
[  352.234000][ T5233] Bluetooth: hci4: command 0x0c1a tx timeout
[  352.383853][ T5233] Bluetooth: hci2: command 0x0c1a tx timeout
[  352.543707][ T5233] Bluetooth: hci1: command 0x0419 tx timeout
[  352.746125][ T6201] usb 3-1: new low-speed USB device number 42 using dummy_hcd
[  358.083553][    C1] sched: DL replenish lagged too much
[  365.212559][ T5233] Bluetooth: hci1: command 0x0419 tx timeout
[  375.004476][ T5283] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=30.63
[  375.755952][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.849952][ T5283] usb 1-1: Product: syz
[  383.680732][ T6201] usb 3-1: device descriptor read/64, error -110
[  405.974443][ T6201] usb 3-1: new low-speed USB device number 43 using dummy_hcd
[  410.012580][ T5278] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  412.222490][ T1848] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  412.970178][ T1848] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110
[  417.347500][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  417.690806][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  448.926113][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  448.941107][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  468.768502][ T1848] usb 2-1: USB disconnect, device number 38
[  534.153962][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  534.160383][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  534.503817][ T5283] usb 1-1: can't set config #81, error -71
[  535.560765][ T5283] usb 1-1: USB disconnect, device number 38
[  545.143814][    T7] bridge_slave_1: left allmulticast mode
[  545.149533][    T7] bridge_slave_1: left promiscuous mode
[  545.165150][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.344652][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  545.355163][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  545.365130][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  545.375012][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  545.382632][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  545.391123][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  545.414254][    T7] bridge_slave_0: left allmulticast mode
[  545.419985][    T7] bridge_slave_0: left promiscuous mode
[  545.426175][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.464746][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  545.475033][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  545.485421][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  545.503852][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  545.512430][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  545.520754][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  545.606829][ T9334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  545.616974][ T9334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  545.633971][ T9334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  545.670675][ T9334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  545.680000][ T9336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  545.701544][ T9336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  545.715996][ T9336] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  545.716835][ T9334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  545.730729][ T9335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  545.734117][ T9336] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  545.739137][ T9334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  545.745441][ T9336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  545.760562][ T9334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  545.762050][ T9336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  545.781269][ T9336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  545.789795][ T9334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  545.790585][ T9336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  545.808115][ T9334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  546.273429][    T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  546.290064][    T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  546.304881][    T7] bond0 (unregistering): Released all slaves
[  546.640478][ T9168] syz-executor (9168) used greatest stack depth: 17272 bytes left
[  546.924144][    T7] hsr_slave_0: left promiscuous mode
[  546.939392][    T7] hsr_slave_1: left promiscuous mode
[  546.946536][    T7] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  546.954150][    T7] batman_adv: batadv0: Removing interface: batadv_slave_0
[  546.963770][    T7] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  546.971446][    T7] batman_adv: batadv0: Removing interface: batadv_slave_1
[  547.002084][    T7] veth1_macvtap: left promiscuous mode
[  547.007901][    T7] veth0_macvtap: left promiscuous mode
[  547.013747][    T7] veth1_vlan: left promiscuous mode
[  547.019204][    T7] veth0_vlan: left promiscuous mode
[  547.423748][ T9334] Bluetooth: hci0: command tx timeout
[  547.743835][ T9334] Bluetooth: hci1: command tx timeout
[  547.829077][    T7] team0 (unregistering): Port device team_slave_1 removed
[  547.874042][    T7] team0 (unregistering): Port device team_slave_0 removed
[  547.913755][ T9336] Bluetooth: hci2: command tx timeout
[  547.913764][ T9331] Bluetooth: hci3: command tx timeout
[  547.937846][ T9334] Bluetooth: hci4: command tx timeout
[  548.857452][ T9338] chnl_net:caif_netlink_parms(): no params data found
[  548.903047][ T9341] chnl_net:caif_netlink_parms(): no params data found
[  548.975059][ T9329] chnl_net:caif_netlink_parms(): no params data found
[  548.999600][ T9340] chnl_net:caif_netlink_parms(): no params data found
[  549.062579][ T9339] chnl_net:caif_netlink_parms(): no params data found
[  549.137047][   T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.149990][   T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.287574][   T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.298075][   T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.318065][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.325715][ T9338] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.332922][ T9338] bridge_slave_0: entered allmulticast mode
[  549.341032][ T9338] bridge_slave_0: entered promiscuous mode
[  549.389553][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.397830][ T9338] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.406169][ T9338] bridge_slave_1: entered allmulticast mode
[  549.413210][ T9338] bridge_slave_1: entered promiscuous mode
[  549.442628][   T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.454711][   T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.487063][ T9341] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.494616][ T9341] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.501822][ T9341] bridge_slave_0: entered allmulticast mode
[  549.513836][ T9334] Bluetooth: hci0: command tx timeout
[  549.519392][ T9341] bridge_slave_0: entered promiscuous mode
[  549.615970][   T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.626643][   T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.643759][ T9341] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.650890][ T9341] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.667886][ T9341] bridge_slave_1: entered allmulticast mode
[  549.679315][ T9341] bridge_slave_1: entered promiscuous mode
[  549.703417][ T9340] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.710862][ T9340] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.719321][ T9340] bridge_slave_0: entered allmulticast mode
[  549.726896][ T9340] bridge_slave_0: entered promiscuous mode
[  549.739747][ T9338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  549.752872][ T9338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  549.812981][ T9340] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.820263][ T9340] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.827910][ T9334] Bluetooth: hci1: command tx timeout
[  549.833766][ T9340] bridge_slave_1: entered allmulticast mode
[  549.840975][ T9340] bridge_slave_1: entered promiscuous mode
[  549.859591][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.872825][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.889156][ T9329] bridge_slave_0: entered allmulticast mode
[  549.896799][ T9329] bridge_slave_0: entered promiscuous mode
[  549.905506][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.912694][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.920118][ T9329] bridge_slave_1: entered allmulticast mode
[  549.927116][ T9329] bridge_slave_1: entered promiscuous mode
[  549.974602][ T9341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  549.983783][ T9334] Bluetooth: hci3: command tx timeout
[  549.994503][ T9334] Bluetooth: hci4: command tx timeout
[  549.994516][ T9336] Bluetooth: hci2: command tx timeout
[  550.052510][ T9339] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.073050][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.084415][ T9339] bridge_slave_0: entered allmulticast mode
[  550.091154][ T9339] bridge_slave_0: entered promiscuous mode
[  550.099880][ T9339] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.107748][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.119325][ T9339] bridge_slave_1: entered allmulticast mode
[  550.126889][ T9339] bridge_slave_1: entered promiscuous mode
[  550.135550][ T9341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.158015][ T9338] team0: Port device team_slave_0 added
[  550.174570][ T9338] team0: Port device team_slave_1 added
[  550.182655][ T9329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.227392][ T9340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.246178][ T9329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.271242][ T9339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.300109][ T9340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.328858][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.342294][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  550.368770][ T9338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  550.398325][ T9339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.416470][ T9341] team0: Port device team_slave_0 added
[  550.428056][ T9341] team0: Port device team_slave_1 added
[  550.480798][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  550.488716][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  550.517202][ T9338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  550.538156][ T9329] team0: Port device team_slave_0 added
[  550.588664][ T9340] team0: Port device team_slave_0 added
[  550.603967][ T9340] team0: Port device team_slave_1 added
[  550.615357][ T9329] team0: Port device team_slave_1 added
[  550.646484][ T9339] team0: Port device team_slave_0 added
[  550.666041][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.673029][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  550.701896][ T9341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  550.815156][ T9339] team0: Port device team_slave_1 added
[  550.831758][ T9338] hsr_slave_0: entered promiscuous mode
[  550.839617][ T9338] hsr_slave_1: entered promiscuous mode
[  550.848507][ T9338] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  550.856233][ T9338] Cannot create hsr debugfs directory
[  550.862547][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_1
[  550.870979][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  550.897763][ T9341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  550.919265][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.927446][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  550.954393][ T9329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  551.011551][   T69] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.030279][ T9340] batman_adv: batadv0: Adding interface: batadv_slave_0
[  551.037560][ T9340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.064114][ T9340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  551.110201][   T69] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.152593][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.170561][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.203516][ T9329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  551.221264][ T9340] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.233584][ T9340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.264642][ T9340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  551.290810][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  551.299255][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.330172][ T9339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  551.343852][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.350821][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.378226][ T9339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  551.415922][   T69] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.542575][   T69] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.586165][ T9336] Bluetooth: hci0: command tx timeout
[  551.609233][ T9341] hsr_slave_0: entered promiscuous mode
[  551.616354][ T9341] hsr_slave_1: entered promiscuous mode
[  551.622454][ T9341] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  551.630135][ T9341] Cannot create hsr debugfs directory
[  551.661732][ T9329] hsr_slave_0: entered promiscuous mode
[  551.668297][ T9329] hsr_slave_1: entered promiscuous mode
[  551.674819][ T9329] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  551.682415][ T9329] Cannot create hsr debugfs directory
[  551.723184][ T9339] hsr_slave_0: entered promiscuous mode
[  551.730628][ T9339] hsr_slave_1: entered promiscuous mode
[  551.739251][ T9339] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  551.747700][ T9339] Cannot create hsr debugfs directory
[  551.827000][ T9340] hsr_slave_0: entered promiscuous mode
[  551.845603][ T9340] hsr_slave_1: entered promiscuous mode
[  551.863916][ T9340] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  551.871524][ T9340] Cannot create hsr debugfs directory
[  551.903682][ T9336] Bluetooth: hci1: command tx timeout
[  552.063983][ T9336] Bluetooth: hci4: command tx timeout
[  552.069557][ T9336] Bluetooth: hci2: command tx timeout
[  552.075140][ T9334] Bluetooth: hci3: command tx timeout
[  552.268859][ T9338] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.446737][ T9338] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.583886][   T69] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.653412][ T9338] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.715288][   T69] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.788869][ T9338] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.861813][   T69] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.926778][   T69] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.194094][   T69] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.327389][   T69] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.450979][   T69] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.567956][   T69] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.664238][ T9336] Bluetooth: hci0: command tx timeout
[  553.849110][   T69] bridge_slave_1: left allmulticast mode
[  553.856039][   T69] bridge_slave_1: left promiscuous mode
[  553.861847][   T69] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.892647][   T69] bridge_slave_0: left allmulticast mode
[  553.913716][   T69] bridge_slave_0: left promiscuous mode
[  553.919520][   T69] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.947257][   T69] bridge_slave_1: left allmulticast mode
[  553.952981][   T69] bridge_slave_1: left promiscuous mode
[  553.960546][   T69] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.969901][   T69] bridge_slave_0: left allmulticast mode
[  553.975792][   T69] bridge_slave_0: left promiscuous mode
[  553.981548][   T69] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.997058][ T9336] Bluetooth: hci1: command tx timeout
[  554.014611][   T69] bridge_slave_1: left allmulticast mode
[  554.020321][   T69] bridge_slave_1: left promiscuous mode
[  554.033711][   T69] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.056385][   T69] bridge_slave_0: left allmulticast mode
[  554.073580][   T69] bridge_slave_0: left promiscuous mode
[  554.079355][   T69] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.104851][   T69] bridge_slave_1: left allmulticast mode
[  554.110562][   T69] bridge_slave_1: left promiscuous mode
[  554.116979][   T69] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.126662][   T69] bridge_slave_0: left allmulticast mode
[  554.132358][   T69] bridge_slave_0: left promiscuous mode
[  554.143969][ T9334] Bluetooth: hci2: command tx timeout
[  554.149436][ T9334] Bluetooth: hci3: command tx timeout
[  554.155165][   T69] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.155616][ T9336] Bluetooth: hci4: command tx timeout
[  555.996899][   T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  556.010307][   T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  556.023297][   T69] bond0 (unregistering): Released all slaves
[  556.169201][   T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  556.183934][   T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  556.195955][   T69] bond0 (unregistering): Released all slaves
[  556.342677][   T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  556.357188][   T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  556.373418][   T69] bond0 (unregistering): Released all slaves
[  556.532857][   T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  556.544490][   T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  556.556237][   T69] bond0 (unregistering): Released all slaves
[  557.824280][   T69] hsr_slave_0: left promiscuous mode
[  557.830245][   T69] hsr_slave_1: left promiscuous mode
[  557.842417][   T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  557.850030][   T69] batman_adv: batadv0: Removing interface: batadv_slave_0
[  557.859158][   T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  557.867584][   T69] batman_adv: batadv0: Removing interface: batadv_slave_1
[  557.879885][   T69] hsr_slave_0: left promiscuous mode
[  557.886079][   T69] hsr_slave_1: left promiscuous mode
[  557.891892][   T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  557.899612][   T69] batman_adv: batadv0: Removing interface: batadv_slave_0
[  557.907812][   T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  557.916034][   T69] batman_adv: batadv0: Removing interface: batadv_slave_1
[  557.927789][   T69] hsr_slave_0: left promiscuous mode
[  557.934174][   T69] hsr_slave_1: left promiscuous mode
[  557.940043][   T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  557.949097][   T69] batman_adv: batadv0: Removing interface: batadv_slave_0
[  557.962611][   T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  557.970217][   T69] batman_adv: batadv0: Removing interface: batadv_slave_1
[  557.981442][   T69] hsr_slave_0: left promiscuous mode
[  557.992011][   T69] hsr_slave_1: left promiscuous mode
[  557.998619][   T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  558.006232][   T69] batman_adv: batadv0: Removing interface: batadv_slave_0
[  558.014912][   T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  558.022375][   T69] batman_adv: batadv0: Removing interface: batadv_slave_1
[  558.087425][   T69] veth1_macvtap: left promiscuous mode
[  558.092989][   T69] veth0_macvtap: left promiscuous mode
[  558.098834][   T69] veth1_vlan: left promiscuous mode
[  558.104279][   T69] veth0_vlan: left promiscuous mode
[  558.110770][   T69] veth1_macvtap: left promiscuous mode
[  558.116475][   T69] veth0_macvtap: left promiscuous mode
[  558.122233][   T69] veth1_vlan: left promiscuous mode
[  558.127610][   T69] veth0_vlan: left promiscuous mode
[  558.135381][   T69] veth1_macvtap: left promiscuous mode
[  558.140944][   T69] veth0_macvtap: left promiscuous mode
[  558.148087][   T69] veth1_vlan: left promiscuous mode
[  558.153482][   T69] veth0_vlan: left promiscuous mode
[  558.160375][   T69] veth1_macvtap: left promiscuous mode
[  558.166191][   T69] veth0_macvtap: left promiscuous mode
[  558.171759][   T69] veth1_vlan: left promiscuous mode
[  558.177213][   T69] veth0_vlan: left promiscuous mode
[  559.002722][   T69] team0 (unregistering): Port device team_slave_1 removed
[  559.053188][   T69] team0 (unregistering): Port device team_slave_0 removed
[  560.003399][   T69] team0 (unregistering): Port device team_slave_1 removed
[  560.051169][   T69] team0 (unregistering): Port device team_slave_0 removed
[  560.985339][   T69] team0 (unregistering): Port device team_slave_1 removed
[  561.033350][   T69] team0 (unregistering): Port device team_slave_0 removed
[  561.934264][   T69] team0 (unregistering): Port device team_slave_1 removed
[  561.980555][   T69] team0 (unregistering): Port device team_slave_0 removed
[  562.635215][ T9338] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  562.670100][ T9338] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  562.689625][ T9338] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  562.722569][ T9338] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  562.825390][ T9329] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  562.895336][ T9329] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  562.916409][ T9329] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  562.964852][ T9329] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  563.119360][ T9338] 8021q: adding VLAN 0 to HW filter on device bond0
[  563.183364][ T9340] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  563.193313][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  563.199933][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  563.232622][ T9340] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  563.256431][ T9340] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  563.269316][ T9340] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  563.310686][ T9338] 8021q: adding VLAN 0 to HW filter on device team0
[  563.427628][  T142] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.434810][  T142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  563.510280][ T9341] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  563.537066][ T9341] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  563.564521][ T9315] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.571678][ T9315] bridge0: port 2(bridge_slave_1) entered forwarding state
[  563.645699][ T9341] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  563.659261][ T9341] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  563.880296][ T9329] 8021q: adding VLAN 0 to HW filter on device bond0
[  563.957244][ T9339] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  563.970673][ T9340] 8021q: adding VLAN 0 to HW filter on device bond0
[  563.999722][ T9329] 8021q: adding VLAN 0 to HW filter on device team0
[  564.030825][ T9339] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  564.058656][ T9339] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  564.087225][ T9339] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  564.128324][ T9315] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.135528][ T9315] bridge0: port 1(bridge_slave_0) entered forwarding state
[  564.169126][ T9340] 8021q: adding VLAN 0 to HW filter on device team0
[  564.188951][ T9338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  564.204949][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.212104][ T9322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  564.267027][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.274224][ T9322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  564.285568][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.292698][ T9322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  564.370412][ T9338] veth0_vlan: entered promiscuous mode
[  564.394983][ T9338] veth1_vlan: entered promiscuous mode
[  564.451568][ T9341] 8021q: adding VLAN 0 to HW filter on device bond0
[  564.529386][ T9341] 8021q: adding VLAN 0 to HW filter on device team0
[  564.549409][ T9338] veth0_macvtap: entered promiscuous mode
[  564.568181][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.575472][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  564.600519][ T9338] veth1_macvtap: entered promiscuous mode
[  564.615721][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.622911][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state
[  564.638681][ T9340] 8021q: adding VLAN 0 to HW filter on device batadv0
[  564.687276][ T9339] 8021q: adding VLAN 0 to HW filter on device bond0
[  564.758803][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  564.773184][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  564.783279][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  564.794533][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  564.808920][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  564.832008][ T9329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  564.889145][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  564.908843][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  564.922303][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  564.942063][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  564.964424][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  564.989509][ T9338] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  565.007034][ T9338] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  565.020722][ T9338] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  565.031568][ T9338] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  565.055662][ T9340] veth0_vlan: entered promiscuous mode
[  565.087584][ T9341] 8021q: adding VLAN 0 to HW filter on device batadv0
[  565.106763][ T9339] 8021q: adding VLAN 0 to HW filter on device team0
[  565.131695][ T9340] veth1_vlan: entered promiscuous mode
[  565.146377][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state
[  565.153566][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  565.291979][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  565.299292][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  565.384747][ T9329] veth0_vlan: entered promiscuous mode
[  565.420254][ T9340] veth0_macvtap: entered promiscuous mode
[  565.460147][ T9329] veth1_vlan: entered promiscuous mode
[  565.476415][ T9340] veth1_macvtap: entered promiscuous mode
[  565.514591][ T9341] veth0_vlan: entered promiscuous mode
[  565.521438][ T2577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.538851][ T2577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  565.600936][ T9340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  565.621572][ T9340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.643370][ T9340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  565.655746][ T9340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.666175][ T9340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  565.677118][ T9340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.695155][ T9340] batman_adv: batadv0: Interface activated: batadv_slave_0
[  565.715451][ T9341] veth1_vlan: entered promiscuous mode
[  565.760152][ T9329] veth0_macvtap: entered promiscuous mode
[  565.777130][ T9340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  565.798452][ T9340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.818319][ T9340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  565.833066][ T9340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.855575][ T9340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  565.872270][ T9340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.893138][ T9340] batman_adv: batadv0: Interface activated: batadv_slave_1
[  565.910950][ T9329] veth1_macvtap: entered promiscuous mode
[  565.923101][ T2577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.941850][ T9340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  565.951659][ T2577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  565.968528][ T9340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  565.981209][ T9340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  566.001249][ T9340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  566.015017][ T9339] 8021q: adding VLAN 0 to HW filter on device batadv0
[  566.061494][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  566.081562][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.091515][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  566.111117][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.121222][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  566.131998][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.154574][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  566.173820][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.192455][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  566.278252][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  566.297316][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.333695][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  566.345166][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.355764][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  566.367468][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.378584][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  566.391815][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.404477][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  566.492292][ T9329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  566.505210][ T9329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  566.521838][ T9329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  566.531631][ T9329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  566.554450][ T1848] usb 1-1: new low-speed USB device number 39 using dummy_hcd
[  566.577934][ T9341] veth0_macvtap: entered promiscuous mode
[  566.603303][ T9339] veth0_vlan: entered promiscuous mode
[  566.631692][ T9341] veth1_macvtap: entered promiscuous mode
[  566.680520][ T9339] veth1_vlan: entered promiscuous mode
[  566.684394][ T1848] usb 1-1: device descriptor read/64, error -71
[  566.708483][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.740998][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.808528][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  566.820514][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.831403][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  566.842352][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.852667][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  566.864470][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.874923][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  566.895194][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.913055][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  566.923904][ T1848] usb 1-1: new low-speed USB device number 40 using dummy_hcd
[  566.934103][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.951670][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_0
[  566.984354][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  566.995120][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.006414][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  567.018062][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.029003][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  567.039529][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.049781][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  567.060715][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.072991][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  567.084254][ T1848] usb 1-1: device descriptor read/64, error -71
[  567.090591][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.101861][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_1
[  567.130370][ T9341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  567.140149][ T9341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  567.150179][ T9341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  567.159739][ T9341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  567.172373][ T9322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.190084][ T9322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.198208][ T1848] usb usb1-port1: attempt power cycle
[  567.211819][ T9322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.222306][ T9322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.249514][ T9339] veth0_macvtap: entered promiscuous mode
[  567.306761][ T9339] veth1_macvtap: entered promiscuous mode
[  567.395244][ T9315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.396047][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  567.416051][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.416773][ T9315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.431670][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  567.445991][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.456550][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  567.472346][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.483340][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  567.495009][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.505649][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  567.516381][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.526848][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  567.538507][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.549735][ T9339] batman_adv: batadv0: Interface activated: batadv_slave_0
[  567.557342][ T1848] usb 1-1: new low-speed USB device number 41 using dummy_hcd
[  567.586286][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  567.596981][ T5278] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  567.609812][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.620482][ T1848] usb 1-1: device descriptor read/8, error -71
[  567.629300][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  567.639907][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.650409][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  567.661103][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.671107][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  567.684046][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.694032][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  567.704660][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.718894][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  567.729630][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.742006][ T9339] batman_adv: batadv0: Interface activated: batadv_slave_1
[  567.784002][ T5278] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  567.820899][ T9339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  567.832721][ T5278] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  567.839859][ T9339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  567.857219][ T5278] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  567.863408][ T9339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  567.866535][ T1848] usb 1-1: new low-speed USB device number 42 using dummy_hcd
[  567.885853][ T9339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  567.892929][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.924172][ T9515] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  567.942087][ T1848] usb 1-1: device descriptor read/8, error -71
[  567.951657][ T9322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.971082][ T5278] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  567.985283][ T9322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.011813][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'.
[  568.094327][ T1848] usb usb1-port1: unable to enumerate USB device
[  568.187571][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.198854][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.226018][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.264786][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.338168][ T9522] xt_cgroup: invalid path, errno=-2
[  568.395528][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.415206][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.433848][ T5281] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  568.610180][ T5281] usb 2-1: Using ep0 maxpacket: 8
[  568.648514][ T5281] usb 2-1: unable to get BOS descriptor or descriptor too short
[  568.660182][ T5281] usb 2-1: config 8 has an invalid interface number: 24 but max is 0
[  568.668823][ T5281] usb 2-1: config 8 has no interface number 0
[  568.677756][ T5281] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11
[  568.702597][ T5281] usb 2-1: config 8 interface 24 has no altsetting 0
[  568.726808][ T5281] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  568.757114][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.773635][ T1848] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  568.792651][ T5281] usb 2-1: Product: syz
[  568.814466][ T5281] usb 2-1: Manufacturer: syz
[  568.822722][ T5281] usb 2-1: SerialNumber: syz
[  568.946823][ T1848] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  568.984336][ T1848] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  569.014521][ T1848] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  569.024629][ T1848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.038507][ T9526] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  569.060471][ T1848] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  569.843704][    T8] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  570.028141][ T9522] vxcan1: entered promiscuous mode
[  570.033841][    T8] usb 1-1: Using ep0 maxpacket: 32
[  570.062226][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  570.096990][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  570.128171][    T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D
[  570.161616][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  570.174408][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  570.215662][    T8] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  570.248790][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.309662][    T8] usb 1-1: config 0 descriptor??
[  570.565045][   T69] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.743955][    T8] ntrig 0003:1B96:000A.0011: unknown main item tag 0x0
[  570.750954][    T8] ntrig 0003:1B96:000A.0011: unknown main item tag 0x0
[  570.807180][    T8] ntrig 0003:1B96:000A.0011: unknown main item tag 0x0
[  570.843759][    T8] ntrig 0003:1B96:000A.0011: unknown main item tag 0x0
[  570.888663][   T69] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.942912][    T8] ntrig 0003:1B96:000A.0011: unknown main item tag 0x0
[  571.063077][    T8] ntrig 0003:1B96:000A.0011: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0
[  571.148373][    T8] usb 1-1: USB disconnect, device number 43
[  571.209575][ T5281] vmk80xx 2-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  571.302701][   T69] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.404987][ T5281] usb 2-1: USB disconnect, device number 39
[  571.487062][ T5229] usb 4-1: USB disconnect, device number 42
[  571.625273][    T8] usb 3-1: USB disconnect, device number 44
[  571.772701][   T69] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.961944][ T9334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  571.970781][ T9334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  571.982349][ T9334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  571.992497][ T9334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  572.004832][ T9334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  572.017122][ T9334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  572.170126][ T9556] vivid-001: =================  START STATUS  =================
[  572.179041][ T9556] vivid-001: Radio HW Seek Mode: Bounded
[  572.213840][ T9556] vivid-001: Radio Programmable HW Seek: false
[  572.220258][ T9556] vivid-001: RDS Rx I/O Mode: Block I/O
[  572.235333][ T9556] vivid-001: Generate RBDS Instead of RDS: false
[  572.241825][ T9556] vivid-001: RDS Reception: true
[  572.259559][ T9556] vivid-001: RDS Program Type: 0 inactive
[  572.277685][ T9556] vivid-001: RDS PS Name:  inactive
[  572.283059][ T9556] vivid-001: RDS Radio Text:  inactive
[  572.291299][ T9556] vivid-001: RDS Traffic Announcement: false inactive
[  572.298732][ T9556] vivid-001: RDS Traffic Program: false inactive
[  572.306613][ T9556] vivid-001: RDS Music: false inactive
[  572.312237][ T9556] vivid-001: ==================  END STATUS  ==================
[  572.460759][   T69] bridge_slave_1: left allmulticast mode
[  572.464487][ T9556] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  572.490197][   T69] bridge_slave_1: left promiscuous mode
[  572.517761][   T69] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.546130][   T69] bridge_slave_0: left allmulticast mode
[  572.552376][   T69] bridge_slave_0: left promiscuous mode
[  572.558760][   T69] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.773665][ T1848] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  572.975376][   T29] audit: type=1326 audit(1727006649.406:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.866" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef8797def9 code=0x0
[  573.011248][ T1848] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  573.022943][ T1848] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  573.035170][ T1848] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  573.046811][ T1848] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  573.056180][ T1848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.074336][ T5281] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  573.102589][ T9566] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  573.235595][ T5281] usb 2-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config
[  573.253194][ T5281] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  573.284299][ T5281] usb 2-1: New USB device found, idVendor=00a3, idProduct=0600, bcdDevice= 0.00
[  573.317210][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.358394][ T5281] usb 2-1: config 0 descriptor??
[  573.627836][ T9573] netlink: 48 bytes leftover after parsing attributes in process `syz.1.863'.
[  573.788718][   T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  573.816498][   T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  573.856370][   T69] bond0 (unregistering): Released all slaves
[  573.942038][ T9569] tun0: tun_chr_ioctl cmd 1074025681
[  573.972256][ T5229] usb 2-1: USB disconnect, device number 40
[  574.081207][ T9334] Bluetooth: hci3: command tx timeout
[  574.434483][ T5229] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  574.475052][ T9504] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  574.499334][   T69] hsr_slave_0: left promiscuous mode
[  574.525951][   T69] hsr_slave_1: left promiscuous mode
[  574.603030][   T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  574.622199][   T69] batman_adv: batadv0: Removing interface: batadv_slave_0
[  574.644185][ T5229] usb 1-1: Using ep0 maxpacket: 8
[  574.654391][ T9504] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  574.654993][   T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  574.665366][ T5229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  574.689761][   T69] batman_adv: batadv0: Removing interface: batadv_slave_1
[  574.700263][ T9504] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  574.731531][ T9504] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  574.758820][ T5229] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  574.778336][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  574.787262][ T9504] usb 4-1: config 0 interface 0 has no altsetting 0
[  574.793684][   T69] veth1_macvtap: left promiscuous mode
[  574.814053][ T9504] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  574.820159][   T69] veth0_macvtap: left promiscuous mode
[  574.827109][ T5229] usb 1-1: SerialNumber: syz
[  574.843779][ T9504] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  574.865692][ T5229] usb 1-1: config 0 descriptor??
[  574.873960][   T69] veth1_vlan: left promiscuous mode
[  574.880714][ T9504] usb 4-1: config 0 interface 0 has no altsetting 0
[  574.897813][   T69] veth0_vlan: left promiscuous mode
[  574.899783][ T5229] usb 1-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  574.924468][ T9504] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  574.943777][ T5229] usb 1-1: No valid video chain found.
[  574.957639][ T9504] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  574.981701][ T9504] usb 4-1: config 0 interface 0 has no altsetting 0
[  574.990892][ T9504] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  575.001408][ T9504] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  575.038680][ T9504] usb 4-1: config 0 interface 0 has no altsetting 0
[  575.066357][ T9504] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  575.118656][ T9504] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  575.153913][ T9504] usb 4-1: config 0 interface 0 has no altsetting 0
[  575.178066][ T9504] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  575.188017][ T9504] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  575.219146][ T9504] usb 4-1: config 0 interface 0 has no altsetting 0
[  575.242929][ T9504] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  575.253535][ T9504] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  575.284407][ T9504] usb 4-1: config 0 interface 0 has no altsetting 0
[  575.293579][ T5283] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  575.310330][ T9504] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  575.330461][ T9504] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  575.368096][ T9504] usb 4-1: config 0 interface 0 has no altsetting 0
[  575.391600][ T9504] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  575.406531][ T9504] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  575.431828][ T9504] usb 4-1: Product: syz
[  575.444073][ T9504] usb 4-1: Manufacturer: syz
[  575.448997][ T9504] usb 4-1: SerialNumber: syz
[  575.453939][ T5283] usb 2-1: Using ep0 maxpacket: 16
[  575.464869][ T5283] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  575.479042][ T9504] usb 4-1: config 0 descriptor??
[  575.495926][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  575.516720][ T9504] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  575.556780][ T5283] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  575.597577][ T5283] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32
[  575.613377][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.627582][ T5283] usb 2-1: Product: syz
[  575.632046][ T5283] usb 2-1: Manufacturer: syz
[  575.637451][ T5283] usb 2-1: SerialNumber: syz
[  575.655254][ T5283] usb 2-1: config 0 descriptor??
[  575.661175][ T9611] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  575.688740][ T5283] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed!
[  575.717139][ T5283] mceusb 2-1:0.0: probe with driver mceusb failed with error -12
[  576.030312][   T29] audit: type=1326 audit(1727006652.466:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.1.869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f367737def9 code=0x0
[  576.143840][ T9334] Bluetooth: hci3: command tx timeout
[  576.612420][   T69] team0 (unregistering): Port device team_slave_1 removed
[  576.656371][ T1848] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[  576.670640][ T1848] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input22
[  576.782374][ T1848] usb 3-1: USB disconnect, device number 45
[  576.788315][    C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  576.928998][   T69] team0 (unregistering): Port device team_slave_0 removed
[  577.738931][ T9558] chnl_net:caif_netlink_parms(): no params data found
[  577.767583][   T25] usb 4-1: USB disconnect, device number 43
[  577.796167][   T25] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  578.020751][ T5277] usb 1-1: USB disconnect, device number 44
[  578.108130][ T9558] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.123731][ T9558] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.142793][ T9558] bridge_slave_0: entered allmulticast mode
[  578.153689][ T9558] bridge_slave_0: entered promiscuous mode
[  578.167086][ T9558] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.175299][ T9558] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.189032][ T9558] bridge_slave_1: entered allmulticast mode
[  578.205560][   T25] usb 2-1: USB disconnect, device number 41
[  578.225230][ T9334] Bluetooth: hci3: command tx timeout
[  578.232540][ T1848] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  578.267332][ T9558] bridge_slave_1: entered promiscuous mode
[  578.361359][ T9558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  578.403227][ T1848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  578.418099][ T9558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  578.441319][ T1848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  578.486888][ T1848] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  578.508623][ T1848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.547252][ T1848] usb 3-1: config 0 descriptor??
[  578.634465][ T9643] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  578.665574][ T9558] team0: Port device team_slave_0 added
[  578.673723][ T9643] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  578.686304][ T9558] team0: Port device team_slave_1 added
[  578.848604][ T9643] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  578.859104][ T9643] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  578.910074][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_0
[  578.921823][ T9643] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  578.928487][ T9643] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  578.941242][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  578.998581][ T9558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  579.018286][ T9643] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  579.035219][ T1848] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0
[  579.057861][ T9643] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  579.171709][ T1848] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  579.233159][ T9643] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  579.241853][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_1
[  579.286675][ T9643] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  579.302779][ T1848] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0xFA
[  579.327992][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  579.387483][ T9558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  579.504464][ T9633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  579.508081][ T9660] ALSA: seq fatal error: cannot create timer (-22)
[  579.528681][ T9633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  579.559102][ T5283] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  579.760793][ T5283] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  579.827375][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.893129][ T5283] usb 4-1: config 0 descriptor??
[  579.922842][ T5283] ums-realtek 4-1:0.0: USB Mass Storage device detected
[  579.988837][ T9558] hsr_slave_0: entered promiscuous mode
[  580.010582][ T9558] hsr_slave_1: entered promiscuous mode
[  580.370990][ T9504] usb 4-1: USB disconnect, device number 44
[  580.436451][ T1848] cp2112 0003:10C4:EA90.0012: error requesting SMBus config
[  580.445106][ T1848] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -32
[  580.634415][ T5283] usb 3-1: reset high-speed USB device number 46 using dummy_hcd
[  580.754363][ T9504] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  580.954873][ T9504] usb 4-1: Using ep0 maxpacket: 8
[  580.956710][ T9680] team0: Port device team_slave_1 removed
[  581.003602][ T9504] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  581.042550][ T9681] team_slave_0: entered promiscuous mode
[  581.050319][ T9504] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  581.089484][ T9504] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  581.119431][ T9504] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  581.130146][ T9504] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  581.135295][ T9681] team0: Port device team_slave_0 removed
[  581.144403][ T9504] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  581.180008][ T9504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.204499][ T9683] netlink: 'syz.1.878': attribute type 32 has an invalid length.
[  581.266378][ T9678] delete_channel: no stack
[  581.435148][ T9504] usb 4-1: usb_control_msg returned -32
[  581.472251][ T9504] usbtmc 4-1:16.0: can't read capabilities
[  581.520505][ T9504] usb 4-1: USB disconnect, device number 45
[  581.750875][ T1848] usb 3-1: USB disconnect, device number 46
[  581.946622][ T9558] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  581.968203][ T9704] input: syz0 as /devices/virtual/input/input23
[  581.994684][ T9558] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  582.010077][ T9558] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  582.025090][ T9558] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  582.186622][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'.
[  582.497196][ T9558] 8021q: adding VLAN 0 to HW filter on device bond0
[  582.514472][  T938] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  582.611442][ T9558] 8021q: adding VLAN 0 to HW filter on device team0
[  582.657292][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.664488][ T9322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  582.704002][  T938] usb 3-1: Using ep0 maxpacket: 8
[  582.719344][  T938] usb 3-1: config 167 has too many interfaces: 202, using maximum allowed: 32
[  582.761706][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.768928][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  582.790837][  T938] usb 3-1: config 167 has 1 interface, different from the descriptor's value: 202
[  582.827067][  T938] usb 3-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29
[  582.874145][  T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.919554][  T938] usb 3-1: Product: syz
[  582.928565][  T938] usb 3-1: Manufacturer: syz
[  582.933217][  T938] usb 3-1: SerialNumber: syz
[  582.941019][ T9558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  582.953694][ T5277] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  582.993014][ T9558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  583.013887][  T938] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state.
[  583.062304][  T938] dvb-usb: bulk message failed: -22 (3/0)
[  583.110191][ T9558] 8021q: adding VLAN 0 to HW filter on device batadv0
[  583.136198][  T938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  583.146937][ T5277] usb 2-1: Using ep0 maxpacket: 8
[  583.168457][ T5277] usb 2-1: config 167 has too many interfaces: 202, using maximum allowed: 32
[  583.183932][ T5277] usb 2-1: config 167 has 1 interface, different from the descriptor's value: 202
[  583.196523][  T938] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author)
[  583.231741][ T5277] usb 2-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29
[  583.253896][  T938] usb 3-1: media controller created
[  583.259227][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.271457][ T9558] veth0_vlan: entered promiscuous mode
[  583.293234][ T5277] usb 2-1: Product: syz
[  583.303552][ T5277] usb 2-1: Manufacturer: syz
[  583.316530][  T938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  583.329227][ T9558] veth1_vlan: entered promiscuous mode
[  583.337331][ T5277] usb 2-1: SerialNumber: syz
[  583.379290][ T5277] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state.
[  583.409336][  T938] dvb-usb: bulk message failed: -22 (6/0)
[  583.424034][ T5277] dvb-usb: bulk message failed: -22 (3/0)
[  583.430039][  T938] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author'
[  583.473464][ T9558] veth0_macvtap: entered promiscuous mode
[  583.482846][ T5277] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  583.503199][ T5277] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author)
[  583.503218][ T9558] veth1_macvtap: entered promiscuous mode
[  583.522664][ T5277] usb 2-1: media controller created
[  583.531719][  T938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24
[  583.577076][ T5277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  583.587526][  T938] dvb-usb: schedule remote query interval to 150 msecs.
[  583.593069][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  583.603547][  T938] dvb-usb: bulk message failed: -22 (3/0)
[  583.640430][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.649041][  T938] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected.
[  583.680288][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  583.685396][ T5277] dvb-usb: bulk message failed: -22 (6/0)
[  583.725994][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.733796][  T938] usb 3-1: USB disconnect, device number 47
[  583.741882][ T5277] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author'
[  583.773988][ T5277] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25
[  583.787616][ T9714] FAULT_INJECTION: forcing a failure.
[  583.787616][ T9714] name failslab, interval 1, probability 0, space 0, times 1
[  583.803530][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  583.824776][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.844479][ T9714] CPU: 0 UID: 0 PID: 9714 Comm: syz.1.884 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  583.854799][ T9714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  583.864901][ T9714] Call Trace:
[  583.868237][ T9714]  <TASK>
[  583.871198][ T9714]  dump_stack_lvl+0x241/0x360
[  583.875937][ T9714]  ? __pfx_dump_stack_lvl+0x10/0x10
[  583.881184][ T9714]  ? __pfx__printk+0x10/0x10
[  583.882034][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  583.885793][ T9714]  ? fs_reclaim_acquire+0x93/0x140
[  583.885848][ T9714]  ? __pfx___might_resched+0x10/0x10
[  583.885884][ T9714]  should_fail_ex+0x3b0/0x4e0
[  583.885922][ T9714]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  583.885950][ T9714]  should_failslab+0xac/0x100
[  583.885977][ T9714]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  583.886005][ T9714]  __kmalloc_noprof+0xd8/0x400
[  583.886038][ T9714]  tomoyo_realpath_from_path+0xcf/0x5e0
[  583.886077][ T9714]  tomoyo_path_number_perm+0x23a/0x880
[  583.886120][ T9714]  ? tomoyo_path_number_perm+0x208/0x880
[  583.908011][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.911785][ T9714]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  583.911865][ T9714]  ? __fget_files+0x29/0x470
[  583.922007][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  583.922244][ T9714]  ? __fget_files+0x3f3/0x470
[  583.938112][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.938257][ T9714]  security_file_ioctl+0xc6/0x2a0
[  583.950315][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  583.959125][ T9714]  __se_sys_ioctl+0x47/0x170
[  583.959168][ T9714]  do_syscall_64+0xf3/0x230
[  583.959200][ T9714]  ? clear_bhb_loop+0x35/0x90
[  583.959232][ T9714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.959266][ T9714] RIP: 0033:0x7f367737def9
[  583.959293][ T9714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  583.959315][ T9714] RSP: 002b:00007f367823e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  583.959348][ T9714] RAX: ffffffffffffffda RBX: 00007f3677535f80 RCX: 00007f367737def9
[  583.959366][ T9714] RDX: 0000000020000040 RSI: 0000000040284504 RDI: 0000000000000005
[  583.977616][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.980329][ T9714] RBP: 00007f367823e090 R08: 0000000000000000 R09: 0000000000000000
[  583.980354][ T9714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  583.980370][ T9714] R13: 0000000000000000 R14: 00007f3677535f80 R15: 00007f367765fa28
[  584.005106][ T9558] batman_adv: batadv0: Interface activated: batadv_slave_0
[  584.010451][ T9714]  </TASK>
[  584.010479][    C0] vkms_vblank_simulate: vblank timer overrun
[  584.057240][ T9714] ERROR: Out of memory at tomoyo_realpath_from_path.
[  584.132953][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  584.237487][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.262794][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  584.277683][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.290181][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  584.304381][ T6201] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  584.312029][   T29] audit: type=1326 audit(1727006660.736:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9744 comm="syz.2.889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f868a37def9 code=0x0
[  584.312096][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.344125][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  584.354683][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.365686][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  584.378736][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.404080][    T8] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  584.409928][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  584.430016][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.443067][ T9558] batman_adv: batadv0: Interface activated: batadv_slave_1
[  584.452839][ T5277] dvb-usb: schedule remote query interval to 150 msecs.
[  584.487949][ T5277] dvb-usb: bulk message failed: -22 (3/0)
[  584.501229][ T9558] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  584.518882][ T6201] usb 4-1: Using ep0 maxpacket: 8
[  584.534549][ T6201] usb 4-1: config 167 has too many interfaces: 202, using maximum allowed: 32
[  584.544711][ T5277] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected.
[  584.574641][ T6201] usb 4-1: config 167 has 1 interface, different from the descriptor's value: 202
[  584.686955][  T938] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected.
[  584.703538][    T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  584.732324][ T8590] dvb-usb: bulk message failed: -22 (1/0)
[  584.754573][ T5277] usb 2-1: USB disconnect, device number 42
[  584.786175][ T6201] usb 4-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29
[  584.798234][    T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  584.821420][ T8590] dvb-usb: error while querying for an remote control event.
[  584.850247][ T6201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.896327][    T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  584.921641][ T6201] usb 4-1: Product: syz
[  584.928624][ T9558] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  584.958027][ T6201] usb 4-1: Manufacturer: syz
[  584.968206][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.019973][ T6201] usb 4-1: SerialNumber: syz
[  585.034098][ T9558] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  585.086141][ T9558] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  585.127573][ T9736] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  585.163509][ T6201] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state.
[  585.251480][    T8] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  585.385003][ T6201] dvb-usb: bulk message failed: -22 (3/0)
[  585.409048][ T5281] IPVS: starting estimator thread 0...
[  585.582278][ T6201] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  585.637827][ T5277] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected.
[  585.654919][    T8] usb 1-1: USB disconnect, device number 45
[  585.664007][ T9757] IPVS: using max 15 ests per chain, 36000 per kthread
[  585.703113][ T6201] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author)
[  585.778090][ T9675] udevd[9675]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  586.211887][ T6201] usb 4-1: media controller created
[  586.824244][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  586.832852][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  586.848041][ T6201] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  586.923582][ T5277] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  587.373648][ T5277] usb 2-1: Using ep0 maxpacket: 32
[  588.167464][ T5277] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping
[  590.023648][ T8590] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  590.140909][ T6201] dvb-usb: bulk message failed: -22 (6/0)
[  590.158027][ T5277] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  590.243928][ T6201] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author'
[  590.393735][ T5277] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  590.402777][ T5277] usb 2-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00
[  590.461636][ T6201] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26
[  590.558431][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.573849][ T6201] dvb-usb: schedule remote query interval to 150 msecs.
[  590.582080][ T9322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  590.663608][ T6201] dvb-usb: bulk message failed: -22 (3/0)
[  590.675048][ T9322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  590.690667][ T5277] usb 2-1: config 0 descriptor??
[  590.716719][ T6201] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected.
[  590.826206][  T938] dvb-usb: bulk message failed: -22 (1/0)
[  590.832013][  T938] dvb-usb: error while querying for an remote control event.
[  591.713618][ T5277] usb 2-1: can't set config #0, error -71
[  604.254408][  T938] dvb-usb: bulk message failed: -22 (1/0)
[  604.260235][  T938] dvb-usb: error while querying for an remote control event.
[  604.279928][ T6201] usb 4-1: USB disconnect, device number 46
[  604.286089][ T5277] usb 2-1: USB disconnect, device number 43
[  607.097335][ T9336] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  607.114723][ T9336] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  607.125442][ T9336] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  607.135763][ T9336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  607.144710][ T9336] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  607.156861][ T9336] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  607.280325][ T9334] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  607.290895][ T9334] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  607.299612][ T9334] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  607.308031][ T9334] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  607.317353][ T9334] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  607.325133][ T9334] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  607.492744][ T9336] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  607.507733][ T9336] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  607.531743][ T9336] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  607.540746][ T9336] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  607.549174][ T9336] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  607.560107][ T9336] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  607.856161][ T9336] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  607.867001][ T9336] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  607.875454][ T9336] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  607.884336][ T9336] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  607.892068][ T9336] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  607.900034][ T9336] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  608.676443][ T9850] chnl_net:caif_netlink_parms(): no params data found
[  609.263924][ T9336] Bluetooth: hci5: command tx timeout
[  609.424090][ T9336] Bluetooth: hci6: command tx timeout
[  609.666071][ T9336] Bluetooth: hci7: command tx timeout
[  609.983725][ T9336] Bluetooth: hci8: command tx timeout
[  611.343795][ T9336] Bluetooth: hci5: command tx timeout
[  611.503765][ T9336] Bluetooth: hci6: command tx timeout
[  611.743728][ T9336] Bluetooth: hci7: command tx timeout
[  612.064605][ T9336] Bluetooth: hci8: command tx timeout
[  613.423887][ T9336] Bluetooth: hci5: command tx timeout
[  613.583827][ T9336] Bluetooth: hci6: command tx timeout
[  613.824399][ T9336] Bluetooth: hci7: command tx timeout
[  614.143977][ T9336] Bluetooth: hci8: command tx timeout
[  615.504066][ T9336] Bluetooth: hci5: command tx timeout
[  615.665340][ T9336] Bluetooth: hci6: command tx timeout
[  615.903741][ T9336] Bluetooth: hci7: command tx timeout
[  616.223788][ T9336] Bluetooth: hci8: command tx timeout
[  624.634678][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  624.641040][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  632.252777][ T9334] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  632.263165][ T9334] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  632.272148][ T9334] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  632.280253][ T9334] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  632.287947][ T9334] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  632.297074][ T9334] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  634.383694][ T9334] Bluetooth: hci9: command tx timeout
[  636.463773][ T9334] Bluetooth: hci9: command tx timeout
[  638.543674][ T9334] Bluetooth: hci9: command tx timeout
[  640.623952][ T9334] Bluetooth: hci9: command tx timeout
[  646.130700][ T4681] udevd[4681]: worker [9430] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time
[  666.066898][ T9336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  666.080567][ T9336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  666.092120][ T9336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  666.106192][ T9336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  666.117003][ T9336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  666.126592][ T9336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  667.115723][ T9334] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  667.126475][ T9334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  667.134777][ T9334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  667.148770][ T9334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  667.163764][ T9334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  667.172797][ T9334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  667.281020][ T9334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  667.291725][ T9334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  667.300204][ T9334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  667.308624][ T9334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  667.320600][ T9334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  667.328493][ T9334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  667.397956][ T9336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  667.407633][ T9336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  667.421928][ T9336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  667.437004][ T9336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  667.453665][ T9336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  667.461108][ T9336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  668.223740][ T9334] Bluetooth: hci0: command tx timeout
[  669.274014][ T9334] Bluetooth: hci1: command tx timeout
[  669.423782][ T9334] Bluetooth: hci2: command tx timeout
[  669.523171][ T9334] Bluetooth: hci4: command tx timeout
[  670.303690][ T9334] Bluetooth: hci0: command tx timeout
[  671.343765][ T9334] Bluetooth: hci1: command tx timeout
[  671.503864][ T9334] Bluetooth: hci2: command tx timeout
[  671.584399][ T9334] Bluetooth: hci4: command tx timeout
[  672.383700][ T9334] Bluetooth: hci0: command tx timeout
[  673.423804][ T9334] Bluetooth: hci1: command tx timeout
[  673.583805][ T9334] Bluetooth: hci2: command tx timeout
[  673.664880][ T9334] Bluetooth: hci4: command tx timeout
[  674.463831][ T9334] Bluetooth: hci0: command tx timeout
[  675.503764][ T9334] Bluetooth: hci1: command tx timeout
[  675.663731][ T9334] Bluetooth: hci2: command tx timeout
[  675.743807][ T9334] Bluetooth: hci4: command tx timeout
[  686.069558][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  686.076082][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  693.559898][ T9336] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  693.570789][ T9336] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  693.579080][ T9336] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  693.587927][ T9336] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  693.604113][ T9336] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  693.611579][ T9336] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  695.663846][ T9336] Bluetooth: hci10: command tx timeout
[  697.743779][ T9336] Bluetooth: hci10: command tx timeout
[  699.824174][ T9336] Bluetooth: hci10: command tx timeout
[  701.903834][ T9336] Bluetooth: hci10: command tx timeout
[  727.517641][ T9334] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  727.543857][ T9334] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  727.556406][ T9334] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  727.570985][ T9334] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  727.599958][ T9334] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  727.608145][ T9334] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  728.479988][ T9334] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  728.490403][ T9334] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  728.498980][ T9334] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  728.507202][ T9334] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  728.515512][ T9334] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  728.529504][ T9334] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  728.560440][ T9334] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  728.569915][ T9334] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  728.584643][ T9334] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  728.593149][ T9334] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  728.600936][ T9334] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  728.628372][ T9334] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  728.764340][ T9336] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  728.774889][ T9336] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  728.794426][ T9336] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  728.802604][ T9336] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  728.814195][ T9336] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  728.821817][ T9336] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  729.663638][ T9336] Bluetooth: hci11: command tx timeout
[  730.703936][ T9331] Bluetooth: hci12: command tx timeout
[  730.713245][ T9336] Bluetooth: hci13: command tx timeout
[  730.863864][ T9336] Bluetooth: hci14: command tx timeout
[  731.743532][ T9336] Bluetooth: hci11: command tx timeout
[  732.783693][ T5230] Bluetooth: hci12: command tx timeout
[  732.791384][ T9336] Bluetooth: hci13: command tx timeout
[  732.943847][ T9336] Bluetooth: hci14: command tx timeout
[  733.823815][ T9336] Bluetooth: hci11: command tx timeout
[  734.230550][ T9336] Bluetooth: hci8: command 0x0406 tx timeout
[  734.237202][ T5230] Bluetooth: hci5: command 0x0406 tx timeout
[  734.243270][ T5230] Bluetooth: hci6: command 0x0406 tx timeout
[  734.250280][ T9336] Bluetooth: hci7: command 0x0406 tx timeout
[  734.863682][ T9336] Bluetooth: hci12: command tx timeout
[  734.871234][ T9337] Bluetooth: hci13: command tx timeout
[  735.025455][ T9337] Bluetooth: hci14: command tx timeout
[  735.369297][ T6201] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected.
[  735.904654][ T9337] Bluetooth: hci11: command tx timeout
[  736.943674][ T9337] Bluetooth: hci13: command tx timeout
[  736.950280][ T9336] Bluetooth: hci12: command tx timeout
[  737.103839][ T9337] Bluetooth: hci14: command tx timeout
[  747.507882][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  747.514449][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  754.703916][ T9337] Bluetooth: hci9: command 0x0406 tx timeout
[  755.191606][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  755.213798][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  755.225916][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  755.235024][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  755.243907][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  755.254566][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  789.956640][ T9965] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  789.968963][ T9965] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  789.978805][ T9965] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  789.987515][ T9965] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  790.003551][ T9965] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  790.016004][ T9965] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  790.611286][ T9969] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  790.633649][ T9970] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  790.644458][ T9970] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  790.655417][ T9970] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  790.667299][ T9970] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  790.680170][ T9970] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  790.687803][ T9970] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  790.695656][ T9970] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  790.715262][ T9960] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  790.740386][ T9960] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  790.748318][ T9960] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  790.756144][ T9960] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  790.920559][ T9972] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  790.936265][ T9972] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  790.948385][ T9972] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  790.964734][ T9972] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  790.972548][ T9972] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[  790.980638][ T9972] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  791.024454][ T9960] Bluetooth: hci0: command 0x0406 tx timeout
[  791.030557][ T9960] Bluetooth: hci1: command 0x0406 tx timeout
[  791.039388][ T9960] Bluetooth: hci2: command 0x0406 tx timeout
[  791.045863][ T9960] Bluetooth: hci4: command 0x0406 tx timeout
[  800.623782][   T30] INFO: task kworker/0:3:5277 blocked for more than 143 seconds.
[  800.631580][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  800.683409][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  800.692183][   T30] task:kworker/0:3     state:D stack:19128 pid:5277  tgid:5277  ppid:2      flags:0x00004000
[  800.808787][   T30] Workqueue: events_power_efficient reg_check_chans_work
[  800.873522][   T30] Call Trace:
[  800.876882][   T30]  <TASK>
[  800.879854][   T30]  __schedule+0x1895/0x4b30
[  800.928442][   T30]  ? __pfx___schedule+0x10/0x10
[  800.953597][   T30]  ? __pfx_lock_release+0x10/0x10
[  800.958738][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  800.993238][   T30]  ? schedule+0x90/0x320
[  801.002500][   T30]  schedule+0x14b/0x320
[  801.014782][   T30]  schedule_preempt_disabled+0x13/0x30
[  801.020414][   T30]  __mutex_lock+0x6a7/0xd70
[  801.033943][   T30]  ? __mutex_lock+0x52a/0xd70
[  801.038699][   T30]  ? reg_check_chans_work+0x99/0xfd0
[  801.055441][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  801.060657][   T30]  ? process_scheduled_works+0x976/0x1850
[  801.073513][   T30]  reg_check_chans_work+0x99/0xfd0
[  801.079498][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  801.093461][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  801.099532][   T30]  ? __pfx_reg_check_chans_work+0x10/0x10
[  801.116264][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  801.122699][   T30]  ? process_scheduled_works+0x976/0x1850
[  801.140319][   T30]  process_scheduled_works+0xa63/0x1850
[  801.146408][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  801.163714][   T30]  ? assign_work+0x364/0x3d0
[  801.169667][   T30]  worker_thread+0x870/0xd30
[  801.183897][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  801.189880][   T30]  ? __kthread_parkme+0x169/0x1d0
[  801.203783][   T30]  ? __pfx_worker_thread+0x10/0x10
[  801.208976][   T30]  kthread+0x2f0/0x390
[  801.213087][   T30]  ? __pfx_worker_thread+0x10/0x10
[  801.228429][   T30]  ? __pfx_kthread+0x10/0x10
[  801.233156][   T30]  ret_from_fork+0x4b/0x80
[  801.245422][   T30]  ? __pfx_kthread+0x10/0x10
[  801.250091][   T30]  ret_from_fork_asm+0x1a/0x30
[  801.267507][   T30]  </TASK>
[  801.270689][   T30] INFO: task syz-executor:9338 blocked for more than 144 seconds.
[  801.289351][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  801.300943][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  801.320268][   T30] task:syz-executor    state:D stack:20992 pid:9338  tgid:9338  ppid:1      flags:0x00004006
[  801.333393][   T30] Call Trace:
[  801.336732][   T30]  <TASK>
[  801.339704][   T30]  __schedule+0x1895/0x4b30
[  801.358730][   T30]  ? __pfx___schedule+0x10/0x10
[  801.372746][   T30]  ? __pfx_lock_release+0x10/0x10
[  801.377984][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  801.393457][   T30]  ? schedule+0x90/0x320
[  801.397768][   T30]  schedule+0x14b/0x320
[  801.401968][   T30]  schedule_preempt_disabled+0x13/0x30
[  801.419506][   T30]  __mutex_lock+0x6a7/0xd70
[  801.432535][   T30]  ? __mutex_lock+0x52a/0xd70
[  801.437803][   T30]  ? tun_chr_close+0x3b/0x1b0
[  801.442549][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  801.457365][   T30]  ? __pfx_call_rcu+0x10/0x10
[  801.473221][   T30]  tun_chr_close+0x3b/0x1b0
[  801.483397][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  801.488586][   T30]  __fput+0x23f/0x880
[  801.492625][   T30]  task_work_run+0x24f/0x310
[  801.506742][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  801.512108][   T30]  ? __pfx_task_work_run+0x10/0x10
[  801.533448][   T30]  ? do_exit+0xa2a/0x28e0
[  801.537850][   T30]  ? kmem_cache_free+0x1a2/0x420
[  801.542831][   T30]  ? do_exit+0xa2a/0x28e0
[  801.556280][   T30]  do_exit+0xa2f/0x28e0
[  801.560510][   T30]  ? __pfx_do_exit+0x10/0x10
[  801.573193][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  801.586600][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  801.592698][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  801.611818][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  801.618658][   T30]  do_group_exit+0x207/0x2c0
[  801.623320][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  801.637321][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  801.642581][   T30]  get_signal+0x176f/0x1810
[  801.658687][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  801.673838][   T30]  ? do_sys_openat2+0x17a/0x1d0
[  801.678766][   T30]  ? __pfx_get_signal+0x10/0x10
[  801.694141][   T30]  ? do_sys_openat2+0x17a/0x1d0
[  801.699075][   T30]  arch_do_signal_or_restart+0x96/0x860
[  801.715975][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  801.722212][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  801.733495][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  801.739300][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  801.756863][   T30]  do_syscall_64+0x100/0x230
[  801.761549][   T30]  ? clear_bhb_loop+0x35/0x90
[  801.779301][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  801.789314][   T30] RIP: 0033:0x7fef8797d7f1
[  801.802829][   T30] RSP: 002b:00007fef87c5ec60 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
[  801.816114][   T30] RAX: 0000000000000003 RBX: 00007fef879f0a14 RCX: 00007fef8797d7f1
[  801.833481][   T30] RDX: 0000000000090800 RSI: 00007fef87c5fe00 RDI: 00000000ffffff9c
[  801.841587][   T30] RBP: 00007fef87c5fdec R08: 0000000000000000 R09: 7fffffffffffffff
[  801.860962][   T30] R10: 0000000000000000 R11: 0000000000000287 R12: 00007fef87c5fe00
[  801.872993][   T30] R13: 00007fef879f0a14 R14: 000000000009033d R15: 00007fef87c5fe40
[  801.888809][   T30]  </TASK>
[  801.893683][   T30] INFO: task syz-executor:9341 blocked for more than 144 seconds.
[  801.901536][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  801.919574][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  801.934041][   T30] task:syz-executor    state:D stack:20992 pid:9341  tgid:9341  ppid:1      flags:0x00004006
[  801.959766][   T30] Call Trace:
[  801.963215][   T30]  <TASK>
[  801.972094][   T30]  __schedule+0x1895/0x4b30
[  801.982620][   T30]  ? __pfx___schedule+0x10/0x10
[  802.002166][   T30]  ? __pfx_lock_release+0x10/0x10
[  802.015170][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  802.020728][   T30]  ? schedule+0x90/0x320
[  802.033703][   T30]  schedule+0x14b/0x320
[  802.037940][   T30]  schedule_preempt_disabled+0x13/0x30
[  802.053762][   T30]  __mutex_lock+0x6a7/0xd70
[  802.058354][   T30]  ? __mutex_lock+0x52a/0xd70
[  802.063091][   T30]  ? tun_chr_close+0x3b/0x1b0
[  802.082898][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  802.090801][   T30]  ? __pfx_call_rcu+0x10/0x10
[  802.103587][   T30]  tun_chr_close+0x3b/0x1b0
[  802.108168][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  802.122436][   T30]  __fput+0x23f/0x880
[  802.128726][   T30]  task_work_run+0x24f/0x310
[  802.145408][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  802.150781][   T30]  ? __pfx_task_work_run+0x10/0x10
[  802.156753][   T30]  ? do_exit+0xa2a/0x28e0
[  802.161138][   T30]  ? kmem_cache_free+0x1a2/0x420
[  802.176933][   T30]  ? do_exit+0xa2a/0x28e0
[  802.181333][   T30]  do_exit+0xa2f/0x28e0
[  802.196569][   T30]  ? __pfx_do_exit+0x10/0x10
[  802.201978][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  802.230738][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  802.237306][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  802.253387][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  802.258578][   T30]  do_group_exit+0x207/0x2c0
[  802.263215][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  802.277686][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  802.290087][   T30]  get_signal+0x176f/0x1810
[  802.299739][   T30]  ? __pfx_get_signal+0x10/0x10
[  802.309139][   T30]  arch_do_signal_or_restart+0x96/0x860
[  802.326544][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  802.332873][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  802.348889][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  802.360008][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  802.371792][   T30]  do_syscall_64+0x100/0x230
[  802.381801][   T30]  ? clear_bhb_loop+0x35/0x90
[  802.394221][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.410118][   T30] RIP: 0033:0x7f868a37c93c
[  802.415047][   T30] RSP: 002b:00007f868a65fd90 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  802.434564][   T30] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f868a37c93c
[  802.442686][   T30] RDX: 0000000000000028 RSI: 00007f868a65fe40 RDI: 00000000000000f9
[  802.461079][   T30] RBP: 00007f868a65fdec R08: 0000000000000000 R09: 0079746972756365
[  802.483589][   T30] R10: 00007f868a5087e0 R11: 0000000000000246 R12: 0000000000000031
[  802.492158][   T30] R13: 00000000000938b7 R14: 000000000009086c R15: 00007f868a65fe40
[  802.512278][   T30]  </TASK>
[  802.517161][   T30] INFO: task syz.1.895:9779 blocked for more than 145 seconds.
[  802.533252][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  802.554261][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  802.563005][   T30] task:syz.1.895       state:D stack:23072 pid:9779  tgid:9778  ppid:9329   flags:0x00004006
[  802.587642][   T30] Call Trace:
[  802.590980][   T30]  <TASK>
[  802.602708][   T30]  __schedule+0x1895/0x4b30
[  802.609756][   T30]  ? __pfx___schedule+0x10/0x10
[  802.624634][   T30]  ? __pfx_lock_release+0x10/0x10
[  802.629757][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  802.646797][   T30]  ? schedule+0x90/0x320
[  802.651109][   T30]  schedule+0x14b/0x320
[  802.661690][   T30]  schedule_preempt_disabled+0x13/0x30
[  802.671156][   T30]  __mutex_lock+0x6a7/0xd70
[  802.679532][   T30]  ? __mutex_lock+0x52a/0xd70
[  802.699760][   T30]  ? tun_chr_close+0x3b/0x1b0
[  802.709829][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  802.720889][   T30]  ? __pfx_call_rcu+0x10/0x10
[  802.730848][   T30]  tun_chr_close+0x3b/0x1b0
[  802.737322][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  802.742506][   T30]  __fput+0x23f/0x880
[  802.757054][   T30]  task_work_run+0x24f/0x310
[  802.761723][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  802.773394][   T30]  ? __pfx_task_work_run+0x10/0x10
[  802.778582][   T30]  ? do_exit+0xa2a/0x28e0
[  802.782958][   T30]  ? kmem_cache_free+0x1a2/0x420
[  802.800123][   T30]  ? do_exit+0xa2a/0x28e0
[  802.809886][   T30]  do_exit+0xa2f/0x28e0
[  802.821103][   T30]  ? __pfx_do_exit+0x10/0x10
[  802.829845][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  802.841481][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  802.852996][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  802.864749][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  802.869959][   T30]  do_group_exit+0x207/0x2c0
[  802.886548][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  802.891828][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  802.909580][   T30]  get_signal+0x176f/0x1810
[  802.917491][   T30]  ? __pfx_get_signal+0x10/0x10
[  802.922435][   T30]  arch_do_signal_or_restart+0x96/0x860
[  802.938875][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  802.949111][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  802.961707][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  802.971371][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  802.983384][   T30]  do_syscall_64+0x100/0x230
[  802.988053][   T30]  ? clear_bhb_loop+0x35/0x90
[  802.992782][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  803.010160][   T30] RIP: 0033:0x7f367737def9
[  803.018355][   T30] RSP: 002b:00007f367823e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  803.046169][   T30] RAX: 0000000000000050 RBX: 00007f3677535f80 RCX: 00007f367737def9
[  803.063739][   T30] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 000000000000000c
[  803.071782][   T30] RBP: 00007f36773f0b76 R08: 0000000000000000 R09: 0000000000000000
[  803.091273][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  803.113093][   T30] R13: 0000000000000000 R14: 00007f3677535f80 R15: 00007f367765fa28
[  803.123792][   T30]  </TASK>
[  803.126968][   T30] 
[  803.126968][   T30] Showing all locks held in the system:
[  803.144784][   T30] 1 lock held by khungtaskd/30:
[  803.149705][   T30]  #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  803.172234][   T30] 3 locks held by kworker/1:2/1848:
[  803.181474][   T30] 3 locks held by kworker/u8:6/2489:
[  803.200354][   T30]  #0: ffff88802db9c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  803.218401][   T30]  #1: ffffc900093d7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  803.239925][   T30]  #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[  803.260962][   T30] 4 locks held by kworker/u9:1/4620:
[  803.272260][   T30]  #0: ffff88807c831148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  803.293202][   T30]  #1: ffffc9000df4fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  803.317487][   T30]  #2: ffff8880638a4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  803.338252][   T30]  #3: ffff8880638a4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  803.353537][   T30] 2 locks held by getty/4986:
[  803.358278][   T30]  #0: ffff88814bc040a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  803.378671][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  803.394658][   T30] 5 locks held by kworker/u9:2/5230:
[  803.400000][   T30]  #0: ffff888066212948 ((wq_completion)hci4#3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  803.422560][   T30]  #1: ffffc90003717d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  803.447096][   T30]  #2: ffff88806f1f4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  803.465479][   T30]  #3: ffff88806f1f4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  803.485290][   T30]  #4: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  803.503462][   T30] 5 locks held by kworker/u9:3/5233:
[  803.511605][   T30]  #0: ffff88807a4e8948 ((wq_completion)hci2#6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  803.537588][   T30]  #1: ffffc90003747d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  803.560226][   T30]  #2: ffff8880391d0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  803.573515][   T30]  #3: ffff8880391d0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  803.599642][   T30]  #4: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  803.621053][   T30] 3 locks held by kworker/0:3/5277:
[  803.626541][   T30]  #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  803.650985][   T30]  #1: ffffc90003e97d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  803.663877][   T30]  #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0
[  803.683720][   T30] 6 locks held by kworker/1:6/5283:
[  803.688970][   T30] 3 locks held by kworker/0:8/8590:
[  803.703421][   T30]  #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  803.725020][   T30]  #1: ffffc9000352fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  803.746337][   T30]  #2: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  803.765563][   T30] 5 locks held by kworker/u9:0/9331:
[  803.770905][   T30]  #0: ffff88807b319148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  803.790626][   T30]  #1: ffffc900094ffd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  803.816953][   T30]  #2: ffff888074b80d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  803.841387][   T30]  #3: ffff888074b80078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  803.854172][   T30]  #4: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  803.874287][   T30] 5 locks held by kworker/u9:4/9334:
[  803.879635][   T30]  #0: ffff888045b98148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  803.900469][   T30]  #1: ffffc90004027d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  803.924710][   T30]  #2: ffff88806c914d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  803.943514][   T30]  #3: ffff88806c914078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  803.953302][   T30]  #4: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  803.973247][   T30] 5 locks held by kworker/u9:5/9335:
[  803.983610][   T30]  #0: ffff88807f205148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  804.004945][   T30]  #1: ffffc90003fc7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  804.031974][   T30]  #2: ffff8880a9344d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  804.053632][   T30]  #3: ffff8880a9344078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  804.082205][   T30]  #4: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  804.101722][   T30] 5 locks held by kworker/u9:6/9336:
[  804.108725][   T30]  #0: ffff888034284148 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  804.130977][   T30]  #1: ffffc90003f77d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  804.156699][   T30]  #2: ffff888086080d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  804.176321][   T30]  #3: ffff888086080078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  804.192426][   T30]  #4: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  804.206383][   T30] 4 locks held by kworker/u9:7/9337:
[  804.211728][   T30]  #0: ffff88808a0dd148 ((wq_completion)hci3#4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  804.233456][   T30]  #1: ffffc90003ddfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  804.256649][   T30]  #2: ffff888045d14078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0
[  804.280429][   T30]  #3: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0
[  804.292609][   T30] 1 lock held by syz-executor/9338:
[  804.303621][   T30]  #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  804.312711][   T30] 1 lock held by syz-executor/9340:
[  804.330331][   T30]  #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  804.344709][   T30] 1 lock held by syz-executor/9341:
[  804.349965][   T30]  #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  804.370476][   T30] 1 lock held by syz-executor/9558:
[  804.380008][   T30]  #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  804.401534][   T30] 1 lock held by syz.1.895/9779:
[  804.407023][   T30]  #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  804.425996][   T30] 2 locks held by syz-executor/9917:
[  804.433127][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  804.450845][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720
[  804.465393][   T30] 2 locks held by syz-executor/9920:
[  804.470745][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  804.489258][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  804.512046][   T30] 2 locks held by syz-executor/9926:
[  804.517885][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  804.539032][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  804.553578][   T30] 2 locks held by syz-executor/9928:
[  804.559013][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  804.579056][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  804.599706][   T30] 2 locks held by syz-executor/9929:
[  804.611236][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  804.634768][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  804.653744][   T30] 1 lock held by dhcpcd/9930:
[  804.658488][   T30]  #0: ffff8880236b8808 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  804.679019][   T30] 1 lock held by dhcpcd/9931:
[  804.688512][   T30]  #0: ffff8880236bd608 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  804.703713][   T30] 1 lock held by dhcpcd/9932:
[  804.708464][   T30]  #0: ffff8880236bee08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  804.731193][   T30] 1 lock held by dhcpcd/9933:
[  804.743260][   T30]  #0: ffff8880236ba608 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  804.764623][   T30] 1 lock held by dhcpcd/9934:
[  804.769378][   T30]  #0: ffff888061db5c08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  804.789970][   T30] 2 locks held by syz-executor/9937:
[  804.799490][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  804.813382][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  804.834151][   T30] 2 locks held by syz-executor/9943:
[  804.841187][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  804.861750][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  804.875717][   T30] 2 locks held by syz-executor/9946:
[  804.881071][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  804.900832][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  804.922772][   T30] 2 locks held by syz-executor/9947:
[  804.928567][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  804.953460][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  804.974682][   T30] 2 locks held by syz-executor/9949:
[  804.980023][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  804.999949][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  805.020025][   T30] 2 locks held by syz-executor/9954:
[  805.028146][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  805.051008][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  805.069838][   T30] 5 locks held by kworker/u9:8/9957:
[  805.078843][   T30]  #0: ffff88803018d148 ((wq_completion)hci1#5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  805.101132][   T30]  #1: ffffc9000314fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  805.133835][   T30]  #2: ffff888063ce4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  805.161062][   T30]  #3: ffff888063ce4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  805.179230][   T30]  #4: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  805.200964][   T30] 5 locks held by kworker/u9:9/9959:
[  805.206488][   T30]  #0: ffff888067e68148 ((wq_completion)hci0#3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  805.228822][   T30]  #1: ffffc90002f0fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  805.243669][   T30]  #2: ffff88805ebb8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  805.268234][   T30]  #3: ffff88805ebb8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  805.288759][   T30]  #4: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  805.302556][   T30] 4 locks held by kworker/u9:11/9961:
[  805.313599][   T30]  #0: ffff88808cfca148 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  805.333794][   T30]  #1: ffffc90002e7fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  805.358709][   T30]  #2: ffff88808cfb0078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0
[  805.375622][   T30]  #3: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0
[  805.397427][   T30] 2 locks held by syz-executor/9967:
[  805.402778][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  805.422068][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  805.437694][   T30] 4 locks held by kworker/u9:13/9969:
[  805.443152][   T30]  #0: ffff888060579148 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  805.463381][   T30]  #1: ffffc90002dafd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  805.488908][   T30]  #2: ffff88806056c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0
[  805.507945][   T30]  #3: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0
[  805.523514][   T30] 4 locks held by kworker/u9:14/9970:
[  805.529032][   T30]  #0: ffff88806057a948 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  805.550481][   T30]  #1: ffffc90002d8fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  805.573970][   T30]  #2: ffff888060568078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0
[  805.593445][   T30]  #3: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0
[  805.615906][   T30] 4 locks held by kworker/u9:15/9972:
[  805.621339][   T30]  #0: ffff8880b4197148 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  805.641261][   T30]  #1: ffffc90002d6fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  805.658547][   T30]  #2: ffff8880aa370078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0
[  805.682015][   T30]  #3: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0
[  805.698694][   T30] 2 locks held by syz-executor/9974:
[  805.708455][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  805.734172][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  805.750911][   T30] 2 locks held by syz-executor/9975:
[  805.760999][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  805.780503][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  805.796749][   T30] 2 locks held by syz-executor/9978:
[  805.802533][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  805.818661][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  805.836966][   T30] 1 lock held by dhcpcd/9979:
[  805.841737][   T30]  #0: ffff88808256a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0
[  805.860818][   T30] 
[  805.867525][   T30] =============================================
[  805.867525][   T30] 
[  805.883695][   T30] NMI backtrace for cpu 0
[  805.888078][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  805.898360][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  805.908457][   T30] Call Trace:
[  805.911768][   T30]  <TASK>
[  805.914734][   T30]  dump_stack_lvl+0x241/0x360
[  805.919462][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  805.924795][   T30]  ? __pfx__printk+0x10/0x10
[  805.929447][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  805.934460][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  805.940004][   T30]  ? _printk+0xd5/0x120
[  805.944217][   T30]  ? __pfx__printk+0x10/0x10
[  805.948850][   T30]  ? __wake_up_klogd+0xcc/0x110
[  805.953750][   T30]  ? __pfx__printk+0x10/0x10
[  805.958391][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  805.963642][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  805.969678][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  805.975718][   T30]  watchdog+0xff4/0x1040
[  805.980008][   T30]  ? watchdog+0x1ea/0x1040
[  805.984484][   T30]  ? __pfx_watchdog+0x10/0x10
[  805.989210][   T30]  kthread+0x2f0/0x390
[  805.993315][   T30]  ? __pfx_watchdog+0x10/0x10
[  805.998038][   T30]  ? __pfx_kthread+0x10/0x10
[  806.002664][   T30]  ret_from_fork+0x4b/0x80
[  806.007212][   T30]  ? __pfx_kthread+0x10/0x10
[  806.011838][   T30]  ret_from_fork_asm+0x1a/0x30
[  806.016752][   T30]  </TASK>
[  806.020992][   T30] Sending NMI from CPU 0 to CPUs 1:
[  806.027051][    C1] NMI backtrace for cpu 1
[  806.027066][    C1] CPU: 1 UID: 0 PID: 5283 Comm: kworker/1:6 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  806.027088][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  806.027100][    C1] Workqueue: events nsim_dev_trap_report_work
[  806.027131][    C1] RIP: 0010:lockdep_hardirqs_off+0x48/0x110
[  806.027155][    C1] Code: 04 00 0f 84 8e 00 00 00 49 89 fe 65 8b 05 98 01 42 74 a9 00 00 f0 00 74 66 83 3d 02 23 79 0e 00 75 15 48 c7 04 24 00 00 00 00 <9c> 8f 04 24 f7 04 24 00 02 00 00 75 7b 65 8b 05 dc b0 40 74 85 c0
[  806.027171][    C1] RSP: 0018:ffffc90000a17ec8 EFLAGS: 00000046
[  806.027186][    C1] RAX: 0000000000000000 RBX: ffffffff8a1efec2 RCX: ffff888032668000
[  806.027201][    C1] RDX: 0000000000000100 RSI: ffffffff8c0aca60 RDI: ffffffff8c60d040
[  806.027214][    C1] RBP: ffffc90000a18040 R08: ffffffff8a1efe73 R09: ffffffff8a1efc49
[  806.027229][    C1] R10: 0000000000000002 R11: ffff888032668000 R12: 0000000000000200
[  806.027241][    C1] R13: 1ffff92000142ff8 R14: ffffffff8a1efec2 R15: 1ffff1100be5073a
[  806.027255][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  806.027278][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  806.027291][    C1] CR2: 00007fdaf94656c0 CR3: 000000000e734000 CR4: 00000000003506f0
[  806.027307][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  806.027319][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  806.027331][    C1] Call Trace:
[  806.027343][    C1]  <NMI>
[  806.027351][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  806.027377][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  806.027406][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  806.027431][    C1]  ? nmi_handle+0x2a/0x5a0
[  806.027457][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  806.027481][    C1]  ? nmi_handle+0x14f/0x5a0
[  806.027498][    C1]  ? nmi_handle+0x2a/0x5a0
[  806.027516][    C1]  ? lockdep_hardirqs_off+0x48/0x110
[  806.027536][    C1]  ? default_do_nmi+0x63/0x160
[  806.027563][    C1]  ? exc_nmi+0x123/0x1f0
[  806.027588][    C1]  ? end_repeat_nmi+0xf/0x53
[  806.027610][    C1]  ? ip_finish_output2+0x832/0x1390
[  806.027632][    C1]  ? ip_finish_output2+0x832/0x1390
[  806.027652][    C1]  ? ip_finish_output2+0x5b9/0x1390
[  806.027672][    C1]  ? ip_finish_output2+0x7e3/0x1390
[  806.027693][    C1]  ? lockdep_hardirqs_off+0x48/0x110
[  806.027714][    C1]  ? lockdep_hardirqs_off+0x48/0x110
[  806.027736][    C1]  ? lockdep_hardirqs_off+0x48/0x110
[  806.027757][    C1]  </NMI>
[  806.027763][    C1]  <IRQ>
[  806.027770][    C1]  ? ip_finish_output2+0x832/0x1390
[  806.027808][    C1]  trace_hardirqs_off+0x12/0x40
[  806.027830][    C1]  ip_finish_output2+0x832/0x1390
[  806.027853][    C1]  ? ip_finish_output2+0x45f/0x1390
[  806.027878][    C1]  ? __pfx_ip_finish_output2+0x10/0x10
[  806.027901][    C1]  ? ip_skb_dst_mtu+0x6ba/0x9b0
[  806.027922][    C1]  ? __ip_finish_output+0x349/0x400
[  806.027946][    C1]  synproxy_send_client_synack+0x8b8/0xf30
[  806.027973][    C1]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  806.027995][    C1]  ? synproxy_pernet+0x45/0x270
[  806.028019][    C1]  nft_synproxy_eval_v4+0x3ca/0x610
[  806.028043][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  806.028063][    C1]  ? validate_chain+0x11e/0x5920
[  806.028084][    C1]  ? nf_ip_checksum+0x13a/0x500
[  806.028108][    C1]  nft_synproxy_do_eval+0x362/0xa60
[  806.028132][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  806.028152][    C1]  ? validate_chain+0x11e/0x5920
[  806.028175][    C1]  ? __pfx_validate_chain+0x10/0x10
[  806.028199][    C1]  nft_do_chain+0x4ad/0x1da0
[  806.028232][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  806.028252][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  806.028296][    C1]  ? __pfx_nf_nat_inet_fn+0x10/0x10
[  806.028323][    C1]  nft_do_chain_inet+0x418/0x6b0
[  806.028345][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  806.028365][    C1]  ? ipt_do_table+0x312/0x1860
[  806.028394][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  806.028414][    C1]  nf_hook_slow+0xc3/0x220
[  806.028432][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  806.028459][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  806.028486][    C1]  NF_HOOK+0x29e/0x450
[  806.028512][    C1]  ? NF_HOOK+0x9a/0x450
[  806.028536][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  806.028562][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  806.028592][    C1]  ? ip_rcv_finish+0x406/0x560
[  806.028618][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  806.028644][    C1]  NF_HOOK+0x3a4/0x450
[  806.028667][    C1]  ? __lock_acquire+0x1384/0x2050
[  806.028695][    C1]  ? NF_HOOK+0x9a/0x450
[  806.028719][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  806.028743][    C1]  ? ip_rcv_core+0x801/0xd10
[  806.028769][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  806.028798][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  806.028824][    C1]  __netif_receive_skb+0x2bf/0x650
[  806.028854][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  806.028880][    C1]  ? __pfx___netif_receive_skb+0x10/0x10
[  806.028908][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  806.028939][    C1]  ? __pfx_lock_release+0x10/0x10
[  806.028966][    C1]  ? _raw_spin_lock_irq+0xdf/0x120
[  806.028992][    C1]  process_backlog+0x662/0x15b0
[  806.029013][    C1]  ? process_backlog+0x33b/0x15b0
[  806.029036][    C1]  ? __pfx_process_backlog+0x10/0x10
[  806.029054][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  806.029082][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  806.029111][    C1]  __napi_poll+0xcb/0x490
[  806.029139][    C1]  net_rx_action+0x89b/0x1240
[  806.029168][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  806.029187][    C1]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  806.029229][    C1]  handle_softirqs+0x2c5/0x980
[  806.029255][    C1]  ? do_softirq+0x11b/0x1e0
[  806.029284][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  806.029313][    C1]  do_softirq+0x11b/0x1e0
[  806.029335][    C1]  </IRQ>
[  806.029341][    C1]  <TASK>
[  806.029348][    C1]  ? __pfx_do_softirq+0x10/0x10
[  806.029372][    C1]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[  806.029400][    C1]  ? rcu_is_watching+0x15/0xb0
[  806.029421][    C1]  __local_bh_enable_ip+0x1bb/0x200
[  806.029445][    C1]  ? nsim_dev_trap_report_work+0x75d/0xaa0
[  806.029471][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  806.029495][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  806.029518][    C1]  ? nsim_dev_trap_report_work+0x6a7/0xaa0
[  806.029545][    C1]  nsim_dev_trap_report_work+0x75d/0xaa0
[  806.029577][    C1]  ? process_scheduled_works+0x976/0x1850
[  806.029602][    C1]  process_scheduled_works+0xa63/0x1850
[  806.029640][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  806.029670][    C1]  ? assign_work+0x364/0x3d0
[  806.029695][    C1]  worker_thread+0x870/0xd30
[  806.029724][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  806.029746][    C1]  ? __kthread_parkme+0x169/0x1d0
[  806.029773][    C1]  ? __pfx_worker_thread+0x10/0x10
[  806.029798][    C1]  kthread+0x2f0/0x390
[  806.029815][    C1]  ? __pfx_worker_thread+0x10/0x10
[  806.029839][    C1]  ? __pfx_kthread+0x10/0x10
[  806.029856][    C1]  ret_from_fork+0x4b/0x80
[  806.029881][    C1]  ? __pfx_kthread+0x10/0x10
[  806.029898][    C1]  ret_from_fork_asm+0x1a/0x30
[  806.029938][    C1]  </TASK>
[  806.827654][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  806.834567][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  806.844763][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  806.854868][   T30] Call Trace:
[  806.858181][   T30]  <TASK>
[  806.861146][   T30]  dump_stack_lvl+0x241/0x360
[  806.865904][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  806.871157][   T30]  ? __pfx__printk+0x10/0x10
[  806.875799][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  806.881858][   T30]  ? vscnprintf+0x5d/0x90
[  806.886243][   T30]  panic+0x349/0x880
[  806.890177][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  806.896409][   T30]  ? __pfx_panic+0x10/0x10
[  806.900867][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  806.906367][   T30]  ? __irq_work_queue_local+0x137/0x410
[  806.911964][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  806.917379][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  806.923583][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  806.929795][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  806.936007][   T30]  watchdog+0x1033/0x1040
[  806.940383][   T30]  ? watchdog+0x1ea/0x1040
[  806.944849][   T30]  ? __pfx_watchdog+0x10/0x10
[  806.949593][   T30]  kthread+0x2f0/0x390
[  806.953699][   T30]  ? __pfx_watchdog+0x10/0x10
[  806.958421][   T30]  ? __pfx_kthread+0x10/0x10
[  806.963137][   T30]  ret_from_fork+0x4b/0x80
[  806.967774][   T30]  ? __pfx_kthread+0x10/0x10
[  806.972396][   T30]  ret_from_fork_asm+0x1a/0x30
[  806.977220][   T30]  </TASK>
[  806.980647][   T30] Kernel Offset: disabled
[  806.984982][   T30] Rebooting in 86400 seconds..