last executing test programs:

21.64918442s ago: executing program 4 (id=3000):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001840)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd70a5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c707647fa8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f9429ef295ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa60e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e0300d37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe0245330e88c0c41dfee5fc9400784fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f95007000000000000be290159f6bcd75f0dda9de5532e71ae9e1f00000054a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b0a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000f841b35af2e300000000000000000000000000002a2942a2916f337ce28139c6107e21037db166473609738d0ad78870bd77f7c5fed3945f41fac70f6136f083c96efae97d618cb8f49f28b8171d887c4aa5826420cc5701b593e86422dd8711981836bff97b5f369946bd04ab54b9ed9c2417a0c3c015054da1a89aafbf02092004c81898a9aa48a7504f0b5a0f3e18ee9eb852df9632970fc0e1e3216a0f871a6c2e751b141d2e7ead0e238a247873e87592c0ff06c63ad39a4c6498a8d357b641c7e66b2c3ac2745898d09788132c1745c5d885b7e050a80ba22e"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x3)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x2)

21.483421251s ago: executing program 4 (id=3001):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0xc06855c8, &(0x7f0000000340)={0x400000100002f})

21.357553946s ago: executing program 4 (id=3002):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000000c0))

21.246151966s ago: executing program 4 (id=3004):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x800, 0x0)
r0 = fanotify_init(0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x1, 0x8000020, r1, 0x0)
r2 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r2, 0xb15, 0x0, 0x0, 0x0, 0x0)

20.864962422s ago: executing program 4 (id=3006):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}})
r4 = memfd_secret(0x0)
mmap$IORING_OFF_SQES(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x10000000)
fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000))
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private}}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)

20.00433358s ago: executing program 4 (id=3009):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4)
getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, 0x0)

7.721174708s ago: executing program 2 (id=3063):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x0, 0x0)
fanotify_mark(r1, 0x105, 0x40001033, r0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfecc)

7.469195197s ago: executing program 1 (id=3064):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb)
bind$inet(r0, &(0x7f0000000040), 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)

7.348123177s ago: executing program 2 (id=3065):
mkdir(0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
setxattr$incfs_id(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180), &(0x7f0000000280)={'0000000000000000000000000000000', 0x32}, 0x20, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})

6.003536649s ago: executing program 2 (id=3066):
mkdirat$binderfs(0xffffffffffffff9c, 0x0, 0x1ff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

5.808062348s ago: executing program 1 (id=3067):
r0 = memfd_create(0x0, 0x2)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
setuid(0x0)
r2 = getpgrp(0x0)
r3 = inotify_init1(0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000380)={0x0, <r4=>0x0})
kcmp(r2, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
syz_open_procfs(r5, 0x0)
sigaltstack(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
getsockopt$ax25_int(r9, 0x101, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x14, r1, 0x333, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0xa60d000000000000}, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

5.804157817s ago: executing program 2 (id=3068):
pipe2(&(0x7f0000000300), 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002bc0)={0x2020}, 0x2020)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_pidfd_open(0x0, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
fanotify_init(0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x3b7, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721a382f000917a4a6f6f76d04e0b19396feccdbae7795aaa45818dce2d1f7b4642b09dd40bf4bef9854b631eb821b13a7e475d5c9a9d4bbb3fd9b07650683a35d9557d1e7e6496dd6f6f5ca57a5c43b9863819829430e1607ebf0dbb2308a8181ef5ccdcf1eb157470d54635a1a5b7075c77dfdb97155af8fa282fcc5ca5bad36839e0cad1304c542be170a44da4089a32bc3f35a85a6e30b8d233809335a4274938505517a26728b643c2f04917afe55c68759adea3bb70f5b5c3c59fc24d6e3835c110420cfd6de096f8dec90f5f577744d2d0f3ec21819253cdb102d50678293328726f1c4f7163e28e79ab4767e3054dfa9a11b1fdafb8757b2a91f8283ad01712062048b52b5cfcaf648fe760a98ee82fbb1836c88434e0b36f9b56c4d3cd8b42566cba88ddb7418762cd8495a4ec8de7952789c2a6d37cdbbecde53ffea86db893181d9b5c7d4663d1bd78c9cb87af7cbfa54a1b2c98432ef5ba6f43c358ae873495f46850d56d83f3d7d376b3b6120ffe93c8ab6b6f214316d8c3376a5a65d173b6e4243326c729163050547d49338a737bc894f487bc9b51e75ac2031ea714ed6c917f13e3cc0ee85a75e9a98a42f9aad6f1e244c1daa06ee55b205e11aa3a2982387210bccd26c5108f2a548b06dd0a0520ca8f99532ab0a4fd8c33f0f01ad40b74ef4e9f0d01b7bbc8aa69296cca1f19d92c5be8ffa3264e3951dd318363e02d36fa69ecaa3978b6c471c9dde0052632d1ebe277982fb0c900dd3f461257ad46a69b8f1e9bc36d8992426aa4adddc024bb74a39539f1cf801502cbd0d7acb8b2c5d9778a8253d2c8746d5b252a32f67c94cb8916a6310c1af0c0eb6f09a07d5020948a9c0f147c01d4a8b3af25686eadef9eaed2623cb012521ab86453e71bf351c130b6d33ffc388afdb5b2b7c16c1002a0640dd73e7a7e6a852dd2c75209d711a50363e46116ad2a14483c3729a81e4ef2fed2f18732f0038e079e561eea96eb665219070f42139c627dd5f185d23fdc316d38eb99826bcb63938d6cd1af3b5274f57009f87854ad98bef03025c32e7aa4a721d28e94ec5feff3a279c2e1c18002e39eaaefec3dfd1eae45a61e4283e8a7ef1eaf70d93a0333a9ff9ef048332f3fcc797076f8c0285854"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x8, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x38}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0xa5, 0xaf, 0x5f, 0x20, 0xe8d, 0x23, 0x3aab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x56, 0x0, 0x0, 0xa}}]}}]}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000000080000000148a3045e2d59b2f835be5ea0e158eca154cbab5354fbf743f5fc122403262404ab03d579ff00ae8803b1d4b880ed1f02b5aa5b0c2883f9126da4a26a5f382ff54dd48e667192affe59dc40ee4fc3ec1030a0850e9281e119ab2de5ada1393ab9069", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001100028005000100030000000500150000000000"], 0x44}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000080))
socket$inet6_sctp(0xa, 0x801, 0x84)
r6 = socket$inet6(0xa, 0x3, 0x2c)
setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18)
setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000100)=@routing, 0x8)
setsockopt$inet6_opts(r6, 0x29, 0x37, 0x0, 0x0)

4.509389705s ago: executing program 1 (id=3069):
memfd_create(&(0x7f0000000300), 0x0)
fanotify_init(0x2, 0x0)
r0 = syz_io_uring_setup(0x4072, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0)

4.189999055s ago: executing program 1 (id=3073):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x5, 0x3, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "eb090b08ece8dca0"}}, 0x48}, 0x300}, 0x0)

4.084147078s ago: executing program 0 (id=3074):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x4}, @noop, @noop, @noop, @rr={0x7, 0x17, 0xca, [@dev, @remote, @multicast1, @private=0xa010102, @local]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.812433559s ago: executing program 1 (id=3077):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb)
bind$inet(r0, &(0x7f0000000040), 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)

3.353364528s ago: executing program 1 (id=3078):
pipe2(&(0x7f0000000300), 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002bc0)={0x2020}, 0x2020)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_pidfd_open(0x0, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
fanotify_init(0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x7, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0xee, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721a382f000917a4a6f6f76d04e0b19396feccdbae7795aaa45818dce2d1f7b4642b09dd40bf4bef9854b631eb821b13a7e475d5c9a9d4bbb3fd9b07650683a35d9557d1e7e6496dd6f6f5ca57a5c43b9863819829430e1607ebf0dbb2308a8181ef5ccdcf1eb15"})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_usb_connect$cdc_ncm(0x0, 0x91, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x2f}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0x1ff}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6d, 0x0, 0xfe}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x59d}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x1}}}}}}}]}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x8, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x38}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0xa5, 0xaf, 0x5f, 0x20, 0xe8d, 0x23, 0x3aab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x56, 0x0, 0x0, 0xa}}]}}]}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000000080000000148a3045e2d59b2f835be5ea0e158eca154cbab5354fbf743f5fc122403262404ab03d579ff00ae8803b1d4b880ed1f02b5aa5b0c2883f9126da4a26a5f382ff54dd48e667192affe59dc40ee4fc3ec1030a0850e9281e119ab2de5ada1393ab9069", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001100028005000100030000000500150000000000"], 0x44}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000080))
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_io_uring_setup(0x1fbf, &(0x7f0000000040)={0x0, 0x0, 0x140}, &(0x7f00000000c0), &(0x7f0000000100))

2.891649944s ago: executing program 0 (id=3079):
r0 = memfd_create(0x0, 0x2)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
setuid(0x0)
r2 = getpgrp(0x0)
r3 = inotify_init1(0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000380)={0x0, <r4=>0x0})
kcmp(r2, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
syz_open_procfs(r5, 0x0)
sigaltstack(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
getsockopt$ax25_int(r9, 0x101, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x14, r1, 0x333, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0xa60d000000000000}, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

2.805094476s ago: executing program 3 (id=3080):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = io_uring_setup(0x497c, &(0x7f00000001c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
syz_emit_ethernet(0x3bb, &(0x7f00000030c0)={@local, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "0ea57c", 0x385, 0x21, 0x0, @private1, @remote, {[@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x0, 0x0, 0x0, 0x4}], {{0x0, 0x0, 0x4, 0x1, 0x9, 0x0, 0x0, 0x19d108a2f2edac0, 0x0, '#BO', 0x6, "c65925"}, "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"}}}}}}, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r2, &(0x7f0000000980)={0x23b, 0x7d, 0x1, {{0x500, 0xfa, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23b)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0})
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
shutdown(0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.392111036s ago: executing program 0 (id=3081):
openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
syz_io_uring_setup(0x5168, &(0x7f00000004c0), 0x0, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = syz_io_uring_setup(0x24fa, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_setup(0x24f7, &(0x7f0000000140), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x15ce, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_setup(0x24fa, &(0x7f0000000080), 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1.335337176s ago: executing program 3 (id=3082):
memfd_create(&(0x7f0000000300), 0x0)
fanotify_init(0x2, 0x0)
r0 = syz_io_uring_setup(0x4072, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0)

1.242946895s ago: executing program 2 (id=3083):
socket$kcm(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = timerfd_create(0x0, 0x0)
syz_io_uring_setup(0x2d7b, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x0, 0x1f8}, &(0x7f0000000040)=<r7=>0x0, 0x0)
syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f0000000000))
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x1c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x1c}], 0x1}, 0x0)
truncate(0x0, 0xffffffffffff0001)

859.304193ms ago: executing program 0 (id=3084):
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
preadv2(r0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/244, 0xf4}], 0x1, 0x0, 0x0, 0x0)

841.587464ms ago: executing program 3 (id=3085):
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/nullb0\x00'}]}, 0x18)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0xec0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0)

677.69673ms ago: executing program 0 (id=3086):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x5, 0x3, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "eb090b08ece8dca0"}}, 0x48}, 0x300}, 0x0)

646.23731ms ago: executing program 3 (id=3087):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb)
bind$inet(r0, &(0x7f0000000040), 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)

403.239247ms ago: executing program 0 (id=3088):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000240), 0x3, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000055080000000000004708000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000070000001860000005000000000000000100ffffffb7080000000000007b8af8ff00000000b7080000a51600007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000002000000182b0000", @ANYRES32=r3, @ANYBLOB="00000000040000008520000002000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df"], 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000009440)={0x0, 0x0, &(0x7f0000009400)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0xa0}}, 0x0)
ftruncate(r4, 0x180000000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000280)={0xfffffffd, 0x0, "b939ee6bde127200cf8d662e0c7f1821f05bcac03dde97f3ff34eb6df3421158"})
r6 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000180))
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@hyper})
ioctl$IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, &(0x7f0000000080)={0x8})
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}})
syz_fuse_handle_req(r7, &(0x7f0000004340)="b968dd31efa90481cdad877a2b3a2e8fe873aff0e6b72d29dde21521f5421f0fc9ded029840764f5ab6767a911805e4a7d3fc940fefb8ea5ed53db82602064141984b2dacd0a22fe43a1cd0426bfa76c3b4a69f2458261d15efb1a1ca397e86731dc3446a7059d985532caf333a722de457404bd2a6294cd3333f3b7c580182e27738e8ecf25b1a86a39913e3b924439bf7331bcaab15aedb707ae1db83bb2858e76633516b48a95541928344646de334fd702ecb5c63cca7ba566bd9c927ae9f6ca2484624b4601d0202f6d04450ed3b169edd55048961d3538bf86cd39380a517fd59e9bb2d266664c39906bc0aa88c9f98b0ac963fe653aeb0351ba36d048df0a4fd75e1653c3f42327b476560411d49d3b21b011653847130ee0b87dbdd58c351bb2a3b53317797b137bebcb64edc206f9a45be3e4cbad22bf5bb9c3f0407d0d2696c0a83d15c58a194f744fe127a5561a1579f4b9698d04b47cd6408d98bde7665e82b7009eb3f81d1653b1260f71552b44830f179647b2a3faf1c1e7959df05b79611f15c08a12dcc7e6dbde87cf993cb6b8af8e553afb27673ca522d38af514b76e375e0886431a2e57ffb212d438c3b935ada2cd44cc3427be8da3c3cd09cb60ce4f231f142ed1f3045719b281d5f46a9d6c3f4dee8d66b1256325a910c91f0352cb401a21f21f0ed6cb3b3a53a120046f40b402ba196d13e614dc779f04c70cd1bb3e8a6fc118c61652c22a85bc4f70ce4652ca606a16fbcdf11d496697938a3b225f1c10a05b4381e537c2a07988c9f498b480b835d5b362e00024806d0289a8636825c9fa91a9d7cd7d1585985c95705555691c40223014514b9b8f83870abf7e768616147ee0b605cf760b6cd84d15afe1de80c81a135972c0f0ee427eb04be704c2fdaf5bb47a4f0b64d566305974efc4031365953de74bf0f80b82740ac0daaed1f607004e26e3115d1ef3e85a3acf09bd04a060bec63f66e4ef087e6abfd345f8ff0ebf67cfe16be938d1c6f6c3631d575307e597731c8640251064c4904f15aa8680cca243699de41d4286cab4acb9f822cf10d74a8951c9b1b7d737b9fad5081be34eb35ac5472b4fa1f07dd30e86b930d57fb459913bb9f4aa40b1bb154822ea90d81a41dcc5cfb2546ce3d2d23f9554d026297cbaef88417618237cc7ff1acdf2c541730c69c91e0b77cceda6c8a210cc4c4bdfa8155c1fd46fbbacc3194a8c43f5998619622039caa5381b25b7be9a24f5375d74da5bab271f7c0249c75a59944306debe6083f6e8e7da9330b2b2e5bd0b15786b908972fbfdf001b205898e2db5098cc972964e2597eeff79433cd5ab83d68eb47bce4584526a123b6ebcb621b6b36fed4fd8391a4c017ad6698daba309b029b67608d9934a2715d923a76a2fcfcb7351a356da62c61c741ea44fa5aee70947653d28da32faf40113b53f3b3dfe68d7fd9c250174710ce55cc81ad54f0b0c40fd8915341a01bfccf62d9ae701c8840c7243bd8ee915de1dfb6237b05141fd7e6685d699d257bfaf13ed618874dffdf4b7f4432a627a876431c9ba343a06ac554f8408cde51849872b3138642893639da1d39b186e453d01fe8e7ab5a23fc28ba462c9b7cc54e15b7b41c75ef667771c94367bd534f11415b7c97f8f2f48a6e6dee2e1f0f9718f3dfb567bad7666e3e2f5801621ce916e46571b21cab05dca5bd865021ad62f576c76005a50548b3adb5e2a873b1dd16819f319ef85d1340f2630dd3d1ab8ca98e97f99673d06578300341b4b6f0aedbf17d9dc370dff6cb616644aaed84e6c86f722f09b57a5fc0eed59c25c1bc28d34c40bd1b9df9bfbc4a83de28b2e80df31df2b54c82894b7daedabe7c1e6fb10c422ea4e80a1cd993ba193b369cdf2ada52d32a5e9b77df384671c4ba2181f9d0c6b680b0f30984c29864680a6fb019a33823939e59d82ed60719d7bd3aabe62eb570de5610ee3ddecf4d95ac845591f00524a21780a8dbd809e5073151d24b027b39b109698851fe4310c1d78f1ed576edb14d196715570bbb34fa800ed68c55f35069e6748f9c1458bf851a0eb91893d3160a1a765bf4ae4e3bef89eccc00f4b7c23349a7f468ce9aeb6bad6af5b99d4b1e04d7383c9d713cd87b3d42501935ec99c317e25491cd0ef91bd8d476cfbee711c636a65c309f98089fa98d4703c6c003b5ec546da7c8bc2692807e06e2d9f7032c787db964f6bb1f7161ca57a82590849b9ff6b3245e09064b4c1553123269e4691b8b071990c8d44e98dcb930f21c4d2824b979f863be9a54426d412149f1f20a7464d2f002327226b821a6d0e808f4b530f35a88f2d5dfbb2b0eeab7e2fe285a8cc63d767ea5e3896e9b15a383dfcb581d1c94b8b3be724260de874e35f3aa1fc980b7782149b265047db6c75bb9fa5ce05d07801c60b385876e605b14c8b663f0290db5d5fe75e936a0f30ce8b3cbfda5649a482d6884687af6b21a16bc6beeb9391e7bea97ee5318f0aa16fae8b7a60dda2cc6fbdf1b068a4cd9791d0592018def58b2cffc56fa7df5bd8da42458c3e2d1bc38d64d1e68b156f04c8a9e20195af1ad21557e9edf06425b2d647938a224c580fa5769b8f3430d570136cd9a1b1f706c3b54615acb023cc42f03a007a7d9fb71d28b071d8f3c2dc381a0744b46dd9f094ae7394ac0160e96247d9aaf0da86e248f3a96109ad9902fa9eeeace4137ca3ec827dd945bd99abff70a11930064a9afc13097d12a164dc5f006670a19e394fbccff35832c73f2d85804ec745b02d3157a1085a1bcc4c4975a0f8f5d98a6b88bed87363870c023548f1095a70c84de66dc751394226d8c42e3121d55e38e5e307252126fc5ca4d41b495506d6548318b0cbefb59b5d237c620f4ac35d11d2321387220d9ab1550c92f6c6d7f88760d8b7d1b8f717109370e5160ca2e634a3ec66a77122ca8458d57e4f44cd169c15f6a6bbc40ea3c3a0c0bf868827e1fda515302373fd4f63593268cedd080a20d6402393a5d8d339f790c731625763e5e263c117a8396c71c83218a41b42a37ab4b46c2071dcbdb3e2ce1601b70c7178b51d32b3a5a0772553148553a63765e47eaee9cd13e18e0612cace260ee7abe9b6bb3309a14d679f6df8ec81c438f3ed36d9d5f7b9989c589c524124a06f6e8cfe5c327ac82bc69ee7b957f6304349e8bf1417ec366e1537faaeb377d48e023d2b254e58268ad02cd833fc6c2dd7572f02306f430c454d0a4419b77a83f6036f5ffa9ac5661606e3388ff11eaef09162e24a33d9935a6610975bbedf812d17fb173c3517b9178b811fc33f7052cc7c3d7e486f3c30b8aa7af07a77e91502b8aa2dfcb44f39a93f33cd422f6d120388bfa07285ed152465f330f0c33928fd21e916616d2258157fb295cf6b0976ee959001a5f125e88ec481e0ccfac2861cd8539486c9c4095ecd22d994a55d95412ebed1c4c3a84e34d4a8fac328f12c48e85ceb416430e2c091b2d255ba092689654aa1d4e3e47a7941297ba512f3c579a6ccddcb88498c659afd42fe9a1bce9149f56e4650dbdbd1d85fa1e15745a21456c58cac9794c67b2baee2fa1f549004954cd7273857d5382c3408373362ddcf76917fbe00629b3f0d8d37ca9a0641c8a731a0b79ba32082e2522cae30ea13887afdeaa022a73c1a666846df4cc839f2f565e285038750fb3e64464ef46146b0046120856d90632d144f4e0bc3ccf0ec573bc2dec7a305d50763af30517a316f145af1b3f9a7fbafd5bb00c3e68a10208581c2cd33261a6f2513227be577ab5d23397d674d6248b3131d575f1c3f8f9db9ed493b418ed2ad216ee2981b2d85773fd4d401e836a59e982ddb629106fa3768be9d0ed40908b5fa88429a861c60896f48ae62eb8b1de6ea0a5c944a2e3669f35a814aebf9264a197ccc580051274009fe12a0f9f67b53f72c742634fe7d07f9d4747679aa7554823e78b1202e3c3cee4b080b31d9a53dd8992cf5b8f79bd0bcac6a54b6bafb3897a9df79ef3a75b055a58ed23164cee620c90b84a4602d5c703911028d591552516117f95720563c2f218a30dd2a122127179743bb21389de007928fc87ad6b0375968058546c3f45bb7365da42eb90bb83ff2a14e006ac2d2f7a5258c8d0262c06c17bfa268b8281c9cbef8e5ec3ea5f144d662eb3844289ba181eca37e1af22d0497ce4931424748e7eafd8a7b3812e1efb012062e310d36df4659effd5a0b92c91e9f9bba031c217f200a302d1e88678f58aea3fd0bf51a70ee9f88d41ae268cbd75756d14b0ebc88e04a0ff557f46cf31171b6959355ffdac3d549482b4ffbf1ef9c1861466664e416d8a65b6a0707559333ba46b7a1878f20ebefab52e766543f3fe87e71419d9a77f29e431f9535daa87994becbbfa6c4ebdfad0d36a746c1aa63c946758322fce6a89653d44000345b364ee825eb890749c288b3633e55304ecaa598f1ae2f5fc693f264b9e33e6e23020bc70f6a26fb6ed201c4b09c5de4ed238b6188e5bfbd97c8ccc9a769cb064c6387dc5aae8dfe22c18036e77c0a3792cbc332e9498abb27ef7d06ab2f417c0f5a9b391d9a830bc5b1a18f503f75901f028c379d456827933f01eaac30c7928c0429acdb899ee34c53314b9c439b8a0b3e264f5b2f2e98d73b01d0872effbf2af397e56f04fc05c322d9e2a278634e8b2d9f3b0cd329d3dbab0ceee7c37dd65481a21399af2501f2eae1ae1064904aef1a501ad026e935f10c770d923df2c3e88a6e1fe8659b1ee562ecc58d39120132a8cbbbffd4bdb965e5d528602dd4bae8df62474e6e5796735f530ca8577e79e57b648a24133791137a9c2df03cd7822507c24069ad5b99b47c4ded9c518d1ee7133d81786410b4cea036d0aad16668689283b8bef91fd1bf2521e21bf9cae2ffa384de198acf172effec92570f93a17b4dedfcd0c9501d4bef6a54b7e388aa8195a15e2e7952b96869e05b9a087f68326d03f7fa6f3c0e4d1fcd034d6c9cde522f6de2d4f7255cdc323f6ff18d8872edf6776a78f6d0b0847ab91cc3b532978d7325d92db7ebe6034e9d11f584681460915bd04942b26f2dcaa867fa798d9b75f03ca62fba2e450c2317003778f4e9f893185c0fea97d7d479e092effa08c91a3f5cb92da4ed7c69f55743b9f92c2473e83e5f10feaf818fae2e00785b1fc3570141a8aeb2526e6e19babe14afac12ad9fc21c2caba3587c0226ef15579017c20e8633820648d38c52c06c82d12b35987bd108401f28fc937bae6c78f19310cc32d8f93ce0f605795678f6231c2d26194e8baac9a29219dab7b350d0ac40e26b20e6deaaff2916b03d542338f552abad8d5db0c95474c18c6a2e91f8f7ed6c8bbecf8bdcba2cd4d61ae8746d1873e842d90bc89062f5481e5c6827ecfbc51b3db02960b303b2f7a00281654b053142f229ad4374b0c2b198a4dded506a158716edc9f916b16a46ae2fb55597c10c19a09f9d172fcd9e7b993d6fb444d203ff271ee3748b3e826e13d64a68c1efba33bcb125cbbe2aaab19e42d7fabc1d48b75113244a3239d28a2d9c9c15c4f5327345fa14db58d3b3455850c8cb23a4f99c2dfdb9924315e09464f410b92c071a79a1312d6e981d252d3678184da695d35ddd6336d0ddfed88de169a40f9a4cab7cf02e79266794766964cc62214da19513a17dd8afbe0133a59376e4a48ca82f65ea2e614f8c0699dd93fd2bf074c5143abfea0ed515d9084261c33ad8625e6055ff0f778d85fb8becf9f7fc046e37fb738cc7b72453607924480aeebf36809c40692aacf92a0320fee70a563848d4b0b3d79387dbbcc66a2b1b780078f6cfd347f519e4c36853bfb8657c3302c2349f5e490d81710e55297aadd9ad6042cc45f0f69f885c6b5bef07e9cdf30d1ef48748a6e18b5283aa11adff3b54cc7f2431a849ade36d8de5a80055d503978f5191a76481a144958719c0697051ff43178df2304559c97ddaedb50e458600b335d035b8fdeb5b1386998e238dbcd247d3b947461bc347cf8c80683b10691d6bb910037d32d728d8ba02e5821f8a76d0fab443b2649a055b615ab0a8ba65fafb1cc0f2747161e356d5d92530536aadc29ffbacb590f34ff53ed59cbe1030b3caf66f2c87d709b36d7b00044272ee1f209b5d14c1177181c7e57954dbfb5bbf6b766208614f0957f85319d03c3c2d8e2e9a7f5d40344450303187f796490af86fe33c5f06c4a5c07d952796d24ef0a01b351de23754d612d4049e48d61500995b07e882a01fff3c5f1d53900a6a323f134f3679715424ff03465ca952dd29a43794ac479512a6fa1ff82b572f0a2b9b589b6b31460198d1123402b3fed82595d24617b51013bae4080048018c58ad47ef6e688de7ddc9a985bd3838d1fa8878ef8f8b0b5a6a66f580a117ad04d8262e139d2d55fe920d2ffb8c005b364beaad1bca96e1406cf6de1b3cf6bea4b973920116956223a2e0fa017c030f9e48a1114296fdd90fec61d04ececbb705631fcaff7572605b01fe7147e4e464d1a5933bc1b6aeff929ac73082fb8b0dcac09fe7689bdc4d36c39f955d9130acce672ca25442d43f484f0a592a3974e9bad1226c57d0393b6f7d512abc0881218ecf525fd716a8a9a9ee7929724d28e652c5d43719f84851ad4d19293f801c3b9a61a37b13c3030e0cf82fe1c56e727722525520740adba1617ad60f4ddfb091d3630dedd0f8fab43fc873a7273bafaf8cab38676217370e54996f2540f70732ce7f66cb3b77b60f6f72304d54966a377425c7079d2038d4b83ed7f4da28a26c82086fb580a44491d69fd6a3b6144d69cc874b2ec5a8bdc6279a3574b808f104032bb927c8d24c4e600efdf3819b0a269d5b1ae8e4fcdd44f5d233305dce3607c86f808a830f79f0923229d62b49ca67845c1c643676f961632c9f2391ddac34c730ba9b04288d51be97a6f66a36b761ff3815ef424fef8acf3b9fff9700d532f9ea84ec63c6fcc1137830bfa5bc0dc4937cee73fa352a6ac11a70410feca104e2ad8540ae7b00aaa0b6a5117d59515877c8f0d21693214343514960124d6508c12c4bc504b169e165063b53a4747583dfc4032822edda320915da47abc58486c58d44946f4a9ad72e54d5cf439487129c00be791b72f0276394723493b140bd159dcafe9c4967cee75f38f7ed067fd177ada4c851ebd68b926f70e9d7b9c74b42f11d1d75dd5ecedae17f3d74010a7e5cb172a9953060332c29b883b0b9d3dc2026d30a786f0738af5cc8b4d2757b3be0ee9e9327b06577829f6225632ca500b26f0a372fcc573acd5a0aba5f879b50ed3ac3bcb29a8ab0f39e92a7726d4656aaa14958854028fe77310cedce63b7db9519b48462d52658c311e978a48a21df6927b8b029a935bc04894af33c9af96cc48195eddc8bc9366d404b03a2ae051fc0a46b4415ead269934eaa7399863620d9e399a2953dedd95fb730f75c269603523223db3ecb978321833f4d95d4abd64b9ac55d8cb79b4725477e154f5fd02273407cd23d1e80fc20937537a3052863106abe3e0977ebc948be6e85d69e975235849b75c04ba0155306169725866854f67a587f35acecb3674a07c0357c33d8fdc27dae204c3fcfa55c760d1a1bf14701e72e712ab044c0768750a3dc75e1fe4450a31e376c413b175943183ab0967188fd9dd0e0ec937fd503cec3c3518b9f7ca6628b8ffee8eabff19213437d93e3b1c5892d5462841ed1ab626abb046a7f4b16a43894dbc5b88aede815c26ff1a53c858bee26230b98e9a4acdcd0e8cfc19d7f1d991569dd88ce1336b63a590f0558d693ad940475a2a4324e42736fb9300b5ed0fc6992fe00519077d6b36aea298041a61e106936599e91c44e3936d88d84d0da74d98c613cfdcb59fb6ea0b848eb631292655e62c34e6af38785090eea8f5c2fc2f0735951cf831113fa4b21771738acbd629b7daa2b2e4dc15da90d2ee13a0fc7cad0841b073d194a54bd8ed0d9bc3c99201073a36317910abe5bd906e5cbe6caba927f2c1faf7e3ea95c4758abe818f40a0ef8d4aa88421bd102fbd862a51b13ae3fba6e61544043c4cdcfe851ee4ff7bbef311414777542cc1659b40985cf029d5c9b337a9a5f35df36404b6de9a9cbe8f9534858ec124b41676fa31446bdbbbb7e5ed8f3f45e0b646c39bcfc603bcf33a01ad02660bba82380afbaa6a12e19edbd03edd3b1201ca52b4b4f49bfe232d18feac1113a081b60d54a545038f1d0c746253be2e98400e933a39c0f1abeb6ffa2c3ce7c49cefba974c079ec56a8287d37c7f612f8de8c0ebb29e8ce28fec400dd4cb908ff7a6e3a904f73aa3a13eb89fa1f9e2d6a7be295087f58c8a7979b7f6517aa63855369a924df0210558e79b8a10d9436d84f340fe7bee970a30af042a55bc7ea8d3554dc41af7cdc465ed840aa244cdac11f67a23a56f153bb2551bf9af222b8681476bff8a5cdaace9d7043fbbed7718b848f5ebd5d5a9c37f6fab3e11c11baca3d3caac134849b1108e1382a356aa29c054dfcd8d9f8a1b2179ea74efd33dbc2b7225df00bb5635eebcbcd1c8bdac2b873fe25b763617f30cf837c71dbd598361bdb2010ab9665edf7760e974874aef94fca8a517b86dadc2617f3d3de0fdf8ec654e9b8f4401b2db3d320dc2a91e2b3ff0855b979184f80033d2cf2da6c29603b52fcc7ec34469e256757fedd9d4980d52ed925bacfb450582454bf53be2ff2b9b4196d960429a21b7127e0a21575bc81c10a626cca6623e7f4d71b655bfe2960d53d1ed14d459f66fa639bf62a4bfca12f9ffdb8c6b48904c074bd554f7a27837c11af69382c6282ef2144b6f960d2b369334ec87f89e767be80b79e22ef029542ea37c343268201b18c320d3bc03809e798f119e06db30612ef31ffe0f2e5b7d74ff7b03b9dbcc5c5dd62bd5f881c057bef2cd85ca4b356a7bafe309f5137fb40157e6b6de64e336de017a5556ff86bfb12615b19800eb9e06f61e0a061c1459132faf58fcd9797e19551abd2033e9a2ac02275f1a157fce7733bad51f29d5b2388057320ba7d99f1fb2fdfad1d497ce07e471636f429d1f7f741c0efd7519b350324790b07a620206a7afa35a7b3f3a3e8bc0aa51ee7591b13eaaf1f5f43b82b35cadb59210e4b642c9f117754ddb66e9067069f76446466d8af55ff2ac66adbc0ef716200c8748ebb935c82baf50a1885910831e0c4fe025539ee197fb33c5c8e1350d9d418601f5f8d4cd5fb3f37a529a82134e731724456e8faf8c9f68ce528476df627cb8c46bd137dd9a1124d5912a6e904f6c30e8560cf8575c89d92c57395fa832b41239aa379d6a12bd6c75afd73d908a5dd48e64ffc285f20ad3415bc46e5f72a89f0f20aa4cc823d660e41690bf39642e4353f3093858795ba60f71accd8d94f8d23ca03fe156f0a659c81dbec66f2518a011563d60578e339249cf129de7b23eca0e08e3fb66fe9271c26877eaa53e82ebd14f34989dac46e08dc5bddfd26d2d2bb7af83e7c91d25e4c0de5afe32ada244c7757060b3ad78f2fb2357d9c4d3e9cacbb65b54d9e7f00f444007bbf25b358edc94e0e518c7474aa23861b9531d4fb3525e2f74f64d5017546befbdeb7fcbc0c383ac4e94afe5b1474c3fbf667d44d2cd6e04d1346f46a252ce2e10d22802c8c00041263f701248f5e097bdf166779b22fc916c9e6487b06c6143c15836a93ffa451429cc5a4c019b192c1b6008ba78ed5195d38e9982995cc07d62753aa319be0230a85bf68f43d5e391a47915308aa13a2edf30da39b365024f3287c8ca635dec9349e67a706a6b200475a4d4184f7e12c082c74704f3437fd4d425e8addcc10416fe017302eb84f217c0e78eb7f0f53659e1c8c185e98c8ffd1ce9f7ecfba2fb5a5906e2f2e82d51258d09da8731647a737b42984536fadfa4cb390770f93a3fd25a525ef1b36f8687986c6cbd37958434944f93f681793e091c1b4192e1749109216aea78e2cab119a54ffc6482038d74c3c3d28b5caa4dcca9a6dab38b40486354c3d0c5f46e61c54430eeaf4ba489460951eed0b3d14ef11acbfda657b0769b830499a84d895da6515e99bcbb35f329d179704db66425ab4f59e31feebe5bd135502df250fbd1374cc4e1e377759f4a1e326d1b54e4f04221e3e54618d0ae22762bbaa3660a9e61e7754beb040d9579fd5c93d6e60a425da4fff2b8a6a46de55684d22a564f07ee3446de77bd0d7b50ef21d7d3f70215a1513515d21bf3fe7eb26b1477956b394d7aa1e2ca199bd2eca159ad4ccaf5dc2794b2127a989791dacb09863a9f061d6d8c8d77d17ef22e3b3958e4c0c42bd7713cd6ef589e86ca2cc23086748447370deb89487d4a80f888c24e80df49b115bf5c42e2412c0783ee38713cc576800217818d80958f419bad3d3cc3e01a34661db7af767d7be0856e6ec0a92982fc430854381bb0f8b5efeb81c064a0fcb9790b81c12a6a703ed241be816f318502a3e511bc9eb5dd4cb33d059496d0552f19f21974d7aab387b6c5799e54a611358cae43886b706915721ab0dab37b1fd75e6fba2e1e7bd54921bf4647a8a5620f365dcdadaa6b95f84a4163f0077b8716cc7a536ef9e835bf3e23acd5a12bb9da93ba1a666590734612cdaf8c94c7dca7aa7bd5337c4627f63f1cc31bda07a7eb0a51cc78da61f8ab6814a2120e797e0eeae193653b44a273191c4cac5bd055b643a858bb8ee04dd4d0bbe593c67001044443f7d366441045db518fb54178fc9ae6a2b926ca23a5968aff20c0b673c05624cd4098fe89cfbf13f5ff9c3e774f90cc0e8a246cbe03001519bdf2c72a92b0f55f2395cafd2599bf11567c49477bbdd31e5b7e25ac7dfda3a605910cbbdbd2df5d9bec602a0625a00800e66a8b3ec6e45e22f814235f3cddc017586f18775036977a313eb330efb0f51f5a82f0f47d7dafbe53dac9a1d8630328b6956f1997ba75b7a0cd9919f1d98f9191f26867685e193f4552716dc4f95c6609f0f610ba2cc5adffbc8e61217888f96a300ad27b1991e1211e7053bd702c7966f2b011ea48af41bf2171166680be99744c64c885ed1f3871ece8522dc4083e148052d26b6794dd6e9daad44c4393170a0b6bdb3a51bef5eaad8feff3228cbb3cf20c6ed8b27b64dba152bb377145f8a6fb4579edb3a15ac86a6d8bedfa4d4ee46cf2a32701f8d5797cfb34dd2ce75a44774b71c9cee0d86c13157e2e12815fe74b82f8916d2f514dcf51a3f1ebec273256834bedfa50db2c71ef7ba1c2ed34c4c674cfa4e49bfd99659003d4ab3c80b081f214ca688adf85f2376920cb42c573fb7fba6d78ff70d8be5b08841a119497f81a71cd7ccc225666aad5dd2edf1438624787715a678e06f005f9149a72eabab0023b9d58604e09701593d34c3963bcd55fd230dad3bfff9cf3b9757cb674221c54cf4848065cfc2ac77950a7f4bea0efc37b84f0308e226a1297904170dddf404a3d6625720b430f10e0e719e31fbbc1d80375b636f26230d5861f1ff5a8853499f7792a7ef43f3daa0e135c236807207", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x43, 0xa0, 0x360, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv4=@multicast1, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x458)

274.598166ms ago: executing program 3 (id=3089):
syz_emit_ethernet(0x2056, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x2020, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x200, "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"}, {0x0, 0x200, "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"}, {0x1, 0x1, "a22d4ba30d6b"}]}}}}}}, 0x0)

80.922163ms ago: executing program 3 (id=3090):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000c80)={0x2e7, 0x7d, 0x0, {{0x500, 0x17d, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xab, '\x02\x00odev{cvfox%\xff\xff\xff\x81\x02\x01\x00\x01\r\x00\x00\x00\x00\xbc\x92\x00\x00\x00\x8c\xff\a\xf5\xc8\xf8a\xee\x7f\xb2\xf9\xa2\xd4\x9f-\x9f4^\x9d\x10v\xaf6n\xc2Eu~\xa1f\x17\xdbl3\xa4\xae-C\xc2M\xaat\x05x\a\x13<\xe6\xfe\xa0\x1ar\xba\xb2l\x9bE\xe5\xa4\xf7E\xb69sG\xe1\xb6(\x14\xc1Y\x1d\x8e\x19\x1f_\xc3B\x18Qhb\xf2&\xd8o\x97J\x18\x00#&\xf8\x96\xa4\x1aj\x1fm\xe8\x13\xa5E\xb0\xf8\xfc]\x9d\xaa\xb7\xb0\xa07\xc5\x83\x9a\xec\x97\xacs]\xf1\xfe\xa2^.\x94q\xdb\xc7&c\b.\x7f\xf8^\xa1\xdfJ', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x155, '\x00dev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\x06\x00\x00\x00\x00\x00\x00\x001\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\x01\x98\xc1\xcc\xd5\xc7\xb0\xf1\xb2{\v\x9a\xe1\xad\xdd\xf2c\xc7!c\t@\x8f\x06\xb2\x96\xde\x86O&5\x91y\x93\xdc\xd0\n[C\xe9'}}, 0x2e7)

0s ago: executing program 2 (id=3091):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
pipe2(&(0x7f0000000000), 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x430800, 0x0)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x3ff)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0}, 0x90)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc4583328eae0cae1f5eba229e6f216"})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty, 0xa36}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r5, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{}, "3f968a231afa0e18", "4a952e4ea416ad75f769d6386c3c044b", "0879a685", "e4eb37b07ad86ed7"}, 0x28)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'})
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000206010100000000000072fecb1ba7341a5adfce0fc2c6b44ace4055907c386e3880040003006806000000697000050001000700"/72], 0x38}}, 0x0)

kernel console output (not intermixed with test programs):

806.012:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11582 comm="syz.2.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2b975bd9 code=0x7ffc0000
[  480.408709][   T29] audit: type=1326 audit(1720610806.012:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11582 comm="syz.2.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2b975bd9 code=0x7ffc0000
[  480.501069][   T29] audit: type=1326 audit(1720610806.012:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11582 comm="syz.2.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2b975bd9 code=0x7ffc0000
[  480.583749][   T29] audit: type=1326 audit(1720610806.012:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11582 comm="syz.2.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2b975bd9 code=0x7ffc0000
[  480.755421][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  480.767917][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  480.778497][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  480.787804][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  480.795699][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  480.803112][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  481.241027][T11625] 9pnet_fd: Insufficient options for proto=fd
[  481.891133][ T9950] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.909378][ T9950] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.941748][T11616] lo speed is unknown, defaulting to 1000
[  482.154041][ T9950] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  482.290933][ T9950] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.475906][ T9950] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  482.513746][ T9950] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.687047][ T9950] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  482.702803][ T5098] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  482.729463][ T9950] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.816293][ T5098] Bluetooth: hci1: command tx timeout
[  483.159237][T11652] sctp: [Deprecated]: syz.0.2174 (pid 11652) Use of int in max_burst socket option.
[  483.159237][T11652] Use struct sctp_assoc_value instead
[  483.383240][ T9950] team0: left allmulticast mode
[  483.399207][ T9950] team_slave_0: left allmulticast mode
[  483.427627][ T9950] team_slave_1: left allmulticast mode
[  483.433222][ T9950] team0: left promiscuous mode
[  483.462074][ T9950] team_slave_0: left promiscuous mode
[  483.478778][ T9950] team_slave_1: left promiscuous mode
[  483.509285][ T9950] bridge0: port 3(team0) entered disabled state
[  483.554837][ T9950] bridge_slave_1: left allmulticast mode
[  483.585457][ T9950] bridge_slave_1: left promiscuous mode
[  483.591240][ T9950] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.810582][ T9950] bridge_slave_0: left promiscuous mode
[  483.819867][ T9950] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.903290][ T5098] Bluetooth: hci1: command tx timeout
[  486.976888][ T5098] Bluetooth: hci1: command tx timeout
[  488.542852][T11739] xt_cgroup: invalid path, errno=-2
[  489.077001][ T5098] Bluetooth: hci1: command tx timeout
[  489.327437][ T9950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  489.375869][ T9950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  489.407218][ T9950] bond0 (unregistering): Released all slaves
[  489.459639][T11616] chnl_net:caif_netlink_parms(): no params data found
[  489.637355][ T8271] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  489.840353][ T8271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  489.866733][ T8271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  489.880997][ T8271] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00
[  489.890311][ T8271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.900872][ T8271] usb 1-1: config 0 descriptor??
[  490.275358][T11616] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.299786][T11616] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.338641][T11616] bridge_slave_0: entered allmulticast mode
[  490.369178][ T8271] apple 0003:05AC:0262.0008: unbalanced delimiter at end of report description
[  490.379635][T11616] bridge_slave_0: entered promiscuous mode
[  490.426562][ T8271] apple 0003:05AC:0262.0008: parse failed
[  490.433599][T11616] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.443812][ T8271] apple 0003:05AC:0262.0008: probe with driver apple failed with error -22
[  490.470335][T11616] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.494078][T11616] bridge_slave_1: entered allmulticast mode
[  490.519801][T11616] bridge_slave_1: entered promiscuous mode
[  490.546711][ T9950] hsr_slave_0: left promiscuous mode
[  490.560736][ T9950] hsr_slave_1: left promiscuous mode
[  490.593410][ T9950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  490.602488][ T8271] usb 1-1: USB disconnect, device number 13
[  490.627534][ T9950] batman_adv: batadv0: Removing interface: batadv_slave_0
[  490.647803][ T9950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  490.661830][ T9950] batman_adv: batadv0: Removing interface: batadv_slave_1
[  490.675951][T11775] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  490.760184][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  490.760201][   T29] audit: type=1804 audit(1720610817.009:152): pid=11775 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.2221" name="/newroot/73/bus/file0" dev="overlay" ino=42244 res=1 errno=0
[  490.769353][ T9950] veth1_macvtap: left promiscuous mode
[  490.816510][ T9950] veth0_macvtap: left promiscuous mode
[  490.841397][ T9950] veth1_vlan: left promiscuous mode
[  490.856921][ T9950] veth0_vlan: left promiscuous mode
[  490.937665][ T5136] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  491.127628][ T5136] usb 5-1: Using ep0 maxpacket: 8
[  491.140098][ T5136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  491.160266][ T5136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  491.195650][ T5136] usb 5-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=5c.30
[  491.240267][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.267348][ T5136] usb 5-1: config 0 descriptor??
[  491.291157][ T5136] hdpvr 5-1:0.0: Could not find bulk-in endpoint
[  491.315713][ T5136] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12
[  491.546731][ T5136] usb 5-1: USB disconnect, device number 23
[  492.053403][ T9950] team0 (unregistering): Port device team_slave_1 removed
[  492.138393][ T9950] team0 (unregistering): Port device team_slave_0 removed
[  492.521643][T11792] trusted_key: encrypted_key: keyword 'upKate' not recognized
[  492.561937][T11792] 9pnet_fd: Insufficient options for proto=fd
[  493.167933][T11616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  493.233773][T11616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  493.374397][T11801] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2231'.
[  493.390265][T11616] team0: Port device team_slave_0 added
[  493.410675][T11616] team0: Port device team_slave_1 added
[  493.430125][T11801] netlink: 'syz.2.2231': attribute type 1 has an invalid length.
[  493.440084][T11801] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2231'.
[  493.528864][T11801] sctp: [Deprecated]: syz.2.2231 (pid 11801) Use of struct sctp_assoc_value in delayed_ack socket option.
[  493.528864][T11801] Use struct sctp_sack_info instead
[  493.588182][T11616] batman_adv: batadv0: Adding interface: batadv_slave_0
[  493.607796][T11616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  493.633722][    C0] vkms_vblank_simulate: vblank timer overrun
[  493.658748][T11616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  493.745762][T11616] batman_adv: batadv0: Adding interface: batadv_slave_1
[  493.774284][T11809] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  493.783562][T11616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  493.825876][T11809] vhci_hcd: invalid port number 246
[  493.836106][T11809] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  493.878684][T11616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  494.072810][T11616] hsr_slave_0: entered promiscuous mode
[  494.100793][T11616] hsr_slave_1: entered promiscuous mode
[  494.107182][T11616] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  494.126991][T11616] Cannot create hsr debugfs directory
[  494.228504][ T9950] IPVS: stop unused estimator thread 0...
[  494.308544][ T5134] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  494.506352][ T5134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  494.543906][ T5134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  494.574283][ T5134] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  494.616216][ T5134] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  494.651491][ T5134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.695022][ T5134] usb 1-1: config 0 descriptor??
[  495.181174][T11817] syz.0.2237[11817] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  495.181831][T11817] syz.0.2237[11817] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  495.228192][T11831] hsr0: entered promiscuous mode
[  495.342060][ T5134] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  495.370978][ T5134] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  495.434062][ T5134] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  495.643179][ T5177] usb 1-1: USB disconnect, device number 14
[  495.668192][T11616] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  495.724022][T11616] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  495.786246][T11616] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  495.838353][T11616] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  497.347914][T11616] 8021q: adding VLAN 0 to HW filter on device bond0
[  497.397667][T11616] 8021q: adding VLAN 0 to HW filter on device team0
[  497.453057][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.460231][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  497.756739][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.763934][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  499.124701][T11616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  499.420866][T11874] overlayfs: statfs failed on './file0'
[  499.594938][T11616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  499.659947][   T29] audit: type=1326 audit(1720610825.897:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11882 comm="syz.2.2261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c2b975bd9 code=0x0
[  499.710139][ T8271] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  499.803478][T11616] veth0_vlan: entered promiscuous mode
[  499.847356][T11616] veth1_vlan: entered promiscuous mode
[  499.911502][ T8271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  499.970387][ T8271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.009064][ T8271] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00
[  500.012809][T11616] veth0_macvtap: entered promiscuous mode
[  500.021500][ T8271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.080216][ T8271] usb 1-1: config 0 descriptor??
[  500.088705][   T58] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  500.141111][T11616] veth1_macvtap: entered promiscuous mode
[  500.202381][T11616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.213862][T11616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.229456][T11616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.240908][T11616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.259904][T11616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.312108][T11616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.322002][   T58] usb 2-1: Using ep0 maxpacket: 8
[  500.328681][   T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  500.348809][T11616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.361518][   T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  500.372267][T11616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.390214][T11616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.400281][   T58] usb 2-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=5c.30
[  500.430298][T11616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.435343][   T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.450260][    T8] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  500.462879][   T58] usb 2-1: config 0 descriptor??
[  500.479274][T11616] batman_adv: batadv0: Interface activated: batadv_slave_0
[  500.487973][   T58] hdpvr 2-1:0.0: Could not find bulk-in endpoint
[  500.538450][ T8271] apple 0003:05AC:0262.000A: unbalanced delimiter at end of report description
[  500.570691][   T58] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  500.573322][T11616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.599910][ T8271] apple 0003:05AC:0262.000A: parse failed
[  500.630661][ T8271] apple 0003:05AC:0262.000A: probe with driver apple failed with error -22
[  500.644514][T11616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.652477][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.664915][T11616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.696055][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.710425][T11616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.725625][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  500.730345][T11616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.770653][    T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  500.796821][ T8271] usb 2-1: USB disconnect, device number 8
[  500.811703][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.853529][T11616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.869722][    T8] usb 5-1: config 0 descriptor??
[  500.920405][T11616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.992241][T11616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.082770][T11616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.094012][T11616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.129135][T11616] batman_adv: batadv0: Interface activated: batadv_slave_1
[  501.301252][   T25] usb 1-1: USB disconnect, device number 15
[  501.381757][T11887] syz.4.2263[11887] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  501.381912][T11887] syz.4.2263[11887] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  501.407821][T11616] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  501.573540][T11616] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  501.628435][T11616] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  501.670926][T11616] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  501.765521][    T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  501.812738][    T8] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  501.819829][    T8] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  501.933132][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.950795][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  502.008511][    T8] usb 5-1: USB disconnect, device number 24
[  502.028706][T11920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  502.055960][T11920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  502.503962][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  502.517572][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  503.236734][   T29] audit: type=1326 audit(1720610829.466:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11976 comm="syz.4.2276" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e2e175bd9 code=0x0
[  503.336863][T11985] input: syz1 as /devices/virtual/input/input15
[  503.920628][T11999] xt_bpf: check failed: parse error
[  504.936283][T12006] Bluetooth: MGMT ver 1.22
[  504.944771][T12006] Bluetooth: hci3: invalid length 0, exp 2 for type 18
[  505.088059][T12013] bridge0: port 3(ip6gretap0) entered blocking state
[  505.119394][T12013] bridge0: port 3(ip6gretap0) entered disabled state
[  505.139806][T12013] ip6gretap0: entered allmulticast mode
[  505.181669][T12013] ip6gretap0: entered promiscuous mode
[  505.214343][T12013] bridge0: port 3(ip6gretap0) entered blocking state
[  505.221165][T12013] bridge0: port 3(ip6gretap0) entered forwarding state
[  505.738737][T12034] ALSA: mixer_oss: invalid OSS volume '00000000000000000000'
[  505.760934][T12034] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›'
[  505.809344][T12034] ALSA: mixer_oss: invalid OSS volume 'DIGI'
[  505.943936][   T29] audit: type=1326 audit(1720610832.185:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12037 comm="syz.1.2296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efed0775bd9 code=0x0
[  505.964988][    C0] vkms_vblank_simulate: vblank timer overrun
[  506.699350][T12061] qrtr: Invalid version 48
[  506.809232][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2304'.
[  506.936874][T12061] loop0: detected capacity change from 0 to 7
[  506.961991][T12061] Dev loop0: unable to read RDB block 7
[  506.971545][T12061]  loop0: unable to read partition table
[  506.981101][T12061] loop0: partition table beyond EOD, truncated
[  506.989439][T12061] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  506.989439][T12061] 
) failed (rc=-5)
[  507.397637][T12082] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  509.382592][    C0] sched: RT throttling activated
[  511.065422][ T5098] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  511.065748][ T5098] Bluetooth: hci1: Injecting HCI hardware error event
[  511.068983][ T5098] Bluetooth: hci1: hardware error 0x00
[  513.016554][   T29] audit: type=1326 audit(1720610839.253:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12118 comm="syz.3.2328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fc1d75bd9 code=0x0
[  513.066818][T12080] infiniband syz2: set active
[  513.076831][T12080] infiniband syz2: added bond_slave_1
[  513.090708][T12080] syz2: rxe_create_cq: returned err = -12
[  513.097912][T12080] infiniband syz2: Couldn't create ib_mad CQ
[  513.120587][T12080] infiniband syz2: Couldn't open port 1
[  513.441717][ T5098] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  515.408405][T12080] RDS/IB: syz2: added
[  515.412665][T12080] smc: adding ib device syz2 with port count 1
[  515.423755][T12080] smc:    ib device syz2 port 1 has pnetid 
[  515.704611][   T58] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  515.932520][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  515.974176][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  516.024030][   T58] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00
[  516.054726][   T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.093292][   T58] usb 3-1: config 0 descriptor??
[  516.607172][   T58] apple 0003:05AC:0262.000C: unbalanced delimiter at end of report description
[  516.652945][   T58] apple 0003:05AC:0262.000C: parse failed
[  516.694809][   T58] apple 0003:05AC:0262.000C: probe with driver apple failed with error -22
[  516.970038][   T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.069395][   T58] usb 3-1: USB disconnect, device number 12
[  517.158308][ T5177] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  517.180379][   T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.344544][   T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.379168][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  517.395109][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  517.434804][ T5177] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  517.474936][ T5177] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  517.497160][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.526044][ T5177] usb 5-1: config 0 descriptor??
[  517.603371][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  517.608693][   T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.655186][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  517.672318][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  517.681438][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  517.689635][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  517.698036][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  517.780118][T12155] lo speed is unknown, defaulting to 1000
[  518.332312][   T64] bridge_slave_1: left allmulticast mode
[  518.339586][   T64] bridge_slave_1: left promiscuous mode
[  518.354028][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.430190][   T64] bridge_slave_0: left allmulticast mode
[  518.450751][   T64] bridge_slave_0: left promiscuous mode
[  518.484749][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.661430][ T5177] usbhid 5-1:0.0: can't add hid device: -71
[  518.677277][ T5177] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  518.717996][ T5177] usb 5-1: USB disconnect, device number 25
[  518.977696][ T5098] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  518.993050][ T5098] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  519.029179][ T5098] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  519.043194][ T5098] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  519.051559][ T5098] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  519.063260][ T5098] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  520.474410][ T5087] Bluetooth: hci1: command tx timeout
[  521.056448][   T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  521.093416][   T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  521.121427][   T64] bond0 (unregistering): Released all slaves
[  521.145972][ T5087] Bluetooth: hci6: command tx timeout
[  521.407630][T12172] lo speed is unknown, defaulting to 1000
[  522.517574][ T5087] Bluetooth: hci1: command tx timeout
[  522.569610][T12216] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2364'.
[  522.688235][T12155] chnl_net:caif_netlink_parms(): no params data found
[  522.968360][T12228] xt_policy: output policy not valid in PREROUTING and INPUT
[  523.016484][T12155] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.023794][T12155] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.031936][T12155] bridge_slave_0: entered allmulticast mode
[  523.041038][T12155] bridge_slave_0: entered promiscuous mode
[  523.054465][T12155] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.063273][T12155] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.076209][T12155] bridge_slave_1: entered allmulticast mode
[  523.093965][T12155] bridge_slave_1: entered promiscuous mode
[  523.226415][ T5087] Bluetooth: hci6: command tx timeout
[  523.645443][T12155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.718210][T12155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.852044][T12155] team0: Port device team_slave_0 added
[  523.895580][T12155] team0: Port device team_slave_1 added
[  524.052752][T12155] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.062805][T12155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  524.091486][    C0] vkms_vblank_simulate: vblank timer overrun
[  524.133512][T12155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  524.189106][T12155] batman_adv: batadv0: Adding interface: batadv_slave_1
[  524.205719][T12155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  524.306675][T12155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  524.527025][T12155] hsr_slave_0: entered promiscuous mode
[  524.543290][T12155] hsr_slave_1: entered promiscuous mode
[  524.569860][T12155] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  524.586926][ T5087] Bluetooth: hci1: command tx timeout
[  524.597175][T12155] Cannot create hsr debugfs directory
[  525.274982][T12259] could not allocate digest TFM handle sha256-arm64-neon
[  525.307714][ T5087] Bluetooth: hci6: command tx timeout
[  526.353653][T12155] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  526.413254][T12155] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  526.479564][T12155] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  526.529402][T12155] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  526.547621][ T5136] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  526.667962][ T5087] Bluetooth: hci1: command tx timeout
[  526.788140][ T5136] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  526.820629][ T5136] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  526.856514][ T5136] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  526.875962][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.902906][ T5136] usb 5-1: Product: syz
[  526.907119][ T5136] usb 5-1: Manufacturer: syz
[  526.936701][T12155] 8021q: adding VLAN 0 to HW filter on device bond0
[  526.947405][ T5136] usb 5-1: SerialNumber: syz
[  527.030541][ T5136] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing
[  527.052527][ T5136] cdc_ncm 5-1:1.0: bind() failure
[  527.100482][T12155] 8021q: adding VLAN 0 to HW filter on device team0
[  527.214656][T12155] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  527.245873][T12274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  527.341119][T12155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  527.371928][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.379103][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.388007][ T5087] Bluetooth: hci6: command tx timeout
[  527.400262][T12274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  528.264680][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.271949][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.283812][    T8] usb 5-1: USB disconnect, device number 26
[  529.513525][T12155] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.737826][   T64] hsr_slave_0: left promiscuous mode
[  529.969308][   T64] hsr_slave_1: left promiscuous mode
[  530.021082][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  530.333321][ T5098] Bluetooth: hci4: command 0x0406 tx timeout
[  530.778442][   T64] batman_adv: batadv0: Removing interface: batadv_slave_0
[  530.993957][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  531.011931][   T64] batman_adv: batadv0: Removing interface: batadv_slave_1
[  531.201268][   T64] veth1_macvtap: left promiscuous mode
[  531.208130][   T64] veth0_macvtap: left promiscuous mode
[  531.241858][   T64] veth1_vlan: left promiscuous mode
[  531.269000][T12335] hub 9-0:1.0: USB hub found
[  531.278328][   T64] veth0_vlan: left promiscuous mode
[  531.295713][T12335] hub 9-0:1.0: 8 ports detected
[  531.469567][ T8271] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  531.720764][ T8271] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  531.748636][ T8271] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  531.798003][ T8271] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  531.855073][ T8271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.878448][ T8271] usb 1-1: Product: syz
[  531.888930][ T8271] usb 1-1: Manufacturer: syz
[  531.893589][ T8271] usb 1-1: SerialNumber: syz
[  531.937187][ T8271] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing
[  531.988758][ T8271] cdc_ncm 1-1:1.0: bind() failure
[  532.162269][T12333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.239124][T12333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.365665][ T5189] usb 1-1: USB disconnect, device number 16
[  533.305765][T12354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2410'.
[  533.678414][   T64] team0 (unregistering): Port device team_slave_1 removed
[  533.754227][   T64] team0 (unregistering): Port device team_slave_0 removed
[  535.069902][T12172] chnl_net:caif_netlink_parms(): no params data found
[  535.451161][T12155] veth0_vlan: entered promiscuous mode
[  535.710274][T12378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2419'.
[  535.721304][T12377] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2418'.
[  535.769226][T12377] unsupported nlmsg_type 40
[  535.799182][T12172] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.827559][T12172] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.860270][T12172] bridge_slave_0: entered allmulticast mode
[  535.897029][T12172] bridge_slave_0: entered promiscuous mode
[  535.943242][T12172] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.980747][T12172] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.998256][T12172] bridge_slave_1: entered allmulticast mode
[  536.031578][T12172] bridge_slave_1: entered promiscuous mode
[  536.182953][T12155] veth1_vlan: entered promiscuous mode
[  536.213963][T12387] tipc: Failed to obtain node identity
[  536.228415][T12387] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  537.440377][T12172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  537.467017][T12155] veth0_macvtap: entered promiscuous mode
[  537.625274][T12172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  537.948566][T12155] veth1_macvtap: entered promiscuous mode
[  538.096669][T12172] team0: Port device team_slave_0 added
[  538.228951][T12172] team0: Port device team_slave_1 added
[  539.045267][T12419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2429'.
[  539.088346][   T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.530434][   T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.595196][T12172] batman_adv: batadv0: Adding interface: batadv_slave_0
[  539.634022][T12172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  539.660030][    C0] vkms_vblank_simulate: vblank timer overrun
[  539.745561][T12172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  539.789713][T12172] batman_adv: batadv0: Adding interface: batadv_slave_1
[  539.821732][T12172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  539.939073][T12172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  540.186785][   T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.253035][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  540.290975][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.332593][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  540.380885][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.402176][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  540.416827][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.427327][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  540.438157][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.450634][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  540.469010][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.510285][T12155] batman_adv: batadv0: Interface activated: batadv_slave_0
[  540.617998][   T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.714625][T12449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2439'.
[  540.777540][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.849359][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.919010][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.941133][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.951706][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.964825][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.977109][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.990468][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.008158][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.022592][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.076704][T12155] batman_adv: batadv0: Interface activated: batadv_slave_1
[  541.149033][T12172] hsr_slave_0: entered promiscuous mode
[  541.180581][T12172] hsr_slave_1: entered promiscuous mode
[  541.198170][T12172] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  541.212771][T12172] Cannot create hsr debugfs directory
[  541.250542][T12155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  541.250572][T12155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  541.250612][T12155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  541.250634][T12155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  541.465829][T12458] binder: 12452:12458 ioctl c0306201 0 returned -14
[  541.863718][   T64] bridge_slave_1: left allmulticast mode
[  541.873902][   T64] bridge_slave_1: left promiscuous mode
[  541.889929][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.940746][   T64] bridge_slave_0: left allmulticast mode
[  541.981049][   T64] bridge_slave_0: left promiscuous mode
[  541.996001][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.230214][T12493] ubi0: attaching mtd0
[  543.248754][T12493] ubi0: scanning is finished
[  543.253500][T12493] ubi0: empty MTD device detected
[  544.019261][T12493] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  544.822815][   T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  544.872494][   T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  544.906569][   T64] infiniband syz2: set down
[  544.971973][T12522] ubi0: attaching mtd0
[  545.566779][   T64] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  545.628333][   T64] bond0 (unregistering): Released all slaves
[  545.680270][T12522] ubi0: scanning is finished
[  545.779782][T12522] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  546.122982][T11925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.130858][T11925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.613735][T11918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.636099][T11918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.862447][T12541] tipc: Failed to obtain node identity
[  546.867991][T12541] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  546.877689][T12550] binder: 12545:12550 ioctl c0306201 0 returned -14
[  548.175202][ T5087] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  548.186711][ T5087] CPU: 0 PID: 5087 Comm: kworker/u9:2 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0
[  548.196988][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  548.207067][ T5087] Workqueue: hci1 hci_rx_work
[  548.211793][ T5087] Call Trace:
[  548.215091][ T5087]  <TASK>
[  548.218041][ T5087]  dump_stack_lvl+0x241/0x360
[  548.222758][ T5087]  ? __pfx_dump_stack_lvl+0x10/0x10
[  548.227991][ T5087]  ? __pfx__printk+0x10/0x10
[  548.232622][ T5087]  ? sysfs_create_dir_ns+0x28a/0x3a0
[  548.237946][ T5087]  ? kmalloc_trace_noprof+0x19c/0x2c0
[  548.243371][ T5087]  sysfs_create_dir_ns+0x2ce/0x3a0
[  548.248520][ T5087]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  548.254196][ T5087]  kobject_add_internal+0x435/0x8d0
[  548.259453][ T5087]  kobject_add+0x152/0x220
[  548.263916][ T5087]  ? do_raw_spin_unlock+0x13c/0x8b0
[  548.269158][ T5087]  ? device_add+0x3e7/0xbf0
[  548.273707][ T5087]  ? __pfx_kobject_add+0x10/0x10
[  548.278682][ T5087]  ? _raw_spin_unlock+0x28/0x50
[  548.283585][ T5087]  ? get_device_parent+0x165/0x410
[  548.288739][ T5087]  device_add+0x4e5/0xbf0
[  548.293125][ T5087]  hci_conn_add_sysfs+0xe8/0x200
[  548.298110][ T5087]  le_conn_complete_evt+0xc9f/0x12e0
[  548.303429][ T5087]  ? trace_contention_end+0x3c/0x120
[  548.308751][ T5087]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  548.314507][ T5087]  ? __mutex_unlock_slowpath+0x21d/0x750
[  548.320173][ T5087]  ? __copy_skb_header+0x437/0x5b0
[  548.325320][ T5087]  ? skb_pull_data+0x112/0x230
[  548.330130][ T5087]  hci_le_enh_conn_complete_evt+0x185/0x420
[  548.336072][ T5087]  hci_event_packet+0xa53/0x1540
[  548.341045][ T5087]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  548.346391][ T5087]  ? __pfx_hci_event_packet+0x10/0x10
[  548.351797][ T5087]  ? do_raw_spin_unlock+0x13c/0x8b0
[  548.357036][ T5087]  ? hci_send_to_monitor+0xd8/0x7f0
[  548.362254][ T5087]  ? kcov_remote_start+0x9e/0x7e0
[  548.367311][ T5087]  hci_rx_work+0x3e8/0xca0
[  548.371805][ T5087]  ? process_scheduled_works+0x945/0x1830
[  548.377545][ T5087]  process_scheduled_works+0xa2c/0x1830
[  548.383144][ T5087]  ? __pfx_process_scheduled_works+0x10/0x10
[  548.389170][ T5087]  ? assign_work+0x364/0x3d0
[  548.393788][ T5087]  worker_thread+0x86d/0xd50
[  548.398429][ T5087]  ? __kthread_parkme+0x169/0x1d0
[  548.403503][ T5087]  ? __pfx_worker_thread+0x10/0x10
[  548.408664][ T5087]  kthread+0x2f0/0x390
[  548.412762][ T5087]  ? __pfx_worker_thread+0x10/0x10
[  548.417909][ T5087]  ? __pfx_kthread+0x10/0x10
[  548.422529][ T5087]  ret_from_fork+0x4b/0x80
[  548.426976][ T5087]  ? __pfx_kthread+0x10/0x10
[  548.431597][ T5087]  ret_from_fork_asm+0x1a/0x30
[  548.436417][ T5087]  </TASK>
[  548.439466][    C0] vkms_vblank_simulate: vblank timer overrun
[  549.105020][ T5087] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  549.119458][ T5087] Bluetooth: hci1: failed to register connection device
[  549.323212][   T58] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  549.575875][   T58] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  549.630226][   T58] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[  549.681090][   T58] usb 5-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=5d.6c
[  549.701872][T12172] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  549.709108][   T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.709138][   T58] usb 5-1: Product: syz
[  549.709155][   T58] usb 5-1: Manufacturer: syz
[  549.709174][   T58] usb 5-1: SerialNumber: syz
[  549.826142][T12172] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  550.094165][T12172] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  550.136588][   T58] usb 5-1: config 0 descriptor??
[  550.172484][   T58] usb 5-1: can't set config #0, error -71
[  550.179199][T12172] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  550.233708][   T58] usb 5-1: USB disconnect, device number 27
[  550.335065][   T64] hsr_slave_0: left promiscuous mode
[  550.362769][   T64] hsr_slave_1: left promiscuous mode
[  550.387433][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  550.401869][   T64] batman_adv: batadv0: Removing interface: batadv_slave_0
[  550.433205][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  550.454343][   T64] batman_adv: batadv0: Removing interface: batadv_slave_1
[  550.549489][   T64] veth1_macvtap: left promiscuous mode
[  550.579062][   T64] veth0_macvtap: left promiscuous mode
[  550.592692][   T64] veth1_vlan: left promiscuous mode
[  550.621865][   T64] veth0_vlan: left promiscuous mode
[  551.153669][ T5098] Bluetooth: hci1: command tx timeout
[  551.755733][T12601] netlink: 'syz.2.2489': attribute type 29 has an invalid length.
[  552.657271][   T64] team0 (unregistering): Port device team_slave_1 removed
[  552.833428][   T64] team0 (unregistering): Port device team_slave_0 removed
[  553.008645][T11918] smc: removing ib device syz2
[  555.159343][T12591] tipc: Failed to obtain node identity
[  555.170243][T12591] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  555.347765][T12601] netlink: 'syz.2.2489': attribute type 29 has an invalid length.
[  556.181707][T12172] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.338331][T12172] 8021q: adding VLAN 0 to HW filter on device team0
[  556.389843][T12629] netlink: 'syz.2.2503': attribute type 29 has an invalid length.
[  556.429860][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.437171][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.486509][T12629] netlink: 'syz.2.2503': attribute type 29 has an invalid length.
[  556.505508][T12636] netlink: 'syz.2.2503': attribute type 29 has an invalid length.
[  556.555431][T12629] netlink: 'syz.2.2503': attribute type 29 has an invalid length.
[  556.579863][T12637] netlink: 'syz.3.2501': attribute type 10 has an invalid length.
[  556.615743][T12637] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.623372][T12637] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.703437][T12637] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.705279][T12637] bridge0: port 2(bridge_slave_1) entered forwarding state
[  556.705637][T12637] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.705793][T12637] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.738430][T12637] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  556.785951][ T5098] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  556.786018][ T5098] CPU: 0 PID: 5098 Comm: kworker/u9:5 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0
[  556.786047][ T5098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  556.786064][ T5098] Workqueue: hci0 hci_rx_work
[  556.786106][ T5098] Call Trace:
[  556.786117][ T5098]  <TASK>
[  556.786128][ T5098]  dump_stack_lvl+0x241/0x360
[  556.786173][ T5098]  ? __pfx_dump_stack_lvl+0x10/0x10
[  556.786211][ T5098]  ? __pfx__printk+0x10/0x10
[  556.786249][ T5098]  ? sysfs_create_dir_ns+0x28a/0x3a0
[  556.786277][ T5098]  ? kmalloc_trace_noprof+0x19c/0x2c0
[  556.786316][ T5098]  sysfs_create_dir_ns+0x2ce/0x3a0
[  556.786348][ T5098]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  556.786388][ T5098]  kobject_add_internal+0x435/0x8d0
[  556.786436][ T5098]  kobject_add+0x152/0x220
[  556.786472][ T5098]  ? do_raw_spin_unlock+0x13c/0x8b0
[  556.786507][ T5098]  ? device_add+0x3e7/0xbf0
[  556.786561][ T5098]  ? __pfx_kobject_add+0x10/0x10
[  556.786598][ T5098]  ? _raw_spin_unlock+0x28/0x50
[  556.786640][ T5098]  ? get_device_parent+0x165/0x410
[  556.786680][ T5098]  device_add+0x4e5/0xbf0
[  556.786724][ T5098]  hci_conn_add_sysfs+0xe8/0x200
[  556.786758][ T5098]  le_conn_complete_evt+0xc9f/0x12e0
[  556.786793][ T5098]  ? trace_contention_end+0x3c/0x120
[  556.786829][ T5098]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  556.786856][ T5098]  ? __mutex_unlock_slowpath+0x21d/0x750
[  556.786887][ T5098]  ? __copy_skb_header+0x437/0x5b0
[  556.786922][ T5098]  ? skb_pull_data+0x112/0x230
[  556.786964][ T5098]  hci_le_enh_conn_complete_evt+0x185/0x420
[  556.787012][ T5098]  hci_event_packet+0xa53/0x1540
[  556.787051][ T5098]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  556.787095][ T5098]  ? __pfx_hci_event_packet+0x10/0x10
[  556.787125][ T5098]  ? do_raw_spin_unlock+0x13c/0x8b0
[  556.787168][ T5098]  ? hci_send_to_monitor+0xd8/0x7f0
[  556.787194][ T5098]  ? kcov_remote_start+0x9e/0x7e0
[  556.787226][ T5098]  hci_rx_work+0x3e8/0xca0
[  556.787270][ T5098]  ? process_scheduled_works+0x945/0x1830
[  556.787295][ T5098]  process_scheduled_works+0xa2c/0x1830
[  556.787357][ T5098]  ? __pfx_process_scheduled_works+0x10/0x10
[  556.787395][ T5098]  ? assign_work+0x364/0x3d0
[  556.787428][ T5098]  worker_thread+0x86d/0xd50
[  556.787474][ T5098]  ? __kthread_parkme+0x169/0x1d0
[  556.787506][ T5098]  ? __pfx_worker_thread+0x10/0x10
[  556.787533][ T5098]  kthread+0x2f0/0x390
[  556.787569][ T5098]  ? __pfx_worker_thread+0x10/0x10
[  556.787596][ T5098]  ? __pfx_kthread+0x10/0x10
[  556.787627][ T5098]  ret_from_fork+0x4b/0x80
[  556.787659][ T5098]  ? __pfx_kthread+0x10/0x10
[  556.787689][ T5098]  ret_from_fork_asm+0x1a/0x30
[  556.787743][ T5098]  </TASK>
[  556.787775][ T5098] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  556.787817][ T5098] Bluetooth: hci0: failed to register connection device
[  556.796848][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.797019][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  557.523267][T12172] 8021q: adding VLAN 0 to HW filter on device batadv0
[  557.634136][T12668] syz.0.2515: attempt to access beyond end of device
[  557.634136][T12668] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0
[  557.634609][T12668] syz.0.2515: attempt to access beyond end of device
[  557.634609][T12668] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0
[  557.634709][T12668] Mount JFS Failure: -5
[  557.688224][T12672] netlink: 'syz.3.2516': attribute type 29 has an invalid length.
[  557.688613][T12672] netlink: 'syz.3.2516': attribute type 29 has an invalid length.
[  557.702385][T12672] netlink: 'syz.3.2516': attribute type 29 has an invalid length.
[  557.703166][T12672] netlink: 'syz.3.2516': attribute type 29 has an invalid length.
[  557.781049][T12172] veth0_vlan: entered promiscuous mode
[  557.809906][T12172] veth1_vlan: entered promiscuous mode
[  557.967593][T12172] veth0_macvtap: entered promiscuous mode
[  557.983132][T12172] veth1_macvtap: entered promiscuous mode
[  558.022809][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.305414][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.320766][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.331383][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.343680][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.343704][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.343726][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.343743][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.343763][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.343779][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.347521][T12172] batman_adv: batadv0: Interface activated: batadv_slave_0
[  558.490986][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.564589][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.582073][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.594392][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.614089][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.625550][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.643091][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.660628][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.674488][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.692965][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.708397][T12172] batman_adv: batadv0: Interface activated: batadv_slave_1
[  558.736545][T12172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  558.753545][T12172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  558.769831][T12172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  558.789826][T12172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  558.838835][ T5098] Bluetooth: hci0: command 0x0406 tx timeout
[  559.045010][ T2860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.068280][ T2860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.122257][ T2860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.132968][ T2860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.971572][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  563.989208][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  565.299753][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2519'.
[  565.404730][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2524'.
[  565.480680][T12687] team_slave_0: entered promiscuous mode
[  565.507129][T12687] team_slave_0: entered allmulticast mode
[  565.623888][T12687] team0: Port device team_slave_0 removed
[  565.947724][T12713] bridge0: entered allmulticast mode
[  565.998705][T12713] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2533'.
[  566.076863][T12718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2533'.
[  566.091639][   T29] audit: type=1326 audit(1720610892.309:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12719 comm="syz.2.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2b975bd9 code=0x7ffc0000
[  566.113189][    C0] vkms_vblank_simulate: vblank timer overrun
[  567.908278][   T29] audit: type=1326 audit(1720610892.319:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12719 comm="syz.2.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2b975bd9 code=0x7ffc0000
[  567.988275][   T29] audit: type=1326 audit(1720610892.349:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12719 comm="syz.2.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2c2b975bd9 code=0x7ffc0000
[  568.009878][    C0] vkms_vblank_simulate: vblank timer overrun
[  568.026877][   T29] audit: type=1326 audit(1720610892.359:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12719 comm="syz.2.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2b975bd9 code=0x7ffc0000
[  568.087817][ T5136] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  568.107887][   T29] audit: type=1326 audit(1720610892.359:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12719 comm="syz.2.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2b975bd9 code=0x7ffc0000
[  568.166601][   T29] audit: type=1326 audit(1720610892.359:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12719 comm="syz.2.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2b975bd9 code=0x7ffc0000
[  568.258263][   T29] audit: type=1326 audit(1720610894.149:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12719 comm="syz.2.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2b975bd9 code=0x7ffc0000
[  568.279852][    C0] vkms_vblank_simulate: vblank timer overrun
[  568.292134][ T5136] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  568.343990][ T5136] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[  568.364100][   T29] audit: type=1326 audit(1720610894.169:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12719 comm="syz.2.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2b975bd9 code=0x7ffc0000
[  568.403084][ T5136] usb 4-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=5d.6c
[  568.424872][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.447981][   T29] audit: type=1326 audit(1720610894.169:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12719 comm="syz.2.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2b975bd9 code=0x7ffc0000
[  568.453396][ T5136] usb 4-1: Product: syz
[  568.500284][ T5136] usb 4-1: Manufacturer: syz
[  568.511870][   T29] audit: type=1326 audit(1720610894.169:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12719 comm="syz.2.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f2c2b975bd9 code=0x7ffc0000
[  568.515748][T12735] pim6reg1: entered promiscuous mode
[  568.548479][ T5136] usb 4-1: SerialNumber: syz
[  568.569178][ T5136] usb 4-1: config 0 descriptor??
[  568.596098][T12735] pim6reg1: entered allmulticast mode
[  569.891712][ T8271] usb 4-1: USB disconnect, device number 13
[  570.212799][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2559'.
[  571.035755][T12776] pim6reg1: entered promiscuous mode
[  571.048282][T12776] pim6reg1: entered allmulticast mode
[  571.736955][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2573'.
[  571.893975][T12819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  572.090535][T12819] lo speed is unknown, defaulting to 1000
[  572.417054][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'.
[  572.737855][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  572.737874][   T29] audit: type=1326 audit(1720610898.958:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12832 comm="syz.2.2582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c2b975bd9 code=0x0
[  573.078803][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2587'.
[  573.096432][T12837] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  573.262078][ T5098] Bluetooth: hci0: unexpected event for opcode 0x203c
[  573.979225][ T5134] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  574.181383][ T5134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  574.222969][ T5134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  574.280608][ T5134] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  574.319243][ T5134] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  574.371550][ T5134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.423389][ T5134] usb 1-1: config 0 descriptor??
[  574.471304][T12895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  574.644493][T12895] lo speed is unknown, defaulting to 1000
[  574.857060][ T5134] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  574.902533][ T5134] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  574.941792][ T5134] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  575.327652][    T8] usb 1-1: USB disconnect, device number 17
[  578.400939][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2604'.
[  579.119797][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2608'.
[  579.314330][   T29] audit: type=1326 audit(1720610905.536:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.0.2609" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb92bd75bd9 code=0x0
[  579.827866][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  579.838388][   T25] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  579.846310][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  579.862202][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  579.877085][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  579.886571][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  579.896785][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  580.017615][   T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.040805][   T25] usb 5-1: Using ep0 maxpacket: 32
[  580.053045][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x37 has an invalid bInterval 0, changing to 7
[  580.066744][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x37 has invalid wMaxPacketSize 0
[  580.080895][   T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  580.092383][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.107504][   T25] usb 5-1: config 0 descriptor??
[  580.124882][   T25] hub 5-1:0.0: bad descriptor, ignoring hub
[  580.142547][   T25] hub 5-1:0.0: probe with driver hub failed with error -5
[  580.162641][   T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  580.284231][   T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.301653][T12960] lo speed is unknown, defaulting to 1000
[  580.411384][   T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.451133][ T5189] usb 5-1: USB disconnect, device number 28
[  580.510769][   T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  580.569745][   T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.635941][ T5136] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  580.710900][   T25] usb 1-1: Using ep0 maxpacket: 32
[  580.790646][   T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  580.820891][   T25] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[  580.868900][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.949109][   T25] usb 1-1: config 0 descriptor??
[  581.005211][   T25] usb 1-1: bad CDC descriptors
[  581.052723][ T5136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  581.280042][ T5136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  581.297756][ T5136] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  581.311176][ T5136] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  581.331003][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.398310][ T5136] usb 4-1: config 0 descriptor??
[  581.522117][   T25] usb 1-1: USB disconnect, device number 18
[  581.533001][   T29] audit: type=1326 audit(2000000000.699:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12978 comm="syz.4.2618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e2e175bd9 code=0x0
[  581.561861][   T62] ip6gretap0: left allmulticast mode
[  581.585955][   T62] ip6gretap0: left promiscuous mode
[  581.631506][   T62] bridge0: port 3(ip6gretap0) entered disabled state
[  581.645146][   T62] bridge_slave_1: left allmulticast mode
[  581.651008][   T62] bridge_slave_1: left promiscuous mode
[  581.656810][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.698903][   T62] bridge_slave_0: left allmulticast mode
[  581.729265][   T62] bridge_slave_0: left promiscuous mode
[  581.744420][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.862028][ T5136] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  581.898813][ T5136] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  581.934413][ T5136] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  581.961263][ T5087] Bluetooth: hci4: command tx timeout
[  582.897308][   T25] usb 4-1: USB disconnect, device number 14
[  583.345655][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  583.382627][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  583.402144][   T62] bond0 (unregistering): Released all slaves
[  584.043116][ T5087] Bluetooth: hci4: command tx timeout
[  585.096212][T12960] chnl_net:caif_netlink_parms(): no params data found
[  585.361991][ T3063] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  585.551517][ T3063] usb 4-1: Using ep0 maxpacket: 32
[  585.583610][ T3063] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  585.612462][ T3063] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[  585.633835][ T3063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.744840][ T3063] usb 4-1: config 0 descriptor??
[  585.775427][ T3063] usb 4-1: bad CDC descriptors
[  585.993027][ T8271] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  586.011374][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  586.029084][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  586.070043][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  586.112400][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  586.122536][ T5087] Bluetooth: hci4: command tx timeout
[  586.156702][T13032] kvm: vcpu 0: requested 96 ns lapic timer period limited to 200000 ns
[  586.204514][ T8271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  586.222088][ T8271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  586.234432][ T5098] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  586.246532][ T8271] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  586.259778][ T5098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  586.260149][   T62] veth1_macvtap: left promiscuous mode
[  586.277639][ T5098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  586.285260][ T8271] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  586.294776][ T8271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.309447][ T5098] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  586.317290][ T5098] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  586.324657][ T5098] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  586.360120][ T8271] usb 1-1: config 0 descriptor??
[  586.382350][   T62] veth0_macvtap: left promiscuous mode
[  586.388081][   T62] veth1_vlan: left promiscuous mode
[  586.394370][ T3063] usb 4-1: USB disconnect, device number 15
[  586.410747][   T62] veth0_vlan: left promiscuous mode
[  586.787378][ T8271] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  586.797957][ T8271] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  586.833884][ T8271] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  587.165848][ T3063] usb 1-1: USB disconnect, device number 19
[  588.204308][ T5098] Bluetooth: hci4: command tx timeout
[  588.363592][ T5098] Bluetooth: hci5: command tx timeout
[  588.404517][   T62] team0 (unregistering): Port device team_slave_1 removed
[  588.519541][   T62] team0 (unregistering): Port device team_slave_0 removed
[  589.334187][    T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  589.542933][    T8] usb 1-1: Using ep0 maxpacket: 32
[  589.554215][    T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  589.599581][    T8] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  589.612945][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.621991][T12960] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.629204][    T8] usb 1-1: Product: syz
[  589.634573][T12960] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.641834][T12960] bridge_slave_0: entered allmulticast mode
[  589.644140][    T8] usb 1-1: Manufacturer: syz
[  589.655028][    T8] usb 1-1: SerialNumber: syz
[  589.673308][    T8] usb 1-1: config 0 descriptor??
[  589.685785][T13097] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  589.685869][T12960] bridge_slave_0: entered promiscuous mode
[  589.744175][T12960] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.751347][T12960] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.787188][T12960] bridge_slave_1: entered allmulticast mode
[  589.793290][T13109] tmpfs: Bad value for 'nr_blocks'
[  589.812415][T12960] bridge_slave_1: entered promiscuous mode
[  590.456642][ T5098] Bluetooth: hci5: command tx timeout
[  590.680448][T12960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  590.716996][T12960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  590.852143][T12960] team0: Port device team_slave_0 added
[  590.885093][    T8] usb 1-1: USB disconnect, device number 20
[  590.888572][T12960] team0: Port device team_slave_1 added
[  590.981398][T13063] lo speed is unknown, defaulting to 1000
[  591.102767][T12960] batman_adv: batadv0: Adding interface: batadv_slave_0
[  591.120578][T12960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  591.183286][T12960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  591.218515][T12960] batman_adv: batadv0: Adding interface: batadv_slave_1
[  591.236778][T12960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  591.246202][T13119] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  591.342210][T12960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  591.526938][T12960] hsr_slave_0: entered promiscuous mode
[  591.535208][T12960] hsr_slave_1: entered promiscuous mode
[  591.549337][T12960] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  591.570126][T12960] Cannot create hsr debugfs directory
[  591.964969][   T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.124498][    T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  592.403724][    T8] usb 4-1: Using ep0 maxpacket: 32
[  592.721322][ T5098] Bluetooth: hci5: command tx timeout
[  592.894279][    T8] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=c3.cc
[  592.914127][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.922173][    T8] usb 4-1: Product: syz
[  592.927870][    T8] usb 4-1: Manufacturer: syz
[  592.932539][    T8] usb 4-1: SerialNumber: syz
[  592.949201][    T8] usb 4-1: config 0 descriptor??
[  592.966717][    T8] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected
[  592.989571][    T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87
[  593.033939][    T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[  593.087781][    T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[  593.116125][    T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[  593.125720][    T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[  593.163244][    T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
[  593.201347][   T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.219414][    T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[  593.245496][    T8] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  593.267878][    T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83
[  593.276439][    T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3
[  593.285388][    T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4
[  593.294514][    T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86
[  593.303837][    T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6
[  593.314689][T13130] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  593.315910][    T8] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  593.616662][   T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.626158][    T8] usb 4-1: USB disconnect, device number 16
[  593.662356][    T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  593.697482][    T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  593.720836][T13137] tmpfs: Bad value for 'nr_blocks'
[  593.726736][    T8] keyspan 4-1:0.0: device disconnected
[  593.799005][   T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.954058][T13141] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  594.121949][T13063] chnl_net:caif_netlink_parms(): no params data found
[  594.571897][   T62] bridge_slave_1: left allmulticast mode
[  594.588375][   T62] bridge_slave_1: left promiscuous mode
[  594.624351][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.658948][   T62] bridge_slave_0: left allmulticast mode
[  594.682625][   T62] bridge_slave_0: left promiscuous mode
[  594.711266][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.764501][ T5098] Bluetooth: hci5: command tx timeout
[  594.916204][T13164] 9pnet: p9_errstr2errno: server reported unknown error Ý@íÎhQI¸¥ŠteœkKzE
[  595.179483][T13174] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.2690'.
[  595.620725][   T62] bridge0 (unregistering): left allmulticast mode
[  595.976712][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  596.006305][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  596.025784][   T62] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  596.056639][   T62] bond0 (unregistering): Released all slaves
[  596.474278][T13063] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.496420][T13063] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.584536][T13063] bridge_slave_0: entered allmulticast mode
[  596.602975][T13063] bridge_slave_0: entered promiscuous mode
[  596.678381][T13063] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.717914][T13063] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.730572][T13063] bridge_slave_1: entered allmulticast mode
[  596.741366][T13063] bridge_slave_1: entered promiscuous mode
[  596.860132][T13193] netdevsim netdevsim3: Direct firmware load for ng failed with error -2
[  596.870971][T13193] netdevsim netdevsim3: Falling back to sysfs fallback for: ng
[  596.935407][T13063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  596.992079][T13063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  597.120741][T13063] team0: Port device team_slave_0 added
[  597.230845][T13063] team0: Port device team_slave_1 added
[  597.383919][   T62] hsr_slave_0: left promiscuous mode
[  597.390169][   T62] hsr_slave_1: left promiscuous mode
[  597.438575][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  597.458247][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  597.479463][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  597.497704][T13209] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.2701'.
[  597.502369][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  597.580759][   T62] veth1_macvtap: left promiscuous mode
[  597.588650][   T62] veth0_macvtap: left promiscuous mode
[  597.602907][   T62] veth1_vlan: left promiscuous mode
[  597.609782][   T62] veth0_vlan: left promiscuous mode
[  598.045258][ T3063] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  598.319665][ T3063] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=94.10
[  598.338052][ T3063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.354321][ T3063] usb 4-1: Product: syz
[  598.362221][ T3063] usb 4-1: Manufacturer: syz
[  598.374650][ T3063] usb 4-1: SerialNumber: syz
[  598.395846][ T3063] usb 4-1: config 0 descriptor??
[  598.426447][ T3063] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17
[  598.535731][ T5098] Bluetooth: hci1: command tx timeout
[  598.655034][ T4521] bcm5974 4-1:0.0: could not read from device
[  598.668726][ T4521] bcm5974 4-1:0.0: could not read from device
[  598.677657][ T3063] usb 4-1: USB disconnect, device number 17
[  598.981243][   T62] team0 (unregistering): Port device team_slave_1 removed
[  599.072546][   T62] team0 (unregistering): Port device team_slave_0 removed
[  600.363954][T12960] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  600.403654][T13063] batman_adv: batadv0: Adding interface: batadv_slave_0
[  600.425343][T13063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  600.594848][T13063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  600.665672][T13063] batman_adv: batadv0: Adding interface: batadv_slave_1
[  601.477289][T13063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  601.535666][T13063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  601.601391][T12960] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  602.817354][T13063] hsr_slave_0: entered promiscuous mode
[  603.090710][T13063] hsr_slave_1: entered promiscuous mode
[  603.114191][T12960] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  603.139356][T12960] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  603.608054][ T5098] Bluetooth: hci6: command tx timeout
[  604.037675][T13235] netdevsim netdevsim1: Direct firmware load for ng failed with error -2
[  604.047317][T13235] netdevsim netdevsim1: Falling back to sysfs fallback for: ng
[  605.795062][T12960] 8021q: adding VLAN 0 to HW filter on device bond0
[  605.997751][    T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  606.052372][T12960] 8021q: adding VLAN 0 to HW filter on device team0
[  606.135921][ T3063] bridge0: port 1(bridge_slave_0) entered blocking state
[  606.143152][ T3063] bridge0: port 1(bridge_slave_0) entered forwarding state
[  606.197231][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state
[  606.204435][ T5189] bridge0: port 2(bridge_slave_1) entered forwarding state
[  606.252130][T12960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  606.257068][    T8] usb 2-1: Using ep0 maxpacket: 32
[  606.263262][T12960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  606.626513][    T8] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=c3.cc
[  606.675198][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.736769][    T8] usb 2-1: Product: syz
[  606.750614][    T8] usb 2-1: Manufacturer: syz
[  606.755266][    T8] usb 2-1: SerialNumber: syz
[  606.809219][    T8] usb 2-1: config 0 descriptor??
[  606.859874][    T8] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected
[  606.907240][    T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87
[  606.939226][    T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7
[  606.978169][    T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[  607.006976][    T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[  607.014750][    T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[  607.064850][T13063] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  607.071829][    T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85
[  607.096965][    T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5
[  607.120691][    T8] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  607.161010][    T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83
[  607.196948][    T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3
[  607.204716][T13063] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  607.374843][    T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4
[  607.382651][    T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86
[  607.397082][    T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6
[  607.406219][    T8] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  607.428293][T13063] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  607.502092][T13299] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  607.604859][T13063] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  608.216699][T12960] 8021q: adding VLAN 0 to HW filter on device batadv0
[  608.216994][ T5136] usb 2-1: USB disconnect, device number 9
[  608.246173][ T5136] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  608.271978][ T5136] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  608.310340][ T5136] keyspan 2-1:0.0: device disconnected
[  608.577858][T12960] veth0_vlan: entered promiscuous mode
[  608.623448][   T29] audit: type=1326 audit(2000000017.905:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13304 comm="syz.3.2730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e45b75bd9 code=0x0
[  608.669291][T12960] veth1_vlan: entered promiscuous mode
[  608.726690][T13063] 8021q: adding VLAN 0 to HW filter on device bond0
[  608.790318][T13063] 8021q: adding VLAN 0 to HW filter on device team0
[  608.820684][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state
[  608.827881][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  608.877312][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.884551][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  609.082241][T12960] veth0_macvtap: entered promiscuous mode
[  609.134023][T12960] veth1_macvtap: entered promiscuous mode
[  609.223839][T12960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  609.260935][T12960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  609.294781][T12960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  609.319453][T12960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  609.329998][T12960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  609.341022][T12960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  609.358489][T12960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  609.372379][T12960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  609.411022][T12960] batman_adv: batadv0: Interface activated: batadv_slave_0
[  609.436937][T12960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  609.460257][T12960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  609.472424][T12960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  609.484715][T12960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  609.495582][T12960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  609.514680][T12960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  609.534619][T12960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  609.559309][T12960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  609.584257][T12960] batman_adv: batadv0: Interface activated: batadv_slave_1
[  609.640467][T12960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  609.677399][T12960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  609.687039][T12960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  609.727411][T12960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  609.870620][T13063] 8021q: adding VLAN 0 to HW filter on device batadv0
[  610.128101][T11938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  610.156638][T11938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  610.296409][T11938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  610.344167][T11938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.776552][T13063] veth0_vlan: entered promiscuous mode
[  611.854885][T13063] veth1_vlan: entered promiscuous mode
[  611.980104][ T5098] Bluetooth: Unknown BR/EDR signaling command 0x0f
[  611.986663][ T5098] Bluetooth: Wrong link type (-22)
[  612.062888][T13063] veth0_macvtap: entered promiscuous mode
[  612.111740][T13063] veth1_macvtap: entered promiscuous mode
[  612.171461][T13063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.203844][T13063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.256952][T13063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.306655][T13063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.386955][T13063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.451574][T13063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.561312][T13063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.592413][T13063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.648149][T13063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.677827][T13063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.715302][T13063] batman_adv: batadv0: Interface activated: batadv_slave_0
[  612.764525][T13063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.808681][T13063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.844868][T13063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.888951][T13063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.923321][T13063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.978205][T13063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.028243][T13063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  613.058349][T13063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.108257][T13063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  613.142692][T13063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.190238][T13063] batman_adv: batadv0: Interface activated: batadv_slave_1
[  613.241109][T13063] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  613.275728][T13063] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  613.308363][T13063] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  613.364320][T13063] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  614.464370][ T2860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.518789][ T2860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.621317][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.812105][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.779532][ T3063] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  617.019320][ T3063] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[  617.086486][ T3063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.107078][ T3063] usb 4-1: config 0 descriptor??
[  617.117618][ T3063] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  618.095259][ T3063] gspca_sonixj: reg_r err -110
[  618.103808][ T3063] sonixj 4-1:0.0: probe with driver sonixj failed with error -110
[  619.404431][T13465] netlink: 'syz.1.2787': attribute type 10 has an invalid length.
[  619.430117][   T58] usb 4-1: USB disconnect, device number 18
[  619.533094][T13465] geneve0: entered promiscuous mode
[  619.629473][T13465] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  620.518132][T13499] netlink: 'syz.2.2803': attribute type 11 has an invalid length.
[  620.546085][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2803'.
[  620.830761][T13492] kvm: kvm [13490]: vcpu0, guest rIP: 0x1b6 Unhandled WRMSR(0x11e) = 0x0
[  620.931693][ T5098] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  620.940872][ T5098] Bluetooth: hci5: Injecting HCI hardware error event
[  620.950862][ T5098] Bluetooth: hci5: hardware error 0x00
[  620.961602][ T5189] usb 2-1: new low-speed USB device number 10 using dummy_hcd
[  621.231760][ T5189] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  621.287177][ T5189] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  621.309624][ T5189] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 222, using maximum allowed: 30
[  621.354827][ T5189] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  621.387860][ T5189] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222
[  621.445435][ T5189] usb 2-1: string descriptor 0 read error: -22
[  621.475471][ T5189] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  621.522977][ T5189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.616536][ T5189] usb 2-1: 0:2 : does not exist
[  621.671172][T13529] netlink: 'syz.4.2816': attribute type 11 has an invalid length.
[  621.713972][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2816'.
[  621.763313][   T29] audit: type=1400 audit(2000000031.042:173): lsm=SMACK fn=smack_inode_setattr action=denied subject="N" object="_" requested=w pid=13533 comm="" name="hugetlb.2MB.usage_in_bytes" dev="tmpfs" ino=401
[  622.062906][    T8] usb 2-1: USB disconnect, device number 10
[  623.025866][ T5098] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  624.047880][   T29] audit: type=1400 audit(2000000033.332:174): lsm=SMACK fn=smack_inode_setattr action=denied subject="N" object="_" requested=w pid=13562 comm="" name="hugetlb.2MB.usage_in_bytes" dev="tmpfs" ino=90
[  625.343284][T13575] binder: 13574:13575 ioctl c018620b 20000240 returned -14
[  625.413928][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  625.421070][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  626.334247][   T29] audit: type=1400 audit(2000000035.621:175): lsm=SMACK fn=smack_inode_setattr action=denied subject="N" object="_" requested=w pid=13598 comm="" name="hugetlb.2MB.usage_in_bytes" dev="tmpfs" ino=128
[  626.353741][    C0] vkms_vblank_simulate: vblank timer overrun
[  626.669827][T13616] binder: 13610:13616 ioctl c018620b 20000240 returned -14
[  627.510452][T13627] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  627.826582][T13634] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2862'.
[  628.092276][ T3063] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  628.215963][ T5098] Bluetooth: Unknown BR/EDR signaling command 0x0f
[  628.223114][ T5098] Bluetooth: Wrong link type (-22)
[  628.311830][ T3063] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4
[  628.321272][ T3063] usb 5-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0
[  628.336500][ T3063] usb 5-1: Manufacturer: syz
[  628.352567][ T3063] usb 5-1: config 0 descriptor??
[  628.768693][ T3063] gs_usb 5-1:0.0: Configuring for 1 interfaces
[  628.963398][T13661] syzkaller0: entered promiscuous mode
[  628.972787][T13661] syzkaller0: entered allmulticast mode
[  629.708370][T13670] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2874'.
[  631.612558][ T5136] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  631.934660][ T5136] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  631.951581][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.005043][ T5136] usb 4-1: config 0 descriptor??
[  632.024866][ T5136] gspca_main: spca508-2.14.0 probing 8086:0110
[  632.239429][ T5136] gspca_spca508: reg_read err -32
[  632.272249][ T5136] gspca_spca508: reg_read err -32
[  632.292938][ T5136] gspca_spca508: reg_read err -32
[  632.684707][T13693] overlayfs: invalid origin (0000)
[  632.930474][ T5136] gspca_spca508: reg_read err -71
[  632.943617][ T5136] gspca_spca508: reg write: error -71
[  632.952949][ T5136] spca508 4-1:0.0: probe with driver spca508 failed with error -71
[  633.002602][ T5136] usb 4-1: USB disconnect, device number 19
[  637.564088][ T3063] usb 5-1: USB disconnect, device number 29
[  638.083713][T13736] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2897'.
[  638.163989][ T3063] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  638.302564][ T5098] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  638.529117][ T3063] usb 5-1: Using ep0 maxpacket: 16
[  638.559612][ T3063] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  638.638861][T13757] bond0: (slave erspan0): Opening slave failed
[  639.310699][ T3063] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  639.324322][ T3063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.332517][T13756] [U] 
[  639.335863][T13756] [U] 
[  639.338603][T13756] [U] 
[  639.341336][T13756] [U] 
[  639.368722][ T3063] usb 5-1: config 0 descriptor??
[  639.469786][T13756] [U] 
[  639.472582][T13756] [U] 
[  639.475338][T13756] [U] 
[  639.478061][T13756] [U] 
[  639.623012][T13756] [U] 
[  639.625773][T13756] [U] 
[  639.628485][T13756] [U] 
[  639.631196][T13756] [U] 
[  639.636104][T13756] [U] 
[  639.638836][T13756] [U] 
[  639.641543][T13756] [U] 
[  639.644268][T13756] [U] 
[  639.647317][T13756] [U] 
[  639.650050][T13756] [U] 
[  639.652787][T13756] [U] 
[  639.655513][T13756] [U] 
[  639.661061][T13756] [U] 
[  639.663808][T13756] [U] 
[  639.666524][T13756] [U] 
[  639.669215][T13756] [U] 
[  639.672199][T13756] [U] 
[  639.674908][T13756] [U] 
[  639.677605][T13756] [U] 
[  639.680299][T13756] [U] 
[  639.683258][T13756] [U] 
[  639.685996][T13756] [U] 
[  639.688734][T13756] [U] 
[  639.691457][T13756] [U] 
[  639.694557][T13756] [U] 
[  639.697322][T13756] [U] 
[  639.700061][T13756] [U] 
[  639.702785][T13756] [U] 
[  639.706669][T13756] [U] 
[  639.709403][T13756] [U] 
[  639.712125][T13756] [U] 
[  639.714843][T13756] [U] 
[  639.717832][T13756] [U] 
[  639.720555][T13756] [U] 
[  639.723286][T13756] [U] 
[  639.726020][T13756] [U] 
[  639.728969][T13756] [U] 
[  639.731698][T13756] [U] 
[  639.734417][T13756] [U] 
[  639.737135][T13756] [U] 
[  639.740204][T13756] [U] 
[  639.742942][T13756] [U] 
[  639.745657][T13756] [U] 
[  639.748373][T13756] [U] 
[  639.772536][T13756] [U] 
[  639.775301][T13756] [U] 
[  639.778026][T13756] [U] 
[  639.780767][T13756] [U] 
[  639.784157][T13756] [U] 
[  639.786899][T13756] [U] 
[  639.789654][T13756] [U] 
[  639.792393][T13756] [U] 
[  640.027796][T13756] [U] 
[  640.030571][T13756] [U] 
[  640.033299][T13756] [U] 
[  640.036030][T13756] [U] 
[  640.569332][T13756] [U] 
[  640.572093][T13756] [U] 
[  640.574832][T13756] [U] 
[  640.577551][T13756] [U] 
[  640.662490][T13756] [U] 
[  640.665236][T13756] [U] 
[  640.667961][T13756] [U] 
[  640.670742][T13756] [U] 
[  640.710659][T13756] [U] 
[  640.713384][T13756] [U] 
[  640.716075][T13756] [U] 
[  640.718763][T13756] [U] 
[  640.835113][T13756] [U] 
[  640.837876][T13756] [U] 
[  640.840599][T13756] [U] 
[  640.843315][T13756] [U] 
[  640.931875][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  640.947003][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  640.955414][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  640.963749][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  640.972632][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  640.981438][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  640.992139][T13756] [U] 
[  640.994883][T13756] [U] 
[  640.997569][T13756] [U] 
[  641.000248][T13756] [U] 
[  641.003861][T13756] [U] 
[  641.006590][T13756] [U] 
[  641.009277][T13756] [U] 
[  641.011962][T13756] [U] 
[  641.015247][T13756] [U] 
[  641.017946][T13756] [U] 
[  641.020627][T13756] [U] 
[  641.023313][T13756] [U] 
[  641.026459][T13756] [U] 
[  641.029227][T13756] [U] 
[  641.031909][T13756] [U] 
[  641.034608][T13756] [U] 
[  641.038381][T13756] [U] 
[  641.041099][T13756] [U] 
[  641.043785][T13756] [U] 
[  641.046472][T13756] [U] 
[  641.049658][T13756] [U] 
[  641.052390][T13756] [U] 
[  641.055125][T13756] [U] 
[  641.057872][T13756] [U] 
[  641.060998][T13756] [U] 
[  641.063744][T13756] [U] 
[  641.066470][T13756] [U] 
[  641.069186][T13756] [U] 
[  641.073180][T13756] [U] 
[  641.075908][T13756] [U] 
[  641.078607][T13756] [U] 
[  641.081310][T13756] [U] 
[  641.089033][T13756] [U] 
[  641.091766][T13756] [U] 
[  641.094475][T13756] [U] 
[  641.097226][T13756] [U] 
[  641.110404][T13756] [U] 
[  641.113223][T13756] [U] 
[  641.115944][T13756] [U] 
[  641.118665][T13756] [U] 
[  641.122495][T13725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.131856][T13725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.152109][ T3063] hid (null): invalid report_size 1684763247
[  641.177472][T13756] [U] 
[  641.200783][ T3063] hid-generic 0003:0158:0100.0010: unknown main item tag 0x1
[  641.219054][ T3063] hid-generic 0003:0158:0100.0010: unexpected long global item
[  641.266799][ T3063] hid-generic 0003:0158:0100.0010: probe with driver hid-generic failed with error -22
[  641.374126][ T5136] usb 5-1: USB disconnect, device number 30
[  641.382071][ T1109] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.483439][T13774] lo speed is unknown, defaulting to 1000
[  641.677230][ T1109] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.843715][ T1109] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.951573][ T1109] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.168888][T13801] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2918'.
[  642.180113][   T29] audit: type=1326 audit(2000000051.458:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be4975bd9 code=0x7ffc0000
[  642.301117][   T29] audit: type=1326 audit(2000000051.458:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be4975bd9 code=0x7ffc0000
[  642.322693][    C0] vkms_vblank_simulate: vblank timer overrun
[  642.459038][   T29] audit: type=1326 audit(2000000051.458:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3be4975bd9 code=0x7ffc0000
[  642.511425][T13774] chnl_net:caif_netlink_parms(): no params data found
[  642.553808][   T29] audit: type=1326 audit(2000000051.458:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be4975bd9 code=0x7ffc0000
[  642.575369][    C0] vkms_vblank_simulate: vblank timer overrun
[  642.663853][   T29] audit: type=1326 audit(2000000051.458:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f3be4975bd9 code=0x7ffc0000
[  642.686148][ T1109] bridge_slave_1: left allmulticast mode
[  642.697604][ T1109] bridge_slave_1: left promiscuous mode
[  642.716322][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.730401][   T29] audit: type=1326 audit(2000000051.458:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be4975bd9 code=0x7ffc0000
[  642.761016][   T29] audit: type=1326 audit(2000000051.458:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be4975bd9 code=0x7ffc0000
[  642.821867][ T1109] bridge_slave_0: left allmulticast mode
[  642.837153][ T1109] bridge_slave_0: left promiscuous mode
[  642.855271][ T5100] Bluetooth: hci6: command 0x0406 tx timeout
[  642.880833][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.096015][ T5087] Bluetooth: hci0: command tx timeout
[  644.204902][ T1109] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  645.075866][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  645.135084][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  645.172959][ T1109] bond0 (unregistering): Released all slaves
[  645.180077][ T5087] Bluetooth: hci0: command tx timeout
[  645.421680][T13814] netlink: 'syz.1.2919': attribute type 10 has an invalid length.
[  645.495076][T13814] macvlan0: entered promiscuous mode
[  645.535814][T13814] macvlan0: entered allmulticast mode
[  645.590706][T13814] veth1_vlan: entered allmulticast mode
[  645.630963][T13814] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  645.714336][T13864] evm: overlay not supported
[  645.744125][   T29] audit: type=1804 audit(2000000055.017:183): pid=13864 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2941" name="/newroot/44/bus/file0" dev="overlay" ino=266 res=1 errno=0
[  645.948369][T13867] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2943'.
[  645.996880][T13873] nfs4: Unexpected value for 'rdma'
[  647.360682][ T5087] Bluetooth: hci0: command tx timeout
[  647.463788][T13888] bond0: (slave erspan0): Opening slave failed
[  647.475186][T13774] bridge0: port 1(bridge_slave_0) entered blocking state
[  647.597380][T13774] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.604697][T13774] bridge_slave_0: entered allmulticast mode
[  647.663202][T13774] bridge_slave_0: entered promiscuous mode
[  647.825155][T13774] bridge0: port 2(bridge_slave_1) entered blocking state
[  647.852248][T13774] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.875682][T13774] bridge_slave_1: entered allmulticast mode
[  647.893613][T13774] bridge_slave_1: entered promiscuous mode
[  647.903964][   T29] audit: type=1804 audit(2000000057.176:184): pid=13897 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.2952" name="/newroot/102/bus/file0" dev="overlay" ino=574 res=1 errno=0
[  648.021894][   T58] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  648.055839][T13774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  648.133460][T13774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  648.209723][   T58] usb 5-1: Using ep0 maxpacket: 16
[  648.251491][   T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  648.294373][   T58] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  648.338819][   T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.400799][T13774] team0: Port device team_slave_0 added
[  648.401049][   T58] usb 5-1: config 0 descriptor??
[  648.466621][ T1109] hsr_slave_0: left promiscuous mode
[  648.513725][ T1109] hsr_slave_1: left promiscuous mode
[  648.564348][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  648.580967][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0
[  648.616896][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  648.645880][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1
[  648.733087][ T1109] veth0_macvtap: left promiscuous mode
[  648.753879][T13891] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  648.760967][T13891] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  648.763101][ T1109] veth1_vlan: left promiscuous mode
[  648.835956][ T1109] veth0_vlan: left promiscuous mode
[  648.843772][T13891] vhci_hcd vhci_hcd.0: Device attached
[  648.918909][T13908] vhci_hcd: connection closed
[  648.936663][T11938] vhci_hcd: stop threads
[  648.950456][T11938] vhci_hcd: release socket
[  648.975302][T11938] vhci_hcd: disconnect device
[  649.027334][ T5136] vhci_hcd: vhci_device speed not set
[  649.159223][T13911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  649.206953][T13911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  649.264982][   T58] hid (null): invalid report_size 1684763247
[  649.304146][   T58] hid-generic 0003:0158:0100.0011: unknown main item tag 0x1
[  649.321341][   T58] hid-generic 0003:0158:0100.0011: unexpected long global item
[  649.353561][   T58] hid-generic 0003:0158:0100.0011: probe with driver hid-generic failed with error -22
[  649.428447][ T5087] Bluetooth: hci0: command tx timeout
[  650.780146][ T1109] team0 (unregistering): Port device team_slave_1 removed
[  650.861164][ T1109] team0 (unregistering): Port device team_slave_0 removed
[  652.282894][T13774] team0: Port device team_slave_1 added
[  652.389108][T13774] batman_adv: batadv0: Adding interface: batadv_slave_0
[  652.396631][T13774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  652.464404][ T5189] usb 5-1: USB disconnect, device number 31
[  652.502124][T13774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  652.554771][T13774] batman_adv: batadv0: Adding interface: batadv_slave_1
[  652.562526][T13774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  652.590376][T13774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  653.290391][T13774] hsr_slave_0: entered promiscuous mode
[  653.321753][T13774] hsr_slave_1: entered promiscuous mode
[  653.381302][T13774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  653.396639][T13774] Cannot create hsr debugfs directory
[  654.079195][   T29] audit: type=1326 audit(2000000063.345:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13964 comm="syz.4.2978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c70375bd9 code=0x0
[  654.189530][T13971] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2980'.
[  654.243132][T13967] 9pnet_virtio: no channels available for device @
[  654.690459][T13774] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  654.721430][T13774] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  654.744885][T13982] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  654.774485][T13774] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  654.804521][T13774] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  655.069022][T13990] xt_NFQUEUE: number of total queues is 0
[  655.115718][T13986] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  655.260733][T13774] 8021q: adding VLAN 0 to HW filter on device bond0
[  655.382934][T13774] 8021q: adding VLAN 0 to HW filter on device team0
[  655.443230][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.450421][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  655.525650][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.532844][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  655.627604][T13774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  655.685548][T13774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  656.207375][T13774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  656.236919][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2989'.
[  656.985565][T13774] veth0_vlan: entered promiscuous mode
[  657.056359][T13774] veth1_vlan: entered promiscuous mode
[  657.385676][T13774] veth0_macvtap: entered promiscuous mode
[  657.818003][T13774] veth1_macvtap: entered promiscuous mode
[  658.251299][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.269174][ T5087] Bluetooth: hci4: ACL packet for unknown connection handle 0
[  658.276985][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.287686][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.299107][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.310289][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.321229][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.332754][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.344436][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.356236][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.388547][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.427081][T13774] batman_adv: batadv0: Interface activated: batadv_slave_0
[  658.481891][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.531886][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.567486][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.618806][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.658061][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.678704][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.728843][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.748713][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.773941][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.810532][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.845359][T13774] batman_adv: batadv0: Interface activated: batadv_slave_1
[  658.858811][ T8271] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  658.873091][T13774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  658.908706][T13774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  658.925878][T13774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  658.936206][T13774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  659.060222][ T8271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  659.094425][ T8271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  659.118386][ T2860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.137761][ T8271] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  659.160034][ T2860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  659.167565][ T8271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.191353][ T8271] usb 3-1: config 0 descriptor??
[  659.604089][T11923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.727007][T11923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.046221][ T8271] hid (null): report_id 0 is invalid
[  660.081612][ T8271] logitech-hidpp-device 0003:046D:C086.0012: report_id 0 is invalid
[  660.099919][ T8271] logitech-hidpp-device 0003:046D:C086.0012: item 0 0 1 8 parsing failed
[  660.129176][ T8271] logitech-hidpp-device 0003:046D:C086.0012: hidpp_probe:parse failed
[  660.142533][ T8271] logitech-hidpp-device 0003:046D:C086.0012: probe with driver logitech-hidpp-device failed with error -22
[  660.247083][T14056] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2903'.
[  660.877913][ T8271] usb 3-1: USB disconnect, device number 13
[  661.301310][ T5100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  661.385988][ T5100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  661.396156][ T5100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  661.408100][ T5100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  661.417205][ T5100] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  661.427921][ T5100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  661.478041][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3014'.
[  661.715124][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.777398][T14077] tipc: Started in network mode
[  661.805498][T14077] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  661.816106][T14077] tipc: Enabled bearer <eth:ipvlan0>, priority 0
[  661.849634][T14070] lo speed is unknown, defaulting to 1000
[  661.947759][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.231706][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.382612][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.474342][T14095] ip6tnl0: entered promiscuous mode
[  662.554851][T14094] ip6tnl0: left promiscuous mode
[  662.814136][ T5189] tipc: Node number set to 10136234
[  662.919030][T14110] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  663.028758][   T35] bridge_slave_1: left allmulticast mode
[  663.044554][   T35] bridge_slave_1: left promiscuous mode
[  663.109847][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.165730][   T35] bridge_slave_0: left allmulticast mode
[  663.174370][   T35] bridge_slave_0: left promiscuous mode
[  663.182457][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.505559][ T5100] Bluetooth: hci1: command tx timeout
[  664.265404][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  664.312071][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  664.349441][   T35] bond0 (unregistering): Released all slaves
[  664.487571][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'.
[  664.718832][T14136] ip6tnl0: entered promiscuous mode
[  664.726454][T14135] ip6tnl0: left promiscuous mode
[  664.796425][T14070] chnl_net:caif_netlink_parms(): no params data found
[  665.390496][T14158] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  665.417536][T14070] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.461440][T14070] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.469015][T14070] bridge_slave_0: entered allmulticast mode
[  665.490263][T14070] bridge_slave_0: entered promiscuous mode
[  665.577288][   T35] hsr_slave_0: left promiscuous mode
[  665.587972][ T5100] Bluetooth: hci1: command tx timeout
[  665.595542][   T35] hsr_slave_1: left promiscuous mode
[  665.634913][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  665.677429][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  665.872056][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  665.914202][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  665.975873][T14163] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  666.782212][   T35] veth1_macvtap: left promiscuous mode
[  666.796400][   T35] veth0_macvtap: left promiscuous mode
[  666.811751][   T35] veth1_vlan: left promiscuous mode
[  666.825194][   T35] veth0_vlan: left promiscuous mode
[  667.661925][ T5100] Bluetooth: hci1: command tx timeout
[  669.067713][   T58] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  669.795443][ T5100] Bluetooth: hci1: command tx timeout
[  670.325120][   T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  670.350147][   T58] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  670.391811][   T58] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  670.436283][   T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  670.451855][   T58] usb 1-1: SerialNumber: syz
[  670.474640][   T58] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  670.705821][ T5136] usb 1-1: USB disconnect, device number 21
[  670.750345][   T35] team0 (unregistering): Port device team_slave_1 removed
[  670.857511][   T35] team0 (unregistering): Port device team_slave_0 removed
[  671.772842][T14070] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.792337][T14070] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.812688][T14070] bridge_slave_1: entered allmulticast mode
[  671.847071][T14070] bridge_slave_1: entered promiscuous mode
[  672.022310][ T3063] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  672.236051][T14070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  672.257440][T14070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  672.333761][ T3063] usb 1-1: Using ep0 maxpacket: 16
[  672.356401][ T3063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  672.412023][ T3063] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  672.468731][T14070] team0: Port device team_slave_0 added
[  672.476003][ T3063] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  672.511776][ T3063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.520161][T14070] team0: Port device team_slave_1 added
[  672.552770][ T3063] usb 1-1: config 0 descriptor??
[  672.654361][T14070] batman_adv: batadv0: Adding interface: batadv_slave_0
[  672.661399][T14070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  672.786230][T14070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  672.899147][T14070] batman_adv: batadv0: Adding interface: batadv_slave_1
[  673.126866][T14070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  673.219151][T14222] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  673.228095][T14222] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  673.236426][T14222] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  674.071858][T14070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  674.376036][T14070] hsr_slave_0: entered promiscuous mode
[  674.397767][T14070] hsr_slave_1: entered promiscuous mode
[  675.427917][ T5189] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  675.447232][ T3063] usbhid 1-1:0.0: can't add hid device: -71
[  675.546162][ T3063] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  675.558490][ T3063] usb 1-1: USB disconnect, device number 22
[  675.742992][ T5189] usb 3-1: Using ep0 maxpacket: 32
[  675.757155][ T5189] usb 3-1: config 0 has an invalid interface number: 86 but max is 0
[  675.797824][ T5189] usb 3-1: config 0 has no interface number 0
[  675.834996][ T5189] usb 3-1: New USB device found, idVendor=0e8d, idProduct=0023, bcdDevice=3a.ab
[  675.861215][ T5189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.880874][ T5189] usb 3-1: Product: syz
[  675.893759][ T5189] usb 3-1: Manufacturer: syz
[  675.898437][ T5189] usb 3-1: SerialNumber: syz
[  675.954323][ T5189] usb 3-1: config 0 descriptor??
[  675.972037][ T5189] option 3-1:0.86: GSM modem (1-port) converter detected
[  676.967056][T14070] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  676.989949][T14070] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  677.023809][T14070] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  677.103551][T14070] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  677.572996][ T5189] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  678.807378][ T5136] usb 3-1: USB disconnect, device number 14
[  678.835352][ T5136] option 3-1:0.86: device disconnected
[  678.863522][T14070] 8021q: adding VLAN 0 to HW filter on device bond0
[  678.924089][T14070] 8021q: adding VLAN 0 to HW filter on device team0
[  678.935965][ T5189] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  678.951817][ T5189] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  678.983395][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.990551][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  679.010940][ T5189] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  679.027279][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.034531][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  679.043387][ T5189] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  679.054209][ T5189] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  679.080778][ T5189] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  679.167471][ T5189] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  679.192209][ T5189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.212816][ T5189] usb 2-1: Product: syz
[  679.238750][ T5189] usb 2-1: Manufacturer: syz
[  679.270044][ T5189] usb 2-1: SerialNumber: syz
[  679.301318][T14070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  679.600195][T14263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  679.644418][T14263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  680.068026][T11938] ------------[ cut here ]------------
[  680.073767][ T5136] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  680.074535][T11938] WARNING: CPU: 1 PID: 11938 at net/wireless/nl80211.c:19473 cfg80211_bss_color_notify+0x5f6/0x8b0
[  680.092304][T11938] Modules linked in:
[  680.096273][T11938] CPU: 1 PID: 11938 Comm: kworker/u8:19 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0
[  680.106730][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  680.117951][T11938] Workqueue: phy42 ieee80211_color_collision_detection_work
[  680.125460][T11938] RIP: 0010:cfg80211_bss_color_notify+0x5f6/0x8b0
[  680.132074][T11938] Code: 00 e8 3e 33 b8 fe 48 83 c4 08 89 c1 c1 f8 1f 21 c8 e9 08 fd ff ff e8 99 91 c1 f6 90 0f 0b 90 e9 71 fb ff ff e8 8b 91 c1 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 7d 91 c1 f6 c6 05 46 13 c2 04 01 90 48
[  680.151884][T11938] RSP: 0018:ffffc900095ffaa0 EFLAGS: 00010293
[  680.158271][T11938] RAX: ffffffff8ad49535 RBX: 0000000000000000 RCX: ffff88802335da00
[  680.166554][T11938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  680.174823][T11938] RBP: ffffc900095ffbb0 R08: ffffffff8ad49062 R09: 1ffffffff1f583a5
[  680.182825][T11938] R10: dffffc0000000000 R11: ffffffff8af00f30 R12: 1ffff920012bff5c
[  680.190855][T11938] R13: ffff88805829c000 R14: ffff88805829ccb0 R15: dffffc0000000000
[  680.198969][T11938] FS:  0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  680.207966][T11938] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  680.212210][T14070] 8021q: adding VLAN 0 to HW filter on device batadv0
[  680.214737][T11938] CR2: 00007fff21e03ef8 CR3: 0000000011112000 CR4: 00000000003506f0
[  680.230735][T11938] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  680.238850][T11938] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  680.246887][T11938] Call Trace:
[  680.250180][T11938]  <TASK>
[  680.253129][T11938]  ? __warn+0x163/0x4e0
[  680.257660][T11938]  ? cfg80211_bss_color_notify+0x5f6/0x8b0
[  680.263859][T11938]  ? report_bug+0x2b3/0x500
[  680.268424][T11938]  ? cfg80211_bss_color_notify+0x5f6/0x8b0
[  680.274302][T11938]  ? handle_bug+0x3e/0x70
[  680.278667][T11938]  ? exc_invalid_op+0x1a/0x50
[  680.283357][T11938]  ? asm_exc_invalid_op+0x1a/0x20
[  680.288550][T11938]  ? __pfx_ieee80211_color_collision_detection_work+0x10/0x10
[  680.296111][T11938]  ? cfg80211_bss_color_notify+0x122/0x8b0
[  680.301992][T11938]  ? cfg80211_bss_color_notify+0x5f5/0x8b0
[  680.307909][T11938]  ? cfg80211_bss_color_notify+0x5f6/0x8b0
[  680.313890][T11938]  ? __pfx_lock_acquire+0x10/0x10
[  680.318930][T11938]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  680.325395][T11938]  ? __pfx_cfg80211_bss_color_notify+0x10/0x10
[  680.332147][T11938]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  680.338622][T11938]  ? process_scheduled_works+0x945/0x1830
[  680.344430][T11938]  process_scheduled_works+0xa2c/0x1830
[  680.350625][T11938]  ? __pfx_process_scheduled_works+0x10/0x10
[  680.356676][T11938]  ? assign_work+0x364/0x3d0
[  680.361661][T11938]  worker_thread+0x86d/0xd50
[  680.366677][T11938]  ? __kthread_parkme+0x169/0x1d0
[  680.371721][T11938]  ? __pfx_worker_thread+0x10/0x10
[  680.376894][T11938]  kthread+0x2f0/0x390
[  680.380980][T11938]  ? __pfx_worker_thread+0x10/0x10
[  680.386300][T11938]  ? __pfx_kthread+0x10/0x10
[  680.390911][T11938]  ret_from_fork+0x4b/0x80
[  680.395401][T11938]  ? __pfx_kthread+0x10/0x10
[  680.400025][T11938]  ret_from_fork_asm+0x1a/0x30
[  680.404845][T11938]  </TASK>
[  680.407878][T11938] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  680.415148][T11938] CPU: 1 PID: 11938 Comm: kworker/u8:19 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0
[  680.425553][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  680.435603][T11938] Workqueue: phy42 ieee80211_color_collision_detection_work
[  680.442890][T11938] Call Trace:
[  680.446164][T11938]  <TASK>
[  680.449087][T11938]  dump_stack_lvl+0x241/0x360
[  680.453775][T11938]  ? __pfx_dump_stack_lvl+0x10/0x10
[  680.458975][T11938]  ? __pfx__printk+0x10/0x10
[  680.463588][T11938]  ? vscnprintf+0x5d/0x90
[  680.467936][T11938]  panic+0x349/0x860
[  680.471835][T11938]  ? __warn+0x172/0x4e0
[  680.475993][T11938]  ? __pfx_panic+0x10/0x10
[  680.480442][T11938]  ? ret_from_fork_asm+0x1a/0x30
[  680.485386][T11938]  __warn+0x346/0x4e0
[  680.489366][T11938]  ? cfg80211_bss_color_notify+0x5f6/0x8b0
[  680.495173][T11938]  report_bug+0x2b3/0x500
[  680.499503][T11938]  ? cfg80211_bss_color_notify+0x5f6/0x8b0
[  680.505309][T11938]  handle_bug+0x3e/0x70
[  680.509455][T11938]  exc_invalid_op+0x1a/0x50
[  680.513952][T11938]  asm_exc_invalid_op+0x1a/0x20
[  680.518802][T11938] RIP: 0010:cfg80211_bss_color_notify+0x5f6/0x8b0
[  680.525213][T11938] Code: 00 e8 3e 33 b8 fe 48 83 c4 08 89 c1 c1 f8 1f 21 c8 e9 08 fd ff ff e8 99 91 c1 f6 90 0f 0b 90 e9 71 fb ff ff e8 8b 91 c1 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 7d 91 c1 f6 c6 05 46 13 c2 04 01 90 48
[  680.544819][T11938] RSP: 0018:ffffc900095ffaa0 EFLAGS: 00010293
[  680.550882][T11938] RAX: ffffffff8ad49535 RBX: 0000000000000000 RCX: ffff88802335da00
[  680.558849][T11938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  680.566811][T11938] RBP: ffffc900095ffbb0 R08: ffffffff8ad49062 R09: 1ffffffff1f583a5
[  680.574791][T11938] R10: dffffc0000000000 R11: ffffffff8af00f30 R12: 1ffff920012bff5c
[  680.582752][T11938] R13: ffff88805829c000 R14: ffff88805829ccb0 R15: dffffc0000000000
[  680.590763][T11938]  ? __pfx_ieee80211_color_collision_detection_work+0x10/0x10
[  680.598282][T11938]  ? cfg80211_bss_color_notify+0x122/0x8b0
[  680.604086][T11938]  ? cfg80211_bss_color_notify+0x5f5/0x8b0
[  680.609894][T11938]  ? __pfx_lock_acquire+0x10/0x10
[  680.614937][T11938]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  680.620933][T11938]  ? __pfx_cfg80211_bss_color_notify+0x10/0x10
[  680.627086][T11938]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  680.633427][T11938]  ? process_scheduled_works+0x945/0x1830
[  680.639147][T11938]  process_scheduled_works+0xa2c/0x1830
[  680.644727][T11938]  ? __pfx_process_scheduled_works+0x10/0x10
[  680.650725][T11938]  ? assign_work+0x364/0x3d0
[  680.655325][T11938]  worker_thread+0x86d/0xd50
[  680.659949][T11938]  ? __kthread_parkme+0x169/0x1d0
[  680.664989][T11938]  ? __pfx_worker_thread+0x10/0x10
[  680.670118][T11938]  kthread+0x2f0/0x390
[  680.674188][T11938]  ? __pfx_worker_thread+0x10/0x10
[  680.679297][T11938]  ? __pfx_kthread+0x10/0x10
[  680.683887][T11938]  ret_from_fork+0x4b/0x80
[  680.688302][T11938]  ? __pfx_kthread+0x10/0x10
[  680.692891][T11938]  ret_from_fork_asm+0x1a/0x30
[  680.697682][T11938]  </TASK>
[  680.700880][T11938] Kernel Offset: disabled
[  680.705339][T11938] Rebooting in 86400 seconds..