last executing test programs:

1m31.108556571s ago: executing program 4 (id=2538):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
r2 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mknod$loop(0x0, 0x0, 0x1)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r7 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_int(r7, 0x10d, 0xb, &(0x7f0000000080)=0xf, 0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="040000001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
pivot_root(&(0x7f0000000040)='./file0\x00', 0x0)
mknodat(r3, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
renameat2(r3, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000100)='./file1\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$sock_cred(r9, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0)

1m29.989060564s ago: executing program 4 (id=2540):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x80000000, 0xfffffffffffffffc)
syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_procfs$userns(r1, &(0x7f00000001c0))
dup3(0xffffffffffffffff, r2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$kcm(0xa, 0x0, 0x87)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000002c0)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={<r6=>0x0})
close(r3)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4})
io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x404080, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbb60f33dda5246c22034b633224b"], 0x0)
r7 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x8848}, @val={0x1, 0x3, 0x1, 0xd1, 0x6, 0x6}, @llc={@llc={0x80, 0x80, "df"}}}, 0x11)

1m28.520422363s ago: executing program 4 (id=2550):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000042c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210400000000000000001200000008000300", @ANYRES32=r3], 0x40}}, 0x0)

1m25.100304169s ago: executing program 4 (id=2552):
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3082, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x7fffffffffffffff, 0xe)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
r1 = socket(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpgrp(0x0)
tgkill(0x0, r2, 0x11)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
fcntl$getown(r1, 0x9)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000840000000500000079"], 0x18}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0)

1m22.388689906s ago: executing program 4 (id=2557):
preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10003)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
getpid()
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
renameat2(r1, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000440)='./file0\x00', 0x2)
r3 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "eab08e77e72927830d3bdf222d097d4235ffcd91f05f7fe7b0bce993da4b777b9a63a71dfe5ee505e7bcd911204751c0b6e66078e867260d0dcb8a7c00a64be7", 0x3d}, 0x48, 0xfffffffffffffff9)
add_key(0x0, &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000280)="511bd178746e4fabf2ba027e32a14f4ed5688a980491cb305cad31d7c814bd69d46b5b9e644a6ad9b648c94d5abf6527a72d41f4ff04e8bea91a57", 0x3b, r3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x3, 0xe, 0x2, 0x1080, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, r0, 0x5, 0x1, 0x5}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10)

1m21.31550863s ago: executing program 4 (id=2562):
r0 = socket(0x11, 0x800000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x6, 0x5}, 0x48)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x902, 0x0)
ioctl$KDENABIO(r1, 0x4b36)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r5=>0x0)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, r5, 0x0, 0x6, 0x3a, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760eeab11e88509de7f1974e800", 0x37}, 0x60)
accept4$nfc_llcp(r1, 0x0, 0x0, 0x80800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x9, 0x6, 0x0, 0x80}, 0x10)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000000c0), 0x12)
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6f2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x9700, 0x2, 0x4})
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0585609, &(0x7f0000000180)={0x0, 0x2})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @loopback}})
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x2, 0x5, 0xd, 0x9, <r9=>0x0}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r9, 0x4}, &(0x7f0000000180)=0x8)

1m20.371499444s ago: executing program 1 (id=2563):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000042c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210400000000000000001200000008000300", @ANYRES32=r3], 0x40}}, 0x0)

1m19.677683265s ago: executing program 1 (id=2566):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5000000230000"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)

1m17.9981071s ago: executing program 1 (id=2568):
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3082, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x7fffffffffffffff, 0xe)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
r1 = socket(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpgrp(0x0)
tgkill(0x0, r2, 0x11)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
fcntl$getown(r1, 0x9)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000840000000500000079"], 0x18}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0)

1m13.742716356s ago: executing program 1 (id=2574):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000c40)={{r1}, 0x0, 0x10, @unused=[0x4, 0xffffffffffffff00, 0xfa8f, 0x2], @name="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"})
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r6, 0x0, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x100000001)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
close(r5)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0)

1m7.356189196s ago: executing program 1 (id=2580):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000), 0x4)
recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x190, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x40, 0x0, "0776a338ba09002c5ab65e4dce614ffe11a1394b2c857e5d7f7595571014323885c50277b034013b3fa37014ee4a132cd497c32a4fc79102f5c4137a40978e6bd5a356b4a2cf6bbdf94ad400"}, 0xd8)

1m3.136822076s ago: executing program 1 (id=2583):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0)
mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="e0feb88a0562f9dce8cd23c8866670fcf1860fc1183b21d35c50b68741a39d282d55b30b50d50f32f55180b2264a484df5123b40ba0bed505da1a5566a252d094a4d8e97403c46d5845def248cda44f95a64b4cbd9201c3d3a60c89f60d70b400b66a8050ba187b3658b08c9faa2955de4ade65d7f2f82665a61744683"])

8.553692914s ago: executing program 2 (id=2689):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x51, 0x0, 0x7)
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x400, 0xee, 0x10}, 0x18)
fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000480)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', &(0x7f0000000000)='./file0\x00', r5)
copy_file_range(r3, 0x0, r3, 0x0, 0x7, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
flock(r6, 0x1)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0, <r8=>0x0], 0x0, 0x0, 0x0, 0x2})
ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000380)={r8})

6.792018248s ago: executing program 2 (id=2693):
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3082, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x7fffffffffffffff, 0xe)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
r1 = socket(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpgrp(0x0)
tgkill(0x0, r2, 0x11)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
fcntl$getown(r1, 0x9)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000840000000500000079"], 0x18}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0)

5.75871017s ago: executing program 2 (id=2695):
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x10001, 0x0)
read$msr(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x3, 0x1})
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000001c0)={0x8, 0xffffffff, 0x0, {0x1, @sliced={0x1, [0x3f, 0x28, 0x0, 0xff2, 0x3, 0x9, 0x8, 0x1, 0x8, 0x0, 0x3, 0x1fd, 0x200, 0xf42, 0x9, 0x6, 0x7, 0x7ff, 0x2001, 0x9, 0x4, 0x6, 0x215e, 0x800, 0x3, 0x2, 0xff, 0x99, 0x7, 0x0, 0x8001, 0x9, 0x7, 0x0, 0x2, 0x37, 0xfffb, 0x3, 0x9, 0x2, 0x80, 0xfbff, 0x1, 0x9, 0x7, 0x5, 0x7fff]}}, 0x1000000})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x50)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080))
bind$alg(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100004, 0x220104, 0xb, 0x1}, 0x48)
unshare(0x2a020400)
r6 = timerfd_create(0x0, 0x0)
poll(&(0x7f0000002080)=[{r6}], 0x1, 0x0)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={r5, &(0x7f0000000380), 0x0}, 0x20)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x9, @mcast2}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90172fbdeb70322ea3188f81890e3db"}, 0xd8)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="a2aaaaaaaaaa0180c200000008004500003c0000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac060000907800001312adf059fd789278e2fb03dc15d356998a0000"], 0x0)

5.378276321s ago: executing program 3 (id=2699):
r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1c\xed\xa2\xfc\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xc6\xd7\xb5:i\x83s\xda\xabQ\xf7\x05', 0x0)
r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0)
r2 = dup(r1)
r3 = fanotify_init(0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
fstat(0xffffffffffffffff, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
dup(r3)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x1c)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e)
sendmmsg$inet6(r6, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="6ab3b76d24e2674d6910ccf58b228418eaec4b8e68706f0c8edd647200717925f4de358cd16006bf3ff3dc72cd07ba435ffd9f9552912b2683d16b7a58465bf13f91b994703b5f7d919a3a7af1b7a9d3a8c3a7db95468089948dbe30483462150b15e727b69cbc45b817b2db8ca63f0e5e15279b38c1f75d160e55658c5926f7e27a5b0b8fe8c285f36e17401351d3ff7f475768fee806045fcdaceef208f8a5b766da64bac865faa9b4dd35d26aedf907e8246892b05c17b6d5dfeea8c51f42be6c2fbbf0df1ba781ffba25ccfe0b30eb9bee956d69e5b7", 0xd8}, {&(0x7f0000000400)="0ccf4321ef4ac52cf9f4ca3393fac2f9a38762fbab3876a542a9b27d5ee02b0ddfcd64e23deadc", 0x27}], 0x2}}, {{&(0x7f0000000480)={0xa, 0x4e22, 0x40000000, @mcast1, 0x10}, 0x1c, &(0x7f0000001540)=[{&(0x7f00000004c0)="3a1f5df54bb31db05e007d9fbe28a325b91b0f8b0a1397df67904d1b72f136e2fe41e68f9c93a574168a3be7dc26f9c79023fb277e233f6e6c635dd766b9619675910314eadb5976bff96c26c90604a45a6f", 0x52}, {&(0x7f0000000540)="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", 0x1000}], 0x2, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x2a8}}], 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
fanotify_mark(r3, 0x1, 0x40000033, r2, 0x0)
write$nbd(r2, &(0x7f00000000c0)=ANY=[], 0x10)
sendfile(r0, r2, &(0x7f00000000c0), 0x40)

4.604210673s ago: executing program 3 (id=2700):
unshare(0x2000400)
socket$rxrpc(0x21, 0x2, 0x2)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000140), 0x35000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c83020001c0001000b0204004c00000002080400030003080303080000000200d3", @ANYRESOCT=0x0], 0x25)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="0300001ff2db08640a4e0246153e38cdd19fb6bb90e3f76ad74e1466287ea6a2c1c6c0f948f7c4e0029e242ac8494cccd23a77aae0be2e35186217af7708a3efbc424b3eee764b5b8f0749261b9238cc7ab0a89a69fc393e726078395fde068582c4a3fa08e97b120cb280dac4313dede3ff4761409b7cec44da289e4714116e86da4c38100aef6a4f0e259395e936cdbc33e492a3d5bb46b4bc5602f30509c80071d4274bb357f0ad7793d08f2a3ce8829dab4e0e51a2b1d19a3f19f5b17dde2909cee6a5c5daf96275e5204d2f6598d86f799acc", @ANYRES8=<r1=>r0, @ANYRESOCT=r0, @ANYRES64=<r2=>0xffffffffffffffff, @ANYRESDEC=0x0, @ANYRES32], 0x23)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102387, 0x18ff3}], 0x1, 0x1ffffc, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r4 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0xfffffffffffffffd)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x2352a000)
mmap(&(0x7f00000cb000/0x1000)=nil, 0x1000, 0x6, 0x100010, r3, 0x841ea000)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8003, &(0x7f00000008c0), 0x0, 0x4)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa4200, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r2], 0x44}}, 0x24048050)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5)
getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000100))

4.372554075s ago: executing program 2 (id=2702):
ptrace$peeksig(0x4209, 0x0, &(0x7f0000000400)={0x19e000}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102390, 0x18ff6}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c000000000004000000000000000001000000000000000000"], 0x0)
sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3})
ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000300)={0xc, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x7, r4, 0x0, &(0x7f0000fee000/0xf000)=nil, 0xf000})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000380)={0xffffffffffffff59, 0x0, r3, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4})
ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000001c0)={0xc})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
io_setup(0x6, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0)
futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000004000), 0x0)
io_getevents(r5, 0x2, 0x2, &(0x7f0000000040)=[{}, {}], 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r7}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c0002"], 0x24}}, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x723841, 0x0)

4.320599663s ago: executing program 0 (id=2703):
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3082, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x7fffffffffffffff, 0xe)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
r1 = socket(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpgrp(0x0)
tgkill(0x0, r2, 0x11)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
fcntl$getown(r1, 0x9)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000840000000500000079"], 0x18}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0)

4.034942457s ago: executing program 3 (id=2704):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000009892766543eaeb79e749ce95dd676fdc53f3afa2f4a450b704c3aa77b65c63416768d417a3c2e05869698628d3893e5feb6911bcdae608c97fc10186bca102504854291ce77f78a142d4569a8631506f6ac1e2281964423bd4d6962d06dd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r5}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
open$dir(0x0, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes256, 0x0, @desc2})
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6685d4982a83b71b906769e737201ac6b7a7804454156569cbf3a5be811debc957b5831b89b59d703e748c7c", 0x25}, 0x48, 0xffffffffffffffff)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private=0xa010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@empty, 0x0, 0x1}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f00000030c0)={0x9, {"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", 0x1000}}, 0x1006)

2.955466213s ago: executing program 3 (id=2705):
socket$inet6_dccp(0xa, 0x6, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300)='ipvlan1\x00', 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000540), 0x2000010, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x174, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0, 0x4d4}, @in6=@remote, {@in=@remote, @in6=@private0}, {{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x7ff}, @tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private2}]}]}, 0x174}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x3}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x4}]]}}}]}, 0x40}}, 0x0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r8, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48)

2.911604031s ago: executing program 0 (id=2706):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setresuid(0xee01, 0x0, 0x0)
setresuid(0x0, 0x0, 0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)

2.056621328s ago: executing program 0 (id=2707):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000280000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000bc0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0)
sendto$packet(r0, &(0x7f0000000140)="a6bea8a120e5f8320c30e45010b2", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)

1.981566016s ago: executing program 3 (id=2708):
r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1c\xed\xa2\xfc\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xc6\xd7\xb5:i\x83s\xda\xabQ\xf7\x05', 0x0)
r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0)
r2 = dup(r1)
r3 = fanotify_init(0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
fstat(0xffffffffffffffff, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
dup(r3)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x1c)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e)
sendmmsg$inet6(r6, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="6ab3b76d24e2674d6910ccf58b228418eaec4b8e68706f0c8edd647200717925f4de358cd16006bf3ff3dc72cd07ba435ffd9f9552912b2683d16b7a58465bf13f91b994703b5f7d919a3a7af1b7a9d3a8c3a7db95468089948dbe30483462150b15e727b69cbc45b817b2db8ca63f0e5e15279b38c1f75d160e55658c5926f7e27a5b0b8fe8c285f36e17401351d3ff7f475768fee806045fcdaceef208f8a5b766da64bac865faa9b4dd35d26aedf907e8246892b05c17b6d5dfeea8c51f42be6c2fbbf0df1ba781ffba25ccfe0b30eb9bee956d69e5b7", 0xd8}, {&(0x7f0000000400)="0ccf4321ef4ac52cf9f4ca3393fac2f9a38762fbab3876a542a9b27d5ee02b0ddfcd64e23deadc", 0x27}], 0x2}}, {{&(0x7f0000000480)={0xa, 0x4e22, 0x40000000, @mcast1, 0x10}, 0x1c, &(0x7f0000001540)=[{&(0x7f00000004c0)="3a1f5df54bb31db05e007d9fbe28a325b91b0f8b0a1397df67904d1b72f136e2fe41e68f9c93a574168a3be7dc26f9c79023fb277e233f6e6c635dd766b9619675910314eadb5976bff96c26c90604a45a6f", 0x52}, {&(0x7f0000000540)="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", 0x1000}], 0x2, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x2a8}}], 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
fanotify_mark(r3, 0x1, 0x40000033, r2, 0x0)
write$nbd(r2, &(0x7f00000000c0)=ANY=[], 0x10)
sendfile(r0, r2, &(0x7f00000000c0), 0x40)

1.9711215s ago: executing program 2 (id=2709):
socket$can_raw(0x1d, 0x3, 0x1)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
rename(&(0x7f0000000000)='./file1\x00', 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0)
mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000003c0)={0x7, 0x7, 0x2}, &(0x7f0000000400)=0x28)
socket$nl_generic(0x10, 0x3, 0x10)

1.622574333s ago: executing program 0 (id=2710):
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x10001, 0x0)
read$msr(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x3, 0x1})
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000001c0)={0x8, 0xffffffff, 0x0, {0x1, @sliced={0x1, [0x3f, 0x28, 0x0, 0xff2, 0x3, 0x9, 0x8, 0x1, 0x8, 0x0, 0x3, 0x1fd, 0x200, 0xf42, 0x9, 0x6, 0x7, 0x7ff, 0x2001, 0x9, 0x4, 0x6, 0x215e, 0x800, 0x3, 0x2, 0xff, 0x99, 0x7, 0x0, 0x8001, 0x9, 0x7, 0x0, 0x2, 0x37, 0xfffb, 0x3, 0x9, 0x2, 0x80, 0xfbff, 0x1, 0x9, 0x7, 0x5, 0x7fff]}}, 0x1000000})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x50)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080))
bind$alg(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100004, 0x220104, 0xb, 0x1}, 0x48)
unshare(0x2a020400)
r6 = timerfd_create(0x0, 0x0)
poll(&(0x7f0000002080)=[{r6}], 0x1, 0x0)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={r5, &(0x7f0000000380), 0x0}, 0x20)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x9, @mcast2}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90172fbdeb70322ea3188f81890e3db"}, 0xd8)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="a2aaaaaaaaaa0180c200000008004500003c0000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac060000907800001312adf059fd789278e2fb03dc15d356998a0000"], 0x0)

418.796269ms ago: executing program 2 (id=2711):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000042c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210400000000000000001200000008000300", @ANYBLOB="0a000600080211000001ce"], 0x40}}, 0x0)

364.56517ms ago: executing program 0 (id=2712):
unshare(0x2000400)
socket$rxrpc(0x21, 0x2, 0x2)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000140), 0x35000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c83020001c0001000b0204004c00000002080400030003080303080000000200d3", @ANYRESOCT=0x0], 0x25)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="0300001ff2db08640a4e0246153e38cdd19fb6bb90e3f76ad74e1466287ea6a2c1c6c0f948f7c4e0029e242ac8494cccd23a77aae0be2e35186217af7708a3efbc424b3eee764b5b8f0749261b9238cc7ab0a89a69fc393e726078395fde068582c4a3fa08e97b120cb280dac4313dede3ff4761409b7cec44da289e4714116e86da4c38100aef6a4f0e259395e936cdbc33e492a3d5bb46b4bc5602f30509c80071d4274bb357f0ad7793d08f2a3ce8829dab4e0e51a2b1d19a3f19f5b17dde2909cee6a5c5daf96275e5204d2f6598d86f799acc", @ANYRES8=<r1=>r0, @ANYRESOCT=r0, @ANYRES64=<r2=>0xffffffffffffffff, @ANYRESDEC=0x0, @ANYRES32], 0x23)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102387, 0x18ff3}], 0x1, 0x1ffffc, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r4 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0xfffffffffffffffd)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x2352a000)
mmap(&(0x7f00000cb000/0x1000)=nil, 0x1000, 0x6, 0x100010, r3, 0x841ea000)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8003, &(0x7f00000008c0), 0x0, 0x4)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa4200, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r2], 0x44}}, 0x24048050)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5)
getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000100))

265.300277ms ago: executing program 3 (id=2713):
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000400)})
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001)
prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x200, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x0, 0xd4a3})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r3, 0xffffffffffffffff, 0x2b, 0x0, 0x4000}, 0x10)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0xfc26)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000002030102000000000000000000000010080001000100000016c798a7a8be429f266aaa9fc26d5d401e00572f6bbf0e38b11b74fb052adbead0994c7e8c6a24cc5be3479fc2117ee54cc3b0a38ad3b7f90b31dfae64b66dd684f56214dcdc8185e581b1c33f5ad671e8ac18454066395c8eec06f484df86911de70a9410dc9f2a63839212062db703bd9a386bb2ca210a712924631d3923da233f43ce65cff9022548853c33ff260bfd4ca4580f8a1c80d4548497e4b492b934d2052345915c29838b78932aa8abe8c36f053711"], 0x1c}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'wg1\x00', 0x2000})
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x7, 0x0, 0x2, 0xffffffff}, {0x20}, {0x0, 0x0, 0x0, 0x7}, {0x20, 0x0, 0x0, 0x24}, {0x6}]})
syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x800002)

0s ago: executing program 0 (id=2714):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000c40)={{r1}, 0x0, 0x10, @unused=[0x4, 0xffffffffffffff00, 0xfa8f, 0x2], @name="156d0fe01b9462e916db07865006144c56c6b16bfebde75f9883d2b3529fa067fdde1559ccc661bfdb57489024d09eca3c58ea76d8c34c95cef6db668a484dbc1660e9c54e8a1fbe147c5536d32bcf542702e873fef297d9db00f1e4945666412d6d2ec36ba8359abad4801a9e2da978bf98309103c6fbfd0d5fc3e13d76f65bd7186765b8a8326bfb2aa0149b4b516b7cfcdeac1504d0e153bf816be4fec3fb4db899ac85aadead3a30bba13001ca0f2bf195f27066666654bcc91568f2a6ff0ee97f2b4028e071e04f34252ad20e477ba2abe347c8f7291a56e2209628384464fa0dae680a293134b4408236cc33cc6ccc16f98f664d4f95710edc99bc7c3f06fea63630f78846c586dd97c0aa9bb5e46bf03efe2084f43ec7f0b5f35daf12171685fdb9982666e5426511bb6f006e5daf1f9b9ec3eeb6b003a068a1a90714af262e6c10ad83153e0c3de759af567d6724eab56c49fea60223d2367d625676394a5f42f32ccc8d50080ea5401b92fa2f32234a28c8c4f3f76d56008f0d062d898b60149367a45c0c64807f9cf0a586a44586765ebb0ff9d13f705ebb447207eceb3f98d1e9d25b4e27733c79d5c9bab877362e73d8ce152656e933027b62e7411891a65e2f5f44b1dfc239972637fa3082ed62da02d3a29760d7acc610862f786c51de3b34fee58003e7389ed792bf12140dcf1fd50e2841e0ce2ffab50db8808c6be310bfff2b89be7974c1a0f0e1d26b75f4ac679d1bf96730c0b13ce9bed611b62c9e9da6a649ea50c164f3c04f9d58de02f7e62986c6c3098e69ba9d0f806f6bc0828ea12c8a8fc82f91645a4faf3f2a856d2c3760be4601c0f722cf6beb7705064acf3314810aa9223c92aead3deab55d00db8c651023bc6144e1828fd9448bf0108a87a04a3ffd7ad12ed84385740239d8e0fd7252e7ca0ac7e9acbbe68e0ad4017e792375277643898a999909d45e3d8b69c2ae5c3f0b0892e017f728e73aa1d6a87388eaa7718861acf4227f72aa956d5a2c6ca375c100b08d810f1398e8a50a0c6dcecc377573f8187b022b571867e30b1652a4026fcc3661d2df77abc0927afe824859fd82fe30c4c538a9167edc49762654e752d3e167679fffcb5297b61c8dd97e6a2d8d5a92c084656081f4fef595c7c1fc2b0be7ea9c372449aa06470d20185e3b0646405b9d8709dc9768fa27cfde379e996c61ec0ea3604e55765a7df672fce79bdec16b92d8b4d6dbb60326cec372dc72bf9d80eba4c5c4c2e76ef6264172a7763477d0454fdf3ff8e02ab3ff4138a4eba89e24d943876ab3e013e65bf53b7f90cf24b91e6714e0d043771e00247c46485df4a5e001d3e46917526a57f613b66ae54c2424db46294b31636a9b9c6bf640a7019567d97eade0863efd11b639d024f45ef056132654990f476019053f0e3c9531b76a1f67ee6af0ea50b5666479183ee8a2001c8b57adda336b4814a99f4231857a93ac06503bbcdd0ca9bbd733aa8c6b079e62d081b8b471b8ef2f70df41da536a18effdd2b2602f33f37b47c4e463aabe7c5b4a395779261c1c49593f093640f568560895487a78ba26fb67f6180e2d02dcef76ccc34923c21a116c64175c8ffe5450aec58d0754a1cd740d5c2d342390403a421ea2c5de551fac0835b1059e326d55d04eabb962b9552bccc76c1b39027e28f3c694384e3f1ebcb3828051c647898a528be5d78e465115a686ef6b9a86548e3ebd99c6172df6bc073773cb292da6b4b58bb53c42edf23be6abf3bb79306daa5ef2b01a5e1efa8309219b2fbb479d11fab55f6e10c5da3d7b6685801fbb5104293c4da87b541363c3a48420d1c8b9f74472914fb1dcded1ff5011ca92316fb52b78fbd0293739155f4cf4aa3cf989ae7569695ebf7d25befca754b4d26be61b1a55ea19443a49461f4a33b09a0c915cd3f6f9eaf3259f65a356c1086605bba0001e1425c4efe07ae2b9caf97595a2dbbac9637a66b09b987b99f172ee4f83bab130b98bfcea688e713868151ec0c86584ec25ead3ff6d7ee70f7cf1603cb9763267b7a5e032978dca6533ce0747a6df76483defb644b21ba34f6041bc58203e612e41e8fd5d0ac4f118468deb852b1a5201a508bc3e6f69647e6beb9c6f7d86f4ad6be0f0412f2ae0d25391df5273f51412d3c300ba1436039af0c0e9daafb1f2cbf9d68c11e95783c3c47926ffbc24e892549f12d34b271a2d89d145f6a4ff2190a4f4b94c7949c73ff81260f90aed620cff3acd3aed72e68340529b920db0020f78b1bfd98365cc383d856c3d8b4e098545d56af9a1aebf37881c529a281cb380d02d553c3a4905e5884782fab1c1f13bdaf1316daab7ae8d46350113f8725d737ed43255df0b78bd7345dd073f808c6391e9bff065b052559c12d49a1c129edb664c07ef49c7bdf145bce7c892c20b7ae12f5f072dff83e27361d0e3371dab3a9260b1d0561e7fbbabf03f11a8cf03ee35968acbd217211f4c6a1e2cc06d39f5c7845ddcea789f15830a1d09c44dd59f67cd99456dfbf14ced8d945e7b66bca94b22031f76c8b983ebb6087264013dd7a2871dde268fde732e5e007a8efbe282596bcd0990535e8ef9b3feecaa598bd7cce6e2ab8860f4bafb7142cea469e013265e59c8bef79382b2fc9a38a40765627d89769a16ffcb52b95c41be41b58b562dc12a7e5d6552445859e50c916c8f45d0810a340d399916b01a78f1afdd3aed0c04286a830904a237822e8bc16edcc7d23d525814dbb3cc7246b1c3225ad6777dd524093784fa8606371e65f7ef0898c55a72a754ec1e7ff9acc1a26892e0209fa61e40820fb94edce8f772bff2e60fb4f8104c69d1b8712e9a40c2cb59ffbd7a3280f359435089346b2ae691455a5edf9a83ca5bd2871b07e346d780f6b48c45470031d33860251bf4d53b3df1aff9980166b63a1a171ac5a80e28b0c52f7fc0a0e427a318a824001ae42c95e0fc878a16a93d72f5d1ca7995227c729f07f6b7bc2811d56832484cdac4b6c3b97cb3d627186dffc19184429cd649ea96d25e390a9a60f19ac390cbdf5cfde22a48dff53f9575a57892db159d50890cb3fd333989ce837ed4799129111483df12ea3a27da3f16dd6a8d44f5d2153b3bc47d54789117d6bde114f052de833c122bdf1b4ce7cfc6b7f7bc83a259d14782aa70d9c61b96acf05ad2a6c67ca6736459cdbb11d113c9f7309dff83defcefe51c6565e4e64eef58e18f2cb60ba17f4357bd91a73923e6a3ac99ed9c080646f93021c0abe68acc9119c3cdd7eeabd8998c7196bca54f2d31561bd487ebd80c58e92b425949d2bdd4b9d6c30a05bab7f7b4b465154a6bb63fc437f58e1e46a49aced6c40be7f394b5120b54d4969fe7c9483e6ec45102950dc7b51fd5e1393f1d8062c7d5d9468e35b8457c3a4b0e3a4b276e75e556e9c1f0cf0ef1eecc5aeaf9c5aca14bc34926c803068c8f1489fae2978ac91a1c3556e3728e75036cdfb9ecbf25109880a2fd0d70ec40408f0bb943a126fadeef2b2dd58933cd4d939dc5f29d810cdd76652c2b093b15dd876563b311ef405ad14fa3e6897082c03f6d56509e47dabf3a3b97d3fbd3d482b26abe5dc1e437a2373f63cb0bae017267cfc3d919cf3a66cb435a6b9e33a024ba6dfd3602c8e71a1d8ddfb9af99bd7a9990146a79ac113cdbe5d13deba5f7bd7e5e98fe3ff8e03b6a963b8e8d2b045d4bc88510f7722f98963dc5fa8f4d6c60b905d8eaf42db55e8fb24e673d2d12381a6d1fde7ed584b6c483d5cd6eedd014ab1c7630cc79fac93c8f80a84dd20a254973bf007ba72e16ca7e8cd998f30f0cd3f8efcbf64c37b8f401bb1b9acd7f21b191fc9ae98d4286422e0bbf16bbdb50c722a3726973fb38b0eea1bf9ff42fdc17d9f55016ff6005784f1dc89819ffada9917fef3a7c774c73ec0aa4bee551b22d107116b14429ca2955cd77601b9a93d5c24d683ad96eb4fe5119016040c8a797eea583db165cc9ba0dfc44e0fc00e0f5a3e1eeb9351b213591fa512722d5f9f601f0a8a6db8f02b1ca7e398b556039210df46e3834bde350a5dc02daeb28d6ba6e44b564a5ddc78a5aee1d1ebae110fecb0bddce881969bc7ce172947de9746600fe080bb5d89ce95c43672a0b0500e4f206ab5015912905f1b52ce84374bcedb7755f5c0ed3449bf9643a7f10dd0fdf006b74b4e1bc788281be51118d822d537892bea1ba581fab89b6cd26eea215c1985a45d858519388d73bd3743691bc89073f23d53049d57e3f245a051b2f7aeb51251cbe8be5b7ee3a3fecd68a08cb07948a459cdbc73b9599b40eaa4a74663c28f308a17a5f46ff7f384006d51e06738eaf0d8e4b71ef57fc5f89eda18158b2513147aad5f44bf5e8e38677ae49947dba967e70c613928762bd048d3cff5c5f59b50197e636605254b007aa0e169fa7775d93b512f4f81fe778d8d5af6ddb4079cc05999c481406ed25facb1f2d48dfc2a525ac08efe4ac17e87fa534a2a4e2643601d1f2d0f62ac815f300e8859f91f85d805761516d0ed72fa0d1e000f31a85b6b5583c493ddad788f265836e28d7651163e6e47a53b6487c4e9e7dee3b332b6287eb5719e7d1faf0f4fb3827bc82e077d91a5d0e16175da5aac0454a3cd9ff380c9ccffa8664ffe8722d0f4178eeaa52a1c3eca2b0357a13d8e0e597dbc4f65f8191d494bc3c51b44edc296c26f739c2dd96e300a1740b3f4ffce125e62816011880898322def8bcfe7e1d7d9832a7a147470ada6d9a12b07c9f765bf326fdaad0fae712867e91077beadfef2c6dd0706646c1b05fb520cc112344a1eb61f4e0986c24c7f24938e8d9199e5605c9e6fca71cf5650222033106f7cc0023ecc0b05e5ac8292576a6690fa17a2d98a6d20cdcdc61f481c0a801a0496121a6ac866795b41544a212ebd9098bfab7bb615e3b1a5a3503d397c9f4a7ac47936cf3e343dfebff4d36d097ba10cb88f1553b32346d3cc4f4024315611bff00390bae898bc7eeac861408cc8a8eed350138f44e5f951b6f14967fc83a67830a1f2078591f078280652432f3cb24666213ea5356b5013be9f33f46f21fdb3d7e3f2dbf527e9b35e8768979b0deb4858d9daeee6839d649c95f02610253c11aae9768ea57c360d32dc1c9a7daff8707a7426287b14247acc222a81f33a0b2c65f452c5561d911e1a507b0dfee61d2e6424a147a11016ee3de131eefa8c1d67a9af60857fa2da67d11415bea0689a9b440617ddd823e21246e5bb18733abf74ca1d78df25bd3a3c313c147d571b0acae5f00c81d09191ca8a80d63898ac4afb8f9d5f7342e64d4b6a2490ac1bdc4bfc6d98f722f9808f0e7dbe4f94eb81760446d2dd4b97133065f0cbb1eca5908620385a0ca030c09e328401995eb376c5b6fed281cbeaa04b7d165adef6d08baa0eaf132f68689bc05ebfcd41b6cae416aa2549d4716b5dea15955d1c43936e71a14643bc20e362b99f844fe8de71e5a9ef9cfca77ae2675d6a6434fc302497580d15b2685133cf8874c75ddf744bbb3e06d9e820659e732d41b407f5ff9d4827ddb32853d65173e70f4e2467bbb1e3d5db40b28732b7b2982f86700f117aba640f3f73328aff94175b0587fdc6d9b82281f0f34877b8852390937f4da428fae96d63bce455e62c21a6474727667a282d3f0504b62bdfda286406f9b579b7263dd4d0f"})
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x100000001)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
close(r5)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0)

kernel console output (not intermixed with test programs):

pID=0x0000
[  887.265470][T11285] veth1_vlan: entered promiscuous mode
[  887.276516][ T5316] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  887.441075][T11282] 8021q: adding VLAN 0 to HW filter on device bond0
[  887.455416][ T5316] radio-si470x 4-1:0.0: software version 0, hardware version 0
[  887.465421][ T5316] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  887.481415][ T5316] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  887.524910][T11282] 8021q: adding VLAN 0 to HW filter on device team0
[  887.550464][T11285] veth0_macvtap: entered promiscuous mode
[  887.596197][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  887.603346][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  887.661335][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  887.668490][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  887.688231][T11285] veth1_macvtap: entered promiscuous mode
[  887.694214][ T5316] radio-si470x 4-1:0.0: submitting int urb failed (-90)
[  887.801558][T11285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  887.817483][T11285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.835805][T11285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  887.846437][T11285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.856414][T11285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  887.867617][T11285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.888499][T11285] batman_adv: batadv0: Interface activated: batadv_slave_0
[  887.935332][T11285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  887.966170][T11285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.980179][T11285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  887.991605][T11285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  888.009266][T11285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  888.023190][T11285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  888.041231][T11285] batman_adv: batadv0: Interface activated: batadv_slave_1
[  888.071129][T11285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  888.080226][T11285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  888.089202][T11285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  888.098456][T11285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  888.240246][T11281] 8021q: adding VLAN 0 to HW filter on device batadv0
[  888.322055][ T2456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  888.362971][ T2456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  888.742522][ T2456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  888.781457][ T2456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  889.359259][ T5316] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110
[  889.387805][ T5316] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32
[  890.879994][ T5316] usb 4-1: USB disconnect, device number 23
[  890.941439][T11282] 8021q: adding VLAN 0 to HW filter on device batadv0
[  890.985396][T11281] veth0_vlan: entered promiscuous mode
[  891.013767][T11281] veth1_vlan: entered promiscuous mode
[  891.052549][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'.
[  891.064463][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'.
[  891.432567][T11281] veth0_macvtap: entered promiscuous mode
[  891.459864][T11281] veth1_macvtap: entered promiscuous mode
[  891.512394][T11281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  891.974397][T11281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.325382][T11281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  892.355598][T11281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.365639][T11281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  892.385627][T11281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.395761][T11281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  892.409769][T11281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.422694][T11281] batman_adv: batadv0: Interface activated: batadv_slave_0
[  892.434323][T11281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  892.450854][T11281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.461700][T11281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  892.472614][T11281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.486269][T11281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  892.496985][T11281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.508600][T11281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  892.519116][T11281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.531356][T11281] batman_adv: batadv0: Interface activated: batadv_slave_1
[  892.564395][T11281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  892.603332][T11281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  892.635580][T11281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  892.644569][T11281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  892.964468][  T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  893.117328][T11494] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in;
[  893.117328][T11494]    program syz.2.1843 not setting count and/or reply_len properly
[  893.915590][  T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  893.982690][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  894.003011][T11494] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in;
[  894.003011][T11494]    program syz.2.1843 not setting count and/or reply_len properly
[  894.057426][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  895.636817][T11282] veth0_vlan: entered promiscuous mode
[  895.718594][T11282] veth1_vlan: entered promiscuous mode
[  897.037540][T11282] veth0_macvtap: entered promiscuous mode
[  897.094726][T11282] veth1_macvtap: entered promiscuous mode
[  897.179902][T11282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  897.206305][T11510] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  897.222132][ T5266] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  897.230080][T11282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  897.976756][T11282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  898.016899][T11282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  898.027642][ T5266] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  898.039050][ T5266] usb 3-1: config 0 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  898.054521][ T5266] usb 3-1: config 0 interface 0 has no altsetting 0
[  898.057438][T11282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  898.076231][ T5266] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3
[  898.092902][T11282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  898.103970][ T5266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.105563][T11282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  898.125021][T11282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  898.143875][T11282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  898.152066][ T5266] usb 3-1: Product: syz
[  898.154494][T11282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  898.165734][ T5266] usb 3-1: Manufacturer: syz
[  898.185589][ T5266] usb 3-1: SerialNumber: syz
[  898.196115][T11282] batman_adv: batadv0: Interface activated: batadv_slave_0
[  898.201492][ T5266] usb 3-1: config 0 descriptor??
[  898.211825][ T5266] ir_toy 3-1:0.0: required endpoints not found
[  898.284325][T11282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  898.328862][T11282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  898.362149][T11282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  898.389344][T11282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  898.403921][T11282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  898.422364][T11282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  898.442632][T11282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  898.953805][T11282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.068633][T11282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  899.196963][T11282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.295386][T11282] batman_adv: batadv0: Interface activated: batadv_slave_1
[  899.345291][T11282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  899.355164][T11282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  900.658764][ T5266] usb 3-1: USB disconnect, device number 34
[  900.679929][T11282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  900.705676][T11282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  901.669714][  T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  902.585585][  T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  902.791068][T11548] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in;
[  902.791068][T11548]    program syz.2.1856 not setting count and/or reply_len properly
[  902.817343][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  902.854527][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  904.494666][   T29] audit: type=1326 audit(1723660732.312:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11553 comm="syz.1.1858" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68aed799f9 code=0x0
[  912.517437][T11611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1875'.
[  912.541655][T11613] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in;
[  912.541655][T11613]    program syz.0.1874 not setting count and/or reply_len properly
[  912.573836][   T29] audit: type=1326 audit(1723660740.392:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11606 comm="syz.3.1871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbfd5799f9 code=0x0
[  912.724489][T11613] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in;
[  912.724489][T11613]    program syz.0.1874 not setting count and/or reply_len properly
[  916.124013][T10994] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  916.124067][T10994] Bluetooth: hci3: link tx timeout
[  916.141079][T10994] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  917.846170][T11663] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in;
[  917.846170][T11663]    program syz.1.1888 not setting count and/or reply_len properly
[  917.984421][T11664] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in;
[  917.984421][T11664]    program syz.1.1888 not setting count and/or reply_len properly
[  918.073082][T11666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1890'.
[  918.229617][T10994] Bluetooth: hci3: command 0x0406 tx timeout
[  921.046133][T11701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1900'.
[  924.106784][T11714] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in;
[  924.106784][T11714]    program syz.0.1905 not setting count and/or reply_len properly
[  924.382868][T11714] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in;
[  924.382868][T11714]    program syz.0.1905 not setting count and/or reply_len properly
[  925.706027][T11733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1908'.
[  926.294128][T11742] vcan0: entered promiscuous mode
[  926.302233][T11742] vlan2: entered promiscuous mode
[  926.460329][T11742] vcan0: left promiscuous mode
[  928.047676][ T9960] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  928.375705][ T9960] usb 3-1: Using ep0 maxpacket: 8
[  928.402765][ T9960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  928.435816][ T9960] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  928.481994][ T9960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  928.497290][ T9960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  928.510205][ T9960] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  928.532822][ T9960] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  928.601846][ T9960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  928.626908][ T9960] usb 3-1: Product: syz
[  928.641383][ T9960] usb 3-1: Manufacturer: syz
[  928.663874][ T9960] usb 3-1: SerialNumber: syz
[  929.508849][ T9960] usb 3-1: config 0 descriptor??
[  929.558726][T11769] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in;
[  929.558726][T11769]    program syz.1.1920 not setting count and/or reply_len properly
[  929.723728][T11769] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in;
[  929.723728][T11769]    program syz.1.1920 not setting count and/or reply_len properly
[  929.760156][ T9960] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32
[  929.779926][ T9960] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5
[  929.780161][T11120] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  930.015760][T11120] usb 4-1: Using ep0 maxpacket: 16
[  930.025970][ T9960] usb 3-1: USB disconnect, device number 35
[  930.038981][T11120] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  930.061107][T11120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.091624][T11120] usb 4-1: Product: syz
[  930.101797][T11120] usb 4-1: Manufacturer: syz
[  930.120826][T11120] usb 4-1: SerialNumber: syz
[  930.143747][T11120] usb 4-1: config 0 descriptor??
[  930.161983][T11120] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  930.381699][T11120] gp8psk: usb in 128 operation failed.
[  931.121220][T11120] gp8psk: usb in 137 operation failed.
[  931.135695][T11120] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22)
[  931.185624][T11120] dvb_usb_gp8psk 4-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22
[  931.300309][T11788] vcan0: entered promiscuous mode
[  931.331200][T11788] vlan2: entered promiscuous mode
[  931.356144][T11788] vcan0: left promiscuous mode
[  931.908930][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  931.915463][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  933.267173][T11120] usb 4-1: USB disconnect, device number 24
[  933.588293][T11815] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in;
[  933.588293][T11815]    program syz.1.1933 not setting count and/or reply_len properly
[  934.518280][T11815] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in;
[  934.518280][T11815]    program syz.1.1933 not setting count and/or reply_len properly
[  934.874364][T11829] vcan0: entered promiscuous mode
[  935.685250][T11829] vlan2: entered promiscuous mode
[  935.761602][T11829] vcan0: left promiscuous mode
[  937.567322][T11870] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in;
[  937.567322][T11870]    program syz.1.1951 not setting count and/or reply_len properly
[  937.703492][T11870] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in;
[  937.703492][T11870]    program syz.1.1951 not setting count and/or reply_len properly
[  937.705647][ T5316] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  937.955600][ T5316] usb 3-1: Using ep0 maxpacket: 16
[  938.007744][ T5316] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  938.051459][ T5316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.079999][ T5316] usb 3-1: Product: syz
[  938.085266][ T5316] usb 3-1: Manufacturer: syz
[  938.097526][ T5316] usb 3-1: SerialNumber: syz
[  938.131348][ T5316] usb 3-1: config 0 descriptor??
[  938.154679][ T5316] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  938.373003][ T5316] gp8psk: usb in 128 operation failed.
[  938.412066][ T5316] gp8psk: usb in 137 operation failed.
[  938.427857][ T5316] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22)
[  938.472053][ T5316] dvb_usb_gp8psk 3-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22
[  938.555125][T11884] vcan0: entered promiscuous mode
[  939.385034][T11884] vlan2: entered promiscuous mode
[  939.401354][T11884] vcan0: left promiscuous mode
[  939.490926][ T5316] usb 3-1: USB disconnect, device number 36
[  940.985081][T11919] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in;
[  940.985081][T11919]    program syz.2.1966 not setting count and/or reply_len properly
[  941.114942][T11919] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in;
[  941.114942][T11919]    program syz.2.1966 not setting count and/or reply_len properly
[  941.525678][   T51] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  941.759589][   T51] usb 1-1: Using ep0 maxpacket: 16
[  941.794783][   T51] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  942.235664][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.244226][   T51] usb 1-1: Product: syz
[  942.252523][   T51] usb 1-1: Manufacturer: syz
[  942.268542][   T51] usb 1-1: SerialNumber: syz
[  942.291034][   T51] usb 1-1: config 0 descriptor??
[  942.341070][   T51] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  942.604349][   T51] gp8psk: usb in 128 operation failed.
[  942.627206][   T51] gp8psk: usb in 137 operation failed.
[  942.632747][   T51] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22)
[  942.654653][   T51] dvb_usb_gp8psk 1-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22
[  944.688309][   T51] usb 1-1: USB disconnect, device number 24
[  945.823967][T11972] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in;
[  945.823967][T11972]    program syz.3.1984 not setting count and/or reply_len properly
[  945.941624][T11972] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in;
[  945.941624][T11972]    program syz.3.1984 not setting count and/or reply_len properly
[  946.048677][ T9960] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  946.915857][ T9960] usb 5-1: Using ep0 maxpacket: 8
[  946.929598][ T9960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  946.948262][ T9960] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  946.995591][ T9960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  947.023002][ T9960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  947.053224][ T9960] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  947.105275][ T9960] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  947.125208][ T9960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  947.150269][ T9960] usb 5-1: Product: syz
[  947.165697][ T9960] usb 5-1: Manufacturer: syz
[  947.184853][ T9960] usb 5-1: SerialNumber: syz
[  947.213519][ T9960] usb 5-1: config 0 descriptor??
[  947.239518][   T51] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  947.456010][   T51] usb 2-1: Using ep0 maxpacket: 16
[  947.482884][   T51] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  947.505751][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  947.752896][ T9960] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110
[  947.764300][ T9960] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5
[  948.243460][   T51] usb 2-1: Product: syz
[  948.252249][   T51] usb 2-1: Manufacturer: syz
[  948.271539][   T51] usb 2-1: SerialNumber: syz
[  948.320455][   T51] usb 2-1: config 0 descriptor??
[  948.348607][   T51] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  948.464844][ T9960] usb 5-1: USB disconnect, device number 16
[  948.559199][   T51] gp8psk: usb in 128 operation failed.
[  948.573879][   T51] gp8psk: usb in 137 operation failed.
[  948.586039][   T51] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22)
[  948.733071][   T51] dvb_usb_gp8psk 2-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22
[  950.988901][   T51] usb 2-1: USB disconnect, device number 31
[  951.049279][T12033] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in;
[  951.049279][T12033]    program syz.3.1997 not setting count and/or reply_len properly
[  951.449170][T12033] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in;
[  951.449170][T12033]    program syz.3.1997 not setting count and/or reply_len properly
[  953.236597][   T51] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  953.485806][   T51] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  953.507080][   T51] usb 5-1: config 0 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  953.540611][   T51] usb 5-1: config 0 interface 0 has no altsetting 0
[  953.558484][   T51] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3
[  953.585602][ T5263] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  953.605937][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.634365][   T51] usb 5-1: Product: syz
[  953.647291][   T51] usb 5-1: Manufacturer: syz
[  953.668087][   T51] usb 5-1: SerialNumber: syz
[  953.693030][   T51] usb 5-1: config 0 descriptor??
[  953.733303][   T51] ir_toy 5-1:0.0: required endpoints not found
[  953.795643][ T5263] usb 2-1: Using ep0 maxpacket: 8
[  953.812712][ T5263] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  953.909849][ T5263] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  954.143688][ T5263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  954.185824][ T5263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  954.195813][ T5263] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  954.211676][ T5263] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  954.223112][ T5263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  954.241116][ T5263] usb 2-1: Product: syz
[  954.245424][ T5263] usb 2-1: Manufacturer: syz
[  954.250255][ T5263] usb 2-1: SerialNumber: syz
[  954.260209][ T5263] usb 2-1: config 0 descriptor??
[  954.415436][T12065] ip6gretap0: entered promiscuous mode
[  954.421994][T12065] vlan2: entered promiscuous mode
[  954.430995][T12065] ip6gretap0: left promiscuous mode
[  954.472683][ T5263] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32
[  954.490132][ T5263] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[  954.713214][ T5263] usb 2-1: USB disconnect, device number 32
[  955.957262][ T9960] usb 5-1: USB disconnect, device number 17
[  956.152339][ T5315] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  956.345831][ T5315] usb 1-1: Using ep0 maxpacket: 16
[  956.364041][ T5315] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  956.385180][ T5315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.399199][ T5315] usb 1-1: Product: syz
[  956.411414][ T5315] usb 1-1: Manufacturer: syz
[  956.419415][ T5315] usb 1-1: SerialNumber: syz
[  956.593024][ T5315] usb 1-1: config 0 descriptor??
[  956.604365][ T5315] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  956.974759][ T5315] gp8psk: usb in 128 operation failed.
[  957.085613][ T5315] gp8psk: usb in 137 operation failed.
[  957.091142][ T5315] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22)
[  957.140316][ T5315] dvb_usb_gp8psk 1-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22
[  958.258114][ T5315] usb 1-1: USB disconnect, device number 25
[  959.100347][T12115] ip6gretap0: entered promiscuous mode
[  959.159989][T12115] vlan2: entered promiscuous mode
[  959.196158][T12115] ip6gretap0: left promiscuous mode
[  959.965791][ T5315] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  960.235589][T10994] Bluetooth: hci4: command 0x0406 tx timeout
[  960.277820][ T5315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  960.296623][ T5315] usb 2-1: config 0 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  960.314308][ T5315] usb 2-1: config 0 interface 0 has no altsetting 0
[  960.367565][ T5315] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3
[  960.377729][ T5315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  960.404896][ T5315] usb 2-1: Product: syz
[  960.416000][ T5315] usb 2-1: Manufacturer: syz
[  960.422954][ T5315] usb 2-1: SerialNumber: syz
[  960.904366][ T5315] usb 2-1: config 0 descriptor??
[  962.719074][ T5315] ir_toy 2-1:0.0: required endpoints not found
[  964.432613][    T9] usb 2-1: USB disconnect, device number 33
[  964.837907][ T9960] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  965.715632][ T9960] usb 3-1: Using ep0 maxpacket: 8
[  965.749890][ T9960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  965.778649][ T9960] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  965.803044][ T9960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  966.655803][ T9960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  966.666004][ T9960] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  966.682414][ T9960] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  966.692996][ T9960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  966.712915][ T9960] usb 3-1: Product: syz
[  966.723198][ T9960] usb 3-1: Manufacturer: syz
[  966.734779][ T9960] usb 3-1: SerialNumber: syz
[  966.758725][ T9960] usb 3-1: config 0 descriptor??
[  966.795934][ T5315] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  966.969113][T12157] ip6gretap0: entered promiscuous mode
[  966.982912][T12157] vlan2: entered promiscuous mode
[  966.996009][ T5315] usb 4-1: Using ep0 maxpacket: 16
[  966.997297][T12157] ip6gretap0: left promiscuous mode
[  967.011955][ T9960] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32
[  967.020608][ T5315] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  967.043421][ T5315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.138501][ T9960] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5
[  967.148359][ T5315] usb 4-1: Product: syz
[  967.153157][ T5315] usb 4-1: Manufacturer: syz
[  967.177922][ T5315] usb 4-1: SerialNumber: syz
[  967.652399][ T5315] usb 4-1: config 0 descriptor??
[  968.341838][ T5315] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  968.856110][ T9960] usb 3-1: USB disconnect, device number 37
[  968.930775][ T5315] gp8psk: usb in 128 operation failed.
[  968.939287][ T5315] gp8psk: usb in 137 operation failed.
[  968.944918][ T5315] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22)
[  968.956462][ T5315] dvb_usb_gp8psk 4-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22
[  969.021476][ T5315] usb 4-1: USB disconnect, device number 25
[  972.910014][T12174] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  974.955616][ T5263] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  975.215713][ T5263] usb 5-1: Using ep0 maxpacket: 8
[  975.226246][ T5263] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  975.239659][ T5263] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  975.641468][ T5263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  976.015551][ T5263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  976.058261][ T5263] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  976.137432][ T5263] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  976.159734][ T5263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  976.184973][ T5263] usb 5-1: Product: syz
[  976.189867][T12210] vcan0: entered promiscuous mode
[  976.199470][ T5263] usb 5-1: Manufacturer: syz
[  976.205156][ T5263] usb 5-1: SerialNumber: syz
[  976.210788][T12210] vlan2: entered promiscuous mode
[  976.221168][ T5263] usb 5-1: config 0 descriptor??
[  976.230651][T12210] vcan0: left promiscuous mode
[  977.220066][ T5263] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110
[  979.747107][ T5263] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5
[  979.799947][ T5263] usb 5-1: USB disconnect, device number 18
[  983.337256][T12252] Can't find ip_set type hash:ip,mar
[  984.607141][   T51] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  986.703668][   T51] usb 5-1: Using ep0 maxpacket: 8
[  986.715115][ T5228] Bluetooth: hci1: command 0x0406 tx timeout
[  986.715189][ T5222] Bluetooth: hci0: command 0x0406 tx timeout
[  987.278241][   T51] usb 5-1: device descriptor read/all, error -71
[  988.947304][T12277] vcan0: entered promiscuous mode
[  988.952505][T12277] vlan2: entered promiscuous mode
[  989.026156][T12277] vcan0: left promiscuous mode
[  990.775905][T11171] Bluetooth: hci5: command 0x0406 tx timeout
[  991.625620][   T51] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  995.275758][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  995.284446][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  995.302672][   T51] usb 4-1: Using ep0 maxpacket: 8
[  995.341953][   T51] usb 4-1: device descriptor read/all, error -71
[  995.687817][ T5315] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  996.159797][ T5315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  996.245417][ T5315] usb 2-1: config 0 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  996.296330][T12330] vcan0: entered promiscuous mode
[  996.354374][T12330] vlan2: entered promiscuous mode
[  996.392191][ T5315] usb 2-1: config 0 interface 0 has no altsetting 0
[  996.413354][T12330] vcan0: left promiscuous mode
[  996.635607][ T5315] usb 2-1: string descriptor 0 read error: -71
[  996.666764][ T5315] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3
[  996.912467][ T5315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  997.719203][ T5315] usb 2-1: config 0 descriptor??
[  997.724677][ T5315] usb 2-1: can't set config #0, error -71
[  998.719883][ T5315] usb 2-1: USB disconnect, device number 34
[ 1003.014419][T11171] Bluetooth: hci3: command 0x0406 tx timeout
[ 1003.120825][T11171] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1003.133816][T11171] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1003.144321][T11171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1003.168990][T11171] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1003.191553][T11171] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1003.204632][T11171] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1003.592192][ T5315] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1003.845553][ T5315] usb 2-1: Using ep0 maxpacket: 8
[ 1003.868376][ T5315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1003.889204][ T5315] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1003.912690][ T5315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[ 1003.962867][ T5315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1003.984214][ T5315] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1004.013556][ T5315] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1004.033770][ T5315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1004.071923][ T5315] usb 2-1: Product: syz
[ 1004.082016][ T5315] usb 2-1: Manufacturer: syz
[ 1004.115568][ T5315] usb 2-1: SerialNumber: syz
[ 1004.256357][ T5315] usb 2-1: config 0 descriptor??
[ 1005.208897][ T5315] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110
[ 1005.218473][ T5315] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[ 1005.365869][T10994] Bluetooth: hci2: command tx timeout
[ 1005.539473][ T5315] usb 2-1: USB disconnect, device number 35
[ 1006.355653][ T5263] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 1006.667575][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1006.721843][ T5263] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1006.788880][ T5263] usb 1-1: config 0 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1006.879213][ T5263] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1006.908920][ T5263] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3
[ 1006.970118][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1007.014359][ T5263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.022878][ T5263] usb 1-1: Product: syz
[ 1007.046136][ T5263] usb 1-1: Manufacturer: syz
[ 1007.052999][ T5263] usb 1-1: SerialNumber: syz
[ 1007.092490][ T5263] usb 1-1: config 0 descriptor??
[ 1007.270717][ T5263] usb 1-1: can't set config #0, error -71
[ 1007.283363][T12397] vcan0: entered promiscuous mode
[ 1007.323408][ T5263] usb 1-1: USB disconnect, device number 26
[ 1007.346032][T12397] vlan2: entered promiscuous mode
[ 1007.415983][T10994] Bluetooth: hci2: command tx timeout
[ 1008.785390][T12397] vcan0: left promiscuous mode
[ 1009.538072][T10994] Bluetooth: hci2: command tx timeout
[ 1009.698334][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1011.596400][T10994] Bluetooth: hci2: command tx timeout
[ 1011.982326][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1013.836318][ T5267] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1014.224821][ T5267] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1014.361532][ T5267] usb 2-1: config 0 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1014.398112][T12358] chnl_net:caif_netlink_parms(): no params data found
[ 1014.488785][ T5267] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1014.739257][ T5267] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3
[ 1014.759153][ T5267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1014.770759][ T5267] usb 2-1: Product: syz
[ 1014.775132][ T5267] usb 2-1: Manufacturer: syz
[ 1014.780181][ T5267] usb 2-1: SerialNumber: syz
[ 1014.854272][   T12] bridge_slave_1: left allmulticast mode
[ 1014.862919][   T12] bridge_slave_1: left promiscuous mode
[ 1014.871492][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1015.151545][ T5267] usb 2-1: config 0 descriptor??
[ 1015.159588][ T5267] ir_toy 2-1:0.0: required endpoints not found
[ 1015.182593][   T12] bridge_slave_0: left allmulticast mode
[ 1015.205962][   T12] bridge_slave_0: left promiscuous mode
[ 1015.211753][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1015.653134][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1015.670855][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1015.687302][   T12] bond0 (unregistering): Released all slaves
[ 1015.731356][T12445] vcan0: entered promiscuous mode
[ 1015.740445][T12445] vlan2: entered promiscuous mode
[ 1015.763135][T12445] vcan0: left promiscuous mode
[ 1016.011432][T12358] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1016.027203][T12358] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1016.129882][T12358] bridge_slave_0: entered allmulticast mode
[ 1016.171269][T12358] bridge_slave_0: entered promiscuous mode
[ 1016.202017][T12358] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1016.240497][T12358] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1016.254127][T12358] bridge_slave_1: entered allmulticast mode
[ 1016.262241][T12358] bridge_slave_1: entered promiscuous mode
[ 1016.449058][   T25] usb 2-1: USB disconnect, device number 36
[ 1017.414143][T12358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1017.488227][T12358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1017.974792][   T12] hsr_slave_0: left promiscuous mode
[ 1017.984867][   T12] hsr_slave_1: left promiscuous mode
[ 1018.005626][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1018.018937][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1018.583348][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1018.620790][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1018.724123][   T12] veth1_macvtap: left promiscuous mode
[ 1018.734002][   T12] veth0_macvtap: left promiscuous mode
[ 1018.749001][   T12] veth1_vlan: left promiscuous mode
[ 1018.758486][   T12] veth0_vlan: left promiscuous mode
[ 1019.345776][    T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 1019.442171][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1019.483518][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1019.555784][    T9] usb 1-1: Using ep0 maxpacket: 16
[ 1019.590642][    T9] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[ 1019.606148][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.616678][    T9] usb 1-1: Product: syz
[ 1019.620874][    T9] usb 1-1: Manufacturer: syz
[ 1019.644448][    T9] usb 1-1: SerialNumber: syz
[ 1019.667585][    T9] usb 1-1: config 0 descriptor??
[ 1019.676087][    T9] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[ 1020.593553][    T9] gp8psk: usb in 128 operation failed.
[ 1020.613717][    T9] gp8psk: usb in 137 operation failed.
[ 1020.640224][    T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22)
[ 1020.674645][    T9] dvb_usb_gp8psk 1-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22
[ 1021.484416][T12358] team0: Port device team_slave_0 added
[ 1021.983477][T12358] team0: Port device team_slave_1 added
[ 1022.324847][T12358] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1022.332366][T12358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1022.363324][T12358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1022.402037][T12358] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1022.424715][T12358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1022.452100][T12358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1023.049349][T11120] usb 1-1: USB disconnect, device number 27
[ 1023.107012][T12358] hsr_slave_0: entered promiscuous mode
[ 1023.131820][T12358] hsr_slave_1: entered promiscuous mode
[ 1023.187498][T12358] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1023.203704][T12358] Cannot create hsr debugfs directory
[ 1024.392648][ T5267] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1024.715704][ T5267] usb 2-1: Using ep0 maxpacket: 8
[ 1024.737415][ T5267] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1024.774061][ T5267] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1024.814142][ T5267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[ 1024.833898][ T5267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1024.844691][ T5267] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1024.861072][ T5267] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1024.876882][ T5267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1024.895596][ T5267] usb 2-1: Product: syz
[ 1024.905611][ T5267] usb 2-1: Manufacturer: syz
[ 1024.919662][ T5267] usb 2-1: SerialNumber: syz
[ 1024.932506][ T5267] usb 2-1: config 0 descriptor??
[ 1025.173825][ T5267] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 1025.192460][ T5267] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 1025.374559][ T5267] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32
[ 1025.526959][ T5267] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -32
[ 1025.537354][ T5267] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[ 1025.776530][T12358] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1025.893826][T12358] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1026.045194][T12358] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1026.198117][T12358] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1026.598474][ T5267] usb 2-1: USB disconnect, device number 37
[ 1026.662501][T12358] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1026.785124][T12358] 8021q: adding VLAN 0 to HW filter on device team0
[ 1026.838480][  T140] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1026.845739][  T140] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1028.295754][ T5267] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1028.402971][  T140] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1028.410143][  T140] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1028.535691][ T5267] usb 2-1: Using ep0 maxpacket: 16
[ 1028.545113][ T5267] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[ 1028.586473][ T5267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1028.615731][ T5267] usb 2-1: Product: syz
[ 1028.623467][ T5267] usb 2-1: Manufacturer: syz
[ 1028.640801][ T5267] usb 2-1: SerialNumber: syz
[ 1028.688501][ T5267] usb 2-1: config 0 descriptor??
[ 1028.705150][ T5267] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[ 1029.650616][ T5267] gp8psk: usb in 128 operation failed.
[ 1029.657575][ T5267] gp8psk: usb in 137 operation failed.
[ 1029.665391][ T5267] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22)
[ 1029.675149][ T5267] dvb_usb_gp8psk 2-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22
[ 1029.691117][ T5267] usb 2-1: USB disconnect, device number 38
[ 1030.105153][T12358] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1031.485522][ T5316] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 1031.824066][T12358] veth0_vlan: entered promiscuous mode
[ 1031.859312][T12358] veth1_vlan: entered promiscuous mode
[ 1031.875640][ T5316] usb 1-1: Using ep0 maxpacket: 8
[ 1031.895254][ T5316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1031.923512][T12358] veth0_macvtap: entered promiscuous mode
[ 1031.925723][ T5316] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1031.952476][ T5316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[ 1031.967138][T12358] veth1_macvtap: entered promiscuous mode
[ 1031.984563][ T5316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1032.003468][ T5316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1032.043378][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1032.059831][ T5316] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1032.091615][ T5316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1032.100446][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1032.107672][ T5316] usb 1-1: Product: syz
[ 1032.129600][ T5316] usb 1-1: Manufacturer: syz
[ 1032.144499][ T5316] usb 1-1: SerialNumber: syz
[ 1032.153971][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1032.987418][ T5316] usb 1-1: config 0 descriptor??
[ 1032.992865][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1033.005103][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1033.015846][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1033.025780][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1033.036838][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1033.046883][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1033.059672][ T5316] usb 1-1: can't set config #0, error -71
[ 1033.065519][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1033.077204][T12358] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1033.095551][ T5316] usb 1-1: USB disconnect, device number 28
[ 1033.110399][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1033.123098][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1033.133412][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1033.144435][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1033.171991][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1033.233900][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1033.311180][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1033.321849][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1033.332161][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1033.343065][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1033.354137][T12358] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1033.368512][T12358] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1033.958494][T12358] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1034.081032][T12358] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1034.092099][T12358] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1034.825021][ T2466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1034.846375][ T2466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1034.932060][  T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1034.952830][  T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1035.305877][   T29] audit: type=1326 audit(1723660863.122:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12628 comm="syz.2.2090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e25b799f9 code=0x0
[ 1035.500262][T11120] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1035.833886][T11120] usb 1-1: Using ep0 maxpacket: 16
[ 1035.851994][T11120] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[ 1035.863744][T11120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1035.873197][T11120] usb 1-1: Product: syz
[ 1035.879230][T11120] usb 1-1: Manufacturer: syz
[ 1035.885168][T11120] usb 1-1: SerialNumber: syz
[ 1035.895299][T11120] usb 1-1: config 0 descriptor??
[ 1035.913823][T11120] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[ 1036.824910][T11120] gp8psk: usb in 128 operation failed.
[ 1036.868898][T11120] gp8psk: usb in 137 operation failed.
[ 1036.887063][T11120] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22)
[ 1036.961770][ T5263] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1036.984190][T11120] dvb_usb_gp8psk 1-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22
[ 1037.407555][ T5263] usb 2-1: Using ep0 maxpacket: 8
[ 1037.759261][ T5263] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1037.795619][ T5263] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1037.820149][ T5263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[ 1037.835121][ T5263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1037.845738][ T5263] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1037.862215][ T5263] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1037.873846][ T5263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1037.883538][ T5263] usb 2-1: Product: syz
[ 1037.888383][ T5263] usb 2-1: Manufacturer: syz
[ 1037.895344][ T5263] usb 2-1: SerialNumber: syz
[ 1037.927379][ T5263] usb 2-1: config 0 descriptor??
[ 1038.174437][ T5263] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 1038.339400][ T5263] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 1038.418309][ T5263] radio-si470x 2-1:0.0: software version 0, hardware version 0
[ 1038.453678][ T5263] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[ 1039.281213][ T5263] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[ 1039.305723][ T5263] radio-si470x 2-1:0.0: submitting int urb failed (-90)
[ 1039.358578][T11120] usb 1-1: USB disconnect, device number 29
[ 1040.525250][ T5263] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[ 1040.626583][ T5263] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71
[ 1040.716349][ T5263] usb 2-1: USB disconnect, device number 39
[ 1046.999642][T12751] vcan0: entered promiscuous mode
[ 1047.004912][T12751] vlan2: entered promiscuous mode
[ 1047.013478][T12751] vcan0: left promiscuous mode
[ 1054.801442][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.812440][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1063.654123][T12856] bridge0: entered promiscuous mode
[ 1063.705739][T12856] vlan2: entered promiscuous mode
[ 1063.785940][T12856] bridge0: left promiscuous mode
[ 1072.326459][T10994] Bluetooth: hci5: ACL packet for unknown connection handle 200
[ 1072.353516][T10994] Bluetooth: hci5: SCO packet for unknown connection handle 0
[ 1073.385845][   T29] audit: type=1326 audit(1723660901.202:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12902 comm="syz.3.2251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbfd5799f9 code=0x0
[ 1074.606887][T12930] bridge0: entered promiscuous mode
[ 1074.617875][T12930] vlan2: entered promiscuous mode
[ 1074.661030][T12930] bridge0: left promiscuous mode
[ 1074.731403][   T29] audit: type=1326 audit(1723660902.552:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12928 comm="syz.2.2258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e25b799f9 code=0x0
[ 1077.005551][    T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1077.810539][    T9] usb 3-1: Using ep0 maxpacket: 8
[ 1081.654455][    T9] usb 3-1: device descriptor read/all, error -71
[ 1084.274643][   T29] audit: type=1326 audit(1723660912.092:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12991 comm="syz.2.2278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e25b799f9 code=0x0
[ 1094.400551][   T29] audit: type=1326 audit(1723660922.222:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13064 comm="syz.1.2299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68aed799f9 code=0x0
[ 1094.590631][T13078] bridge0: entered promiscuous mode
[ 1094.607551][T13078] vlan2: entered promiscuous mode
[ 1094.625125][T13078] bridge0: left promiscuous mode
[ 1102.418053][T13142] bridge0: entered promiscuous mode
[ 1102.435725][T13142] vlan2: entered promiscuous mode
[ 1102.453853][T13142] bridge0: left promiscuous mode
[ 1116.131070][T13209] bridge0: entered promiscuous mode
[ 1116.147359][T13209] vlan2: entered promiscuous mode
[ 1116.206615][T13209] bridge0: left promiscuous mode
[ 1116.221365][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.227761][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1121.267126][ T5222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1121.278067][ T5222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1121.287548][ T5222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1121.423039][ T5222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1121.439512][ T5222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1121.454555][ T5222] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1122.089333][T13242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2349'.
[ 1122.102847][T13242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2349'.
[ 1122.337663][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1123.570433][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1123.581772][ T5222] Bluetooth: hci3: command tx timeout
[ 1124.087624][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1124.194595][T13270] bridge0: entered promiscuous mode
[ 1124.224695][T13270] vlan2: entered promiscuous mode
[ 1124.259190][T13270] bridge0: left promiscuous mode
[ 1124.458362][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1125.705861][ T5222] Bluetooth: hci3: command tx timeout
[ 1125.786910][T13239] chnl_net:caif_netlink_parms(): no params data found
[ 1130.962940][T11171] Bluetooth: hci2: command 0x0406 tx timeout
[ 1130.975640][T10994] Bluetooth: hci3: command tx timeout
[ 1131.895245][   T35] bridge_slave_1: left allmulticast mode
[ 1131.928821][   T35] bridge_slave_1: left promiscuous mode
[ 1131.957072][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1131.998582][   T35] bridge_slave_0: left allmulticast mode
[ 1132.007365][   T35] bridge_slave_0: left promiscuous mode
[ 1132.033967][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1133.018455][ T5222] Bluetooth: hci3: command tx timeout
[ 1133.831469][T11171] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1133.844112][T11171] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1133.854420][T11171] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1133.870265][T11171] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1133.890377][T11171] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1133.898520][T11171] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1134.129412][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1134.164785][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1134.180307][   T35] bond0 (unregistering): Released all slaves
[ 1134.200748][T13239] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1134.208699][T13239] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1134.223871][T13239] bridge_slave_0: entered allmulticast mode
[ 1134.243176][T13239] bridge_slave_0: entered promiscuous mode
[ 1134.252118][T13239] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1134.269153][T13239] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1134.298227][T13239] bridge_slave_1: entered allmulticast mode
[ 1134.305955][T13239] bridge_slave_1: entered promiscuous mode
[ 1134.333027][T13322] bridge0: entered promiscuous mode
[ 1134.356882][T13322] vlan2: entered promiscuous mode
[ 1134.372170][T13322] bridge0: left promiscuous mode
[ 1134.637141][T13239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1138.489432][T11171] Bluetooth: hci1: command tx timeout
[ 1138.738585][T13239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1139.952067][T13239] team0: Port device team_slave_0 added
[ 1140.019937][T13239] team0: Port device team_slave_1 added
[ 1140.054769][   T35] hsr_slave_0: left promiscuous mode
[ 1140.086854][   T35] hsr_slave_1: left promiscuous mode
[ 1140.104216][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1140.123016][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1140.131900][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1140.139614][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1140.173508][   T35] veth1_macvtap: left promiscuous mode
[ 1140.179380][   T35] veth0_macvtap: left promiscuous mode
[ 1140.184962][   T35] veth1_vlan: left promiscuous mode
[ 1140.190336][   T35] veth0_vlan: left promiscuous mode
[ 1140.536095][T11171] Bluetooth: hci1: command tx timeout
[ 1140.739864][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1140.797128][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1141.411067][T13239] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1141.421553][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1141.459816][T13239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1141.505691][T13379] bridge0: entered promiscuous mode
[ 1141.511011][T13379] vlan2: entered promiscuous mode
[ 1141.519010][T13379] bridge0: left promiscuous mode
[ 1141.549302][T13239] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1141.608171][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1141.669186][T13239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1141.956185][T13239] hsr_slave_0: entered promiscuous mode
[ 1142.000643][T13239] hsr_slave_1: entered promiscuous mode
[ 1142.065716][T13239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1142.083860][T13239] Cannot create hsr debugfs directory
[ 1142.249589][T13333] chnl_net:caif_netlink_parms(): no params data found
[ 1142.615675][T11171] Bluetooth: hci1: command tx timeout
[ 1142.761596][T13333] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1142.799307][T13333] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1142.809270][T13333] bridge_slave_0: entered allmulticast mode
[ 1142.821699][T13333] bridge_slave_0: entered promiscuous mode
[ 1142.913268][T13333] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1142.921152][T13333] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1142.938487][T13333] bridge_slave_1: entered allmulticast mode
[ 1142.957475][T13333] bridge_slave_1: entered promiscuous mode
[ 1143.011214][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.113646][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.160194][T13333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1143.227330][T13333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1143.300120][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.366732][T13333] team0: Port device team_slave_0 added
[ 1143.416231][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.461262][T13333] team0: Port device team_slave_1 added
[ 1143.510500][T13333] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1143.541396][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1143.604730][T13333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1143.675068][T13333] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1143.684343][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1143.713867][T13333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1143.862582][T13333] hsr_slave_0: entered promiscuous mode
[ 1143.876001][T13333] hsr_slave_1: entered promiscuous mode
[ 1143.882743][T13333] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1143.893988][T13333] Cannot create hsr debugfs directory
[ 1143.912223][T13239] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1143.937325][T13239] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1144.018755][T13239] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1144.048817][T13239] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1144.271510][   T35] bridge_slave_1: left allmulticast mode
[ 1144.281021][   T35] bridge_slave_1: left promiscuous mode
[ 1144.289381][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1144.327414][   T35] bridge_slave_0: left allmulticast mode
[ 1144.333342][   T35] bridge_slave_0: left promiscuous mode
[ 1144.339948][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1144.698764][T11171] Bluetooth: hci1: command tx timeout
[ 1147.082531][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1147.098887][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1147.116977][   T35] bond0 (unregistering): Released all slaves
[ 1147.632284][   T35] hsr_slave_0: left promiscuous mode
[ 1147.640243][   T35] hsr_slave_1: left promiscuous mode
[ 1147.655182][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1147.671877][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1147.692715][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1147.741871][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1147.804552][   T35] veth1_macvtap: left promiscuous mode
[ 1147.810278][   T35] veth0_macvtap: left promiscuous mode
[ 1147.816047][   T35] veth1_vlan: left promiscuous mode
[ 1147.822090][   T35] veth0_vlan: left promiscuous mode
[ 1152.371653][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1152.416837][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1152.935227][T13239] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1152.984341][T13239] 8021q: adding VLAN 0 to HW filter on device team0
[ 1152.997482][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1153.004688][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1153.044177][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1153.051339][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1153.223897][T13333] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1153.234491][T13333] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1153.249921][T13333] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1153.276150][T13333] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1153.335211][T13239] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1153.461975][T13333] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1153.497335][T13333] 8021q: adding VLAN 0 to HW filter on device team0
[ 1153.517084][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1153.524286][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1153.548725][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1153.555965][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1153.665554][T13239] veth0_vlan: entered promiscuous mode
[ 1153.700600][T13239] veth1_vlan: entered promiscuous mode
[ 1153.767586][T13239] veth0_macvtap: entered promiscuous mode
[ 1153.792021][T13239] veth1_macvtap: entered promiscuous mode
[ 1153.820479][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1153.831956][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.842405][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1153.854464][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.865017][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1153.876250][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.886393][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1153.897401][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.909763][T13239] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1153.927168][T13333] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1153.936204][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1153.947983][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.958063][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1153.968949][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.979169][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1153.989764][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.999947][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.011991][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.023575][T13239] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1154.038212][T13239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.050248][T13239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.059350][T13239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.068804][T13239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.185679][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1154.194322][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1154.214926][T13333] veth0_vlan: entered promiscuous mode
[ 1154.242177][T13333] veth1_vlan: entered promiscuous mode
[ 1154.249401][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1154.266965][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1154.282954][T13333] veth0_macvtap: entered promiscuous mode
[ 1154.302803][T13333] veth1_macvtap: entered promiscuous mode
[ 1154.324953][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.346724][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.356992][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.367890][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.380003][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.390690][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.401075][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.411811][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.422926][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.440936][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.464270][T13333] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1154.477681][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.495427][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.505600][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.523215][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.534397][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.553795][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.564853][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.581066][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.591082][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.602281][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.613499][T13333] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1154.631125][T13333] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.640149][T13333] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.651497][T13333] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.660257][T13333] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1155.472497][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1155.488747][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1155.542266][ T2456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1155.552213][ T2456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1156.001250][   T29] audit: type=1326 audit(1723660983.792:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13500 comm="syz.1.2418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2318d799f9 code=0x0
[ 1162.869242][ T5222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1162.879237][ T5222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1162.888874][ T5222] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1162.899347][ T5222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1162.920214][ T5222] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1162.930693][ T5222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1163.276746][ T5222] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1163.287068][ T5222] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1163.295447][ T5222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1163.304321][ T5222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1163.312087][ T5222] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1163.325746][ T5222] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1163.534431][T13524] chnl_net:caif_netlink_parms(): no params data found
[ 1163.702541][ T5222] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1163.731929][ T5222] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1163.742777][ T5222] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1164.113802][ T5222] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1164.466509][ T5222] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1164.474177][ T5222] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1164.567865][T13524] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1164.575024][T13524] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1164.594388][T13524] bridge_slave_0: entered allmulticast mode
[ 1164.601898][T13524] bridge_slave_0: entered promiscuous mode
[ 1164.625991][T13532] chnl_net:caif_netlink_parms(): no params data found
[ 1164.667901][T13524] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1164.675072][T13524] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1164.703282][T13524] bridge_slave_1: entered allmulticast mode
[ 1164.743299][T13524] bridge_slave_1: entered promiscuous mode
[ 1165.015778][ T5222] Bluetooth: hci5: command tx timeout
[ 1165.416981][ T5222] Bluetooth: hci6: command tx timeout
[ 1165.592141][T13524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1165.801376][T13524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1166.597538][ T5222] Bluetooth: hci7: command tx timeout
[ 1166.808225][T13524] team0: Port device team_slave_0 added
[ 1166.829774][T13524] team0: Port device team_slave_1 added
[ 1166.962711][T13532] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1166.972545][T13532] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1166.983854][T13532] bridge_slave_0: entered allmulticast mode
[ 1166.991826][T13532] bridge_slave_0: entered promiscuous mode
[ 1167.025038][T13524] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1167.042429][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1167.078403][T13524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1167.090630][T13532] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1167.105468][ T5222] Bluetooth: hci5: command tx timeout
[ 1167.115912][T13532] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1167.123279][T13532] bridge_slave_1: entered allmulticast mode
[ 1167.131207][T13532] bridge_slave_1: entered promiscuous mode
[ 1167.172098][T13524] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1167.190392][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1167.216578][T13524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1167.319720][T13532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1167.357991][T13532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1167.464357][T13524] hsr_slave_0: entered promiscuous mode
[ 1167.483608][T13524] hsr_slave_1: entered promiscuous mode
[ 1167.495562][ T5222] Bluetooth: hci6: command tx timeout
[ 1167.501083][T13524] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1167.514850][T13524] Cannot create hsr debugfs directory
[ 1167.813934][T13532] team0: Port device team_slave_0 added
[ 1168.008989][T13532] team0: Port device team_slave_1 added
[ 1168.615506][ T5222] Bluetooth: hci7: command tx timeout
[ 1168.998203][T13543] chnl_net:caif_netlink_parms(): no params data found
[ 1169.041241][T13532] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1169.053027][T13532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1169.079513][T13532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1169.121475][T13532] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1169.128652][T13532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1169.155038][T13532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1169.176720][ T5222] Bluetooth: hci5: command tx timeout
[ 1169.575488][ T5222] Bluetooth: hci6: command tx timeout
[ 1169.639199][T13532] hsr_slave_0: entered promiscuous mode
[ 1169.670404][T13532] hsr_slave_1: entered promiscuous mode
[ 1169.706089][T13532] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1169.736850][T13532] Cannot create hsr debugfs directory
[ 1169.754026][T13543] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1169.778063][T13543] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1169.814194][T13543] bridge_slave_0: entered allmulticast mode
[ 1169.834021][T13543] bridge_slave_0: entered promiscuous mode
[ 1169.997334][T13543] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1170.017760][T13543] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1170.025115][T13543] bridge_slave_1: entered allmulticast mode
[ 1170.032703][T13543] bridge_slave_1: entered promiscuous mode
[ 1170.119927][T13524] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.309051][T13524] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.358647][T13543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1170.416927][T13543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1170.471785][T13524] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.695879][ T5222] Bluetooth: hci7: command tx timeout
[ 1170.704493][T13524] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.720713][ T5222] Bluetooth: hci1: SCO packet for unknown connection handle 0
[ 1170.789337][T13543] team0: Port device team_slave_0 added
[ 1170.864113][T13543] team0: Port device team_slave_1 added
[ 1170.968331][T13543] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1170.975324][T13543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1171.037332][T13543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1171.064763][T13543] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1171.094773][T13543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1171.129406][T13543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1171.255524][ T5222] Bluetooth: hci5: command tx timeout
[ 1171.675511][ T5222] Bluetooth: hci6: command tx timeout
[ 1172.130263][T13543] hsr_slave_0: entered promiscuous mode
[ 1172.180963][T13543] hsr_slave_1: entered promiscuous mode
[ 1172.187737][T13543] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1172.195703][T13543] Cannot create hsr debugfs directory
[ 1172.291204][T13524] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1172.317686][T13524] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1172.420075][T13532] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1172.485990][T13524] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1172.512015][T13524] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1172.703452][T13532] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1172.778732][ T5222] Bluetooth: hci7: command tx timeout
[ 1173.389271][T13532] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.511183][T13532] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.565457][ T5222] Bluetooth: hci3: SCO packet for unknown connection handle 0
[ 1174.669324][T13524] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1174.827973][T13543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.872179][T13524] 8021q: adding VLAN 0 to HW filter on device team0
[ 1175.482018][T13543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1175.722346][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1175.729582][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1175.758502][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1175.765721][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1175.878940][T13543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.202400][T13543] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.413938][T13524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1176.916829][T13543] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1176.978924][T13543] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1177.079447][T13543] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1177.106303][T13543] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1177.132060][T13524] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1177.280836][T13543] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1177.302076][T13532] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1177.328998][T13532] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1177.367567][T13532] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1177.402199][T13532] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1177.439186][T13543] 8021q: adding VLAN 0 to HW filter on device team0
[ 1177.677761][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.684266][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.786114][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1177.793327][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1178.262261][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1178.269468][ T5912] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1179.132139][T13524] veth0_vlan: entered promiscuous mode
[ 1179.221849][T13524] veth1_vlan: entered promiscuous mode
[ 1179.411582][T13524] veth0_macvtap: entered promiscuous mode
[ 1179.453849][T13524] veth1_macvtap: entered promiscuous mode
[ 1179.489568][T13532] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1179.683665][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1179.705821][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.725546][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1179.749218][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1180.501759][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1180.524767][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1180.545570][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1180.572006][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1180.590046][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1180.607974][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1180.619207][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1180.630231][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1180.682970][T13524] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1180.710959][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1180.745545][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1180.777318][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1180.807480][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1180.836001][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1180.849640][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1180.863397][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1180.876909][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1180.888899][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1180.900688][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1180.911323][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1180.930564][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1180.958472][T13524] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1181.003164][   T29] audit: type=1326 audit(1723661008.822:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13693 comm="syz.1.2467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2318d799f9 code=0x0
[ 1181.030738][T13543] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1181.071317][T13532] 8021q: adding VLAN 0 to HW filter on device team0
[ 1181.103978][T13524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1181.122773][T13524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1181.131963][T13524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1181.147298][T13524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1181.189173][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1181.196309][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1181.248631][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1181.255857][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1181.563648][ T4233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1181.592403][ T4233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1181.610494][T13543] veth0_vlan: entered promiscuous mode
[ 1183.667689][T13543] veth1_vlan: entered promiscuous mode
[ 1183.696418][T12850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1185.126502][T12850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1185.322058][T13543] veth0_macvtap: entered promiscuous mode
[ 1185.356374][T13543] veth1_macvtap: entered promiscuous mode
[ 1185.399483][T13543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1185.493498][T13543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1185.589660][T13543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1185.641479][T13543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1185.712037][T13543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1185.770900][T13543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1185.840391][T13543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1185.902361][T13543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1185.956321][T13543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1186.032434][T13543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.061832][T13543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1186.073777][T13543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.084079][T13543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1186.117768][T13543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.131112][T13543] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1186.214218][T13532] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1186.259584][T13543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1186.356126][T13543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.366303][T13543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1186.377486][T13543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.388397][T13543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1186.722198][T13543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.760146][T13543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1186.771424][T13543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.782443][T13543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1186.793758][T13543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.848241][T13543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1186.914886][T13543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.963338][T13543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1186.994729][T13543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1187.009091][T13543] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1187.021422][T13543] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1187.031075][T13543] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1187.040257][T13543] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1187.049285][T13543] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1188.398508][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1188.425301][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1188.480490][   T29] audit: type=1326 audit(1723661016.302:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13727 comm="syz.1.2476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2318d799f9 code=0x0
[ 1188.588373][ T5912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1188.604341][ T5912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1188.634856][T13532] veth0_vlan: entered promiscuous mode
[ 1188.712703][T13532] veth1_vlan: entered promiscuous mode
[ 1188.825988][T13532] veth0_macvtap: entered promiscuous mode
[ 1188.870312][T13532] veth1_macvtap: entered promiscuous mode
[ 1188.938939][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1188.986385][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1189.019318][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1189.050032][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1189.149544][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1189.178249][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1189.231913][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1189.485545][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1189.678393][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1189.739815][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1189.780946][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1189.809419][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1189.857714][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1189.929804][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1189.979768][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1190.103449][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1190.132710][T13532] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1190.160875][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1190.194392][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1190.216029][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1190.300085][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1190.330355][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1190.508466][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1190.521882][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1190.534339][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1190.775917][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1190.925562][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1190.938414][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1190.949288][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1190.959304][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1190.984904][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1190.995743][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1191.016124][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1191.147114][T13532] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1191.216966][T13532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.255821][T13532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.264614][T13532] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.328946][T13532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1192.018074][T13764] vcan0: entered promiscuous mode
[ 1192.023437][T13764] vlan2: entered promiscuous mode
[ 1192.037101][T13764] vcan0: left promiscuous mode
[ 1192.366018][T13772] syz_tun: entered promiscuous mode
[ 1192.393068][T13772] vlan2: entered promiscuous mode
[ 1192.420149][T13772] syz_tun: left promiscuous mode
[ 1192.545803][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1192.564726][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1192.697881][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1192.728502][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1194.865459][   T29] audit: type=1326 audit(1723661022.682:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13788 comm="syz.3.2492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91d83799f9 code=0x0
[ 1199.403651][ T5222] Bluetooth: hci5: SCO packet for unknown connection handle 0
[ 1199.433955][T13820] vcan0: entered promiscuous mode
[ 1199.450999][T13820] vlan2: entered promiscuous mode
[ 1199.475099][T13820] vcan0: left promiscuous mode
[ 1207.115562][ T5222] Bluetooth: hci1: link tx timeout
[ 1207.121248][ T5222] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1208.674745][T13869] bridge0: entered promiscuous mode
[ 1208.685729][T13869] vlan2: entered promiscuous mode
[ 1208.745316][T13869] bridge0: left promiscuous mode
[ 1208.789025][T13878] vcan0: entered promiscuous mode
[ 1208.799515][T13878] vlan2: entered promiscuous mode
[ 1208.811585][T11171] Bluetooth: hci3: link tx timeout
[ 1208.822302][T11171] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1208.831257][T13878] vcan0: left promiscuous mode
[ 1208.834977][T11171] Bluetooth: hci3: SCO packet for unknown connection handle 0
[ 1209.176110][T11171] Bluetooth: hci1: command 0x0406 tx timeout
[ 1210.935744][ T5222] Bluetooth: hci3: command 0x0406 tx timeout
[ 1211.236658][T13902] sctp: [Deprecated]: syz.3.2521 (pid 13902) Use of int in max_burst socket option deprecated.
[ 1211.236658][T13902] Use struct sctp_assoc_value instead
[ 1214.137613][T13924] bridge0: entered promiscuous mode
[ 1214.145134][T13924] vlan2: entered promiscuous mode
[ 1214.335193][T13924] bridge0: left promiscuous mode
[ 1221.089405][T13973] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2542'.
[ 1222.036100][T13980] bridge0: entered promiscuous mode
[ 1222.077495][T13980] vlan2: entered promiscuous mode
[ 1222.146468][T13980] bridge0: left promiscuous mode
[ 1222.537365][T13995] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2550'.
[ 1230.376119][T14047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2563'.
[ 1232.335726][ T5316] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 1232.653917][ T5316] usb 1-1: Using ep0 maxpacket: 8
[ 1232.844005][ T5316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1234.799103][ T5316] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1234.952298][ T5316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[ 1234.964425][ T5316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1234.974650][ T5316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1235.171892][ T5316] usb 1-1: string descriptor 0 read error: -71
[ 1235.187772][ T5316] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1235.225466][ T5316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1235.305413][ T5316] usb 1-1: config 0 descriptor??
[ 1235.316209][ T5316] usb 1-1: can't set config #0, error -71
[ 1235.333168][ T5316] usb 1-1: USB disconnect, device number 30
[ 1235.936829][ T5263] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1236.902803][ T5263] usb 3-1: Using ep0 maxpacket: 8
[ 1236.923738][ T5263] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1236.965443][ T5263] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1236.997347][ T5263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[ 1237.833236][ T5263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1237.844131][ T5263] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1237.860162][ T5263] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1237.870041][ T5263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1242.802840][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1242.815640][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1242.886197][T10994] Bluetooth: hci5: link tx timeout
[ 1242.891849][T10994] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1242.923858][ T5263] usb 3-1: Product: syz
[ 1242.932239][ T5263] usb 3-1: Manufacturer: syz
[ 1242.944638][ T5263] usb 3-1: SerialNumber: syz
[ 1242.956702][ T5263] usb 3-1: config 0 descriptor??
[ 1242.962253][ T5263] usb 3-1: can't set config #0, error -71
[ 1242.987293][ T5263] usb 3-1: USB disconnect, device number 40
[ 1246.697298][T11171] Bluetooth: hci5: command 0x0406 tx timeout
[ 1247.263942][T11171] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1247.273955][T11171] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1247.322427][T11171] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1247.337018][T11171] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1247.348481][T11171] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1247.356952][T11171] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1247.926855][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1249.495861][T10994] Bluetooth: hci8: command tx timeout
[ 1252.015088][T10994] Bluetooth: hci8: command tx timeout
[ 1252.510715][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1254.070160][T10994] Bluetooth: hci1: command 0x0406 tx timeout
[ 1254.080523][ T5222] Bluetooth: hci8: command tx timeout
[ 1256.135830][ T5222] Bluetooth: hci8: command tx timeout
[ 1257.702397][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1259.762022][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1260.027960][T14112] chnl_net:caif_netlink_parms(): no params data found
[ 1260.260759][ T5222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1260.274860][ T5222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1260.287074][ T5222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1260.301105][ T5222] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1260.313896][ T5222] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1260.321386][T14171] ip6gretap0: entered promiscuous mode
[ 1260.321391][ T5222] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1260.346248][T14171] vlan2: entered promiscuous mode
[ 1260.371778][T14171] ip6gretap0: left promiscuous mode
[ 1263.709855][T11171] Bluetooth: hci1: command tx timeout
[ 1265.884461][ T5222] Bluetooth: hci1: command tx timeout
[ 1266.421798][T14112] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1266.435607][T14112] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1266.442984][T14112] bridge_slave_0: entered allmulticast mode
[ 1266.465017][T14112] bridge_slave_0: entered promiscuous mode
[ 1266.492579][   T11] bridge_slave_1: left allmulticast mode
[ 1266.502739][   T11] bridge_slave_1: left promiscuous mode
[ 1266.521450][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1266.545769][   T11] bridge_slave_0: left allmulticast mode
[ 1266.573862][   T11] bridge_slave_0: left promiscuous mode
[ 1266.590491][T14206] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in;
[ 1266.590491][T14206]    program syz.2.2601 not setting count and/or reply_len properly
[ 1266.608593][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1266.762661][T14206] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in;
[ 1266.762661][T14206]    program syz.2.2601 not setting count and/or reply_len properly
[ 1267.985519][ T5222] Bluetooth: hci1: command tx timeout
[ 1270.020593][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1270.051688][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1270.059158][ T5222] Bluetooth: hci1: command tx timeout
[ 1270.088853][   T11] bond0 (unregistering): Released all slaves
[ 1270.126431][T14112] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1270.134824][T14112] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1270.142624][T14112] bridge_slave_1: entered allmulticast mode
[ 1270.292773][T14112] bridge_slave_1: entered promiscuous mode
[ 1270.679738][T14228] ip6gretap0: entered promiscuous mode
[ 1270.715871][T14228] vlan2: entered promiscuous mode
[ 1270.783642][T14228] ip6gretap0: left promiscuous mode
[ 1271.148391][T14240] vcan0: entered promiscuous mode
[ 1271.178254][T14240] vlan2: entered promiscuous mode
[ 1271.215139][T14240] vcan0: left promiscuous mode
[ 1271.899246][T14112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1271.913080][T14112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1273.353523][T14112] team0: Port device team_slave_0 added
[ 1273.413733][T14112] team0: Port device team_slave_1 added
[ 1273.530520][   T11] hsr_slave_0: left promiscuous mode
[ 1273.550587][   T11] hsr_slave_1: left promiscuous mode
[ 1273.568993][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1273.585499][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1273.610745][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1273.634788][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1273.693956][   T11] veth1_macvtap: left promiscuous mode
[ 1273.715344][   T11] veth0_macvtap: left promiscuous mode
[ 1273.733790][   T11] veth1_vlan: left promiscuous mode
[ 1273.756019][   T11] veth0_vlan: left promiscuous mode
[ 1273.872391][ T5222] Bluetooth: hci5: SCO packet for unknown connection handle 0
[ 1275.705035][T14282] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in;
[ 1275.705035][T14282]    program syz.3.2624 not setting count and/or reply_len properly
[ 1275.718904][ T5222] Bluetooth: hci7: link tx timeout
[ 1275.738960][ T5222] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1275.768413][T11171] Bluetooth: hci7: SCO packet for unknown connection handle 0
[ 1275.874289][T14282] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in;
[ 1275.874289][T14282]    program syz.3.2624 not setting count and/or reply_len properly
[ 1276.280547][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1276.397290][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1277.818466][T11171] Bluetooth: hci7: command 0x0406 tx timeout
[ 1277.872129][ T5222] Bluetooth: hci5: SCO packet for unknown connection handle 0
[ 1279.976658][T14112] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1279.995985][T14112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1280.085156][T14112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1280.164401][T14112] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1280.181611][T14112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1280.254670][T14112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1280.317390][ T5222] Bluetooth: hci7: SCO packet for unknown connection handle 0
[ 1280.409885][T14112] hsr_slave_0: entered promiscuous mode
[ 1280.470291][T14112] hsr_slave_1: entered promiscuous mode
[ 1280.485933][T14112] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1280.495103][T14112] Cannot create hsr debugfs directory
[ 1281.149937][T14172] chnl_net:caif_netlink_parms(): no params data found
[ 1286.572066][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1286.653574][T14172] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1286.673307][T14172] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1286.731250][T14172] bridge_slave_0: entered allmulticast mode
[ 1286.738954][T14172] bridge_slave_0: entered promiscuous mode
[ 1286.850659][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1286.870526][T14172] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1286.880592][T14172] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1286.888274][T14172] bridge_slave_1: entered allmulticast mode
[ 1286.898909][T14172] bridge_slave_1: entered promiscuous mode
[ 1287.112472][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1287.283653][T14172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1287.346126][T11171] Bluetooth: hci6: command 0x0406 tx timeout
[ 1287.429371][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1287.514367][T14172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1287.727199][T14172] team0: Port device team_slave_0 added
[ 1287.737419][T14172] team0: Port device team_slave_1 added
[ 1287.900910][T14172] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1287.919932][T14172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1287.958552][T14172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1288.161705][T14172] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1288.173969][T14172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1288.404217][T14172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1288.618911][T14112] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1288.640129][T14112] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1288.679497][T14172] hsr_slave_0: entered promiscuous mode
[ 1288.835719][T14172] hsr_slave_1: entered promiscuous mode
[ 1288.864526][T14172] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1288.904715][T14172] Cannot create hsr debugfs directory
[ 1288.910800][T14112] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1288.922474][T14112] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1289.711724][   T11] bridge_slave_1: left allmulticast mode
[ 1289.736157][   T11] bridge_slave_1: left promiscuous mode
[ 1289.755600][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1289.906452][   T11] bridge_slave_0: left allmulticast mode
[ 1289.936863][   T11] bridge_slave_0: left promiscuous mode
[ 1289.942685][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1291.155217][ T5222] Bluetooth: hci7: SCO packet for unknown connection handle 0
[ 1291.824652][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1291.845443][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1291.860907][   T11] bond0 (unregistering): Released all slaves
[ 1291.975416][ T5222] Bluetooth: hci5: command 0x0406 tx timeout
[ 1294.479087][T11171] Bluetooth: hci7: SCO packet for unknown connection handle 0
[ 1295.618909][   T11] hsr_slave_0: left promiscuous mode
[ 1295.659655][   T11] hsr_slave_1: left promiscuous mode
[ 1295.685010][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1295.695782][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1295.710423][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1295.744595][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1295.811170][   T11] veth1_macvtap: left promiscuous mode
[ 1295.824831][   T11] veth0_macvtap: left promiscuous mode
[ 1295.832983][   T11] veth1_vlan: left promiscuous mode
[ 1295.865542][   T11] veth0_vlan: left promiscuous mode
[ 1298.352849][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1298.408602][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1299.005595][T14472] bond_slave_0: entered promiscuous mode
[ 1299.011325][T14472] bond_slave_1: entered promiscuous mode
[ 1299.036042][T14472] vlan2: entered promiscuous mode
[ 1299.041138][T14472] bond0: entered promiscuous mode
[ 1299.084399][T14472] bond0: left promiscuous mode
[ 1299.099893][T14472] bond_slave_0: left promiscuous mode
[ 1299.105390][T14472] bond_slave_1: left promiscuous mode
[ 1299.120166][ T5222] Bluetooth: hci5: ACL packet for unknown connection handle 200
[ 1299.145448][ T5222] Bluetooth: hci5: SCO packet for unknown connection handle 0
[ 1299.247503][T14112] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1299.373374][T14112] 8021q: adding VLAN 0 to HW filter on device team0
[ 1299.466343][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1299.473558][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1299.654445][T12850] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1299.661613][T12850] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1299.786746][T14491] bond_slave_0: entered promiscuous mode
[ 1299.792473][T14491] bond_slave_1: entered promiscuous mode
[ 1299.803943][T14491] vlan2: entered promiscuous mode
[ 1299.813482][T14491] bond0: entered promiscuous mode
[ 1299.834842][T14491] bond0: left promiscuous mode
[ 1299.848523][T14491] bond_slave_0: left promiscuous mode
[ 1299.854091][T14491] bond_slave_1: left promiscuous mode
[ 1299.989957][T14172] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1300.011808][T14172] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1300.035833][T14172] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1300.084101][T14172] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1300.626286][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1301.072967][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.150378][T14172] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1301.314761][T14172] 8021q: adding VLAN 0 to HW filter on device team0
[ 1301.470325][T14144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1301.477572][T14144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1301.598932][T14144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1301.606161][T14144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1302.978196][T14172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1303.008521][T14172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1303.078498][T14112] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1303.212246][ T5222] Bluetooth: hci7: SCO packet for unknown connection handle 0
[ 1303.678536][T14172] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1303.768049][T11171] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1303.794587][T11171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1303.803502][T11171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1303.821339][T11171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1303.830505][T11171] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1303.838001][T11171] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1304.087525][ T5222] Bluetooth: hci5: ACL packet for unknown connection handle 200
[ 1304.095868][ T5222] Bluetooth: hci5: SCO packet for unknown connection handle 0
[ 1304.937855][T14172] veth0_vlan: entered promiscuous mode
[ 1305.204742][T14172] veth1_vlan: entered promiscuous mode
[ 1305.977673][ T5222] Bluetooth: hci3: command tx timeout
[ 1306.147259][ T5222] Bluetooth: hci5: ACL packet for unknown connection handle 200
[ 1306.160295][ T5222] Bluetooth: hci5: SCO packet for unknown connection handle 0
[ 1306.202314][T14562] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2701'.
[ 1306.366349][T14172] veth0_macvtap: entered promiscuous mode
[ 1306.477917][T14172] veth1_macvtap: entered promiscuous mode
[ 1306.497147][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1306.509599][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1306.519704][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1306.530689][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1306.541240][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1306.554711][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1306.596463][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1306.628671][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1306.645414][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1306.656702][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1306.666878][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1306.677538][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1306.687603][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1306.700693][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1306.720526][T14172] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1306.753219][T14529] chnl_net:caif_netlink_parms(): no params data found
[ 1306.928231][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1306.941693][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1307.108645][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1307.119373][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1307.413637][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1307.693914][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1307.716801][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1307.733644][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1307.756151][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1307.776646][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1307.789345][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1307.803020][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1307.813150][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1307.824507][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1307.836757][T14172] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1308.056490][ T5222] Bluetooth: hci3: command tx timeout
[ 1308.597263][T14172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1308.607412][T14172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1308.617332][T14172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1308.626344][T14172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1308.783952][T14162] bridge_slave_1: left allmulticast mode
[ 1309.073449][T14162] bridge_slave_1: left promiscuous mode
[ 1309.394220][T14162] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1309.415186][T14162] bridge_slave_0: left allmulticast mode
[ 1309.423066][T14162] bridge_slave_0: left promiscuous mode
[ 1309.434482][T14162] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1310.076044][T14162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1310.106043][T14162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1310.126389][T14162] bond0 (unregistering): Released all slaves
[ 1310.145944][ T5222] Bluetooth: hci3: command tx timeout
[ 1310.432591][ T5222] Bluetooth: hci7: SCO packet for unknown connection handle 0
[ 1310.459627][T14529] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1310.494320][T14529] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1310.514060][T14529] bridge_slave_0: entered allmulticast mode
[ 1310.523042][T14529] bridge_slave_0: entered promiscuous mode
[ 1310.563454][   T29] audit: type=1326 audit(1723661138.382:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14608 comm="syz.3.2713" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91d83799f9 code=0x0
[ 1310.589129][T14162] hsr_slave_0: left promiscuous mode
[ 1310.596644][T14162] hsr_slave_1: left promiscuous mode
[ 1310.602724][T14162] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1310.622060][T14162] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1313.074587][   T30] INFO: task syz-executor:11209 blocked for more than 144 seconds.
[ 1313.190363][ T5222] Bluetooth: hci3: command tx timeout
[ 1315.541432][   T30]       Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[ 1315.572975][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1315.595347][   T30] task:syz-executor    state:D stack:20992 pid:11209 tgid:11209 ppid:1      flags:0x00004004
[ 1315.606195][   T30] Call Trace:
[ 1315.609660][   T30]  <TASK>
[ 1315.612764][   T30]  __schedule+0x17ae/0x4a10
[ 1315.617491][   T30]  ? __pfx___schedule+0x10/0x10
[ 1315.624061][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1315.629399][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1315.635599][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1315.642098][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[ 1315.650479][   T30]  ? schedule+0x90/0x320
[ 1315.655230][   T30]  schedule+0x14b/0x320
[ 1315.659632][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1315.665438][   T30]  rwsem_down_write_slowpath+0xeeb/0x13b0
[ 1315.671386][   T30]  ? rwsem_down_write_slowpath+0xa06/0x13b0
[ 1315.677534][   T30]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[ 1315.683883][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 1315.689216][   T30]  ? exit_mmap+0x27a/0xc80
[ 1315.693820][   T30]  down_write+0x1d7/0x220
[ 1315.698987][   T30]  ? __pfx_down_write+0x10/0x10
[ 1315.704046][   T30]  exit_mmap+0x2a9/0xc80
[ 1315.708597][   T30]  ? __pfx_exit_mmap+0x10/0x10
[ 1315.713564][   T30]  ? __asan_memset+0x23/0x50
[ 1315.718420][   T30]  ? uprobe_clear_state+0x277/0x290
[ 1315.727158][   T30]  ? mm_update_next_owner+0xa2/0x8a0
[ 1315.732667][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1315.738111][   T30]  __mmput+0x115/0x380
[ 1315.742371][   T30]  exit_mm+0x220/0x310
[ 1315.751980][   T30]  ? __pfx_exit_mm+0x10/0x10
[ 1315.759929][   T30]  ? taskstats_exit+0x326/0xa60
[ 1315.767253][   T30]  do_exit+0x9b2/0x27f0
[ 1315.776082][   T30]  ? __pfx_do_exit+0x10/0x10
[ 1315.786357][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1315.797509][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1315.805121][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1315.823923][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[ 1315.836832][   T30]  do_group_exit+0x207/0x2c0
[ 1315.842224][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1315.852285][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[ 1315.865149][   T30]  get_signal+0x1695/0x1730
[ 1315.872832][   T30]  ? __pfx_get_signal+0x10/0x10
[ 1315.881330][   T30]  arch_do_signal_or_restart+0x96/0x860
[ 1315.893673][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1315.919012][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1315.925155][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[ 1315.934263][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[ 1315.940051][   T30]  do_syscall_64+0x100/0x230
[ 1315.944730][   T30]  ? clear_bhb_loop+0x35/0x90
[ 1315.949581][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1315.955660][   T30] RIP: 0033:0x7ffbfd56fc57
[ 1315.960092][   T30] RSP: 002b:00007ffdb70609f0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[ 1315.968979][   T30] RAX: fffffffffffffe00 RBX: 00000000000001ea RCX: 00007ffbfd56fc57
[ 1315.979719][   T30] RDX: 0000000040000000 RSI: 00007ffdb7060a4c RDI: 00000000ffffffff
[ 1315.987831][   T30] RBP: 00007ffdb7060a4c R08: 0000000000000000 R09: 7fffffffffffffff
[ 1315.995872][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555769455eb
[ 1316.003863][   T30] R13: 0000555576945590 R14: 0000000000119305 R15: 00007ffdb7060aa0
[ 1316.011983][   T30]  </TASK>
[ 1316.015137][   T30] INFO: task syz-executor:11281 blocked for more than 147 seconds.
[ 1316.024757][   T30]       Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[ 1316.034787][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1316.062961][   T30] task:syz-executor    state:D stack:20080 pid:11281 tgid:11281 ppid:1      flags:0x00004004
[ 1316.085231][   T30] Call Trace:
[ 1316.093861][   T30]  <TASK>
[ 1316.105389][   T30]  __schedule+0x17ae/0x4a10
[ 1316.110045][   T30]  ? __pfx___schedule+0x10/0x10
[ 1316.114916][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1316.120177][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1316.126523][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1316.134445][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[ 1316.140808][   T30]  ? schedule+0x90/0x320
[ 1316.145094][   T30]  schedule+0x14b/0x320
[ 1316.149478][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1316.154960][   T30]  rwsem_down_write_slowpath+0xeeb/0x13b0
[ 1316.160706][   T30]  ? rwsem_down_write_slowpath+0xa06/0x13b0
[ 1316.167350][   T30]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[ 1316.173559][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 1316.178640][   T30]  ? exit_mmap+0x27a/0xc80
[ 1316.183144][   T30]  down_write+0x1d7/0x220
[ 1316.187546][   T30]  ? __pfx_down_write+0x10/0x10
[ 1316.192423][   T30]  exit_mmap+0x2a9/0xc80
[ 1316.197489][   T30]  ? __pfx_exit_mmap+0x10/0x10
[ 1316.202316][   T30]  ? __asan_memset+0x23/0x50
[ 1316.207250][   T30]  ? uprobe_clear_state+0x277/0x290
[ 1316.212469][   T30]  ? mm_update_next_owner+0xa2/0x8a0
[ 1316.218107][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1316.223340][   T30]  __mmput+0x115/0x380
[ 1316.228493][   T30]  exit_mm+0x220/0x310
[ 1316.232575][   T30]  ? __pfx_exit_mm+0x10/0x10
[ 1316.238432][   T30]  ? taskstats_exit+0x326/0xa60
[ 1316.243334][   T30]  do_exit+0x9b2/0x27f0
[ 1316.247578][   T30]  ? __pfx_do_exit+0x10/0x10
[ 1316.252179][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1316.257583][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1316.263568][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1316.270275][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[ 1316.275578][   T30]  do_group_exit+0x207/0x2c0
[ 1316.280193][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1316.285529][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[ 1316.290748][   T30]  get_signal+0x1695/0x1730
[ 1316.295492][   T30]  ? __pfx_get_signal+0x10/0x10
[ 1316.300388][   T30]  arch_do_signal_or_restart+0x96/0x860
[ 1316.306035][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1316.312198][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1316.318335][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[ 1316.324110][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[ 1316.329755][   T30]  do_syscall_64+0x100/0x230
[ 1316.334346][   T30]  ? clear_bhb_loop+0x35/0x90
[ 1316.341438][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1316.347457][   T30] RIP: 0033:0x7fb77b16fc57
[ 1316.351888][   T30] RSP: 002b:00007ffd4b678ac0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[ 1316.360349][   T30] RAX: fffffffffffffe00 RBX: 00000000000001b2 RCX: 00007fb77b16fc57
[ 1316.368373][   T30] RDX: 0000000040000000 RSI: 00007ffd4b678b1c RDI: 00000000ffffffff
[ 1316.376906][   T30] RBP: 00007ffd4b678b1c R08: 0000000000000000 R09: 7fffffffffffffff
[ 1316.384895][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555932a95eb
[ 1316.392896][   T30] R13: 00005555932a9590 R14: 00000000001193f4 R15: 00007ffd4b678b70
[ 1316.400914][   T30]  </TASK>
[ 1316.403949][   T30] INFO: task syz-executor:12358 blocked for more than 147 seconds.
[ 1316.433277][   T30]       Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[ 1316.442244][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1316.451957][   T30] task:syz-executor    state:D stack:19984 pid:12358 tgid:12358 ppid:1      flags:0x00004004
[ 1316.462194][   T30] Call Trace:
[ 1316.465589][   T30]  <TASK>
[ 1316.468553][   T30]  __schedule+0x17ae/0x4a10
[ 1316.473102][   T30]  ? __pfx___schedule+0x10/0x10
[ 1316.478258][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1316.483307][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1316.489315][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1316.495726][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[ 1316.500860][   T30]  ? schedule+0x90/0x320
[ 1316.505119][   T30]  schedule+0x14b/0x320
[ 1316.509339][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1316.514792][   T30]  rwsem_down_write_slowpath+0xeeb/0x13b0
[ 1316.520560][   T30]  ? rwsem_down_write_slowpath+0xa06/0x13b0
[ 1316.526558][   T30]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[ 1316.532730][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 1316.538547][   T30]  ? exit_mmap+0x27a/0xc80
[ 1316.544520][   T30]  down_write+0x1d7/0x220
[ 1316.548924][   T30]  ? __pfx_down_write+0x10/0x10
[ 1316.553806][   T30]  exit_mmap+0x2a9/0xc80
[ 1316.559185][   T30]  ? __pfx_exit_mmap+0x10/0x10
[ 1316.563973][   T30]  ? __asan_memset+0x23/0x50
[ 1316.568669][   T30]  ? uprobe_clear_state+0x277/0x290
[ 1316.573879][   T30]  ? mm_update_next_owner+0xa2/0x8a0
[ 1316.579386][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1316.584609][   T30]  __mmput+0x115/0x380
[ 1316.588771][   T30]  exit_mm+0x220/0x310
[ 1316.592863][   T30]  ? __pfx_exit_mm+0x10/0x10
[ 1316.597522][   T30]  ? taskstats_exit+0x326/0xa60
[ 1316.602372][   T30]  do_exit+0x9b2/0x27f0
[ 1316.606613][   T30]  ? __pfx_do_exit+0x10/0x10
[ 1316.611210][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1316.616696][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1316.622697][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1316.629120][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[ 1316.634262][   T30]  do_group_exit+0x207/0x2c0
[ 1316.638940][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1316.644156][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[ 1316.651044][   T30]  get_signal+0x1695/0x1730
[ 1316.655695][   T30]  ? __pfx_get_signal+0x10/0x10
[ 1316.660553][   T30]  arch_do_signal_or_restart+0x96/0x860
[ 1316.667249][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1316.673439][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1316.679856][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[ 1316.685951][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[ 1316.691578][   T30]  do_syscall_64+0x100/0x230
[ 1316.696377][   T30]  ? clear_bhb_loop+0x35/0x90
[ 1316.701075][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1316.707506][   T30] RIP: 0033:0x7f1e25b6fc57
[ 1316.711935][   T30] RSP: 002b:00007ffcfe01ede0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[ 1316.720387][   T30] RAX: fffffffffffffe00 RBX: 0000000000000096 RCX: 00007f1e25b6fc57
[ 1316.728428][   T30] RDX: 0000000040000000 RSI: 00007ffcfe01ee3c RDI: 00000000ffffffff
[ 1316.736480][   T30] RBP: 00007ffcfe01ee3c R08: 0000000000000000 R09: 7fffffffffffffff
[ 1316.744462][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557bf395eb
[ 1316.753407][   T30] R13: 000055557bf39590 R14: 00000000001193ea R15: 00007ffcfe01ee90
[ 1316.761469][   T30]  </TASK>
[ 1316.764507][   T30] INFO: task syz.3.2410:13464 blocked for more than 148 seconds.
[ 1316.772334][   T30]       Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[ 1316.781545][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1316.790331][   T30] task:syz.3.2410      state:D stack:24504 pid:13464 tgid:13462 ppid:11209  flags:0x00004004
[ 1316.800599][   T30] Call Trace:
[ 1316.803899][   T30]  <TASK>
[ 1316.806884][   T30]  __schedule+0x17ae/0x4a10
[ 1316.811425][   T30]  ? __pfx___schedule+0x10/0x10
[ 1316.816377][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1316.821422][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1316.827453][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1316.833773][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[ 1316.838959][   T30]  ? schedule+0x90/0x320
[ 1316.843223][   T30]  schedule+0x14b/0x320
[ 1316.847473][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1316.855202][   T30]  rwsem_down_write_slowpath+0xeeb/0x13b0
[ 1316.862968][   T30]  ? rwsem_down_write_slowpath+0xa06/0x13b0
[ 1316.868974][   T30]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[ 1316.875145][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 1316.880328][   T30]  ? exit_mmap+0x27a/0xc80
[ 1316.884982][   T30]  down_write+0x1d7/0x220
[ 1316.889440][   T30]  ? __pfx_down_write+0x10/0x10
[ 1316.894289][   T30]  exit_mmap+0x2a9/0xc80
[ 1316.899628][   T30]  ? __pfx_exit_mmap+0x10/0x10
[ 1316.904415][   T30]  ? __asan_memset+0x23/0x50
[ 1316.909103][   T30]  ? uprobe_clear_state+0x277/0x290
[ 1316.914310][   T30]  ? mm_update_next_owner+0xa2/0x8a0
[ 1316.919624][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1316.924819][   T30]  __mmput+0x115/0x380
[ 1316.928995][   T30]  exit_mm+0x220/0x310
[ 1316.933072][   T30]  ? __pfx_exit_mm+0x10/0x10
[ 1316.937901][   T30]  ? taskstats_exit+0x326/0xa60
[ 1316.942860][   T30]  do_exit+0x9b2/0x27f0
[ 1316.947086][   T30]  ? __pfx_do_exit+0x10/0x10
[ 1316.952938][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1316.958435][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1316.964434][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1316.970817][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[ 1316.976000][   T30]  do_group_exit+0x207/0x2c0
[ 1316.980601][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1316.986159][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[ 1316.991379][   T30]  get_signal+0x1695/0x1730
[ 1316.995971][   T30]  ? __pfx_get_signal+0x10/0x10
[ 1317.000838][   T30]  arch_do_signal_or_restart+0x96/0x860
[ 1317.007514][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1317.013695][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1317.019850][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[ 1317.025861][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[ 1317.031437][   T30]  do_syscall_64+0x100/0x230
[ 1317.036099][   T30]  ? clear_bhb_loop+0x35/0x90
[ 1317.040789][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1317.046717][   T30] RIP: 0033:0x7ffbfd5799f9
[ 1317.051124][   T30] RSP: 002b:00007ffbfe3ce0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1317.060812][   T30] RAX: fffffffffffffe00 RBX: 00007ffbfd716060 RCX: 00007ffbfd5799f9
[ 1317.068903][   T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffbfd716060
[ 1317.077069][   T30] RBP: 00007ffbfd716058 R08: 0000000000000000 R09: 0000000000000000
[ 1317.085054][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbfd716064
[ 1317.093330][   T30] R13: 0000000000000000 R14: 00007ffdb70605b0 R15: 00007ffdb7060698
[ 1317.101458][   T30]  </TASK>
[ 1317.104503][   T30] INFO: task syz.0.2411:13467 blocked for more than 148 seconds.
[ 1317.125825][   T30]       Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[ 1317.133504][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1317.142233][   T30] task:syz.0.2411      state:D stack:23800 pid:13467 tgid:13465 ppid:11281  flags:0x00004000
[ 1317.152635][   T30] Call Trace:
[ 1317.155984][   T30]  <TASK>
[ 1317.160126][   T30]  __schedule+0x17ae/0x4a10
[ 1317.164693][   T30]  ? __pfx___schedule+0x10/0x10
[ 1317.169602][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1317.174627][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1317.184915][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1317.191827][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[ 1317.197029][   T30]  ? schedule+0x90/0x320
[ 1317.201290][   T30]  schedule+0x14b/0x320
[ 1317.205519][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1317.210993][   T30]  rwsem_down_write_slowpath+0xeeb/0x13b0
[ 1317.216786][   T30]  ? rwsem_down_write_slowpath+0xa06/0x13b0
[ 1317.222709][   T30]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[ 1317.228915][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 1317.233961][   T30]  ? exit_mmap+0x27a/0xc80
[ 1317.239484][   T30]  down_write+0x1d7/0x220
[ 1317.243846][   T30]  ? __pfx_down_write+0x10/0x10
[ 1317.248814][   T30]  exit_mmap+0x2a9/0xc80
[ 1317.253080][   T30]  ? __pfx_exit_mmap+0x10/0x10
[ 1317.258681][   T30]  ? __asan_memset+0x23/0x50
[ 1317.264561][   T30]  ? uprobe_clear_state+0x277/0x290
[ 1317.269966][   T30]  ? mm_update_next_owner+0xa2/0x8a0
[ 1317.275249][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1317.280561][   T30]  __mmput+0x115/0x380
[ 1317.284651][   T30]  exit_mm+0x220/0x310
[ 1317.288779][   T30]  ? __pfx_exit_mm+0x10/0x10
[ 1317.293563][   T30]  ? taskstats_exit+0x326/0xa60
[ 1317.298469][   T30]  do_exit+0x9b2/0x27f0
[ 1317.302627][   T30]  ? __pfx_do_exit+0x10/0x10
[ 1317.307312][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1317.312706][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1317.318767][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1317.325091][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[ 1317.330251][   T30]  do_group_exit+0x207/0x2c0
[ 1317.334834][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1317.340293][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[ 1317.346540][   T30]  get_signal+0x1695/0x1730
[ 1317.351078][   T30]  ? __pfx_get_signal+0x10/0x10
[ 1317.355986][   T30]  arch_do_signal_or_restart+0x96/0x860
[ 1317.362701][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1317.368961][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1317.374966][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[ 1317.380745][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[ 1317.386370][   T30]  do_syscall_64+0x100/0x230
[ 1317.390986][   T30]  ? clear_bhb_loop+0x35/0x90
[ 1317.396079][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1317.402523][   T30] RIP: 0033:0x7fb77b1799f9
[ 1317.407028][   T30] RSP: 002b:00007fb77bfab0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1317.415550][   T30] RAX: fffffffffffffe00 RBX: 00007fb77b315f88 RCX: 00007fb77b1799f9
[ 1317.423531][   T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb77b315f88
[ 1317.431530][   T30] RBP: 00007fb77b315f80 R08: 0000000000000000 R09: 0000000000000000
[ 1317.439541][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb77b315f8c
[ 1317.447589][   T30] R13: 0000000000000000 R14: 00007ffd4b678680 R15: 00007ffd4b678768
[ 1317.456156][   T30]  </TASK>
[ 1317.459193][   T30] INFO: task syz.2.2412:13466 blocked for more than 148 seconds.
[ 1317.485328][   T30]       Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[ 1317.493005][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1317.503815][   T30] task:syz.2.2412      state:D stack:24672 pid:13466 tgid:13466 ppid:12358  flags:0x00004000
[ 1317.514063][   T30] Call Trace:
[ 1317.517416][   T30]  <TASK>
[ 1317.520354][   T30]  __schedule+0x17ae/0x4a10
[ 1317.524865][   T30]  ? __pfx___schedule+0x10/0x10
[ 1317.529812][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1317.534864][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1317.540905][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1317.547293][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[ 1317.552404][   T30]  ? schedule+0x90/0x320
[ 1317.556743][   T30]  schedule+0x14b/0x320
[ 1317.560927][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1317.568460][   T30]  rwsem_down_write_slowpath+0xeeb/0x13b0
[ 1317.574228][   T30]  ? rwsem_down_write_slowpath+0xa06/0x13b0
[ 1317.580582][   T30]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[ 1317.586941][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 1317.592001][   T30]  ? exit_mmap+0x27a/0xc80
[ 1317.596529][   T30]  down_write+0x1d7/0x220
[ 1317.601147][   T30]  ? __pfx_down_write+0x10/0x10
[ 1317.606100][   T30]  exit_mmap+0x2a9/0xc80
[ 1317.610378][   T30]  ? __pfx_exit_mmap+0x10/0x10
[ 1317.615182][   T30]  ? __asan_memset+0x23/0x50
[ 1317.619861][   T30]  ? uprobe_clear_state+0x277/0x290
[ 1317.625073][   T30]  ? mm_update_next_owner+0xa2/0x8a0
[ 1317.630419][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1317.635723][   T30]  __mmput+0x115/0x380
[ 1317.639817][   T30]  exit_mm+0x220/0x310
[ 1317.643894][   T30]  ? __pfx_exit_mm+0x10/0x10
[ 1317.648551][   T30]  ? taskstats_exit+0x326/0xa60
[ 1317.653424][   T30]  do_exit+0x9b2/0x27f0
[ 1317.657603][   T30]  ? preempt_schedule_common+0x84/0xd0
[ 1317.663057][   T30]  ? __pfx_do_exit+0x10/0x10
[ 1317.667722][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1317.674912][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1317.682359][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 1317.687822][   T30]  do_group_exit+0x207/0x2c0
[ 1317.692437][   T30]  __x64_sys_exit_group+0x3f/0x40
[ 1317.697597][   T30]  x64_sys_call+0x2634/0x2640
[ 1317.702693][   T30]  do_syscall_64+0xf3/0x230
[ 1317.707287][   T30]  ? clear_bhb_loop+0x35/0x90
[ 1317.711987][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1317.717979][   T30] RIP: 0033:0x7f1e25b799f9
[ 1317.722416][   T30] RSP: 002b:00007ffcfe01ede8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 1317.730908][   T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e25b799f9
[ 1317.738957][   T30] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[ 1317.747019][   T30] RBP: 00007ffcfe01ee3c R08: 00007ffcfe01eecf R09: 0000000000119330
[ 1317.755004][   T30] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000032
[ 1317.763028][   T30] R13: 0000000000119330 R14: 0000000000118375 R15: 00007ffcfe01ee90
[ 1317.772226][   T30]  </TASK>
[ 1317.775356][   T30] 
[ 1317.775356][   T30] Showing all locks held in the system:
[ 1317.786087][   T30] 3 locks held by kworker/0:1/9:
[ 1317.791054][   T30]  #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 1317.802164][   T30]  #1: ffffc900000e7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1317.826345][   T30]  #2: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[ 1317.836923][   T30] 2 locks held by kworker/u8:1/12:
[ 1317.842102][   T30]  #0: ffff8880b923e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140
[ 1317.852205][   T30]  #1: ffffc90000117d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1317.865454][   T30] 1 lock held by khungtaskd/30:
[ 1317.870298][   T30]  #0: ffffffff8e7382e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[ 1317.881460][   T30] 2 locks held by getty/4970:
[ 1317.886232][   T30]  #0: ffff88802adf50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1317.896677][   T30]  #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00
[ 1317.907201][   T30] 3 locks held by kworker/u8:11/10465:
[ 1317.912669][   T30]  #0: ffff88802a2ef148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 1317.924286][   T30]  #1: ffffc90004a77d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1317.937249][   T30]  #2: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0
[ 1317.946994][   T30] 1 lock held by syz-executor/11209:
[ 1317.952297][   T30]  #0: ffff88807abb7398 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80
[ 1317.961449][   T30] 1 lock held by syz-executor/11281:
[ 1317.966760][   T30]  #0: ffff88807c2f6a18 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80
[ 1317.977264][   T30] 1 lock held by syz-executor/12358:
[ 1317.982580][   T30]  #0: ffff88807bdeea18 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80
[ 1317.991713][   T30] 3 locks held by kworker/u8:3/12850:
[ 1317.997133][   T30]  #0: ffff888015489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 1318.010388][   T30]  #1: ffffc90002fd7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1318.021482][   T30]  #2: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[ 1318.030538][   T30] 1 lock held by syz.3.2410/13464:
[ 1318.035714][   T30]  #0: ffff888015471e18 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80
[ 1318.044808][   T30] 1 lock held by syz.0.2411/13467:
[ 1318.049943][   T30]  #0: ffff888070e8cd98 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80
[ 1318.059077][   T30] 1 lock held by syz.2.2412/13466:
[ 1318.064196][   T30]  #0: ffff888015470b18 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80
[ 1318.073350][   T30] 5 locks held by kworker/u8:14/14162:
[ 1318.079980][   T30]  #0: ffff8880162e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 1318.090974][   T30]  #1: ffffc90004767d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1318.101630][   T30]  #2: ffffffff8fa632d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 1318.111095][   T30]  #3: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90
[ 1318.121473][   T30]  #4: ffffffff8e73d6b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[ 1318.133527][   T30] 3 locks held by syz-executor/14172:
[ 1318.139017][   T30]  #0: ffffffff8fad55b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40
[ 1318.147332][   T30]  #1: ffffffff8fad5468 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0
[ 1318.156422][   T30]  #2: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_register_hw+0x312b/0x3e10
[ 1318.166468][   T30] 1 lock held by syz-executor/14529:
[ 1318.171766][   T30]  #0: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[ 1318.182441][   T30] 2 locks held by syz.2.2711/14607:
[ 1318.187714][   T30]  #0: ffffffff8fad55b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40
[ 1318.195942][   T30]  #1: ffffffff8fad5468 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0
[ 1318.204946][   T30] 1 lock held by syz.3.2713/14609:
[ 1318.210098][   T30]  #0: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x706/0x1340
[ 1318.223554][   T30] 2 locks held by syz.0.2714/14614:
[ 1318.229016][   T30]  #0: ffffffff8fad55b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40
[ 1318.238010][   T30]  #1: ffffffff8fad5468 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0
[ 1318.247082][   T30] 2 locks held by syz.0.2714/14615:
[ 1318.252284][   T30]  #0: ffffffff8fad55b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40
[ 1318.260577][   T30]  #1: ffffffff8fad5468 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0
[ 1318.269648][   T30] 
[ 1318.271982][   T30] =============================================
[ 1318.271982][   T30] 
[ 1318.287486][   T30] NMI backtrace for cpu 0
[ 1318.291855][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[ 1318.302374][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1318.312430][   T30] Call Trace:
[ 1318.315705][   T30]  <TASK>
[ 1318.318631][   T30]  dump_stack_lvl+0x241/0x360
[ 1318.323320][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1318.328519][   T30]  ? __pfx__printk+0x10/0x10
[ 1318.333104][   T30]  ? vprintk_emit+0x631/0x770
[ 1318.337775][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[ 1318.342800][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[ 1318.347736][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1318.353189][   T30]  ? _printk+0xd5/0x120
[ 1318.357341][   T30]  ? __pfx__printk+0x10/0x10
[ 1318.361925][   T30]  ? __wake_up_klogd+0xcc/0x110
[ 1318.366769][   T30]  ? __pfx__printk+0x10/0x10
[ 1318.371357][   T30]  ? __rcu_read_unlock+0xa1/0x110
[ 1318.376383][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1318.382365][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[ 1318.388345][   T30]  watchdog+0xfee/0x1030
[ 1318.392593][   T30]  ? watchdog+0x1ea/0x1030
[ 1318.397016][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1318.401951][   T30]  kthread+0x2f0/0x390
[ 1318.406021][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1318.410691][   T30]  ? __pfx_kthread+0x10/0x10
[ 1318.415279][   T30]  ret_from_fork+0x4b/0x80
[ 1318.419699][   T30]  ? __pfx_kthread+0x10/0x10
[ 1318.424289][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1318.429060][   T30]  </TASK>
[ 1318.433352][   T30] Sending NMI from CPU 0 to CPUs 1:
[ 1318.439297][    C1] NMI backtrace for cpu 1
[ 1318.439312][    C1] CPU: 1 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[ 1318.439332][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1318.439343][    C1] Workqueue: bat_events batadv_nc_worker
[ 1318.439368][    C1] RIP: 0010:check_preemption_disabled+0x19/0x120
[ 1318.439388][    C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 <65> 8b 1d 1c 3f 56 74 65 8b 05 11 3f 56 74 a9 ff ff ff 7f 74 26 65
[ 1318.439403][    C1] RSP: 0018:ffffc900015d7908 EFLAGS: 00000082
[ 1318.439416][    C1] RAX: b70a2850eac2f000 RBX: 1ffff11002ef48d8 RCX: ffffffff94ce9903
[ 1318.439515][    C1] RDX: dffffc0000000000 RSI: ffffffff8beae240 RDI: ffffffff8c3f9040
[ 1318.439528][    C1] RBP: ffffc900015d79f0 R08: ffffffff8ff6a22f R09: 1ffffffff1fed445
[ 1318.439542][    C1] R10: dffffc0000000000 R11: fffffbfff1fed446 R12: 1ffff920002baf2c
[ 1318.439554][    C1] R13: ffff8880177a3c00 R14: ffffffff8b7846df R15: ffff8880177a46c0
[ 1318.439566][    C1] FS:  0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[ 1318.439581][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1318.439593][    C1] CR2: 00005555876585c8 CR3: 000000007869c000 CR4: 00000000003506f0
[ 1318.439609][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1318.439619][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1318.439630][    C1] Call Trace:
[ 1318.439639][    C1]  <NMI>
[ 1318.439649][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[ 1318.439671][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1318.439694][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1318.439711][    C1]  ? nmi_handle+0x2a/0x5a0
[ 1318.439735][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 1318.439753][    C1]  ? nmi_handle+0x14f/0x5a0
[ 1318.439768][    C1]  ? nmi_handle+0x2a/0x5a0
[ 1318.439785][    C1]  ? check_preemption_disabled+0x19/0x120
[ 1318.439802][    C1]  ? default_do_nmi+0x63/0x160
[ 1318.439820][    C1]  ? exc_nmi+0x123/0x1f0
[ 1318.439837][    C1]  ? end_repeat_nmi+0xf/0x53
[ 1318.439855][    C1]  ? batadv_nc_purge_paths+0x30f/0x3b0
[ 1318.439884][    C1]  ? check_preemption_disabled+0x19/0x120
[ 1318.439898][    C1]  ? check_preemption_disabled+0x19/0x120
[ 1318.439912][    C1]  ? check_preemption_disabled+0x19/0x120
[ 1318.439929][    C1]  </NMI>
[ 1318.439935][    C1]  <TASK>
[ 1318.439942][    C1]  ? batadv_nc_purge_paths+0x30f/0x3b0
[ 1318.439962][    C1]  lockdep_softirqs_on+0x172/0x5a0
[ 1318.439984][    C1]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[ 1318.440003][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1318.440023][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1318.440045][    C1]  __local_bh_enable_ip+0x123/0x200
[ 1318.440066][    C1]  ? batadv_nc_purge_paths+0x30f/0x3b0
[ 1318.440085][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1318.440105][    C1]  ? batadv_nc_purge_paths+0xe8/0x3b0
[ 1318.440124][    C1]  ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10
[ 1318.440147][    C1]  batadv_nc_purge_paths+0x30f/0x3b0
[ 1318.440173][    C1]  batadv_nc_worker+0x328/0x610
[ 1318.440191][    C1]  ? batadv_nc_worker+0xcb/0x610
[ 1318.440211][    C1]  ? process_scheduled_works+0x945/0x1830
[ 1318.440230][    C1]  process_scheduled_works+0xa2c/0x1830
[ 1318.440265][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1318.440289][    C1]  ? assign_work+0x364/0x3d0
[ 1318.440310][    C1]  worker_thread+0x86d/0xd40
[ 1318.440337][    C1]  ? __kthread_parkme+0x169/0x1d0
[ 1318.440367][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1318.440386][    C1]  kthread+0x2f0/0x390
[ 1318.440407][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1318.440425][    C1]  ? __pfx_kthread+0x10/0x10
[ 1318.440446][    C1]  ret_from_fork+0x4b/0x80
[ 1318.440465][    C1]  ? __pfx_kthread+0x10/0x10
[ 1318.440485][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1318.440515][    C1]  </TASK>
[ 1318.442874][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 1318.815907][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0
[ 1318.826417][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1318.836474][   T30] Call Trace:
[ 1318.839754][   T30]  <TASK>
[ 1318.842679][   T30]  dump_stack_lvl+0x241/0x360
[ 1318.847362][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1318.852558][   T30]  ? __pfx__printk+0x10/0x10
[ 1318.857141][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1318.863209][   T30]  ? vscnprintf+0x5d/0x90
[ 1318.867532][   T30]  panic+0x349/0x860
[ 1318.871425][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[ 1318.877569][   T30]  ? __pfx_panic+0x10/0x10
[ 1318.881977][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[ 1318.887346][   T30]  ? __irq_work_queue_local+0x137/0x410
[ 1318.892887][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 1318.898250][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[ 1318.904831][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[ 1318.910982][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[ 1318.917131][   T30]  watchdog+0x102d/0x1030
[ 1318.921456][   T30]  ? watchdog+0x1ea/0x1030
[ 1318.925871][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1318.930684][   T30]  kthread+0x2f0/0x390
[ 1318.935284][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1318.939969][   T30]  ? __pfx_kthread+0x10/0x10
[ 1318.944557][   T30]  ret_from_fork+0x4b/0x80
[ 1318.948971][   T30]  ? __pfx_kthread+0x10/0x10
[ 1318.953557][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1318.958362][   T30]  </TASK>
[ 1318.961591][   T30] Kernel Offset: disabled
[ 1318.965910][   T30] Rebooting in 86400 seconds..