last executing test programs:

41.547091517s ago: executing program 3 (id=1388):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000020000000b0000000c000580080001"], 0x20}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040))

40.990439211s ago: executing program 3 (id=1393):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010b4040100000000000001090224"], 0x0)
r3 = io_uring_setup(0x71b9, &(0x7f00000000c0))
io_uring_enter(r3, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x65}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='SYNTH\nVOLUME \'Synth '], 0xb9)
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
r7 = dup3(r6, r5, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x101000, 0x8)
ioctl$IMADDTIMER(r8, 0x80044940, &(0x7f0000000300)=0xf4240)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100080000000000000005000000000008000c00a80a0000060001000500000008000b000439392b000000"], 0x34}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x14, 0x4e, 0xe25, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a8090902"], 0x0)
r10 = syz_io_uring_setup(0x225a, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000100)=<r11=>0x0, &(0x7f0000000140)=<r12=>0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r13, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x0)
syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index})
io_uring_enter(r10, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x14, 0x17, [0x4, 0x63aa, 0x800, 0x6]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4081}, 0x4000890)

22.731082133s ago: executing program 3 (id=1394):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x9)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008050bb61940000102030109022400010100000009040000010301000009210000000122690009058103"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000016c0)={0x24, 0x0, &(0x7f0000001600)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, &(0x7f0000002cc0)=ANY=[@ANYBLOB="000069000000690087a6d0129ff2df82c9c062db0f6faeb91f3593caf222be53d708a637800c248f94a3e7e4b08e9222ca1879d2ed7122192fa10004f5cd57650185"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

21.538360524s ago: executing program 2 (id=1447):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00')
r5 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c)
landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18)
sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4005, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000380)}, {&(0x7f0000000b40)="af70da5d267fdea676a869dcb3d4e7f1544cd2df45ee6eaa34bfcfbc82f452396a66d9a723d1923ec3e5d9056d8190898c64b12c5d91940f7e90ecae4f068c32a8bfdd4f73f3db6fed03428409f1196145a10b5b923b7c4742acdd6ad04667acb2c3bd2d349f1754202e53fc1766", 0x6e}], 0x2}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote, 0x40}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="9f3371fed8c0c7fcbe68488a940dc5736ca78043c8d5e0f24c252251d1b51e2be08c4185f6ed04867f3e8318b0ff41a71621ca61ed89cfb85b82bbbef9be5a87b50ba8050f8be14b347e1d170eb9490e10cce2fc4dc57884cd62174f3c5eb4ba38bdeb", 0x63}], 0x1}}], 0x2, 0xc0c0)

20.460106724s ago: executing program 2 (id=1449):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={0x0, 0x6})
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000003c0)=[0x3ce7, 0x9])
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x6}, 0x2)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$inet(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)="92", 0x1}], 0x1}, 0x0)
sendmmsg$inet6(r2, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="b2", 0x1}], 0x1}}], 0x1, 0x2000c801)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0x107f, 0x0, 0x0}, &(0x7f00000064c0)=0x40)
write$USERIO_CMD_REGISTER(r1, &(0x7f0000000080), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000240)={0x2, 0x24}, 0x2)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f0000000480)="ce37b520bb7faafacb86c42196409915eaa5b98a4b6ba68d54d015bbd61d204cf92cc2d9758d99044445f2dcfda3d0ae589292eb5f155fb5d2ae2c6fc5cc9450ce52f9e1ff90d6", 0x47, 0x0, &(0x7f0000000140)={0xa, 0x4, 0x0, @remote, 0x3}, 0x1c)
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000300)={0x2, 0xfc}, 0x2)
openat$fuse(0xffffff9c, &(0x7f0000000640), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TCFLSH(r6, 0x40045436, 0x3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r5, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x3, 0x7, {}, {0xee00}})
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000520000012bbd7000fcdbdf250208000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4000000)

19.805817117s ago: executing program 2 (id=1453):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$vhost_msg_v2(r0, &(0x7f0000000300)={0x2, 0x0, {&(0x7f0000000180)=""/180, 0xb4, &(0x7f0000000240)=""/143, 0x2, 0x3}}, 0x48)
r1 = semget$private(0x0, 0x4000000009, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000002a6d240"], 0x48}}, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r6, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0xa, r7, 0x0, r8})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000040))
semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x1, 0x1000}, {}], 0x2, 0x0)
semop(r1, &(0x7f0000003c00)=[{0x3, 0xc, 0x1800}], 0x1)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r11 = getpid()
sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7)

19.461405805s ago: executing program 2 (id=1455):
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = syz_io_uring_setup(0x76, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x20)

19.455554164s ago: executing program 0 (id=1456):
syz_usb_connect$uac1(0x0, 0xb9, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x0, 0xd0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x6, 0x0, "31f4"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x6, 0x8, 0x0, 0x10}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x3, 0x5, [0xa, 0x5, 0x3, 0xa, 0x9]}, @feature_unit={0x9, 0x24, 0x6, 0x0, 0x5, 0x1, [0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x0, 0x0, 0x1}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x0, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x9, "fc"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xd9, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2}}}}}}}]}}, 0x0)

19.448485954s ago: executing program 4 (id=1457):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x7)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x7800, 0x1, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x39, 0x0, [{0x0, 0xf, "96e539e61d6165bd7c85d4849b"}, {0x0, 0x8, "94eea3232837"}, {0x0, 0x8, '\x00\x00\x00\x00\x00\x00'}, {0x1, 0xb, "77d64ad412351e9b95"}, {0x0, 0x7, "bba95038b0"}, {0x0, 0x2}]}, @ra={0x94, 0x4}]}}}}})
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1a7)
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x8012, r0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000)

19.250948129s ago: executing program 4 (id=1458):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_cache\x00')
read$char_usb(r3, &(0x7f0000000140)=""/189, 0xfffffecd)
pread64(r3, &(0x7f0000000440)=""/197, 0xc5, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r6, 0x330f, 0x200)
shutdown(r1, 0x1)
listen(r1, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r6, 0x80184153, &(0x7f0000000480)={0x0, &(0x7f0000000280)=[&(0x7f0000000040)="1a0c2377feb7760a2a874d5f31436cd3172bd327bfd429e35a43e6a57c0a9c842175627020e91e43ed6448ee89715c16e708db429ce2b6ca0f9fdb105d66bb668e30298afa76e03d4ca7c1366778dbb3bf29fb388bb7bfeece242b80ad7385abb0f2b3e3ce5ed46474191e4eeb2091450bdbd72c8a44b6d4f2eac9bad45fa6f2e7716bdf29775ced3303cbc93a67e0e9d91702c4f45989be9a33338c714eb13d4d2154a361f836e4d44d", &(0x7f0000000180)="d79386bbfc09e3f6318618cdd148d8a443652b5070bcd137a694f11522fed8d3ed30320c1cd11b2475f014d1a16ffee620a819ed356e6972590af76fccf262732451d7bcbe826d5e40b221e9870bd62572609d1121237cd26f4c600416b876ac87c52b0ba13937a3a624832b4547f93f26b5b63595533eaee1f5ce64a417824f862c307fa84e864be5e3188f0fe92c5fa0501f07032fda2f0abb7be52f7a79347a17299370542150e9bc046f1b2730b50839312f7f4ac17635d6af93ceca1feb8df02a20e3", &(0x7f0000000300)="201a390071f71fce46695a441a1d9175f57d2f2f370cf8e40964cf0a3b8380c3ebf87fc4e77bbbeb876e5e298ce3905302d59ae47360473897811e5e32eadbfee325208f4517b0111be14106c3a8fd21262fe0c2359c798685b986055b75240b07b789f8db1458c2a3ff4d32be7b61c4099c416cdf000141d3358c854a6c02a6000a87b5e2b1f5a8b3f01d3ce51ceaf6ffa781fb576c0929b5c62386173863f793bb1dfcb8bfc14192f3d77d3cfcb4eaf25ee378705a36fa6c9e8380", &(0x7f0000000100)="c2629c7432ee4405f4b8cb2d4976443f773263c0cb8ea02a7a746fae7963d1e5fac8e6b59ba239a74e30253236b7e753d9c7f3e78bbc7b597321dc505d03", &(0x7f00000003c0)="a01931f2797446298712129f82549fc1da64079e496080912a5c5063205dba742bbf8dce0a48695f9f70f30034c57df6a3284526851ee334c73b2e8825c46f4712f0a4be0ff40ebbbe4232111215b839d2489a39ad9402d0a360ed1cddf03242d7fa22ca8cf071d92c78a1f7713b9e9b67f5ea8cc4a44ebfa38dd965348370bb4dc836759f6c724ff31083aed9edcdfadce5dfd57411"]})
close_range(r0, 0xffffffffffffffff, 0x0)

19.250476855s ago: executing program 2 (id=1459):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00')
r5 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c)
landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18)
sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4005, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000380)}, {&(0x7f0000000b40)="af70da5d267fdea676a869dcb3d4e7f1544cd2df45ee6eaa34bfcfbc82f452396a66d9a723d1923ec3e5d9056d8190898c64b12c5d91940f7e90ecae4f068c32a8bfdd4f73f3db6fed03428409f1196145a10b5b923b7c4742acdd6ad04667acb2c3bd2d349f1754202e53fc1766", 0x6e}], 0x2}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote, 0x40}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="9f3371fed8c0c7fcbe68488a940dc5736ca78043c8d5e0f24c252251d1b51e2be08c4185f6ed04867f3e8318b0ff41a71621ca61ed89cfb85b82bbbef9be5a87b50ba8050f8be14b347e1d170eb9490e10cce2fc4dc57884cd62174f3c5eb4ba38bdeb", 0x63}], 0x1}}], 0x2, 0xc0c0)

18.917739144s ago: executing program 3 (id=1460):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x4000, 0x3, &(0x7f00008dd000/0x4000)=nil)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900"})
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a181, 0x0)
open(&(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = dup(r4)
write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x0, 0x0, 0x4}}, 0x28)
fadvise64(r4, 0x0, 0x100000001, 0x4)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x17)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a2ef124708900"})
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x50}}, 0x0)

18.698096196s ago: executing program 2 (id=1461):
getpid() (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00')
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x100000, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x34}}, 0x810) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x2c26b4eb0000000, 0x1, 0x200, 0x0, 0x0, 0x0, 0x80000}}}, 0xb8}}, 0x0) (async)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000000)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x8, 0x0, "82ffe9a7ca8d338e0978c80c568a9d94969744223a3bf7b1ce1f566ac0b5502df67a3a54817e92bda7e02337b5186bf1532b41dc173f2ef38ea641dbf4bea193", "2c8d978bbbaf836770b6bc05c7d33d4ba1eeb28b81365fd5b98b898cd82f59b99d77af213e51d53d7e04d4e85e1d41ee121ea3aad63b499c7a25e1b181ac9ebf", "9fef7affaecac6ed08f4c36330801327cabc8491b2a7e8063de5ae1f02b8cb3a", [0x0, 0x3]}})
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/223, 0xdf}], 0x1, 0xfffff62d, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendfile(r1, r0, 0x0, 0x1) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r6, 0x6, 0x1c, 0x0, &(0x7f0000000080)) (async)
syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) (async)
setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) (async)
rmdir(&(0x7f0000000000)='./bus/file0\x00') (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
unshare(0x62040200)
unshare(0x62040200)

18.186116613s ago: executing program 3 (id=1464):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r2, 0x81fd)
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0001080006040000aaaaaaaaaabb00001d000180c2003fad56e00ac1"], 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x4)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/diskstats\x00', 0x0, 0x0)
r5 = accept$alg(r1, 0x0, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000002b80)={'hsr0\x00', &(0x7f0000002b40)=@ethtool_pauseparam={0x8, 0x2, 0x247, 0x337b}})
sendmsg$alg(r5, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7e}], 0x30}, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x140800)
sendmmsg$alg(r5, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000001700)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ec67e809e68ca18f0241349dc53502", 0x39}], 0x3}], 0x1, 0x840)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
chdir(&(0x7f0000000600)='./file0\x00')
ioctl$PPPIOCATTACH(r7, 0x4004743d, &(0x7f0000000040)=0x3)
recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/244, 0xf4}], 0x6}, 0x2040)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000000b0102000000000000000003000000080001002f26250008000340000000000c0002"], 0x4c}}, 0x0)

17.649708353s ago: executing program 3 (id=1466):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000001880), 0x0, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x28040, 0x0)
r4 = dup(r3)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111)
sendfile(r6, r4, 0x0, 0x8a000)
r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x29)
io_setup(0x6, &(0x7f0000000240)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0xf, 0x0, 0x0, r7, 0x0, 0x8000000, 0x1ffff}])
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, 0x0)
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000240)={0xc, r9})
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000300)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}})
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0)
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYBLOB="6716c7c5b9fec3a33d2445a0b347fb3c3d9276f69572e17f12f5e845ddc353abde5ec0ee27f22c396cefce05471dfe95bacdec1a7c11cae749d4b12c5de82301645bf41e5305dc21140f8a7881af7e3355e42f91b3d9e7b7be791c87054fdc0cfb728f6caca7f68f93254308f0696400f41b6ab2ce373bd82a2b05208df11bb6a642915d02a8d4ac586f7558a4bca788d923aebe37a9267c25e26be6d9f8aacbddb37124a5864afc2ec5", @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r11, 0x0, 0x0)
listen(r11, 0x4)
accept(r11, &(0x7f0000000000)=@can, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$alg(r10, &(0x7f00000000c0), 0x492492492492627, 0x0)

17.646371103s ago: executing program 4 (id=1467):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="60010000100033060000000000000000ac1e0001000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00ed2954a5a9dfdc51"], 0x160}}, 0x0)

13.998509924s ago: executing program 1 (id=1468):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan1\x00'}]}, 0x3c}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x540, 0x4)
sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000000000000000ed"], 0x10}}], 0x1, 0x0)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/1, 0x10}, 0x40002100)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r5 = socket$rxrpc(0x21, 0x2, 0xa)
recvfrom$rxrpc(r5, &(0x7f00000003c0)=""/155, 0x9b, 0x20, &(0x7f0000000200)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, 0x24)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, <r7=>0x0], &(0x7f0000000200), 0x4, r6})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[r7], &(0x7f0000000040)})

13.36914167s ago: executing program 0 (id=1469):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000b00)={0x0, 0x0, 0x2, "ca19"}, 0x0, 0x0})

10.815376059s ago: executing program 4 (id=1470):
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0xffffffff}, {0x60}, {0x2}, {0x6}]})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
pipe(0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffefffff)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=ANY=[@ANYBLOB="20000000100001042abd70000000000000480000", @ANYRES32=r3, @ANYBLOB="2646b3bd26ca"], 0x20}}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6(0xa, 0x1, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000680)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000002a80)={0x18, r5, 0x9})
socket$nl_route(0x10, 0x3, 0x0)

7.391960642s ago: executing program 1 (id=1472):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000800))
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = socket$inet6(0xa, 0x80803, 0x87)
read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/119, 0x77)
write$binfmt_misc(r4, &(0x7f00000001c0), 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r3}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$setflags(r7, 0x2, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
socket$netlink(0x10, 0x3, 0x9)
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x34, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, 0x0, 0x10, 0x70bd2a, 0x0, {{}, {@void, @val={0x0, 0x99, {0x66f, 0x24}}}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000054)
syncfs(r0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100)
read(r0, &(0x7f00000001c0)=""/9, 0x9)

6.642318858s ago: executing program 4 (id=1473):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r3, 0x0)
ftruncate(r3, 0xc17a)
openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x40, 0x20, 0xa})
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000080))

6.316216448s ago: executing program 1 (id=1474):
landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x10000, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b)
sendmmsg$inet(r0, &(0x7f0000007940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)="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", 0x181}, {&(0x7f0000000840)='+', 0x1}, {&(0x7f0000004080)="dd", 0x1}], 0x7}}], 0x3, 0x4048841)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x1000}}, './file0\x00'})
ioctl$BLKROSET(r1, 0x125d, &(0x7f00000000c0)=0x100000000)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x3e7442, 0x0)
io_setup(0x4, &(0x7f0000000140))
preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f)
ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000100)=0x1000)
syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4ffc8443474fc19eea84b9aaaaaaaaa786dd6caac42e00141100fc01000000000000000000000000000000000000000000000100ffff0000000016000b116700000100"], 0x0)
close_range(r2, r1, 0x0)

6.224545014s ago: executing program 4 (id=1475):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x2050a0c)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b)
read(r1, 0x0, 0x0)
r2 = gettid()
futex(&(0x7f000000cffc)=0x1, 0x80000000000d, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socket$nl_route(0x10, 0x3, 0x0)
close(r1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x3)
ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000001c0)={{r1}, 0x7, &(0x7f0000000180)=[0x3, 0x8, 0x7, 0x10001, 0x1000, 0x9, 0x1], 0x7, 0x9, 0x1})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f0000000400)=[{&(0x7f0000000080)=""/113, 0x71}], 0x1, 0xffd, 0x0)
ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000140)={'syzkaller0\x00'})
close(r0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x44}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100, &(0x7f00000002c0)={0x100003, 0x100081, 0x20000, {r5}}, 0x20)

6.119567955s ago: executing program 1 (id=1476):
r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x100000ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix={0x0, 0x0, 0x32315659, 0x0, 0x0, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2f, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

5.751319116s ago: executing program 1 (id=1477):
r0 = inotify_init() (async)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
fallocate(r1, 0x2, 0xfffffffffffffffd, 0xd) (async)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) (async)
r2 = inotify_init1(0x0) (async, rerun: 64)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000a34a0120d063e9212689990fc41fe50d4a33de5f663adc73bd07be137db88de061e5c63afba3cb25450817d2a4ab504a6fc05a2d2f56a2add353a99a905281201ac0ab448b603ab51495f2be2c667e40b0468fd1a66c9be26530fc14722d056fff47371d9f08c7cdc2dcc30562ee9cd8dd58cfea8609fd125fab25fb657067954c8a63414117027269e97cc6ae2f08e9f9bbd8a8e67f411493834b35e2318b6eb301165a72e146ef32c9e780d3c5b0aa5a86a42207d40f92168d47cebfd2e801156b5f03598ad5337a5a47183c68c6741f42f20f314a58a6911160827e54d11d5f6ca980e0ba1c00fc", @ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000"], 0x14}}, 0x48010) (async, rerun: 64)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000380)={0x1, 0x2, 0x1000, 0x3b, &(0x7f0000000080)="efe2dc17bd7ba20bc928fac61b36389bd990ade8b73ed35a6b27426b8b268864e3835a4a36af5581620e1857e3b9511cdd5c033a1d54088f1e3248", 0x77, 0x0, &(0x7f0000000240)="4f7d77e5d1ea35bee5209267bb49a1c3c5cdbbe10e466418cf4eb0d48d14c139ee14b5c3ea0803f4356d8d0382d36382e4182736b844d2ca8e30fedc76556fa89c252b8af5457ab7b720ac708980c1357a1f0df29a6c25fb21f72871d6c14f06b8726a68df27d23bdf30dbb5a6f07ca31126b9854e2a77"})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x39d2c0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async, rerun: 64)
write$sndseq(r4, &(0x7f0000000400)=[{0x8, 0x0, 0xfe, 0x0, @tick, {}, {}, @raw32={[0x0, 0x2]}}, {0x7, 0x9, 0x6, 0x0, @time={0xf2e, 0x40000006}, {0xe0, 0x7}, {0xfa}, @addr={0xf3, 0x7f}}], 0x38) (async, rerun: 64)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x10000000, 0x0, 0x8}) (async, rerun: 32)
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) (rerun: 32)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r6 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PTP_PIN_SETFUNC2(r6, 0x541b, 0x0) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a4000000000092d00020073797a32000000000900010073797a3000000000080005400000001f0c00118008000100647570001400000010000100"/144], 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x2b, 0x1, 0xffff9188) (async, rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (rerun: 64)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
madvise(&(0x7f0000430000/0x4000)=nil, 0x4000, 0x14)

4.997068707s ago: executing program 1 (id=1478):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000004000090000000000000000000302000008000200", @ANYRESDEC], 0x1c}}, 0x0)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x2a)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0x1b, &(0x7f0000000000)={{0xa, 0x0, 0x0, @ipv4}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x5c)
write$cgroup_pressure(r1, &(0x7f00000001c0)={'some'}, 0x4cdad095)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, &(0x7f0000000000)='pagemap\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000600)={0x100000001, 0x10})
ppoll(&(0x7f0000000640)=[{r3, 0x8}, {r1, 0xb32ccccd335e0655}, {r2, 0x8}, {r2}], 0x4, &(0x7f0000000680), &(0x7f00000006c0)={[0x100000000]}, 0x8)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPKT(r4, 0x40045431, &(0x7f0000000000))
execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000080)='some', &(0x7f0000000100)='fuse\x00', &(0x7f0000000200)='+*[&[.{#^^\x00', &(0x7f0000000240)='/dev/fuse\x00', &(0x7f0000000280)='\x00']}, &(0x7f0000000540)={[&(0x7f0000000300)='fuse\x00', &(0x7f0000000380)='some', &(0x7f00000003c0)='){]]\x00', &(0x7f0000000400)='/dev/fuse\x00', &(0x7f0000000440)='[\x00', &(0x7f0000000480)=':*\x00', &(0x7f00000004c0)='-%(\x00', &(0x7f0000000500)='/dev/fuse\x00']})
unlink(&(0x7f00000000c0)='./file0\x00')
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x3c020000)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = dup(r9)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000000)="9a6ba79ac22b00f30fc73500f0ffff66bad004ef66b805018ee0f3adb9800000c00f3235001000000f30c4c1ad63319aa20c77f4bb00660f38809202000000c4e1305831", 0x44}], 0x1, 0x13, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)={0xc04, 0x0, 0xb87, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xb88, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x59, 0x4, "f81c89619c3c8c44f509043a1f84b91d90e9c09ae35a82832609e2152e145b6cce6d4e4d23e32e4b0835f649941cfca8307aa6932514af2552f4aed5363e8f77716a3a3658762478cae6308ee8c94bea8bc458102d"}, @ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x67}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xc3-@-}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvT\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xdd, 0x4, "33359a5d3fcd97cb431e4d384eab47387a3f41cd2215af1405158deb36072687eff880de20bcce3dbe8d8afee24c7a6d01d2e53c244e3a5d827f53b6b36ebef867e5a18ce05fb5db6d355a37de6380271e228451bfeceb7dbb06849c8e7ca4f3fb77b9c8915f0bf60bdf4ed54d904d9567244c898fbaafcb169199822b41bad6ba4257ce2955e8ff4f2787d82325703dc4f32e663dab6f996ed07de09a44191c8cbc8f29d73a267fb22b91c379fb0e192f2e0c215d9eff8c8c133ee6b693e20840203fa911c430d890e98661b6757a2035a9d3a70ba0de5490"}, @ETHTOOL_A_BITSET_BITS={0x160, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, '\x00\x00\xc4\xe7`N\x00\x00\x00\x00@\x00\x00\x00j\x10\x8b;\x91\xbd\xb26'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xf6u\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6de}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0x78e, 0x5, "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"}]}]}, 0xc04}, 0x1, 0x0, 0x0, 0x2000c810}, 0x400c044)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYRES16=r1, @ANYRES8, @ANYBLOB=',group_id=', @ANYRESOCT=r7])
write$FUSE_INIT(r7, 0x0, 0x0)
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)

3.533929567s ago: executing program 0 (id=1479):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="60010000100033060000000000000000ac1e0001000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00ed2954a5a9dfdc51"], 0x160}}, 0x0)

3.372337093s ago: executing program 0 (id=1480):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'})
close(r0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x5, 0x6, 0x4, 0x6d6c, 0x2, [{0xc, 0x7, 0x5, '\x00', 0x37543da1dcf68f4a}, {0x8f6, 0xb87, 0xffff, '\x00', 0x8}]})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={<r1=>0x0, 0x1}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={<r2=>0x0, 0xfffffffe, 0x436, 0x3}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={<r3=>r1, 0x0, 0x4, 0x5, 0x0, 0x2, 0x3, 0x2, {r2, @in6={{0xa, 0x4e22, 0x6, @mcast2, 0x5}}, 0x0, 0x6, 0x3, 0x1, 0x6}}, &(0x7f0000000340)=0xb0)
sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@getaddr={0x14, 0x16, 0x300, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044800}, 0x14)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000480)={r3, @in6={{0xa, 0x4e22, 0xe, @remote}}, 0x0, 0x3}, &(0x7f0000000540)=0x90)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2000, 0x100)
r5 = accept4$alg(r0, 0x0, 0x0, 0x800)
sendmsg$inet(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)="f59fac5334b08444f652bc43baea8372eca90a8086308448b563641823ce7a35180f4334be9fb6aa39c00687aae4f151ad3bc77bc0781d317de27347", 0x3c}], 0x1, &(0x7f0000000640)=[@ip_retopts={{0x90, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xfe, 0x0, 0x8, [0x9, 0x81, 0xff]}, @timestamp_addr={0x44, 0x14, 0x6e, 0x1, 0xa, [{@local, 0xffe00000}, {@local, 0x809}]}, @timestamp={0x44, 0x24, 0xbc, 0x0, 0x6, [0x132, 0xcc6, 0x1, 0xff, 0x8, 0x6, 0x7fffffff, 0x1]}, @lsrr={0x83, 0x23, 0xd, [@multicast2, @local, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x38}]}, @generic={0x44, 0xf, "e6ee93212e30a0d36f9ab4920d"}, @ra={0x94, 0x4}]}}}], 0x90}, 0x10)
flock(r4, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, r7, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x66}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffff9}, @NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x1)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4)
openat$dir(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x0, 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000a40)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}], 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$usbfs(&(0x7f0000000a80), 0x6e2cc6c1, 0x280000)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xec, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x101, 0x9, 0xf7]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xc015}, 0x40)
pipe(&(0x7f0000000c80)={<r9=>0xffffffffffffffff})
sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000001040)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000d00)={0x2e8, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x118}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xed}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x8, 0x4, "f682a758"}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="4f9b3449df63"}, @NL80211_ATTR_BSS_SELECT={0x10, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0x40}}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_IE={0x22b, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x2, 0x6, @device_a, 0xe21, @value, 0xa, 0xb2, @broadcast}}, @dsss={0x3, 0x1, 0xa}, @supported_rates={0x1, 0x7, [{0x1b}, {0x30}, {0x6}, {0x9}, {0x30}, {0x5}, {0x6, 0x1}]}, @random={0x6b, 0xed, "c593d77b4f47190c8ef4734c141135fbc910f20b05e09c8a0f27a4b330d87c7ea6a69abaade4c04f6d862de860068cb019faebb1c9d834e5e85e01d4e5472c764ee9b7c924f308f194f4154de1d4c204c24682ef0feacc53ffbc9724cbea81e0ab50361f7b8b5bbb05f191af6ab1c83efea4e9f9833cb3f668187541d1d32c51277b6bb895722693dee9c0aa81cc776d4f95c2c51dbaddef0ed1fc584f7845246cade4f2504d74539839b8a8e960d9a35366b79a7f703dec24eb593fd0985fb95dfd83c25d5486ec8549292c6057ed7d71474645a8359fe5fcc761d13218f57f01246e355f0878202eb3b09c6a"}, @fast_bss_trans={0x37, 0xfa, {0x6, 0x6, "724944ba4bf850aeb7f4a1bf6249d86d", "d32dad6716472da5a7a4d612206fc31efa5adbb91495fb0d562d4a14f95049d4", "a23936ef93de64b70c55dc14ea58e484f49a9a3e2ce21f37ae398b2ada5b18c2", [{0x4, 0xf, "aab91e3da4cf3a5e06c7513478b388"}, {0x3, 0x21, "4047abac9eee722147a306f1d15e0ca49c1557832a8f2a5927c7e62343466037a8"}, {0x3, 0x24, "9fcdad1dd67c8b0172aef0b6916854f0dd77a33569fc7f269a2dd785793efd51fd01009b"}, {0x1, 0x1a, "4d8787998a93523a0d0e55e97218fbf8c179ef27832169eb9715"}, {0x4, 0x1f, "f614a834b33f395ade00c8293d016dd8b3616498ed2eee3b94cb5be6d0fb79"}, {0x2, 0xf, "f1854bc5af48c665fc0e03d399aebc"}]}}, @chsw_timing={0x68, 0x4, {0x2}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4004}, 0x40044)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, r7, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xb3, 0x10}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x40810)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000001180), 0x4)

3.18273926s ago: executing program 0 (id=1481):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bde5a44070276b90f5150102030109021200010000000009040004006f5c0a00"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000004c0))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
write$dsp(r4, &(0x7f0000000280)="86", 0x1)
write$dsp(r4, &(0x7f00000002c0)="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", 0xfff)
write$dsp(r4, &(0x7f00000012c0)="bf", 0x1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r5 = syz_clone(0xc000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r3, 0x0, 0xfffffffffffffd65, 0x0, 0x0, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000000c0)=ANY=[@ANYBLOB])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone3(&(0x7f0000002380)={0x101000100, &(0x7f0000000040), &(0x7f0000000080)=<r6=>0x0, &(0x7f00000000c0), {0x1b}, &(0x7f0000001300)=""/4096, 0x1000, &(0x7f0000002300)=""/86, &(0x7f0000000200)=[r5, r5, r5, r5, r5], 0x5}, 0x58)
r7 = syz_open_procfs(r6, &(0x7f0000000240)='clear_refs\x00')
writev(r7, &(0x7f0000000300)=[{&(0x7f0000000140)="0c0c81", 0x3}], 0x1)

0s ago: executing program 0 (id=1482):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000800))
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = socket$inet6(0xa, 0x80803, 0x87)
read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/119, 0x77)
write$binfmt_misc(r4, &(0x7f00000001c0), 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r3}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5000000}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$setflags(r7, 0x2, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
socket$netlink(0x10, 0x3, 0x9)
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x34, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, 0x0, 0x10, 0x70bd2a, 0x0, {{}, {@void, @val={0x0, 0x99, {0x66f, 0x24}}}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000054)
syncfs(r0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100)
read(r0, &(0x7f00000001c0)=""/9, 0x9)

kernel console output (not intermixed with test programs):

nd0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  459.669271][ T2944] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  459.682245][ T2944] bond0 (unregistering): Released all slaves
[  459.809304][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  459.820451][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  459.831206][ T2944] bond0 (unregistering): Released all slaves
[  459.961767][ T2944] tipc: Disabling bearer <udp:syz0>
[  459.973571][ T2944] tipc: Left network mode
[  460.100955][T11744] chnl_net:caif_netlink_parms(): no params data found
[  460.430221][T11744] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.437874][T11744] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.446808][T11744] bridge_slave_0: entered allmulticast mode
[  460.455839][T11744] bridge_slave_0: entered promiscuous mode
[  460.464473][T11744] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.472045][T11744] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.479342][T11744] bridge_slave_1: entered allmulticast mode
[  460.486502][T11744] bridge_slave_1: entered promiscuous mode
[  460.556115][ T5233] Bluetooth: hci3: command tx timeout
[  460.557721][ T2944] hsr_slave_0: left promiscuous mode
[  460.579877][ T2944] hsr_slave_1: left promiscuous mode
[  460.590440][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  460.600885][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  460.609214][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  460.616863][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.628598][ T2944] hsr_slave_0: left promiscuous mode
[  460.637138][ T2944] hsr_slave_1: left promiscuous mode
[  460.646230][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  460.655172][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  460.666212][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  460.673759][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.709156][ T2944] veth1_macvtap: left promiscuous mode
[  460.714831][ T2944] veth0_macvtap: left promiscuous mode
[  460.720413][ T2944] veth1_vlan: left promiscuous mode
[  460.726274][ T2944] veth0_vlan: left promiscuous mode
[  460.732851][ T2944] veth1_macvtap: left promiscuous mode
[  460.738406][ T2944] veth0_macvtap: left promiscuous mode
[  460.744605][ T2944] veth1_vlan: left promiscuous mode
[  460.749998][ T2944] veth0_vlan: left promiscuous mode
[  461.296376][ T2944] team0 (unregistering): Port device team_slave_1 removed
[  461.339047][ T2944] team0 (unregistering): Port device team_slave_0 removed
[  461.433986][ T5233] Bluetooth: hci1: command tx timeout
[  461.608205][ T5233] Bluetooth: hci2: command tx timeout
[  461.683618][ T5233] Bluetooth: hci0: command tx timeout
[  462.110941][ T2944] team0 (unregistering): Port device team_slave_1 removed
[  462.158698][ T2944] team0 (unregistering): Port device team_slave_0 removed
[  462.701871][T11744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.723399][T11792] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1306'.
[  462.756807][T11744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.784523][T11779] chnl_net:caif_netlink_parms(): no params data found
[  462.837926][T11646] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  462.870956][T11646] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  462.915346][T11646] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  462.934386][T11744] team0: Port device team_slave_0 added
[  462.940931][T11646] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  462.979465][T11744] team0: Port device team_slave_1 added
[  463.040868][T11744] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.048360][T11744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.075236][T11744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.133677][T11744] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.140761][T11744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.177054][T11744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.255089][T11779] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.262753][T11779] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.269960][T11779] bridge_slave_0: entered allmulticast mode
[  463.281770][T11779] bridge_slave_0: entered promiscuous mode
[  463.311490][T11744] hsr_slave_0: entered promiscuous mode
[  463.338750][T11744] hsr_slave_1: entered promiscuous mode
[  463.347034][T11744] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  463.357133][T11744] Cannot create hsr debugfs directory
[  463.366616][T11779] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.377628][T11779] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.385064][T11779] bridge_slave_1: entered allmulticast mode
[  463.391937][T11779] bridge_slave_1: entered promiscuous mode
[  463.477858][T11779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  463.511762][ T5233] Bluetooth: hci1: command tx timeout
[  463.524232][T11779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  463.579085][T11779] team0: Port device team_slave_0 added
[  463.624246][T11779] team0: Port device team_slave_1 added
[  463.644432][T11666] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  463.656170][T11666] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  463.675278][ T5233] Bluetooth: hci2: command tx timeout
[  463.711690][T11666] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  463.722847][T11666] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  463.777554][T11744] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.796735][T11779] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.805719][T11779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.832064][T11779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.858963][T11779] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.868803][T11779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.896815][T11779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.957054][ T2944] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.999186][T11744] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.053559][ T2944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.085583][T11779] hsr_slave_0: entered promiscuous mode
[  464.093250][T11779] hsr_slave_1: entered promiscuous mode
[  464.099384][T11779] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  464.107884][T11779] Cannot create hsr debugfs directory
[  464.129067][T11744] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.163061][ T2944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.182632][T11646] 8021q: adding VLAN 0 to HW filter on device bond0
[  464.210207][T11744] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.259593][ T2944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.379418][T11646] 8021q: adding VLAN 0 to HW filter on device team0
[  464.455488][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.462717][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state
[  464.484060][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.491227][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.673308][ T2944] bridge_slave_1: left allmulticast mode
[  464.679020][ T2944] bridge_slave_1: left promiscuous mode
[  464.686881][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.698305][ T2944] bridge_slave_0: left allmulticast mode
[  464.704897][ T2944] bridge_slave_0: left promiscuous mode
[  464.710654][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.723105][ T2944] bridge_slave_1: left allmulticast mode
[  464.728885][ T2944] bridge_slave_1: left promiscuous mode
[  464.735524][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.745309][ T2944] bridge_slave_0: left allmulticast mode
[  464.750986][ T2944] bridge_slave_0: left promiscuous mode
[  464.757892][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.548567][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  465.565508][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  465.583025][ T2944] bond0 (unregistering): Released all slaves
[  465.591661][ T5233] Bluetooth: hci1: command tx timeout
[  465.751845][ T5233] Bluetooth: hci2: command tx timeout
[  465.904862][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  465.941929][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  465.965257][ T2944] bond0 (unregistering): Released all slaves
[  466.161996][T11744] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  466.213943][T11666] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.220974][T11849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1308'.
[  466.246121][T11849] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.253502][T11849] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.263925][T11849] bridge0: entered allmulticast mode
[  466.319212][T11744] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  466.331583][T11744] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  466.344366][T11744] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  466.544207][T11666] 8021q: adding VLAN 0 to HW filter on device team0
[  466.627253][T10740] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.634386][T10740] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.844910][T11646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  466.888109][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.895293][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.055237][ T2944] hsr_slave_0: left promiscuous mode
[  467.061060][ T2944] hsr_slave_1: left promiscuous mode
[  467.067627][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  467.075341][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  467.083967][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  467.091383][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  467.103501][ T2944] hsr_slave_0: left promiscuous mode
[  467.109456][ T2944] hsr_slave_1: left promiscuous mode
[  467.116178][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  467.124115][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  467.132293][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  467.139724][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  467.175167][ T2944] veth1_macvtap: left promiscuous mode
[  467.180849][ T2944] veth0_macvtap: left promiscuous mode
[  467.186765][ T2944] veth1_vlan: left promiscuous mode
[  467.192724][ T2944] veth0_vlan: left promiscuous mode
[  467.198957][ T2944] veth1_macvtap: left promiscuous mode
[  467.206059][ T2944] veth0_macvtap: left promiscuous mode
[  467.211799][ T2944] veth1_vlan: left promiscuous mode
[  467.217083][ T2944] veth0_vlan: left promiscuous mode
[  467.671993][ T5233] Bluetooth: hci1: command tx timeout
[  467.708052][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  467.717432][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  467.732861][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  467.757165][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  467.779873][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  467.787501][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  468.007608][ T2944] team0 (unregistering): Port device team_slave_1 removed
[  468.047777][ T2944] team0 (unregistering): Port device team_slave_0 removed
[  468.778526][ T2944] team0 (unregistering): Port device team_slave_1 removed
[  468.824764][ T2944] team0 (unregistering): Port device team_slave_0 removed
[  469.237367][T11779] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  469.254873][T11779] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  469.274575][T11779] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  469.289136][T11779] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  469.496757][T11744] 8021q: adding VLAN 0 to HW filter on device bond0
[  469.536634][T11646] veth0_vlan: entered promiscuous mode
[  469.617685][T11744] 8021q: adding VLAN 0 to HW filter on device team0
[  469.646966][T11646] veth1_vlan: entered promiscuous mode
[  469.756101][T11666] 8021q: adding VLAN 0 to HW filter on device batadv0
[  469.803507][T10740] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.810651][T10740] bridge0: port 1(bridge_slave_0) entered forwarding state
[  469.832621][ T5233] Bluetooth: hci4: command tx timeout
[  469.843149][T10740] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.850277][T10740] bridge0: port 2(bridge_slave_1) entered forwarding state
[  469.977216][T11779] 8021q: adding VLAN 0 to HW filter on device bond0
[  470.005529][T11646] veth0_macvtap: entered promiscuous mode
[  470.031154][T11873] chnl_net:caif_netlink_parms(): no params data found
[  470.067758][T11646] veth1_macvtap: entered promiscuous mode
[  470.077850][T11779] 8021q: adding VLAN 0 to HW filter on device team0
[  470.134322][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.141492][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state
[  470.176371][T11666] veth0_vlan: entered promiscuous mode
[  470.188376][T11666] veth1_vlan: entered promiscuous mode
[  470.243350][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.250449][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state
[  470.279381][T11873] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.289001][T11873] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.298698][T11873] bridge_slave_0: entered allmulticast mode
[  470.307937][T11873] bridge_slave_0: entered promiscuous mode
[  470.320332][T11873] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.328461][T11873] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.336051][T11873] bridge_slave_1: entered allmulticast mode
[  470.343037][T11873] bridge_slave_1: entered promiscuous mode
[  470.365906][T11744] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.373338][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  470.384896][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  470.397135][T11646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  470.419043][T11873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.457419][T11873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.483257][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  470.497167][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  470.509374][T11646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  470.538739][ T2944] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.555067][ T2944] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.567813][ T2944] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  470.603378][T11666] veth0_macvtap: entered promiscuous mode
[  470.623542][T11873] team0: Port device team_slave_0 added
[  470.637382][T11666] veth1_macvtap: entered promiscuous mode
[  470.648651][T11646] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.662961][T11646] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  470.676255][T11646] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  470.685860][T11646] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.703115][T11873] team0: Port device team_slave_1 added
[  470.738377][ T2944] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.748745][ T2944] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.759696][ T2944] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  470.816168][ T2944] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.826770][ T2944] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.838183][ T2944] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  470.857009][T11744] veth0_vlan: entered promiscuous mode
[  470.868400][T11873] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.877834][T11873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.904588][T11873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.917858][T11873] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.927028][T11873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.952947][    C0] vkms_vblank_simulate: vblank timer overrun
[  470.959850][T11873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  470.999366][ T2944] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.009847][ T2944] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.021407][ T2944] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  471.050787][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.065942][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.076046][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.086694][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.097966][T11666] batman_adv: batadv0: Interface activated: batadv_slave_0
[  471.122721][T11744] veth1_vlan: entered promiscuous mode
[  471.150389][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  471.168882][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.180367][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  471.201602][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.212833][T11666] batman_adv: batadv0: Interface activated: batadv_slave_1
[  471.270478][T11744] veth0_macvtap: entered promiscuous mode
[  471.297754][T11779] 8021q: adding VLAN 0 to HW filter on device batadv0
[  471.309075][T11666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.318033][T11666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.328433][T11666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.337240][T11666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.354533][T11873] hsr_slave_0: entered promiscuous mode
[  471.360743][T11873] hsr_slave_1: entered promiscuous mode
[  471.421281][ T2886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.430575][ T2886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.454041][T11744] veth1_macvtap: entered promiscuous mode
[  471.564615][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.576843][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.589007][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.599716][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.609760][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.620373][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.632079][T11744] batman_adv: batadv0: Interface activated: batadv_slave_0
[  471.655053][T10740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.666112][ T2944] bridge_slave_1: left allmulticast mode
[  471.673525][T10740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.678051][ T2944] bridge_slave_1: left promiscuous mode
[  471.687052][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.700818][ T2944] bridge_slave_0: left allmulticast mode
[  471.707078][ T2944] bridge_slave_0: left promiscuous mode
[  471.713134][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.914222][ T5233] Bluetooth: hci4: command tx timeout
[  472.167446][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  472.176844][ T2944] bond_slave_0: left promiscuous mode
[  472.186725][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  472.199041][ T2944] bond_slave_1: left promiscuous mode
[  472.206853][ T2944] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[  472.217911][ T2944] macvlan2: left promiscuous mode
[  472.223747][ T2944] team0: left promiscuous mode
[  472.229518][ T2944] team_slave_0: left promiscuous mode
[  472.235272][ T2944] team_slave_1: left promiscuous mode
[  472.254001][ T2944] bond0 (unregistering): Released all slaves
[  472.371954][ T2944] bond1 (unregistering): Released all slaves
[  472.457096][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.467950][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.478361][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.490995][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.500894][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.511392][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.530179][T11744] batman_adv: batadv0: Interface activated: batadv_slave_1
[  472.613594][ T2944] tipc: Disabling bearer <udp:syz0>
[  472.619847][ T2944] tipc: Left network mode
[  472.630480][T11779] veth0_vlan: entered promiscuous mode
[  472.653669][T11744] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.666110][T11744] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.675811][T11744] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.693426][T11744] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  472.714679][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.737485][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.819150][T10740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.824109][T11779] veth1_vlan: entered promiscuous mode
[  472.847904][T10740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.905332][T11779] veth0_macvtap: entered promiscuous mode
[  472.915587][T11779] veth1_macvtap: entered promiscuous mode
[  472.959646][T11898] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1279'.
[  472.972462][T11898] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.1279'.
[  473.178508][ T2944] hsr_slave_0: left promiscuous mode
[  473.208103][ T2944] hsr_slave_1: left promiscuous mode
[  473.221864][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  473.235804][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  473.246526][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  473.258621][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  473.280110][ T2944] veth1_macvtap: left promiscuous mode
[  473.286191][ T2944] veth0_macvtap: left promiscuous mode
[  473.292535][ T2944] veth1_vlan: left promiscuous mode
[  473.298058][ T2944] veth0_vlan: left promiscuous mode
[  473.744036][ T2944] team0 (unregistering): Port device team_slave_1 removed
[  473.795573][ T2944] team0 (unregistering): Port device team_slave_0 removed
[  473.996337][ T5233] Bluetooth: hci4: command tx timeout
[  474.127650][T11916] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1313'.
[  474.149115][T11916] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  474.157038][T11916] macsec1: entered allmulticast mode
[  474.163665][T11916] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  474.176607][T11916] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  474.184040][T11916] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  474.292006][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.345801][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.424883][T11779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.439685][T11779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.450772][T11779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.465971][T11779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.476670][T11779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.487549][T11779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.499445][T11779] batman_adv: batadv0: Interface activated: batadv_slave_0
[  474.537660][T11779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.569708][T11779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.601650][T11779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.615699][T11779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.629829][T11779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.651670][T11779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.673013][T11779] batman_adv: batadv0: Interface activated: batadv_slave_1
[  474.722162][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.730141][T11873] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  474.746807][ T5473] usb 2-1: new full-speed USB device number 72 using dummy_hcd
[  474.772815][T11873] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  474.779909][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.809443][T11779] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  474.821740][T11779] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  474.830480][T11779] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  474.844065][T11779] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  474.910944][T11873] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  474.924609][ T5473] usb 2-1: config 4 has an invalid interface number: 231 but max is 0
[  474.932945][T11873] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  474.979817][ T5473] usb 2-1: config 4 has no interface number 0
[  474.995648][ T5473] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  475.007243][ T5473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.015691][ T5473] usb 2-1: Product: syz
[  475.050423][ T5473] usb 2-1: Manufacturer: syz
[  475.078860][ T5473] usb 2-1: SerialNumber: syz
[  475.117136][ T5473] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  475.141467][T10740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.150356][T10740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.219461][T11933] dccp_close: ABORT with 56 bytes unread
[  475.260495][T10740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.313393][T10740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.372121][T11919] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1315'.
[  475.439120][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  475.452620][T11935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1315'.
[  475.466173][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  475.476567][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  475.485582][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  475.491710][T11935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1315'.
[  475.507934][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  475.516541][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  475.586584][T11935] ip6gretap0: entered promiscuous mode
[  475.606491][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  475.606512][   T29] audit: type=1326 audit(1728675454.614:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11937 comm="syz.2.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b257dff9 code=0x7ffc0000
[  475.643567][T11935] batadv_slave_1: entered promiscuous mode
[  475.666937][ T5473] vp7045: USB control message 'out' went wrong.
[  475.683058][ T5473] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  475.700763][   T29] audit: type=1326 audit(1728675454.614:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11937 comm="syz.2.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b257dff9 code=0x7ffc0000
[  475.703819][ T5473] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  475.789020][ T5473] usb 2-1: USB disconnect, device number 72
[  475.811054][T11873] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.836950][T11946] netlink: 'syz.4.1319': attribute type 9 has an invalid length.
[  475.869137][T11946] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1319'.
[  475.912292][ T2944] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.937008][T11873] 8021q: adding VLAN 0 to HW filter on device team0
[  476.046764][ T2944] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.071825][ T5233] Bluetooth: hci4: command tx timeout
[  476.090898][T11948] netlink: 'syz.4.1319': attribute type 9 has an invalid length.
[  476.106444][T11948] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1319'.
[  476.133975][ T2944] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.150393][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.157520][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state
[  476.210202][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.217411][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.259041][ T2944] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.435188][T11941] chnl_net:caif_netlink_parms(): no params data found
[  476.504579][T11956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1322'.
[  476.755792][T11941] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.772067][T11941] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.781091][T11941] bridge_slave_0: entered allmulticast mode
[  476.799009][T11941] bridge_slave_0: entered promiscuous mode
[  476.810650][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1323'.
[  476.903132][T11941] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.910367][T11941] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.917691][T11941] bridge_slave_1: entered allmulticast mode
[  476.924939][T11941] bridge_slave_1: entered promiscuous mode
[  476.946374][ T2944] bridge_slave_1: left allmulticast mode
[  476.952297][ T2944] bridge_slave_1: left promiscuous mode
[  476.958082][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.992546][ T2944] bridge_slave_0: left allmulticast mode
[  476.998434][ T2944] bridge_slave_0: left promiscuous mode
[  477.019961][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.383052][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  477.405921][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  477.416164][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  477.430072][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  477.443107][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  477.460889][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  477.592795][ T5233] Bluetooth: hci3: command tx timeout
[  477.705644][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  477.717529][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  477.728535][ T2944] bond0 (unregistering): Released all slaves
[  477.800628][T11941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  477.834165][T11941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  477.970149][T11873] 8021q: adding VLAN 0 to HW filter on device batadv0
[  478.145776][T11941] team0: Port device team_slave_0 added
[  478.319540][T11941] team0: Port device team_slave_1 added
[  478.504693][T11941] batman_adv: batadv0: Adding interface: batadv_slave_0
[  478.513984][T11941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  478.571049][T11941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  478.606256][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  478.628496][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  478.637600][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  478.653352][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  478.669712][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  478.681116][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  478.689000][ T2944] hsr_slave_0: left promiscuous mode
[  478.710072][ T2944] hsr_slave_1: left promiscuous mode
[  478.722952][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  478.731296][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  478.750186][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  478.758472][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  478.777564][ T2944] veth1_macvtap: left promiscuous mode
[  478.785374][ T2944] veth0_macvtap: left promiscuous mode
[  478.790983][ T2944] veth1_vlan: left promiscuous mode
[  478.798203][ T2944] veth0_vlan: left promiscuous mode
[  478.821995][ T5285] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  478.991873][ T5285] usb 3-1: Using ep0 maxpacket: 32
[  478.999858][ T5285] usb 3-1: config 0 has an invalid interface number: 84 but max is 1
[  479.013576][ T5285] usb 3-1: config 0 has an invalid interface number: 84 but max is 1
[  479.021813][ T5285] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  479.032355][ T5285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  479.041246][ T5285] usb 3-1: config 0 has no interface number 0
[  479.047908][ T5285] usb 3-1: config 0 interface 84 has no altsetting 1
[  479.072765][ T5285] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0033, bcdDevice=6c.3e
[  479.082218][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.090344][ T5285] usb 3-1: Product: syz
[  479.094652][ T5285] usb 3-1: Manufacturer: syz
[  479.099288][ T5285] usb 3-1: SerialNumber: syz
[  479.112459][ T5285] usb 3-1: config 0 descriptor??
[  479.318292][ T2944] team0 (unregistering): Port device team_slave_1 removed
[  479.381262][ T2944] team0 (unregistering): Port device team_slave_0 removed
[  479.527648][ T5244] Bluetooth: hci0: command tx timeout
[  479.687859][ T5244] Bluetooth: hci3: command tx timeout
[  479.831776][T11941] batman_adv: batadv0: Adding interface: batadv_slave_1
[  479.838783][T11941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  479.866248][T11941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  479.909928][ T5289] usb 3-1: USB disconnect, device number 72
[  480.006618][T11941] hsr_slave_0: entered promiscuous mode
[  480.012964][T11941] hsr_slave_1: entered promiscuous mode
[  480.019001][T11941] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  480.027309][T11941] Cannot create hsr debugfs directory
[  480.114150][T11873] veth0_vlan: entered promiscuous mode
[  480.211185][T11873] veth1_vlan: entered promiscuous mode
[  480.305119][T11976] chnl_net:caif_netlink_parms(): no params data found
[  480.583837][T11873] veth0_macvtap: entered promiscuous mode
[  480.593666][T11873] veth1_macvtap: entered promiscuous mode
[  480.706200][T11976] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.716972][T11976] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.722373][ T5244] Bluetooth: hci1: command tx timeout
[  480.724737][T11976] bridge_slave_0: entered allmulticast mode
[  480.737596][T11976] bridge_slave_0: entered promiscuous mode
[  480.773728][ T2944] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.790089][T11873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.802098][T11873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.812044][T11873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.822675][T11873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.833341][T11873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.843925][T11873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.855048][T11873] batman_adv: batadv0: Interface activated: batadv_slave_0
[  480.880216][T11976] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.891812][T11976] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.898989][T11976] bridge_slave_1: entered allmulticast mode
[  480.906127][T11976] bridge_slave_1: entered promiscuous mode
[  480.970317][ T2944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.000933][T11873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.011744][T11873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.021860][T11873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.033347][T11873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.043539][T11873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.055036][T11873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.066120][T11873] batman_adv: batadv0: Interface activated: batadv_slave_1
[  481.076992][T12000] chnl_net:caif_netlink_parms(): no params data found
[  481.090842][T11873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.100115][T11873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.109266][T11873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.118937][T11873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.194301][ T2944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.234519][T11976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  481.336702][ T2944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.368680][T11976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  481.564951][T11976] team0: Port device team_slave_0 added
[  481.601668][ T5244] Bluetooth: hci0: command tx timeout
[  481.661691][T12000] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.701667][T12000] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.708999][T12000] bridge_slave_0: entered allmulticast mode
[  481.722808][T12000] bridge_slave_0: entered promiscuous mode
[  481.734920][T11976] team0: Port device team_slave_1 added
[  481.752146][ T5244] Bluetooth: hci3: command tx timeout
[  481.782774][T12000] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.790844][T12000] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.801415][T12000] bridge_slave_1: entered allmulticast mode
[  481.809295][T12000] bridge_slave_1: entered promiscuous mode
[  481.899505][T11976] batman_adv: batadv0: Adding interface: batadv_slave_0
[  481.906917][T11976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  481.936763][T11976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  481.971926][T11941] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  482.036522][T12000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  482.068653][T12000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  482.088381][T11976] batman_adv: batadv0: Adding interface: batadv_slave_1
[  482.098425][T11976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  482.135128][T11976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  482.205959][T11941] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  482.235256][T11941] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  482.299440][ T2944] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.427311][ T2944] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.458195][ T2886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.473727][T11941] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  482.482670][ T2886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.521324][T12000] team0: Port device team_slave_0 added
[  482.614306][ T2944] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.676021][T12000] team0: Port device team_slave_1 added
[  482.791137][T11976] hsr_slave_0: entered promiscuous mode
[  482.791758][ T5244] Bluetooth: hci1: command tx timeout
[  482.806304][T11976] hsr_slave_1: entered promiscuous mode
[  482.831663][T11976] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  482.839288][T11976] Cannot create hsr debugfs directory
[  482.910588][ T2944] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.945273][T12000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  482.961666][T12000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.011649][T12000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.043864][T12000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.050843][T12000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.101689][T12000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  483.138865][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.155727][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.320115][T12000] hsr_slave_0: entered promiscuous mode
[  483.347701][T12000] hsr_slave_1: entered promiscuous mode
[  483.362001][T12000] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  483.369690][T12000] Cannot create hsr debugfs directory
[  483.671700][ T5244] Bluetooth: hci0: command tx timeout
[  483.735777][ T2944] bridge_slave_1: left allmulticast mode
[  483.741489][ T2944] bridge_slave_1: left promiscuous mode
[  483.763612][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.773609][ T2944] bridge_slave_0: left allmulticast mode
[  483.779260][ T2944] bridge_slave_0: left promiscuous mode
[  483.785977][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.795447][ T2944] bridge_slave_1: left allmulticast mode
[  483.801096][ T2944] bridge_slave_1: left promiscuous mode
[  483.807320][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.816334][ T2944] bridge_slave_0: left allmulticast mode
[  483.822519][ T2944] bridge_slave_0: left promiscuous mode
[  483.828247][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.832103][ T5244] Bluetooth: hci3: command tx timeout
[  483.983716][ T2944] ip6gretap0 (unregistering): left promiscuous mode
[  484.410483][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  484.427646][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  484.438723][ T2944] bond0 (unregistering): Released all slaves
[  484.567361][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  484.578503][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  484.590419][ T2944] bond0 (unregistering): Released all slaves
[  484.882658][ T5244] Bluetooth: hci1: command tx timeout
[  484.918277][T11941] 8021q: adding VLAN 0 to HW filter on device bond0
[  485.123170][T11941] 8021q: adding VLAN 0 to HW filter on device team0
[  485.213339][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.220484][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  485.247283][T10740] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.254570][T10740] bridge0: port 2(bridge_slave_1) entered forwarding state
[  485.347099][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  485.362055][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  485.376213][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  485.385773][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  485.413066][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  485.423702][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  485.517022][ T2944] hsr_slave_0: left promiscuous mode
[  485.530924][ T2944] hsr_slave_1: left promiscuous mode
[  485.538919][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  485.547103][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  485.556207][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  485.564065][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  485.575130][ T2944] batadv_slave_1: left promiscuous mode
[  485.588230][ T2944] hsr_slave_0: left promiscuous mode
[  485.594888][ T2944] hsr_slave_1: left promiscuous mode
[  485.602742][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  485.613777][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  485.622200][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  485.629769][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  485.672974][ T2944] veth1_macvtap: left promiscuous mode
[  485.678551][ T2944] veth0_macvtap: left promiscuous mode
[  485.684911][ T2944] veth1_vlan: left promiscuous mode
[  485.699502][ T2944] veth0_vlan: left promiscuous mode
[  485.705795][ T2944] veth1_macvtap: left promiscuous mode
[  485.711347][ T2944] veth0_macvtap: left promiscuous mode
[  485.725832][ T2944] veth1_vlan: left promiscuous mode
[  485.731168][ T2944] veth0_vlan: left promiscuous mode
[  485.761747][ T5244] Bluetooth: hci0: command tx timeout
[  486.337337][ T2944] team0 (unregistering): Port device team_slave_1 removed
[  486.378242][ T2944] team0 (unregistering): Port device team_slave_0 removed
[  486.962793][ T5244] Bluetooth: hci1: command tx timeout
[  487.305862][ T2944] team0 (unregistering): Port device team_slave_1 removed
[  487.352134][ T2944] team0 (unregistering): Port device team_slave_0 removed
[  487.513381][ T5244] Bluetooth: hci2: command tx timeout
[  487.948446][T11941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  488.000767][T11976] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  488.076762][T11976] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  488.100304][T11976] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  488.131050][T11976] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  488.215585][T11941] 8021q: adding VLAN 0 to HW filter on device batadv0
[  488.435645][T12079] chnl_net:caif_netlink_parms(): no params data found
[  488.527230][T11941] veth0_vlan: entered promiscuous mode
[  488.762836][T11941] veth1_vlan: entered promiscuous mode
[  488.773817][T12079] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.781000][T12079] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.795155][T12079] bridge_slave_0: entered allmulticast mode
[  488.807261][T12079] bridge_slave_0: entered promiscuous mode
[  488.825164][T12079] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.838115][T12079] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.848319][T12079] bridge_slave_1: entered allmulticast mode
[  488.856898][T12079] bridge_slave_1: entered promiscuous mode
[  488.930477][T12079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  488.950948][T12079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.965988][T11976] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.019370][T12079] team0: Port device team_slave_0 added
[  489.029784][T12079] team0: Port device team_slave_1 added
[  489.094206][T12000] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  489.106647][T11976] 8021q: adding VLAN 0 to HW filter on device team0
[  489.121313][T12079] batman_adv: batadv0: Adding interface: batadv_slave_0
[  489.128952][T12079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  489.155262][T12079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  489.168577][T12000] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  489.181383][T12000] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  489.202778][T12079] batman_adv: batadv0: Adding interface: batadv_slave_1
[  489.209743][T12079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  489.236983][T12079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  489.251440][T12000] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  489.269045][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.276228][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.293416][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.300535][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  489.311114][T11941] veth0_macvtap: entered promiscuous mode
[  489.347320][ T2944] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.384957][T11941] veth1_macvtap: entered promiscuous mode
[  489.458978][ T2944] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.506839][T12079] hsr_slave_0: entered promiscuous mode
[  489.516824][T12079] hsr_slave_1: entered promiscuous mode
[  489.528796][T12079] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  489.538765][T12079] Cannot create hsr debugfs directory
[  489.588617][ T2944] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.599097][ T5244] Bluetooth: hci2: command tx timeout
[  489.633449][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  489.644677][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.654643][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  489.665528][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.678346][T11941] batman_adv: batadv0: Interface activated: batadv_slave_0
[  489.736787][ T2944] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.750069][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.760924][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.770887][T11941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.781412][T11941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.798508][T11941] batman_adv: batadv0: Interface activated: batadv_slave_1
[  489.840234][T11941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  489.849435][T11941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  489.859153][T11941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  489.868273][T11941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  489.900995][T11976] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.056099][T10740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.081332][T10740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.206836][ T2944] bridge_slave_1: left allmulticast mode
[  490.213526][ T2944] bridge_slave_1: left promiscuous mode
[  490.219202][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.228638][ T2944] bridge_slave_0: left allmulticast mode
[  490.236894][ T2944] bridge_slave_0: left promiscuous mode
[  490.243180][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.593983][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.607212][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  490.618081][ T2944] bond0 (unregistering): Released all slaves
[  490.633213][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.641094][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.648781][T11976] veth0_vlan: entered promiscuous mode
[  490.664840][T11976] veth1_vlan: entered promiscuous mode
[  490.865524][T12000] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.996995][ T2944] hsr_slave_0: left promiscuous mode
[  491.002858][ T2944] hsr_slave_1: left promiscuous mode
[  491.005090][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.005143][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.005821][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.005853][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.035097][ T2944] veth1_macvtap: left promiscuous mode
[  491.074362][ T2944] veth0_macvtap: left promiscuous mode
[  491.114559][ T2944] veth1_vlan: left promiscuous mode
[  491.114682][ T2944] veth0_vlan: left promiscuous mode
[  491.658453][T12138] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1347'.
[  491.672159][ T5244] Bluetooth: hci2: command tx timeout
[  491.755482][ T2944] team0 (unregistering): Port device team_slave_1 removed
[  491.805288][ T2944] team0 (unregistering): Port device team_slave_0 removed
[  492.306299][T11976] veth0_macvtap: entered promiscuous mode
[  492.340422][T11976] veth1_macvtap: entered promiscuous mode
[  492.396332][T12000] 8021q: adding VLAN 0 to HW filter on device team0
[  492.457324][T12140] tipc: Started in network mode
[  492.466161][T12140] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  492.478474][T12140] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[  492.488796][T12140] tipc: Enabled bearer <udp:syz0>, priority 10
[  492.514368][T10740] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.521598][T10740] bridge0: port 1(bridge_slave_0) entered forwarding state
[  492.541415][T10740] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.548572][T10740] bridge0: port 2(bridge_slave_1) entered forwarding state
[  492.637043][T11976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  492.670286][T11976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  492.696152][T11976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  492.710014][T11976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  492.730680][T11976] batman_adv: batadv0: Interface activated: batadv_slave_0
[  492.810478][T11976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  492.826787][T11976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  492.838004][T11976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  492.855310][T11976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  492.867754][T11976] batman_adv: batadv0: Interface activated: batadv_slave_1
[  492.902036][T12079] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  492.919665][T11976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  492.935411][T11976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  492.947276][T11976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  492.973342][T11976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  493.039781][T12079] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  493.060440][T12079] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  493.080303][T12079] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  493.352964][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.360840][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.444789][T12000] 8021q: adding VLAN 0 to HW filter on device batadv0
[  493.495425][T10740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.523222][T10740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.611774][ T4649] tipc: Node number set to 1
[  493.619265][T12079] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.692178][T12000] veth0_vlan: entered promiscuous mode
[  493.698357][T12186] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  493.729308][T12000] veth1_vlan: entered promiscuous mode
[  493.739636][T12079] 8021q: adding VLAN 0 to HW filter on device team0
[  493.749239][ T2944] tipc: Subscription rejected, illegal request
[  493.754539][ T5244] Bluetooth: hci2: command tx timeout
[  493.776494][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.783693][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.810706][ T2886] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.817942][ T2886] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.867224][T12190] input: syz1 as /devices/virtual/input/input55
[  493.874667][T12192] FAULT_INJECTION: forcing a failure.
[  493.874667][T12192] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  493.899787][T12000] veth0_macvtap: entered promiscuous mode
[  493.911337][T12192] CPU: 1 UID: 0 PID: 12192 Comm: syz.3.1358 Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
[  493.922223][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  493.932340][T12192] Call Trace:
[  493.935665][T12192]  <TASK>
[  493.938624][T12192]  dump_stack_lvl+0x241/0x360
[  493.943340][T12192]  ? __pfx_dump_stack_lvl+0x10/0x10
[  493.948876][T12192]  ? __pfx__printk+0x10/0x10
[  493.953533][T12192]  ? __pfx_lock_release+0x10/0x10
[  493.958627][T12192]  should_fail_ex+0x3b0/0x4e0
[  493.963353][T12192]  _copy_from_user+0x2f/0xe0
[  493.967999][T12192]  get_nodes+0x40c/0x4e0
[  493.972288][T12192]  ? __pfx_get_nodes+0x10/0x10
[  493.977104][T12192]  __se_sys_mbind+0x1c7/0x1a10
[  493.981921][T12192]  ? vfs_write+0x7bf/0xc90
[  493.986381][T12192]  ? kmem_cache_free+0x1a2/0x420
[  493.991366][T12192]  ? __pfx___se_sys_mbind+0x10/0x10
[  493.996580][T12192]  ? __mutex_unlock_slowpath+0x21d/0x750
[  494.002233][T12192]  ? __pfx_vfs_write+0x10/0x10
[  494.007015][T12192]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  494.013025][T12192]  ? __fget_files+0x3f3/0x470
[  494.017813][T12192]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  494.023815][T12192]  ? do_syscall_64+0x100/0x230
[  494.028639][T12192]  ? __x64_sys_mbind+0x21/0xf0
[  494.033461][T12192]  do_syscall_64+0xf3/0x230
[  494.037972][T12192]  ? clear_bhb_loop+0x35/0x90
[  494.042748][T12192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.048832][T12192] RIP: 0033:0x7fdc30d7dff9
[  494.053269][T12192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  494.072886][T12192] RSP: 002b:00007fdc31a9a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  494.081319][T12192] RAX: ffffffffffffffda RBX: 00007fdc30f35f80 RCX: 00007fdc30d7dff9
[  494.089303][T12192] RDX: 0000000000008003 RSI: 0000000000600000 RDI: 0000000020000000
[  494.097288][T12192] RBP: 00007fdc31a9a090 R08: 0000000000000008 R09: 0000000000000000
[  494.105269][T12192] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  494.113249][T12192] R13: 0000000000000000 R14: 00007fdc30f35f80 R15: 00007fdc3105fa28
[  494.121329][T12192]  </TASK>
[  494.124466][    C1] vkms_vblank_simulate: vblank timer overrun
[  494.161077][T12000] veth1_macvtap: entered promiscuous mode
[  494.181097][T12000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.204727][T12000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.215682][T12000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.226610][T12000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.246795][T12000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.257579][T12000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.270710][T12000] batman_adv: batadv0: Interface activated: batadv_slave_0
[  494.289095][T12000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.321562][T12000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.331437][T12000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.342235][T12000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.354245][T12000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.368204][T12000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.379709][T12000] batman_adv: batadv0: Interface activated: batadv_slave_1
[  494.407074][T12000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  494.415957][T12000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  494.427552][T12000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  494.437092][T12000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  494.534546][T12079] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.581684][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.593196][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.663249][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.675954][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.694576][T12079] veth0_vlan: entered promiscuous mode
[  494.729587][T12079] veth1_vlan: entered promiscuous mode
[  494.770757][T12079] veth0_macvtap: entered promiscuous mode
[  494.779343][T12079] veth1_macvtap: entered promiscuous mode
[  494.794567][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.806445][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.816983][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.827897][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.838047][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.848817][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.859040][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.869820][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.883541][T12079] batman_adv: batadv0: Interface activated: batadv_slave_0
[  494.894698][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.905738][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.916005][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.926575][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.936888][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.947429][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.957404][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.967943][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.979103][T12079] batman_adv: batadv0: Interface activated: batadv_slave_1
[  495.015698][T12079] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.029690][T12079] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  495.040662][T12079] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.053612][T12206] dlm: plock device version mismatch: kernel (1.2.0), user (1460.0.3477617)
[  495.068349][T12079] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  495.078583][T12206] delete_channel: no stack
[  495.237477][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.285125][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.358106][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.366452][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.551590][T12211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1338'.
[  495.560761][T12211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1338'.
[  495.581434][T12211] bridge0: port 3(vlan2) entered blocking state
[  495.588289][T12211] bridge0: port 3(vlan2) entered disabled state
[  495.602177][T12211] vlan2: entered allmulticast mode
[  495.626567][T12211] vlan2: left allmulticast mode
[  495.674606][T12204] delete_channel: no stack
[  495.737465][T12213] vlan2: entered promiscuous mode
[  495.749732][T12213] bridge0: entered promiscuous mode
[  495.756511][T12213] vlan2: entered allmulticast mode
[  495.772928][T12223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  495.794611][T12213] bridge0: entered allmulticast mode
[  495.834097][T12213] bridge0: left allmulticast mode
[  495.839237][T12213] bridge0: left promiscuous mode
[  495.851833][T12223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.918366][T12230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1367'.
[  496.004589][ T5285] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  496.093695][ T5244] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  496.115550][T12237] netlink: 'syz.3.1369': attribute type 5 has an invalid length.
[  496.183848][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.201803][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  496.213861][   T29] audit: type=1326 audit(1728675475.224:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12233 comm="syz.3.1369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc30d7dff9 code=0x0
[  496.237337][ T5285] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  496.259438][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.287547][ T5285] usb 2-1: config 0 descriptor??
[  496.312693][ T5290] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  496.382362][T12243] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  496.389365][T12243] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  496.425820][T12243] vhci_hcd vhci_hcd.0: Device attached
[  496.474985][ T5290] usb 3-1: Using ep0 maxpacket: 32
[  496.484696][ T5290] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 6
[  496.505826][ T5290] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  496.515179][ T5290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.524072][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1369'.
[  496.531653][ T5290] usb 3-1: Product: syz
[  496.544467][ T5290] usb 3-1: Manufacturer: syz
[  496.549168][ T5290] usb 3-1: SerialNumber: syz
[  496.574495][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'.
[  496.582548][ T5290] usb 3-1: config 0 descriptor??
[  496.595951][ T5290] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  496.618802][T12248] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  496.629608][T12248] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  496.641936][T12248] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  496.652987][T12248] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  496.662061][ T5292] vhci_hcd: vhci_device speed not set
[  496.733354][ T5292] usb 15-1: new full-speed USB device number 2 using vhci_hcd
[  496.741132][ T5473] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  496.780297][ T5285] usbhid 2-1:0.0: can't add hid device: -71
[  496.806957][ T5285] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  496.903418][ T5473] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  496.917953][ T5285] usb 2-1: USB disconnect, device number 73
[  496.937724][T12244] vhci_hcd: connection reset by peer
[  496.947544][ T5473] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  497.013616][T10740] vhci_hcd: stop threads
[  497.018513][ T5473] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  497.047814][T10740] vhci_hcd: release socket
[  497.061300][ T5473] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.071133][T10740] vhci_hcd: disconnect device
[  497.123895][ T5290] gspca_ov534_9: reg_w failed -110
[  497.371112][ T5473] usb 5-1: USB disconnect, device number 57
[  497.641777][ T5290] gspca_ov534_9: Unknown sensor 0000
[  497.641859][ T5290] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22
[  498.113597][ T5291] usb 3-1: USB disconnect, device number 73
[  498.156264][ T5290] IPVS: starting estimator thread 0...
[  498.217686][T12268] binder_alloc: 12267: pid 12267 spamming oneway? 1 buffers allocated for a total size of 4096
[  498.236456][T12274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1380'.
[  498.281675][T12272] IPVS: using max 18 ests per chain, 43200 per kthread
[  498.418742][T12278] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1381'.
[  498.711951][ T5291] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  498.910182][ T5291] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 255, changing to 11
[  498.930757][ T5291] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 59127, setting to 1024
[  498.956826][ T5291] usb 3-1: config 0 interface 0 has no altsetting 0
[  498.989329][ T5291] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  499.006314][T12302] atomic_op ffff8880317ba998 conn xmit_atomic 0000000000000000
[  499.040302][ T5291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.078086][ T5291] usb 3-1: Product: syz
[  499.116283][ T5291] usb 3-1: Manufacturer: syz
[  499.127451][ T5291] usb 3-1: SerialNumber: syz
[  499.153823][ T5291] usb 3-1: config 0 descriptor??
[  499.171724][T12281] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  499.247469][ T5291] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected
[  499.265343][ T5291] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[  499.290880][ T5291] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[  499.300530][ T5291] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  499.312234][ T5291] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  499.319943][ T5291] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[  499.328468][ T5291] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[  499.339295][ T5291] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  499.389354][ T5291] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83
[  499.441653][ T5291] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3
[  499.467719][ T5291] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4
[  499.496112][ T5291] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86
[  499.529383][ T5291] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6
[  499.582622][ T5291] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  499.585404][T10740] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.659948][T10740] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  499.710617][T12310] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1390'.
[  499.743800][T12310] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  499.761718][T12310] macsec1: entered allmulticast mode
[  499.765434][ T5333] usb 3-1: USB disconnect, device number 74
[  499.777467][T12310] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  499.789389][ T5333] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  499.826021][ T5333] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  499.848163][ T5333] keyspan 3-1:0.0: device disconnected
[  499.856414][T12310] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  499.892849][T12310] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  500.019550][T10740] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.035068][T10740] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  500.258329][T10740] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.288522][T10740] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  500.385775][T10740] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.423441][T10740] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  500.447930][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  500.459481][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  500.469392][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  500.492401][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  500.502740][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  500.512606][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  500.918916][T10740] bridge_slave_1: left allmulticast mode
[  500.930056][T10740] bridge_slave_1: left promiscuous mode
[  500.940902][T10740] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.961770][T10740] bridge_slave_0: left allmulticast mode
[  500.967472][T10740] bridge_slave_0: left promiscuous mode
[  500.980623][T10740] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.102500][ T5333] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  501.285200][ T5333] usb 2-1: Using ep0 maxpacket: 8
[  501.293668][ T5333] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  501.319007][ T5333] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  501.343845][ T5333] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  501.376410][ T5333] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  501.403478][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  501.416071][ T5333] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  501.425459][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  501.428869][ T5333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.440890][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  501.464288][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  501.473405][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  501.486358][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  501.697704][ T5333] usb 2-1: GET_CAPABILITIES returned 0
[  501.709452][ T5333] usbtmc 2-1:16.0: can't read capabilities
[  501.795228][T10740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  501.806972][T10740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  501.818731][T10740] bond0 (unregistering): Released all slaves
[  501.834967][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  501.841376][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  501.901678][ T5292] vhci_hcd: vhci_device speed not set
[  501.931672][ T5333] usb 2-1: USB disconnect, device number 74
[  501.953805][T12332] chnl_net:caif_netlink_parms(): no params data found
[  501.991474][T10740] tipc: Disabling bearer <udp:syz0>
[  501.997807][T10740] tipc: Left network mode
[  502.332963][T12332] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.351818][T12332] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.359237][T12332] bridge_slave_0: entered allmulticast mode
[  502.369608][T12332] bridge_slave_0: entered promiscuous mode
[  502.378111][T12349] chnl_net:caif_netlink_parms(): no params data found
[  502.396276][T12332] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.410678][T12332] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.419645][T12332] bridge_slave_1: entered allmulticast mode
[  502.432735][T12332] bridge_slave_1: entered promiscuous mode
[  502.541723][T10740] hsr_slave_0: left promiscuous mode
[  502.554704][ T5244] Bluetooth: hci3: command tx timeout
[  502.575982][T10740] hsr_slave_1: left promiscuous mode
[  502.613451][T10740] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  502.621012][T10740] batman_adv: batadv0: Removing interface: batadv_slave_0
[  502.637741][T10740] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  502.645378][T10740] batman_adv: batadv0: Removing interface: batadv_slave_1
[  502.672079][T10740] veth1_macvtap: left promiscuous mode
[  502.677665][T10740] veth0_macvtap: left promiscuous mode
[  502.683882][T10740] veth1_vlan: left promiscuous mode
[  502.690037][T10740] veth0_vlan: left promiscuous mode
[  502.947308][ T4649] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  503.117946][ T4649] usb 2-1: config index 0 descriptor too short (expected 39, got 36)
[  503.135223][ T4649] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  503.154333][ T4649] usb 2-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  503.163860][ T4649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.188509][ T4649] usb 2-1: config 0 descriptor??
[  503.260062][T10740] team0 (unregistering): Port device team_slave_1 removed
[  503.307106][T10740] team0 (unregistering): Port device team_slave_0 removed
[  503.594164][ T5244] Bluetooth: hci2: command tx timeout
[  503.726254][T12387] xt_hashlimit: overflow, try lower: 3/0
[  504.494206][T12396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1415'.
[  504.520038][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1415'.
[  504.631822][ T5244] Bluetooth: hci3: command tx timeout
[  504.650172][T12332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.736339][T12332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.778766][T12332] team0: Port device team_slave_0 added
[  504.824804][T12332] team0: Port device team_slave_1 added
[  505.017914][T12332] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.025436][T12332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.054571][T12332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.124007][T12349] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.124060][T12349] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.124193][T12349] bridge_slave_0: entered allmulticast mode
[  505.125028][T12349] bridge_slave_0: entered promiscuous mode
[  505.126757][T12349] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.126827][T12349] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.126949][T12349] bridge_slave_1: entered allmulticast mode
[  505.127853][T12349] bridge_slave_1: entered promiscuous mode
[  505.165505][T12349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  505.167760][T12349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  505.252150][T12349] team0: Port device team_slave_0 added
[  505.260410][T12332] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.315855][T12332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.342107][T12332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.348361][T12349] team0: Port device team_slave_1 added
[  505.430991][T12349] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.431048][T12349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.431080][T12349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.435834][T12349] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.435886][T12349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.435918][T12349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.537921][T12332] hsr_slave_0: entered promiscuous mode
[  505.541416][T12332] hsr_slave_1: entered promiscuous mode
[  505.546028][T12332] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  505.546108][T12332] Cannot create hsr debugfs directory
[  505.664086][T12349] hsr_slave_0: entered promiscuous mode
[  505.665199][T12349] hsr_slave_1: entered promiscuous mode
[  505.666392][T12349] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  505.666412][T12349] Cannot create hsr debugfs directory
[  505.692854][ T5244] Bluetooth: hci2: command tx timeout
[  505.850912][T10740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.022076][ T4649] usbhid 2-1:0.0: can't add hid device: -71
[  506.022185][ T4649] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  506.031312][ T4649] usb 2-1: USB disconnect, device number 75
[  506.206063][T10740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.487187][T10740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.712571][ T5244] Bluetooth: hci3: command tx timeout
[  506.740125][T10740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.232637][T10740] bridge_slave_1: left allmulticast mode
[  507.238361][T10740] bridge_slave_1: left promiscuous mode
[  507.261857][T10740] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.271146][T10740] bridge_slave_0: left allmulticast mode
[  507.282989][T10740] bridge_slave_0: left promiscuous mode
[  507.288770][T10740] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.505970][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  507.516110][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  507.533298][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  507.550435][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  507.582156][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  507.590210][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  507.751844][ T5233] Bluetooth: hci2: command tx timeout
[  507.807253][T12446] syz.0.1424 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  507.837171][T12446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1424'.
[  507.878789][   T29] audit: type=1400 audit(1728675486.884:193): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=12445 comm="syz.0.1424"
[  507.932690][ T5285] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  508.110770][ T5285] usb 5-1: Using ep0 maxpacket: 16
[  508.134707][ T5285] usb 5-1: too many configurations: 16, using maximum allowed: 8
[  508.185029][ T5285] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  508.227486][ T5285] usb 5-1: can't read configurations, error -22
[  508.262175][T10740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.281447][T10740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  508.306291][T10740] bond0 (unregistering): Released all slaves
[  508.401693][ T5285] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  508.601831][ T5285] usb 5-1: Using ep0 maxpacket: 16
[  508.615775][ T5285] usb 5-1: too many configurations: 16, using maximum allowed: 8
[  508.629881][ T5285] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  508.656153][ T5285] usb 5-1: can't read configurations, error -22
[  508.663494][ T5285] usb usb5-port1: attempt power cycle
[  508.785171][T10740] hsr_slave_0: left promiscuous mode
[  508.792198][ T5233] Bluetooth: hci3: command tx timeout
[  508.802552][T10740] hsr_slave_1: left promiscuous mode
[  508.808697][T10740] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  508.817297][T10740] batman_adv: batadv0: Removing interface: batadv_slave_0
[  508.828330][T10740] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  508.837274][T10740] batman_adv: batadv0: Removing interface: batadv_slave_1
[  508.877464][T10740] veth1_macvtap: left promiscuous mode
[  508.894640][T10740] veth0_macvtap: left promiscuous mode
[  508.909477][T10740] veth1_vlan: left promiscuous mode
[  508.920655][T10740] veth0_vlan: left promiscuous mode
[  509.011679][ T5285] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  509.062633][ T5285] usb 5-1: Using ep0 maxpacket: 16
[  509.068794][ T5285] usb 5-1: too many configurations: 16, using maximum allowed: 8
[  509.083999][ T5285] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  509.101933][ T5285] usb 5-1: can't read configurations, error -22
[  509.252326][ T5285] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  509.282370][ T5285] usb 5-1: Using ep0 maxpacket: 16
[  509.290059][ T5285] usb 5-1: too many configurations: 16, using maximum allowed: 8
[  509.317776][ T5285] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  509.327590][ T5285] usb 5-1: can't read configurations, error -22
[  509.349083][ T5285] usb usb5-port1: unable to enumerate USB device
[  509.640497][T10740] team0 (unregistering): Port device team_slave_1 removed
[  509.680871][T10740] team0 (unregistering): Port device team_slave_0 removed
[  509.681819][ T5233] Bluetooth: hci0: command tx timeout
[  509.841832][ T5233] Bluetooth: hci2: command tx timeout
[  510.115737][T12332] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  510.171647][T12332] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  510.196409][T12332] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  510.237824][T12332] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  510.250790][T12443] chnl_net:caif_netlink_parms(): no params data found
[  510.537449][T12443] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.546194][T12443] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.553585][T12443] bridge_slave_0: entered allmulticast mode
[  510.560562][T12443] bridge_slave_0: entered promiscuous mode
[  510.568854][T12443] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.576488][T12443] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.583867][T12443] bridge_slave_1: entered allmulticast mode
[  510.590572][T12443] bridge_slave_1: entered promiscuous mode
[  510.625666][T12443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  510.658007][T12443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  510.728872][T12443] team0: Port device team_slave_0 added
[  510.755163][T12443] team0: Port device team_slave_1 added
[  510.820769][T12443] batman_adv: batadv0: Adding interface: batadv_slave_0
[  510.828268][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  510.855395][T12443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  510.884862][T12443] batman_adv: batadv0: Adding interface: batadv_slave_1
[  510.892133][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  510.918764][T12443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  510.941769][ T5292] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  510.962230][T12332] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.969216][T12349] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  511.009023][T10740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.032579][T12349] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  511.042477][T12349] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  511.068518][T12349] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  511.097703][T12443] hsr_slave_0: entered promiscuous mode
[  511.105257][T12443] hsr_slave_1: entered promiscuous mode
[  511.111336][T12443] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  511.119501][T12443] Cannot create hsr debugfs directory
[  511.125624][ T5292] usb 5-1: Using ep0 maxpacket: 8
[  511.143107][ T5292] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  511.165107][ T5292] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  511.177652][T10740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.191320][ T5292] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21
[  511.202972][ T5292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.211015][ T5292] usb 5-1: Product: syz
[  511.217501][ T5292] usb 5-1: Manufacturer: syz
[  511.222413][ T5292] usb 5-1: SerialNumber: syz
[  511.230261][ T5292] usb 5-1: config 0 descriptor??
[  511.274074][T12332] 8021q: adding VLAN 0 to HW filter on device team0
[  511.308237][T10740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.351191][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.358355][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.446584][T12487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  511.448341][T10740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.468286][T12487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.494471][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.501656][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.734944][T12349] 8021q: adding VLAN 0 to HW filter on device bond0
[  511.752555][ T5233] Bluetooth: hci0: command tx timeout
[  511.788817][T10740] bridge_slave_1: left allmulticast mode
[  511.799041][T10740] bridge_slave_1: left promiscuous mode
[  511.810443][T10740] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.830885][T10740] bridge_slave_0: left allmulticast mode
[  511.840440][T10740] bridge_slave_0: left promiscuous mode
[  511.847704][T10740] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.573873][T10740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  512.589470][T10740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  512.607772][T10740] bond0 (unregistering): Released all slaves
[  512.714863][T12504] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1430'.
[  512.737878][T12504] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  512.754712][T12504] macsec1: entered allmulticast mode
[  512.760478][T12504] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  512.778455][T12504] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  512.791231][T12504] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  512.816009][T12332] 8021q: adding VLAN 0 to HW filter on device batadv0
[  512.957416][T12349] 8021q: adding VLAN 0 to HW filter on device team0
[  513.038001][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.045215][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state
[  513.139211][T10740] hsr_slave_0: left promiscuous mode
[  513.147564][T10740] hsr_slave_1: left promiscuous mode
[  513.159292][T10740] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  513.176967][T10740] batman_adv: batadv0: Removing interface: batadv_slave_0
[  513.189162][T10740] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  513.204134][T10740] batman_adv: batadv0: Removing interface: batadv_slave_1
[  513.247177][T10740] veth1_macvtap: left promiscuous mode
[  513.253688][T10740] veth0_macvtap: left promiscuous mode
[  513.259574][T10740] veth1_vlan: left promiscuous mode
[  513.268746][T10740] veth0_vlan: left promiscuous mode
[  513.606924][ T4649] usb 5-1: USB disconnect, device number 62
[  513.692701][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'.
[  513.709599][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'.
[  513.728538][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'.
[  513.739637][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'.
[  513.842538][ T5233] Bluetooth: hci0: command tx timeout
[  514.209526][T12537] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  514.247867][T10740] team0 (unregistering): Port device team_slave_1 removed
[  514.317612][T10740] team0 (unregistering): Port device team_slave_0 removed
[  515.212608][T12552] fuse: Unknown parameter 'ªç–šå'
[  515.497402][ T2498] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.504593][ T2498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  515.546015][T12332] veth0_vlan: entered promiscuous mode
[  515.624857][T12332] veth1_vlan: entered promiscuous mode
[  515.866392][T12332] veth0_macvtap: entered promiscuous mode
[  515.912112][ T5233] Bluetooth: hci0: command tx timeout
[  515.922010][T12443] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  515.979867][T12349] 8021q: adding VLAN 0 to HW filter on device batadv0
[  516.010896][T12443] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  516.046215][T12443] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  516.092693][T12332] veth1_macvtap: entered promiscuous mode
[  516.104373][T12443] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  516.216039][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.233903][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.276122][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.288781][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.305056][T12332] batman_adv: batadv0: Interface activated: batadv_slave_0
[  516.347927][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  516.367496][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.381594][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  516.406421][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.425634][T12332] batman_adv: batadv0: Interface activated: batadv_slave_1
[  516.440039][T12349] veth0_vlan: entered promiscuous mode
[  516.457955][T12332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.469298][T12332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.479095][T12332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.501581][T12332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  516.526262][T12349] veth1_vlan: entered promiscuous mode
[  516.687879][T12349] veth0_macvtap: entered promiscuous mode
[  516.725170][T12349] veth1_macvtap: entered promiscuous mode
[  516.745716][T12443] 8021q: adding VLAN 0 to HW filter on device bond0
[  516.759030][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.770474][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.782032][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.793075][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.803158][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.851549][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.880509][T12349] batman_adv: batadv0: Interface activated: batadv_slave_0
[  516.988690][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  517.011330][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.036280][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  517.051322][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.079354][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  517.093982][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.132984][T12349] batman_adv: batadv0: Interface activated: batadv_slave_1
[  517.174034][T12443] 8021q: adding VLAN 0 to HW filter on device team0
[  517.186580][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.200552][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.282892][T12349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  517.311771][ T5285] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  517.332545][T12349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  517.341311][T12349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  517.410772][T12349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  517.467707][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.474899][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  517.508130][ T5285] usb 5-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice= e.32
[  517.517485][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.540663][ T5285] usb 5-1: Product: syz
[  517.547878][ T5285] usb 5-1: Manufacturer: syz
[  517.548380][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.558563][ T5285] usb 5-1: SerialNumber: syz
[  517.559689][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  517.577227][ T5285] usb 5-1: config 0 descriptor??
[  517.596057][ T5285] pwc: Logitech/Cisco VT Camera webcam detected.
[  517.729050][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.787419][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.995290][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.035793][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.105637][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.106195][T12618] random: crng reseeded on system resumption
[  518.171649][T12443] 8021q: adding VLAN 0 to HW filter on device batadv0
[  518.189039][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.419234][T12443] veth0_vlan: entered promiscuous mode
[  518.478826][T12443] veth1_vlan: entered promiscuous mode
[  518.559288][T12625] ɶƣ0GC¦: entered promiscuous mode
[  518.682030][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'.
[  518.695350][T12443] veth0_macvtap: entered promiscuous mode
[  518.742450][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'.
[  518.785925][T12443] veth1_macvtap: entered promiscuous mode
[  518.887318][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.900397][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.911890][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.923096][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.935106][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.946241][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.957066][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.978609][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.999206][T12443] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.058786][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.069975][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.081417][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.106186][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.124369][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.137258][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.147556][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.160177][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.182349][T12443] batman_adv: batadv0: Interface activated: batadv_slave_1
[  519.206424][T12443] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  519.216025][T12443] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  519.227344][T12443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  519.236943][T12443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.261836][    T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  519.431888][    T9] usb 4-1: Using ep0 maxpacket: 8
[  519.484218][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  519.531665][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  519.551149][    T9] usb 4-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40
[  519.618724][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.636592][    T9] usb 4-1: Product: syz
[  519.647087][    T9] usb 4-1: Manufacturer: syz
[  519.651875][    T9] usb 4-1: SerialNumber: syz
[  519.668186][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.676596][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.809268][T10740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.844330][T10740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.275056][    T9] hid (null): report_id 2668810406 is invalid
[  520.284527][    T9] asus 0003:0B05:19B6.001A: report_id 2668810406 is invalid
[  520.298189][    T9] asus 0003:0B05:19B6.001A: item 0 4 1 8 parsing failed
[  520.315955][    T9] asus 0003:0B05:19B6.001A: Asus hid parse failed: -22
[  520.345482][    T9] asus 0003:0B05:19B6.001A: probe with driver asus failed with error -22
[  520.488217][T12647] loop2: detected capacity change from 0 to 7
[  520.502983][T12618] netlink: 'syz.3.1394': attribute type 9 has an invalid length.
[  520.524494][T12647] Dev loop2: unable to read RDB block 7
[  520.541845][T12618] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1394'.
[  520.552788][T12647]  loop2: unable to read partition table
[  520.611428][T12647] loop2: partition table beyond EOD, truncated
[  520.650015][T12647] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  520.665607][T12620] netlink: 'syz.3.1394': attribute type 9 has an invalid length.
[  520.701813][T12620] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1394'.
[  520.832488][    T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  520.918529][ T5285] pwc: Failed to set LED on/off time (-71)
[  520.936697][ T5285] pwc: send_video_command error -71
[  520.942372][ T5285] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  520.957737][ T5285] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  520.960231][T12652] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  520.981887][ T5285] usb 5-1: USB disconnect, device number 63
[  521.025623][    T9] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x6 has invalid wMaxPacketSize 0
[  521.037423][    T9] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0xB has invalid maxpacket 1032, setting to 1024
[  521.060280][    T9] usb 2-1: config 0 interface 0 altsetting 10 bulk endpoint 0xB has invalid maxpacket 1024
[  521.072144][T12654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1452'.
[  521.084751][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  521.093766][ T5473] usb 4-1: USB disconnect, device number 60
[  521.094523][    T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3
[  521.157241][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.176555][    T9] usb 2-1: Product: syz
[  521.180803][    T9] usb 2-1: Manufacturer: syz
[  521.201898][    T9] usb 2-1: SerialNumber: syz
[  521.242548][    T9] usb 2-1: config 0 descriptor??
[  521.257330][T12649] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  521.290399][    T9] ir_toy 2-1:0.0: required endpoints not found
[  521.615132][    T9] usb 2-1: USB disconnect, device number 76
[  522.510587][ T2911] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.629799][T12676] netlink: 'syz.3.1464': attribute type 2 has an invalid length.
[  522.672526][T12676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1464'.
[  523.144831][T12684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1467'.
[  525.009429][    T0] sched: DL replenish lagged too much
[  529.767936][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  529.780726][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  529.793572][ T2911] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.826594][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  529.850256][   T29] audit: type=1326 audit(1728675508.854:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12691 comm="syz.4.1470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5504f7dff9 code=0x0
[  529.872872][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  529.880887][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  529.892041][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  529.905596][T12693] mac80211_hwsim hwsim95 wlan1: entered allmulticast mode
[  529.957668][T12693] netlink: 'syz.4.1470': attribute type 10 has an invalid length.
[  533.134114][ T5244] Bluetooth: hci2: command tx timeout
[  533.488488][ T5244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  533.505002][ T5244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  533.593975][ T5244] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  533.631699][ T5244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  533.648968][ T5244] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  533.659611][ T5244] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  533.671265][T12693] mac80211_hwsim hwsim95 wlan1: left allmulticast mode
[  533.769210][T12693] team0: Port device wlan1 added
[  534.679105][T12718] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  534.742925][T12702] chnl_net:caif_netlink_parms(): no params data found
[  534.982513][T12694] chnl_net:caif_netlink_parms(): no params data found
[  535.192053][ T5244] Bluetooth: hci2: command tx timeout
[  535.636267][T12694] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.670774][T12694] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.690803][T12694] bridge_slave_0: entered allmulticast mode
[  535.700044][T12694] bridge_slave_0: entered promiscuous mode
[  535.716782][T12702] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.730171][T12702] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.751843][ T5244] Bluetooth: hci5: command tx timeout
[  535.761155][T12702] bridge_slave_0: entered allmulticast mode
[  535.788622][T12702] bridge_slave_0: entered promiscuous mode
[  536.066751][T12741] fuse: Bad value for 'fd'
[  537.176466][T12744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1479'.
[  537.271894][ T5244] Bluetooth: hci2: command tx timeout
[  537.831771][ T5244] Bluetooth: hci5: command tx timeout
[  539.351835][ T5244] Bluetooth: hci2: command tx timeout
[  539.911799][ T5244] Bluetooth: hci5: command tx timeout
[  541.992065][ T5244] Bluetooth: hci5: command tx timeout
[  545.396820][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  545.406423][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  545.419816][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  545.428128][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  545.438357][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  545.446250][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  546.886991][ T5244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  546.897017][ T5244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  546.911786][ T5244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  546.922438][ T5244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  546.931165][ T5244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  546.939143][ T5244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  547.511706][ T5244] Bluetooth: hci3: command tx timeout
[  549.031727][ T5244] Bluetooth: hci6: command tx timeout
[  549.592856][ T5244] Bluetooth: hci3: command tx timeout
[  551.114100][ T5244] Bluetooth: hci6: command tx timeout
[  551.316549][ T5233] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  551.339689][ T5233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  551.348439][ T5233] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  551.362784][ T5233] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  551.373690][ T5233] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  551.382738][ T5233] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  551.671648][ T5244] Bluetooth: hci3: command tx timeout
[  553.191965][ T5244] Bluetooth: hci6: command tx timeout
[  553.431799][ T5244] Bluetooth: hci7: command tx timeout
[  553.751761][ T5244] Bluetooth: hci3: command tx timeout
[  555.271871][ T5244] Bluetooth: hci6: command tx timeout
[  555.519920][ T5244] Bluetooth: hci7: command tx timeout
[  557.595373][ T5244] Bluetooth: hci7: command tx timeout
[  559.671746][ T5244] Bluetooth: hci7: command tx timeout
[  563.285365][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  563.291879][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  584.628975][ T5233] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  584.651782][ T5233] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  584.659815][ T5233] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  584.667885][ T5233] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  584.675590][ T5233] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  584.682997][ T5233] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  586.711796][ T5233] Bluetooth: hci8: command tx timeout
[  588.801796][ T5233] Bluetooth: hci8: command tx timeout
[  590.871785][ T5233] Bluetooth: hci8: command tx timeout
[  590.959517][ T5233] Bluetooth: hci4: command 0x0406 tx timeout
[  592.951622][ T5244] Bluetooth: hci8: command tx timeout
[  593.841444][ T5233] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  593.854547][ T5233] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  593.873659][ T5233] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  593.882587][ T5233] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  593.891023][ T5233] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  593.898403][ T5233] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  595.991629][ T5233] Bluetooth: hci9: command tx timeout
[  598.071712][ T5233] Bluetooth: hci9: command tx timeout
[  600.151692][ T5233] Bluetooth: hci9: command tx timeout
[  601.199002][ T5233] Bluetooth: hci1: command 0x0406 tx timeout
[  602.231785][ T5244] Bluetooth: hci9: command tx timeout
[  605.953042][ T5233] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  605.966677][ T5233] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  605.974748][ T5233] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  605.993358][ T5233] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  606.001167][ T5233] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  606.011764][ T5233] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  607.382664][ T5244] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  607.402072][ T5244] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  607.410257][ T5244] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  607.418945][ T5244] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  607.426963][ T5244] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  607.435191][ T5244] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  608.071734][ T5244] Bluetooth: hci10: command tx timeout
[  609.512874][ T5244] Bluetooth: hci11: command tx timeout
[  610.151662][ T5244] Bluetooth: hci10: command tx timeout
[  611.591802][ T5244] Bluetooth: hci11: command tx timeout
[  611.862223][ T5233] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  611.872532][ T5233] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  611.881440][ T5233] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  611.890329][ T5233] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  611.898837][ T5233] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  611.912271][ T5233] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  612.231820][ T5233] Bluetooth: hci10: command tx timeout
[  613.671617][ T5233] Bluetooth: hci11: command tx timeout
[  613.991822][ T5233] Bluetooth: hci12: command tx timeout
[  614.313001][ T5233] Bluetooth: hci10: command tx timeout
[  615.751920][ T5244] Bluetooth: hci11: command tx timeout
[  616.071976][ T5233] Bluetooth: hci12: command tx timeout
[  618.151830][ T5233] Bluetooth: hci12: command tx timeout
[  620.240138][ T5233] Bluetooth: hci12: command tx timeout
[  624.730183][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  624.736653][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  631.930800][ T5233] Bluetooth: hci0: command 0x0406 tx timeout
[  644.962581][ T5233] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  644.981342][ T5233] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  644.990359][ T5233] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  644.998801][ T5233] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  645.007317][ T5233] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  645.015036][ T5233] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  647.111846][ T5233] Bluetooth: hci13: command tx timeout
[  649.191768][ T5233] Bluetooth: hci13: command tx timeout
[  651.271660][ T5233] Bluetooth: hci13: command tx timeout
[  652.402416][ T5233] Bluetooth: hci2: command 0x0406 tx timeout
[  653.351666][ T5244] Bluetooth: hci13: command tx timeout
[  654.389214][ T5233] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  654.399389][ T5233] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  654.409071][ T5233] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  654.425599][ T5233] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  654.433493][ T5233] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  654.441002][ T5233] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  656.551722][ T5233] Bluetooth: hci14: command tx timeout
[  657.520187][ T5233] Bluetooth: hci5: command 0x0406 tx timeout
[  658.631739][ T5244] Bluetooth: hci14: command tx timeout
[  660.711953][ T5244] Bluetooth: hci14: command tx timeout
[  662.791681][ T5244] Bluetooth: hci14: command tx timeout
[  667.187300][T12813] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  667.207626][T12813] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  667.216857][T12813] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  667.225471][T12813] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  667.233683][T12813] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  667.241181][T12813] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  667.751691][T12813] Bluetooth: hci3: command 0x0406 tx timeout
[  668.175975][T12813] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  668.191695][T12813] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  668.203761][T12813] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  668.212740][T12813] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  668.220541][T12813] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  668.228179][T12813] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  669.351829][ T5233] Bluetooth: hci15: command tx timeout
[  670.315656][ T5233] Bluetooth: hci16: command tx timeout
[  671.431755][ T5233] Bluetooth: hci15: command tx timeout
[  672.400169][ T5233] Bluetooth: hci16: command tx timeout
[  672.871664][ T5233] Bluetooth: hci6: command 0x0406 tx timeout
[  672.926363][T12813] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  672.951793][T12813] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  672.960729][T12813] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  672.969290][T12813] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  672.977170][T12813] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  672.985123][T12813] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  673.511675][T12813] Bluetooth: hci15: command tx timeout
[  674.471714][T12813] Bluetooth: hci16: command tx timeout
[  675.031694][T12813] Bluetooth: hci17: command tx timeout
[  675.601833][T12813] Bluetooth: hci15: command tx timeout
[  676.551668][T12813] Bluetooth: hci16: command tx timeout
[  677.111652][T12813] Bluetooth: hci17: command tx timeout
[  677.997637][T12813] Bluetooth: hci7: command 0x0406 tx timeout
[  679.191805][ T5233] Bluetooth: hci17: command tx timeout
[  679.753881][   T30] INFO: task kworker/u8:8:2911 blocked for more than 143 seconds.
[  679.771026][   T30]       Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
[  679.791477][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  679.800495][   T30] task:kworker/u8:8    state:D stack:20816 pid:2911  tgid:2911  ppid:2      flags:0x00004000
[  679.870575][   T30] Workqueue: netns cleanup_net
[  679.931661][   T30] Call Trace:
[  679.935036][   T30]  <TASK>
[  679.938016][   T30]  __schedule+0x1895/0x4b30
[  680.000637][   T30]  ? __pfx___schedule+0x10/0x10
[  680.024422][   T30]  ? __pfx_lock_release+0x10/0x10
[  680.029583][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  680.043811][   T30]  ? kthread_data+0x52/0xd0
[  680.048434][   T30]  ? schedule+0x90/0x320
[  680.060626][   T30]  ? wq_worker_sleeping+0x66/0x240
[  680.068808][   T30]  ? schedule+0x90/0x320
[  680.080584][   T30]  schedule+0x14b/0x320
[  680.087583][   T30]  schedule_preempt_disabled+0x13/0x30
[  680.100307][   T30]  __mutex_lock+0x6a7/0xd70
[  680.108132][   T30]  ? wake_up_q+0xdc/0x120
[  680.119182][   T30]  ? __mutex_lock+0x52a/0xd70
[  680.128864][   T30]  ? netdev_run_todo+0x89e/0x1000
[  680.140283][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  680.149207][   T30]  ? __init_swait_queue_head+0xae/0x150
[  680.161617][   T30]  netdev_run_todo+0x89e/0x1000
[  680.166555][   T30]  ? __pfx_netdev_run_todo+0x10/0x10
[  680.181788][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  680.187170][   T30]  ? kfree+0x1a0/0x440
[  680.191293][   T30]  ? nsim_destroy+0x337/0x5c0
[  680.207073][   T30]  nsim_destroy+0x361/0x5c0
[  680.215008][   T30]  __nsim_dev_port_del+0x14b/0x1b0
[  680.220207][   T30]  nsim_dev_reload_destroy+0x28a/0x490
[  680.231838][   T30]  nsim_dev_reload_down+0x98/0xd0
[  680.236952][   T30]  devlink_reload+0x18b/0x870
[  680.253182][   T30]  ? __pfx_devlink_reload+0x10/0x10
[  680.258497][   T30]  devlink_pernet_pre_exit+0x1f3/0x440
[  680.270357][   T30]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  680.280161][   T30]  ? class_remove_file_ns+0x121/0x160
[  680.291623][   T30]  cleanup_net+0x615/0xcc0
[  680.296222][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  680.301227][   T30]  ? process_scheduled_works+0x976/0x1850
[  680.317579][   T30]  process_scheduled_works+0xa63/0x1850
[  680.328738][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  680.338868][   T30]  ? assign_work+0x364/0x3d0
[  680.348902][   T30]  worker_thread+0x870/0xd30
[  680.358245][   T30]  ? __kthread_parkme+0x169/0x1d0
[  680.368429][   T30]  ? __pfx_worker_thread+0x10/0x10
[  680.377589][   T30]  kthread+0x2f0/0x390
[  680.389266][   T30]  ? __pfx_worker_thread+0x10/0x10
[  680.398960][   T30]  ? __pfx_kthread+0x10/0x10
[  680.408759][   T30]  ret_from_fork+0x4b/0x80
[  680.417323][   T30]  ? __pfx_kthread+0x10/0x10
[  680.426968][   T30]  ret_from_fork_asm+0x1a/0x30
[  680.436240][   T30]  </TASK>
[  680.439466][   T30] INFO: task kworker/u8:9:2944 blocked for more than 144 seconds.
[  680.454028][   T30]       Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
[  680.469865][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  680.479641][   T30] task:kworker/u8:9    state:D stack:20848 pid:2944  tgid:2944  ppid:2      flags:0x00004000
[  680.504043][   T30] Workqueue: events_unbound linkwatch_event
[  680.510041][   T30] Call Trace:
[  680.520267][   T30]  <TASK>
[  680.527431][   T30]  __schedule+0x1895/0x4b30
[  680.537588][   T30]  ? __pfx___schedule+0x10/0x10
[  680.547053][   T30]  ? __pfx_lock_release+0x10/0x10
[  680.558301][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  680.568053][   T30]  ? kthread_data+0x52/0xd0
[  680.577622][   T30]  ? schedule+0x90/0x320
[  680.588445][   T30]  ? wq_worker_sleeping+0x66/0x240
[  680.598786][   T30]  ? schedule+0x90/0x320
[  680.607280][   T30]  schedule+0x14b/0x320
[  680.616495][   T30]  schedule_preempt_disabled+0x13/0x30
[  680.626146][   T30]  __mutex_lock+0x6a7/0xd70
[  680.630745][   T30]  ? __mutex_lock+0x52a/0xd70
[  680.641780][   T30]  ? linkwatch_event+0xe/0x60
[  680.646651][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  680.664038][   T30]  ? process_scheduled_works+0x976/0x1850
[  680.669873][   T30]  linkwatch_event+0xe/0x60
[  680.681247][   T30]  process_scheduled_works+0xa63/0x1850
[  680.690606][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  680.701574][   T30]  ? assign_work+0x364/0x3d0
[  680.706352][   T30]  worker_thread+0x870/0xd30
[  680.711033][   T30]  ? __kthread_parkme+0x169/0x1d0
[  680.726193][   T30]  ? __pfx_worker_thread+0x10/0x10
[  680.736704][   T30]  kthread+0x2f0/0x390
[  680.741049][   T30]  ? __pfx_worker_thread+0x10/0x10
[  680.750902][   T30]  ? __pfx_kthread+0x10/0x10
[  680.760632][   T30]  ret_from_fork+0x4b/0x80
[  680.770950][   T30]  ? __pfx_kthread+0x10/0x10
[  680.779511][   T30]  ret_from_fork_asm+0x1a/0x30
[  680.789555][   T30]  </TASK>
[  680.795583][   T30] INFO: task syz-executor:12694 blocked for more than 144 seconds.
[  680.821548][   T30]       Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
[  680.829284][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  680.846763][   T30] task:syz-executor    state:D stack:21728 pid:12694 tgid:12694 ppid:1      flags:0x00000004
[  680.868408][   T30] Call Trace:
[  680.876878][   T30]  <TASK>
[  680.879901][   T30]  __schedule+0x1895/0x4b30
[  680.891506][   T30]  ? __pfx___schedule+0x10/0x10
[  680.896642][   T30]  ? __pfx_lock_release+0x10/0x10
[  680.910426][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  680.916419][   T30]  ? schedule+0x90/0x320
[  680.920823][   T30]  schedule+0x14b/0x320
[  680.936193][   T30]  schedule_preempt_disabled+0x13/0x30
[  680.946928][   T30]  __mutex_lock+0x6a7/0xd70
[  680.959172][   T30]  ? __mutex_lock+0x52a/0xd70
[  680.969744][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  680.979149][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  680.989767][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  681.000434][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  681.015112][   T30]  ? __lock_acquire+0x1384/0x2050
[  681.020237][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  681.031726][   T30]  netlink_rcv_skb+0x1e3/0x430
[  681.036585][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  681.053427][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  681.058840][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  681.072881][   T30]  netlink_unicast+0x7f6/0x990
[  681.077859][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  681.098584][   T30]  ? __virt_addr_valid+0x183/0x530
[  681.111657][   T30]  ? __check_object_size+0x48e/0x900
[  681.117064][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  681.136826][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.145614][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  681.150719][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.161647][   T30]  __sock_sendmsg+0x221/0x270
[  681.166422][   T30]  __sys_sendto+0x39b/0x4f0
[  681.180330][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  681.187123][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  681.201566][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  681.208040][   T30]  __x64_sys_sendto+0xde/0x100
[  681.220881][   T30]  do_syscall_64+0xf3/0x230
[  681.225970][   T30]  ? clear_bhb_loop+0x35/0x90
[  681.231090][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.241569][   T30] RIP: 0033:0x7fc5e197fe8c
[  681.246071][   T30] RSP: 002b:00007fc5e1c5f630 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  681.265940][   T30] RAX: ffffffffffffffda RBX: 00007fc5e2664620 RCX: 00007fc5e197fe8c
[  681.281624][ T5233] Bluetooth: hci17: command tx timeout
[  681.289277][   T30] RDX: 0000000000000028 RSI: 00007fc5e2664670 RDI: 0000000000000003
[  681.308382][   T30] RBP: 0000000000000000 R08: 00007fc5e1c5f684 R09: 000000000000000c
[  681.321018][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  681.335812][   T30] R13: 0000000000000000 R14: 00007fc5e2664670 R15: 0000000000000000
[  681.348307][   T30]  </TASK>
[  681.356849][   T30] INFO: task syz-executor:12702 blocked for more than 144 seconds.
[  681.368485][   T30]       Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
[  681.387099][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  681.398632][   T30] task:syz-executor    state:D stack:21728 pid:12702 tgid:12702 ppid:1      flags:0x00000004
[  681.418208][   T30] Call Trace:
[  681.423131][   T30]  <TASK>
[  681.426141][   T30]  __schedule+0x1895/0x4b30
[  681.430747][   T30]  ? __pfx___schedule+0x10/0x10
[  681.442176][   T30]  ? __pfx_lock_release+0x10/0x10
[  681.447352][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  681.463226][   T30]  ? schedule+0x90/0x320
[  681.467561][   T30]  schedule+0x14b/0x320
[  681.480767][   T30]  schedule_preempt_disabled+0x13/0x30
[  681.486875][   T30]  __mutex_lock+0x6a7/0xd70
[  681.499915][   T30]  ? __mutex_lock+0x52a/0xd70
[  681.505250][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  681.511212][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  681.521604][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  681.526619][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  681.540700][   T30]  ? __lock_acquire+0x1384/0x2050
[  681.546241][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  681.560339][   T30]  netlink_rcv_skb+0x1e3/0x430
[  681.565714][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  681.571265][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  681.587849][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  681.595950][   T30]  netlink_unicast+0x7f6/0x990
[  681.600809][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  681.611944][   T30]  ? __virt_addr_valid+0x183/0x530
[  681.617137][   T30]  ? __check_object_size+0x48e/0x900
[  681.631229][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  681.636519][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.651699][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  681.656752][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.670282][   T30]  __sock_sendmsg+0x221/0x270
[  681.676105][   T30]  __sys_sendto+0x39b/0x4f0
[  681.680686][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  681.691544][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  681.697618][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  681.714811][   T30]  __x64_sys_sendto+0xde/0x100
[  681.719680][   T30]  do_syscall_64+0xf3/0x230
[  681.731198][   T30]  ? clear_bhb_loop+0x35/0x90
[  681.738827][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.750953][   T30] RIP: 0033:0x7f407717fe8c
[  681.758270][   T30] RSP: 002b:00007f407745f630 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  681.771583][   T30] RAX: ffffffffffffffda RBX: 00007f4077e64620 RCX: 00007f407717fe8c
[  681.779683][   T30] RDX: 0000000000000028 RSI: 00007f4077e64670 RDI: 0000000000000003
[  681.797050][   T30] RBP: 0000000000000000 R08: 00007f407745f684 R09: 000000000000000c
[  681.809744][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  681.821551][   T30] R13: 0000000000000000 R14: 00007f4077e64670 R15: 0000000000000000
[  681.829629][   T30]  </TASK>
[  681.843715][   T30] INFO: task syz.4.1475:12714 blocked for more than 145 seconds.
[  681.859043][   T30]       Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
[  681.868453][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  681.881611][   T30] task:syz.4.1475      state:D stack:26592 pid:12714 tgid:12713 ppid:12000  flags:0x00004006
[  681.903592][   T30] Call Trace:
[  681.906938][   T30]  <TASK>
[  681.909912][   T30]  __schedule+0x1895/0x4b30
[  681.926666][   T30]  ? __pfx___schedule+0x10/0x10
[  681.934385][   T30]  ? __pfx_lock_release+0x10/0x10
[  681.939490][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  681.951393][   T30]  ? schedule+0x90/0x320
[  681.955961][   T30]  schedule+0x14b/0x320
[  681.960181][   T30]  schedule_preempt_disabled+0x13/0x30
[  681.977016][   T30]  __mutex_lock+0x6a7/0xd70
[  681.984311][   T30]  ? __mutex_lock+0x52a/0xd70
[  681.989857][   T30]  ? ppp_release+0x87/0x1f0
[  682.001179][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  682.009153][   T30]  ppp_release+0x87/0x1f0
[  682.020948][   T30]  ? __pfx_ppp_release+0x10/0x10
[  682.030274][   T30]  __fput+0x23f/0x880
[  682.040881][   T30]  task_work_run+0x24f/0x310
[  682.048344][   T30]  ? __pfx_task_work_run+0x10/0x10
[  682.059834][   T30]  get_signal+0x15e8/0x1740
[  682.067211][   T30]  ? kick_process+0xef/0x160
[  682.081019][   T30]  ? __pfx_get_signal+0x10/0x10
[  682.086107][   T30]  arch_do_signal_or_restart+0x96/0x860
[  682.101743][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  682.107999][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  682.123132][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  682.128984][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  682.141981][   T30]  do_syscall_64+0x100/0x230
[  682.146658][   T30]  ? clear_bhb_loop+0x35/0x90
[  682.151407][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.169228][   T30] RIP: 0033:0x7f5504f7dff9
[  682.183128][   T30] RSP: 002b:00007f5505e05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  682.194205][   T30] RAX: fffffffffffffe00 RBX: 00007f5505135f80 RCX: 00007f5504f7dff9
[  682.209378][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  682.221120][   T30] RBP: 00007f5504ff0296 R08: 0000000000000000 R09: 0000000000000000
[  682.237157][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  682.250287][   T30] R13: 0000000000000000 R14: 00007f5505135f80 R15: 00007f550525fa28
[  682.267238][   T30]  </TASK>
[  682.270412][   T30] INFO: task syz.4.1475:12720 blocked for more than 145 seconds.
[  682.281168][   T30]       Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
[  682.299457][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  682.308654][   T30] task:syz.4.1475      state:D stack:23088 pid:12720 tgid:12713 ppid:12000  flags:0x00004002
[  682.333190][   T30] Call Trace:
[  682.336557][   T30]  <TASK>
[  682.339535][   T30]  __schedule+0x1895/0x4b30
[  682.354172][   T30]  ? __pfx___schedule+0x10/0x10
[  682.359128][   T30]  ? __pfx_lock_release+0x10/0x10
[  682.372910][   T30]  ? schedule+0x90/0x320
[  682.377258][   T30]  schedule+0x14b/0x320
[  682.389049][   T30]  schedule_timeout+0xb0/0x310
[  682.395621][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  682.409218][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  682.419018][   T30]  ? wait_for_completion+0x2fe/0x620
[  682.434496][   T30]  ? wait_for_completion+0x2fe/0x620
[  682.439891][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  682.450435][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  682.460005][   T30]  ? wait_for_completion+0x2fe/0x620
[  682.470970][   T30]  wait_for_completion+0x355/0x620
[  682.480269][   T30]  ? __pfx_wait_for_completion+0x10/0x10
[  682.491570][   T30]  ? __flush_work+0xe7/0xc50
[  682.496239][   T30]  __flush_work+0xa37/0xc50
[  682.509427][   T30]  ? __flush_work+0xe7/0xc50
[  682.514455][   T30]  ? __pfx___flush_work+0x10/0x10
[  682.519571][   T30]  ? __pfx_wq_barrier_func+0x10/0x10
[  682.534934][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  682.541374][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  682.556035][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  682.561348][   T30]  unregister_netdevice_many_notify+0x87b/0x1da0
[  682.574890][   T30]  ? __mutex_lock+0x9a1/0xd70
[  682.579653][   T30]  ? do_raw_spin_lock+0x14f/0x370
[  682.591563][   T30]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  682.603819][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  682.609129][   T30]  ? __mutex_lock+0x9ab/0xd70
[  682.623762][   T30]  ? __mutex_lock+0x52a/0xd70
[  682.629427][   T30]  unregister_netdevice_queue+0x303/0x370
[  682.645128][   T30]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  682.656800][   T30]  ? __pfx_call_rcu+0x10/0x10
[  682.665661][   T30]  ppp_release+0xed/0x1f0
[  682.670101][   T30]  ? __pfx_ppp_release+0x10/0x10
[  682.680536][   T30]  __fput+0x23f/0x880
[  682.690224][   T30]  task_work_run+0x24f/0x310
[  682.701073][   T30]  ? __pfx_task_work_run+0x10/0x10
[  682.710834][   T30]  ? switch_task_namespaces+0xe4/0x110
[  682.721828][   T30]  do_exit+0xa2f/0x28e0
[  682.726086][   T30]  ? __pfx_do_exit+0x10/0x10
[  682.730737][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  682.745656][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  682.759153][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  682.769781][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  682.780373][   T30]  do_group_exit+0x207/0x2c0
[  682.788930][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  682.799422][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  682.808612][   T30]  get_signal+0x16a3/0x1740
[  682.822507][   T30]  ? __pfx_get_signal+0x10/0x10
[  682.827466][   T30]  arch_do_signal_or_restart+0x96/0x860
[  682.841991][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  682.848247][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  682.863467][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  682.869307][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  682.883615][   T30]  do_syscall_64+0x100/0x230
[  682.888312][   T30]  ? clear_bhb_loop+0x35/0x90
[  682.901105][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.907452][   T30] RIP: 0033:0x7f5504f7dff9
[  682.921553][   T30] RSP: 002b:00007f5505dc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  682.930085][   T30] RAX: 00000000000d1000 RBX: 00007f5505136130 RCX: 00007f5504f7dff9
[  682.950264][   T30] RDX: 000000000208e24b RSI: 0000000020000100 RDI: 0000000000000007
[  682.961679][   T30] RBP: 00007f5504ff0296 R08: 0000000000000000 R09: 0000000000000000
[  682.969752][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  682.986841][   T30] R13: 0000000000000000 R14: 00007f5505136130 R15: 00007f550525fa28
[  682.998049][   T30]  </TASK>
[  683.001230][   T30] INFO: task syz.1.1478:12736 blocked for more than 146 seconds.
[  683.011564][   T30]       Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
[  683.031073][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  683.042067][   T30] task:syz.1.1478      state:D stack:26368 pid:12736 tgid:12735 ppid:12443  flags:0x00000004
[  683.063391][   T30] Call Trace:
[  683.066770][   T30]  <TASK>
[  683.069760][   T30]  __schedule+0x1895/0x4b30
[  683.081591][   T30]  ? __pfx___schedule+0x10/0x10
[  683.086564][   T30]  ? __pfx_lock_release+0x10/0x10
[  683.101787][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  683.107351][   T30]  ? schedule+0x90/0x320
[  683.121538][   T30]  schedule+0x14b/0x320
[  683.125823][   T30]  schedule_preempt_disabled+0x13/0x30
[  683.131359][   T30]  __mutex_lock+0x6a7/0xd70
[  683.146582][   T30]  ? __mutex_lock+0x52a/0xd70
[  683.151393][   T30]  ? do_ipv6_setsockopt+0x9e4/0x3630
[  683.167252][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  683.176556][   T30]  ? __might_fault+0xc6/0x120
[  683.181321][   T30]  do_ipv6_setsockopt+0x9e4/0x3630
[  683.192735][   T30]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  683.198369][   T30]  ? schedule+0x90/0x320
[  683.214193][   T30]  ? schedule+0x155/0x320
[  683.219401][   T30]  ? aa_label_sk_perm+0x4f3/0x6c0
[  683.234419][   T30]  ? futex_wait_queue+0x14e/0x1d0
[  683.239628][   T30]  ? __futex_wait+0x287/0x320
[  683.254900][   T30]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  683.260372][   T30]  ? __pfx___might_resched+0x10/0x10
[  683.271282][   T30]  ? __lock_acquire+0x1384/0x2050
[  683.281628][   T30]  ipv6_setsockopt+0x5d/0x170
[  683.286397][   T30]  rawv6_setsockopt+0x327/0x740
[  683.291304][   T30]  ? __pfx_aa_sk_perm+0x10/0x10
[  683.304010][   T30]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  683.309554][   T30]  ? __fget_files+0x29/0x470
[  683.321349][   T30]  ? aa_sock_opt_perm+0x79/0x120
[  683.330254][   T30]  ? sock_common_setsockopt+0x37/0xc0
[  683.340784][   T30]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  683.358270][   T30]  do_sock_setsockopt+0x3af/0x720
[  683.367645][   T30]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  683.378678][   T30]  ? __fget_files+0x29/0x470
[  683.387359][   T30]  ? __fget_files+0x3f3/0x470
[  683.397360][   T30]  ? __fget_files+0x29/0x470
[  683.405985][   T30]  __sys_setsockopt+0x1a2/0x250
[  683.410934][   T30]  __x64_sys_setsockopt+0xb5/0xd0
[  683.421544][   T30]  do_syscall_64+0xf3/0x230
[  683.435839][   T30]  ? clear_bhb_loop+0x35/0x90
[  683.440632][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.456497][   T30] RIP: 0033:0x7f405477dff9
[  683.461110][   T30] RSP: 002b:00007f40554df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  683.478976][   T30] RAX: ffffffffffffffda RBX: 00007f4054935f80 RCX: 00007f405477dff9
[  683.490151][   T30] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000005
[  683.505714][   T30] RBP: 00007f40547f0296 R08: 000000000000005c R09: 0000000000000000
[  683.517828][   T30] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[  683.531616][   T30] R13: 0000000000000000 R14: 00007f4054935f80 R15: 00007f4054a5fa28
[  683.539788][   T30]  </TASK>
[  683.553325][   T30] 
[  683.553325][   T30] Showing all locks held in the system:
[  683.561160][   T30] 3 locks held by kworker/0:1/9:
[  683.572080][   T30]  #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  683.593148][   T30]  #1: ffffc900000e7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  683.611846][   T30]  #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0
[  683.634404][   T30] 1 lock held by khungtaskd/30:
[  683.639334][   T30]  #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  683.656897][   T30] 6 locks held by kworker/u8:8/2911:
[  683.666717][   T30]  #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  683.686776][   T30]  #1: ffffc900099efd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  683.707909][   T30]  #2: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  683.719049][   T30]  #3: ffff8880246d00e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440
[  683.738329][   T30]  #4: ffff8880246d5250 (&devlink->lock_key#49){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440
[  683.757392][   T30]  #5: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x89e/0x1000
[  683.769290][   T30] 3 locks held by kworker/u8:9/2944:
[  683.780831][   T30]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  683.801218][   T30]  #1: ffffc900098ffd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  683.823029][   T30]  #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  683.841836][   T30] 3 locks held by kworker/u8:11/3011:
[  683.847280][   T30]  #0: ffff88814b527148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  683.869393][   T30]  #1: ffffc90009b2fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  683.891512][   T30]  #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[  683.901174][   T30] 2 locks held by getty/4990:
[  683.914240][   T30]  #0: ffff88802ebcc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  683.931160][   T30]  #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  683.952833][   T30] 3 locks held by kworker/0:6/5289:
[  683.958113][   T30] 1 lock held by syz-executor/12694:
[  683.972937][   T30]  #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  683.988800][   T30] 1 lock held by syz-executor/12702:
[  683.999548][   T30]  #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  684.017889][   T30] 1 lock held by syz.4.1475/12714:
[  684.026881][   T30]  #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x87/0x1f0
[  684.041602][   T30] 2 locks held by syz.4.1475/12720:
[  684.046874][   T30]  #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x87/0x1f0
[  684.064975][   T30]  #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0
[  684.085459][   T30] 1 lock held by syz.1.1478/12736:
[  684.090648][   T30]  #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630
[  684.110755][   T30] 1 lock held by syz.0.1482/12752:
[  684.116109][   T30]  #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  684.131560][   T30] 2 locks held by syz-executor/12758:
[  684.136995][   T30]  #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  684.166011][   T30]  #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  684.182364][   T30] 2 locks held by syz-executor/12762:
[  684.187804][   T30]  #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  684.201998][   T30]  #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  684.223940][   T30] 2 locks held by syz-executor/12767:
[  684.229386][   T30]  #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  684.252137][   T30]  #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  684.267524][   T30] 2 locks held by syz-executor/12772:
[  684.277728][   T30]  #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  684.292856][   T30]  #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  684.309544][   T30] 2 locks held by syz-executor/12777:
[  684.321715][   T30]  #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  684.331265][   T30]  #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  684.354837][   T30] 2 locks held by syz-executor/12783:
[  684.360284][   T30]  #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  684.381095][   T30]  #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  684.392911][   T30] 2 locks held by syz-executor/12786:
[  684.398337][   T30]  #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  684.418085][   T30]  #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  684.431111][   T30] 2 locks held by syz-executor/12790:
[  684.441554][   T30]  #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  684.459948][   T30]  #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  684.482106][   T30] 2 locks held by syz-executor/12801:
[  684.487550][   T30]  #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  684.505929][   T30]  #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  684.520188][   T30] 2 locks held by syz-executor/12808:
[  684.531297][   T30]  #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  684.541041][   T30]  #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  684.562614][   T30] 2 locks held by syz-executor/12814:
[  684.568086][   T30]  #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  684.586076][   T30]  #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  684.600720][   T30] 2 locks held by syz-executor/12818:
[  684.616656][   T30]  #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  684.636261][   T30]  #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  684.650552][   T30] 2 locks held by syz-executor/12823:
[  684.661621][   T30]  #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  684.671182][   T30]  #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  684.691223][   T30] 
[  684.693997][   T30] =============================================
[  684.693997][   T30] 
[  684.712019][   T30] NMI backtrace for cpu 1
[  684.716418][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
[  684.726979][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  684.737189][   T30] Call Trace:
[  684.740514][   T30]  <TASK>
[  684.743502][   T30]  dump_stack_lvl+0x241/0x360
[  684.748240][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  684.753485][   T30]  ? __pfx__printk+0x10/0x10
[  684.758149][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  684.763145][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  684.768649][   T30]  ? _printk+0xd5/0x120
[  684.772868][   T30]  ? __pfx__printk+0x10/0x10
[  684.777534][   T30]  ? __wake_up_klogd+0xcc/0x110
[  684.782455][   T30]  ? __pfx__printk+0x10/0x10
[  684.787113][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  684.792193][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  684.798233][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  684.804365][   T30]  watchdog+0xff4/0x1040
[  684.808677][   T30]  ? watchdog+0x1ea/0x1040
[  684.813193][   T30]  ? __pfx_watchdog+0x10/0x10
[  684.817931][   T30]  kthread+0x2f0/0x390
[  684.822049][   T30]  ? __pfx_watchdog+0x10/0x10
[  684.826801][   T30]  ? __pfx_kthread+0x10/0x10
[  684.831435][   T30]  ret_from_fork+0x4b/0x80
[  684.835903][   T30]  ? __pfx_kthread+0x10/0x10
[  684.840543][   T30]  ret_from_fork_asm+0x1a/0x30
[  684.845381][   T30]  </TASK>
[  684.849223][   T30] Sending NMI from CPU 1 to CPUs 0:
[  684.854830][    C0] NMI backtrace for cpu 0
[  684.854847][    C0] CPU: 0 UID: 0 PID: 5289 Comm: kworker/0:6 Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
[  684.854872][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  684.854885][    C0] Workqueue: events nsim_dev_trap_report_work
[  684.854915][    C0] RIP: 0010:deref_stack_reg+0x3/0x210
[  684.854938][    C0] Code: e8 c2 0b bd 00 e9 9d fe ff ff e8 88 0a 84 0a 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 41 55 41 54 53 48 83 ec 20 48 89 54 24 18 49 89 f0 49 89 fe
[  684.854956][    C0] RSP: 0018:ffffc90000006b98 EFLAGS: 00000283
[  684.854973][    C0] RAX: fffffffffffffff0 RBX: ffffffff9124042e RCX: 0000000000000000
[  684.854989][    C0] RDX: ffffc90000006cc0 RSI: ffffc90000007ed0 RDI: ffffc90000006c80
[  684.855005][    C0] RBP: dffffc0000000000 R08: ffffc90000006cdf R09: 0000000000000000
[  684.855021][    C0] R10: ffffc90000006cd0 R11: fffff52000000d9c R12: ffffc90000008000
[  684.855036][    C0] R13: ffffc90000006c80 R14: ffffffff815793d5 R15: ffffc90000006cd0
[  684.855052][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  684.855070][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  684.855084][    C0] CR2: 000000110c31e365 CR3: 000000000e734000 CR4: 00000000003526f0
[  684.855102][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  684.855115][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  684.855129][    C0] Call Trace:
[  684.855136][    C0]  <NMI>
[  684.855145][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  684.855171][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  684.855203][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  684.855228][    C0]  ? nmi_handle+0x2a/0x5a0
[  684.855257][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  684.855284][    C0]  ? nmi_handle+0x14f/0x5a0
[  684.855305][    C0]  ? nmi_handle+0x2a/0x5a0
[  684.855326][    C0]  ? deref_stack_reg+0x3/0x210
[  684.855344][    C0]  ? default_do_nmi+0x63/0x160
[  684.855371][    C0]  ? exc_nmi+0x123/0x1f0
[  684.855395][    C0]  ? end_repeat_nmi+0xf/0x53
[  684.855422][    C0]  ? handle_softirqs+0x2c5/0x980
[  684.855454][    C0]  ? deref_stack_reg+0x3/0x210
[  684.855473][    C0]  ? deref_stack_reg+0x3/0x210
[  684.855492][    C0]  ? deref_stack_reg+0x3/0x210
[  684.855512][    C0]  </NMI>
[  684.855519][    C0]  <IRQ>
[  684.855527][    C0]  unwind_next_frame+0x1799/0x22d0
[  684.855552][    C0]  ? net_rx_action+0x89b/0x1240
[  684.855581][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  684.855607][    C0]  arch_stack_walk+0x11c/0x150
[  684.855632][    C0]  ? handle_softirqs+0x2c5/0x980
[  684.855661][    C0]  stack_trace_save+0x118/0x1d0
[  684.855687][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  684.855714][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  684.855746][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  684.855778][    C0]  kasan_save_track+0x3f/0x80
[  684.855798][    C0]  ? kasan_save_track+0x3f/0x80
[  684.855817][    C0]  ? kasan_save_free_info+0x40/0x50
[  684.855845][    C0]  ? __kasan_slab_free+0x59/0x70
[  684.855866][    C0]  ? kfree+0x1a0/0x440
[  684.855896][    C0]  ? skb_release_data+0x6a0/0x8a0
[  684.855919][    C0]  ? consume_skb+0x9f/0xf0
[  684.855940][    C0]  ? nft_synproxy_eval_v4+0x3d2/0x610
[  684.855973][    C0]  ? nft_synproxy_do_eval+0x362/0xa60
[  684.856005][    C0]  ? nft_do_chain+0x4ad/0x1da0
[  684.856038][    C0]  ? nft_do_chain_inet+0x418/0x6b0
[  684.856072][    C0]  ? nf_hook_slow+0xc3/0x220
[  684.856118][    C0]  ? NF_HOOK+0x29e/0x450
[  684.856140][    C0]  ? NF_HOOK+0x3a4/0x450
[  684.856160][    C0]  ? __netif_receive_skb+0x2bf/0x650
[  684.856183][    C0]  ? process_backlog+0x662/0x15b0
[  684.856207][    C0]  ? __napi_poll+0xcb/0x490
[  684.856229][    C0]  ? net_rx_action+0x89b/0x1240
[  684.856274][    C0]  kasan_save_free_info+0x40/0x50
[  684.856301][    C0]  __kasan_slab_free+0x59/0x70
[  684.856321][    C0]  ? skb_release_data+0x6a0/0x8a0
[  684.856341][    C0]  kfree+0x1a0/0x440
[  684.856365][    C0]  ? skb_release_data+0x6a0/0x8a0
[  684.856387][    C0]  skb_release_data+0x6a0/0x8a0
[  684.856420][    C0]  consume_skb+0x9f/0xf0
[  684.856440][    C0]  nft_synproxy_eval_v4+0x3d2/0x610
[  684.856471][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  684.856502][    C0]  ? nf_ip_checksum+0x13a/0x500
[  684.856533][    C0]  nft_synproxy_do_eval+0x362/0xa60
[  684.856568][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  684.856596][    C0]  ? ip_vs_conn_hashkey_param+0x3ad/0x6b0
[  684.856629][    C0]  ? ip_vs_conn_out_get+0xba6/0xc00
[  684.856662][    C0]  nft_do_chain+0x4ad/0x1da0
[  684.856694][    C0]  ? tcp_conn_schedule+0x45e/0x880
[  684.856724][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  684.856766][    C0]  ? __pfx_nf_nat_inet_fn+0x10/0x10
[  684.856786][    C0]  ? __pfx_ip_vs_in_hook+0x10/0x10
[  684.856809][    C0]  nft_do_chain_inet+0x418/0x6b0
[  684.856839][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  684.856876][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  684.856903][    C0]  nf_hook_slow+0xc3/0x220
[  684.856929][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  684.856952][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  684.856975][    C0]  NF_HOOK+0x29e/0x450
[  684.856998][    C0]  ? NF_HOOK+0x9a/0x450
[  684.857018][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  684.857041][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  684.857067][    C0]  ? ip_rcv_finish+0x406/0x560
[  684.857090][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  684.857111][    C0]  NF_HOOK+0x3a4/0x450
[  684.857132][    C0]  ? __lock_acquire+0x1384/0x2050
[  684.857162][    C0]  ? NF_HOOK+0x9a/0x450
[  684.857182][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  684.857202][    C0]  ? ip_rcv_core+0x801/0xd10
[  684.857224][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  684.857250][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  684.857272][    C0]  __netif_receive_skb+0x2bf/0x650
[  684.857298][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  684.857326][    C0]  ? __pfx___netif_receive_skb+0x10/0x10
[  684.857349][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  684.857378][    C0]  ? __pfx_lock_release+0x10/0x10
[  684.857407][    C0]  ? _raw_spin_lock_irq+0xdf/0x120
[  684.857446][    C0]  process_backlog+0x662/0x15b0
[  684.857473][    C0]  ? process_backlog+0x33b/0x15b0
[  684.857503][    C0]  ? __pfx_process_backlog+0x10/0x10
[  684.857527][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  684.857557][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  684.857588][    C0]  __napi_poll+0xcb/0x490
[  684.857613][    C0]  net_rx_action+0x89b/0x1240
[  684.857649][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  684.857676][    C0]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  684.857720][    C0]  handle_softirqs+0x2c5/0x980
[  684.857749][    C0]  ? do_softirq+0x11b/0x1e0
[  684.857775][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  684.857803][    C0]  ? rcu_is_watching+0x15/0xb0
[  684.857826][    C0]  do_softirq+0x11b/0x1e0
[  684.857850][    C0]  </IRQ>
[  684.857857][    C0]  <TASK>
[  684.857865][    C0]  ? __pfx_do_softirq+0x10/0x10
[  684.857890][    C0]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[  684.857921][    C0]  ? rcu_is_watching+0x15/0xb0
[  684.857943][    C0]  __local_bh_enable_ip+0x1bb/0x200
[  684.857969][    C0]  ? nsim_dev_trap_report_work+0x75d/0xaa0
[  684.857992][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  684.858018][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  684.858044][    C0]  ? nsim_dev_trap_report_work+0x6a7/0xaa0
[  684.858082][    C0]  nsim_dev_trap_report_work+0x75d/0xaa0
[  684.858110][    C0]  ? process_scheduled_works+0x976/0x1850
[  684.858137][    C0]  process_scheduled_works+0xa63/0x1850
[  684.858176][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  684.858206][    C0]  ? assign_work+0x364/0x3d0
[  684.858233][    C0]  worker_thread+0x870/0xd30
[  684.858265][    C0]  ? __kthread_parkme+0x169/0x1d0
[  684.858294][    C0]  ? __pfx_worker_thread+0x10/0x10
[  684.858320][    C0]  kthread+0x2f0/0x390
[  684.858338][    C0]  ? __pfx_worker_thread+0x10/0x10
[  684.858364][    C0]  ? __pfx_kthread+0x10/0x10
[  684.858382][    C0]  ret_from_fork+0x4b/0x80
[  684.858413][    C0]  ? __pfx_kthread+0x10/0x10
[  684.858431][    C0]  ret_from_fork_asm+0x1a/0x30
[  684.858465][    C0]  </TASK>
[  685.697041][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  685.703974][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
[  685.714524][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  685.724648][   T30] Call Trace:
[  685.727959][   T30]  <TASK>
[  685.730919][   T30]  dump_stack_lvl+0x241/0x360
[  685.735643][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  685.740979][   T30]  ? __pfx__printk+0x10/0x10
[  685.745645][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  685.751701][   T30]  ? vscnprintf+0x5d/0x90
[  685.756079][   T30]  panic+0x349/0x880
[  685.760029][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  685.766248][   T30]  ? __pfx_panic+0x10/0x10
[  685.770719][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  685.776236][   T30]  ? __irq_work_queue_local+0x137/0x410
[  685.781839][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  685.787256][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  685.793451][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  685.799726][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  685.805957][   T30]  watchdog+0x1033/0x1040
[  685.810371][   T30]  ? watchdog+0x1ea/0x1040
[  685.814844][   T30]  ? __pfx_watchdog+0x10/0x10
[  685.819575][   T30]  kthread+0x2f0/0x390
[  685.823702][   T30]  ? __pfx_watchdog+0x10/0x10
[  685.828441][   T30]  ? __pfx_kthread+0x10/0x10
[  685.833080][   T30]  ret_from_fork+0x4b/0x80
[  685.837546][   T30]  ? __pfx_kthread+0x10/0x10
[  685.842178][   T30]  ret_from_fork_asm+0x1a/0x30
[  685.847005][   T30]  </TASK>
[  685.850526][   T30] Kernel Offset: disabled
[  685.854873][   T30] Rebooting in 86400 seconds..