last executing test programs:

1m32.794768247s ago: executing program 2 (id=2408):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x2c}}, 0x0)

1m32.532326171s ago: executing program 2 (id=2411):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r0 = syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
sched_setscheduler(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000380)={{0x4, 0x6, 0xce51, 0x2, 'syz0\x00'}, 0x0, 0x10, 0x7ff, 0x0, 0x4, 0xcb02, 'syz0\x00', &(0x7f0000000100)=['macturkish', '/dev/hwrng\x00', '#-\xa5-/+[(*\x00', ']\x00'], 0x21})
r3 = memfd_create(&(0x7f0000000700)='\x9d#\x00%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xaa\x8d\x83;\xeb\xf1\xd0\xce\xe5\x19\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x01\x00\x00\x00&0\xdd\xcbC\x15\xfcp\x11\xda|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\x04\xa0\x05}\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12F\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\x00\x00\x00\x00\x00\x00\x00\x04\t0\xaf\\H\x06x-\x01\x13\xa0\xf9\xe8\xdf;\xb9\x03\x00^!\xc2\xff\xac\xb8\xac\xc5\n4\xe7\xd5\xf5@L\b\xd3\x88\xc7\xb2G\f^B\xfeR/\xd7\xf9a[Y\xe0;5!r\x92?FB\xde\xa0>0\xdc\xa6\xbf\xce\xd6?\x1f%7>i\x8d\xd0Nw=,\xcc<\v\xfd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\xf5+\x1c\'\x06\x00\xd1\xc9k:\x9d\x18cP\x14\xb6\x91AT\xb5w\xe71\xf3\xf8]\xc4\xa6+\xb6\xdcZ\xf2\x82*f\x0etDt\xbf\xa4)\x8e<%\xbcijzt\xf7\x7fN\x8fR\n>\xa0\t\ae\x8d~\xa3!\"\xec&\x83\xec\xac\x01\a\xe9\x17\x0f\xce\x9f}4\xf3P\fx\xa3/]E\xd3\xdbc\xa9\x9d$T\a\x83\n$r\xcf\xf5\xaa\x19\xe2\xb2~\xa3N\x03\x90K\xf7\x9fR_y\x80t\xa2\"!5\xf1R\x90~iLeNm\x9c\\Wv\xe5\xbbK \xc2\xa7wx\xd7\xe1P\a\'<\xa2\x02\x84\xb7\x15\x99\xb4\x85\x9b\xe4\a\xc4\xbe\xe9\xd7~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\xa1\x95\x8d\xad\x13\x10G\x99 !>\x01BS\x01w\xfc\xba\x1cu\x9d\x1aB\xaam\xddc\x1a`\xaflVlj\xb8G\xeb\xbe\a\xe4\xf38\xfba\xe8\xaf\xaa\x19\xa08\x0e\x80\xe2\x17\xde\x81\xd9fi\xca\xfa5\xb9\xf01{\xf5\xd4;Tj\xe7\xef\xfc\xdfAv\xd4\x9a\x83\xa5^\xbd\xa9\xb3\x9cE\xf3\x00Kg\x8aa\xd9|\xaa\xaa2\xf0/\\J\xc7\x13\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x5)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20242, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0xff, 0x7ffe})
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x2010, r0, 0x8fa7b000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10})
ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r5, 0x5501)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000300)={0x50, 0x1000})

1m31.599286344s ago: executing program 3 (id=2418):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
getpgid(0xffffffffffffffff)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = getpid()
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000001200), &(0x7f0000001240), 0x2, 0x3)
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000040)="1c0000001a009b8a14e5f40700426e2400000000ff00000000000000", 0x23)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x37, 0x0, "12a687ebeb0038c706793e6fe678efe66613a4c542fcffcbfdf5122e368251de0d45074a2146d001ff18d68b0e4a2c44c357de3b69c706ec7639721513279152de0f3c8b0b23f33102ffed30fc0f1eaa"}, 0xd8)
recvmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d00)=""/137, 0x89}, {&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000ec0)=""/114, 0x72}, {&(0x7f0000001500)=""/189, 0xbd}, {&(0x7f0000005a80)=""/4096, 0x1000}, {&(0x7f0000006a80)=""/4096, 0x1000}], 0x6}}], 0x3, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
futex(&(0x7f00000011c0), 0x5, 0x40000002, 0x0, &(0x7f0000048000), 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000005000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_allocate_blocks\x00', r6}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r7 = fsopen(&(0x7f0000000000)='bpf\x00', 0x1)
writev(r7, &(0x7f0000001180)=[{&(0x7f0000000040)}, {&(0x7f0000001040)}, {&(0x7f00000010c0)="e334c70c0e19eb78ae21bc6e25b8cb5a8040e9a519f48b7601ca1ed876a1e714b89389d7ff839d90a1c378d8dc37e597ef706a856ac0164e6ea66ade7b061eeb232fb3940b67e76ad06cc466f3f6a382d79f80ef4b98a35f6e18e882b196c45b448d665c77278883ab8e6194e1603f873df5afc3fe8f008c8181bc769afecdba733b71edb82b79", 0x87}], 0x3)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x5c, 0x32, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_police={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "a09ab630967242086de9bab73dfa816e17"}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x5c}}, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[], 0x1, 0x537, &(0x7f0000000ac0)="$eJzs3V1v01gawPHHpV2irFStlhVCVYFD2ZWKVIKTQFDEldc5SQ84dmQ7qL1CFU1RRQorykrb3rDcMDPSzIfgdj7EfCM0H2FGtpO+0CYG+hJU/X8RnBP72Oc5qeVHbuNjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYrkN2y5b4hm/u6JGcxth0N5/O9j6yAK5c6gY06+IlfyTQkGuZYuu/WN/9dXkvwWZz97NSyEpCrL716t/e3Rlemq4/ZiAz8X2zu7LtX6/92bSgZyh65dHr2tp30SBaTstrUwUqHqtZt9bbkaqaTwdrUaxbis31E4chGrRvaPK9XpV6dJq0PVbDcfTw4UP71Zsu6YelzraCaPAv/e4FLnLxvOM30rbJKuTNg+TA/GJiVWsnbZSG5v9XjVvAEmj8pc0quQ1qtiVSrlcqZRrD+oPHtr29JEF9mfkSIvJH7SYrFM8ewMnMzXI/+KJEV+6siLq2JcrDQklkPaI9QPD/P+ve3psvwfz/zDLX9tfPSdp/r+RvbsxKv+PiOX8XtuyI7vyUtakL33pyZuJR3S+r5Zo8cVIJIEYaYuTLlGDJUrqUpOa2PJMlqUpkShpihFPtESyKpHEotMjypVQtDgSSyChKFkUV+6IkrLUpS5VUaKlJKsSSFd8aUlDnHQvG7KZfu5VUdaoGPcalUcOozg87npSGTNa8j9O7lTP38BJ/DHM/wAAAAAA4MKy0t++J9f/M3I9rTWNp+1JhwUAAAAAAE5R+pf/+aSYSWrXxeL6HwAAAACAi8ZK77GzRKQoN7Pahljp7VL8EgAAAAAAgAsi/fv/jaRI50C5KdbedClc/wMAAAAAcEH8mDvHftS5bP32u4ThjPW+s/JPayudm9fZupRtd+nzPcbNOWt2sJO0qGXF9LSr561C1mhvEsxPg2IjLw5rPwBnL4D/f00AV6blZ7mVtbm1npXrwzVZL8Wm8XTJDbxHZXGc2alYr8T/fbX5P0mH/5PfnrUKstnvlZ6/7q+nsbxP9vJ+azCB4pF5FMfE8jadbyG95+LYEc+kN2IM+i1asrHZ79kHxz+VbT51uMd3s2P6/CALWauFwYy3xcPjLyR9lkujRj+IonzCkX+Q21mb24u3s+KYKCp5UVQORnH8Z3HyKKp5UVRPGAUATMpGThay5Eje/Yaz3Ldld/nK7P5BFrM2i3PpiXV67pgzup13RrdPmN1+PfIMpFE5Nun3l8+y6sdkg48j+428ipV8hJfebv1Hrm7v7N7d3Fp70XvRe1WpVGv2fdt+UJGZdBiDgtwDADhG/jN2cltY93Ouqv++95WCkjyX19KXdVlK7zZIv3Fw7F6LB76GsJRz1VpM02T2hJelMVd1f0nvchjutzK27eEYqmf/gwAA4Bwt5OThL8n/SznX3Ydz+fir4+KBp7UBAICzocNPVjH+wQpD03lWrtfLTrysVRi4T1RoGi2tjB/r0F12/JZWnTCIAzfwkspT09CRirqdThDGqhmEqhNEZiWdPlANHv0e6bbjx8aNOp52Iq3cwI8dN1YNE7mq0/23Z6JlHaYbRx3tmqZxndgEvoqCbujqklKR1gcamob2Y9M0SdVXndC0nbCgngZet61VQ0duaDpxkO1w2Jfxm0HYTndbmvSHDQDAd2J7Z/flWr/fe3OGlUmPEQAAHEaWBgAAAAAAAAAAAAAAAAAAAADg+3ce9/9RueCV4VTQ30s8VE6hknvqeHfmJycAZ+rPAAAA//8ow08k")

23.027897639s ago: executing program 0 (id=2429):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x10}}], 0x30}, 0x0)

22.686306733s ago: executing program 0 (id=2430):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc0585604, &(0x7f0000000000)={0x2})

22.662946402s ago: executing program 2 (id=2422):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x2c}}, 0x0)

22.536703297s ago: executing program 0 (id=2431):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x3, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000009000000b703000008000000b7040000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_evict_inode\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='ext4_evict_inode\x00', r1}, 0x10)
unlink(&(0x7f0000000000)='./cgroup\x00')

22.218812327s ago: executing program 0 (id=2432):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x3000000}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r0 = socket$alg(0x26, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfa69, 0x8001}, 0x48)

22.090115041s ago: executing program 1 (id=2433):
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="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"})
r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x80104592, &(0x7f0000000240)=0x7f)

22.080168119s ago: executing program 3 (id=2423):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8, 0x2, r2}}}}}]}, 0x40}}, 0x0)
ioctl$PPPOEIOCDFWD(r0, 0x40047459, 0x1000000000000)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10)
syz_emit_ethernet(0x5a, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x3f, 0x11, 0x0, @empty, @empty}, {0x3, 0x4e20, 0x38, 0x0, @gue={{0x2}, "1c8914084c92ac2e4ff1cce560fa380fa455fc628b0de6e7928aaebafa00"/40}}}}}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
accept$alg(r3, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0], 0x1})
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x0, 0xe7, 0x621cdb55, 0x6, 0x7ff, 0x5b}}, 0x400001)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
close_range(r9, 0xffffffffffffffff, 0x0)

21.766273552s ago: executing program 1 (id=2434):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xb00, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x2}})
write$sndseq(r6, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00'})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
statx(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup\x00', 0x800, 0x0, &(0x7f00000004c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

21.655774087s ago: executing program 0 (id=2435):
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800})
r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86})
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)

21.330101806s ago: executing program 2 (id=2436):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x40)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)

20.34758578s ago: executing program 0 (id=2437):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socket$inet6_sctp(0xa, 0x5, 0x84)
keyctl$session_to_parent(0x12)
r1 = syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)={[{@codepage={'codepage', 0x3d, 'maccyrillic'}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}]}, 0x4, 0x32d, &(0x7f0000000540)="$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")
r2 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
ftruncate(0xffffffffffffffff, 0x10000)
dup3(r1, 0xffffffffffffffff, 0x0)
finit_module(r2, 0x0, 0x0)
write$binfmt_elf64(r0, 0x0, 0x0)
close(r0)
getdents(r0, &(0x7f00000003c0)=""/221, 0xdd)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f00000004c0), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x65f, &(0x7f00000010c0)="$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")
rmdir(&(0x7f0000000280)='./file0\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0)
r4 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x10010, r4, 0xda9d4000)
socket$kcm(0x2, 0xa, 0x2)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000100)=0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$inet6_sctp(0xa, 0x0, 0x84)
shutdown(0xffffffffffffffff, 0x1)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
write$sequencer(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="040000000000000005ae1f589201d01ed77d7f00f79323f0195602cc21c6edb1b95a0b5fc6ebf391163726be852d04e414c57ee0f999081f27c41b"], 0x14)
write$binfmt_script(r6, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000)
getsockopt$bt_hci(r5, 0x84, 0x70, &(0x7f0000003140)=""/4111, 0x0)

20.179090964s ago: executing program 1 (id=2438):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x10}}], 0x30}, 0x0)

19.922596128s ago: executing program 2 (id=2439):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc0585604, &(0x7f0000000000)={0x2})

19.768323219s ago: executing program 1 (id=2440):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$cgroup_subtree(r0, 0x0, 0x7)

19.589255496s ago: executing program 2 (id=2441):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="6d61703d6e6f726d41312c8769643d", @ANYRES8, @ANYBLOB=',map=off,sessi[n=0x000000000000004,session=0x000000000000003a,\x00'], 0x1, 0x3de, &(0x7f0000000600)="$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")
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2001095, 0x0)
dup(0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
write$cgroup_devices(r1, 0x0, 0xffdd)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_emit_ethernet(0x83, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
dup2(r0, r0)
creat(0x0, 0xd931d3864d39dcca)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000004140), 0x0, 0x0)
poll(&(0x7f0000004200)=[{r4}, {r3}], 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x21, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x838734, &(0x7f0000000300)={[{@usrquota}, {@grpjquota, 0x1d}, {@journal_ioprio}, {@noinit_itable}, {@jqfmt_vfsv0}, {@prjquota}, {@commit={'commit', 0x3d, 0x8262}}, {@nojournal_checksum}, {@nobarrier}, {@errors_continue}, {@noquota}, {@data_ordered}]}, 0xee, 0x43a, &(0x7f0000000880)="$eJzs289vFFUcAPDvzLag/GpFREHQKhobf7S0oHLwotHEgyYmesBjbQtBFmpoTYQ0Wo3BoyHxbjya+Bd40otRTyZe9W5IiDYmoKea2Z0pu0u39Mcui8znkwy8t/N23/vum7fz9r1uAKU1lP2TROyIiN8iYqCebS4wVP/v2uL85D+L85NJLC29+WdSK3d1cX6yKFo8b3ueGU4j0k+TvJJms+cvnJ6oVqfP5fnRuTPvjc6ev/DMqTMTJ6dPTp8dP3bs6JGx558bf7YjcWZxXd3/4cyBfa++fen1yeOX3vnpm6y9ew/WzzfG0SlDWeB/LdW0nnu805X12M6GdNLXw4awLpWIyLqrvzb+B6IS1ztvIF75pKeNA7oquzdtbX96YQm4gyXR6xYAvVHc6LPvv8Vxi6Yet4UrL9a/AGVxX8uP+pm+SPMy/V2sfygiji/8+2V2RJfWIQAAGn2XzX+eXmn+l8behnK78j2UwYi4JyJ2R8S9EbEnIu6LqJW9PyIeWGf9rVtDN85/0ssbCmyNsvnfC/neVvP8r5j9xWAlz+2sxd+fnDhVnT6cvyfD0b81y4+tUsf3L//6ebtzjfO/7MjqL+aCeTsu97Us0E1NzE10alJ65eOI/X0rxZ8s7wQkEbEvIvav76V3FYlTT359oF2hm8e/ig7sMy19FfFEvf8XoiX+QrL6/uToXVGdPjxaXBU3+vmXi2+0q39T8XdA1v/bmq//lhIDfyeN+7Wz66/j4u+ftf1Os9Hrf0vyVm3Pekv+2AcTc3PnxiK2JK/V8k2Pj19/bpEvymfxDx9aefzvzp+Txf9gRGQX8cGIeCgiHs7b/khEPBoRh1aJ/8eXHnt34/F3Vxb/1Iqff8vX/2Bz/68/UTn9w7ft6l9b/x+tpYbzR2qffzex1gZu5r0DAACA/4s0InZEko4sp9N0ZKT+N/x7YltanZmde+rEzPtnp+q/ERiM/rRY6RpoWA8dSxbyV6znx/O14uL8kXzd+IvK3bX8yORMdarHsUPZbW8z/jN/VHrdOqDr/F4Lyqt1/Kc9agdw67n/Q3kZ/1Bexj+U10rj/6OWvL0AuDO5/0N5Gf9QXsY/lJfxD6W0md/1S5Q5Eelt0QyJLiV6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQGf8FAAD//yWS7pw=")

19.469625173s ago: executing program 3 (id=2442):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
readv(r0, &(0x7f0000002740)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0xf3, 0x140043})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)

19.408298342s ago: executing program 1 (id=2443):
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="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"})
r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x80104592, &(0x7f0000000240)=0x7f)

19.202711628s ago: executing program 1 (id=2444):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r0 = syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
sched_setscheduler(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000380)={{0x4, 0x6, 0xce51, 0x2, 'syz0\x00'}, 0x0, 0x10, 0x7ff, 0x0, 0x4, 0xcb02, 'syz0\x00', &(0x7f0000000100)=['macturkish', '/dev/hwrng\x00', '#-\xa5-/+[(*\x00', ']\x00'], 0x21})
r3 = memfd_create(&(0x7f0000000700)='\x9d#\x00%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xaa\x8d\x83;\xeb\xf1\xd0\xce\xe5\x19\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x01\x00\x00\x00&0\xdd\xcbC\x15\xfcp\x11\xda|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\x04\xa0\x05}\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12F\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\x00\x00\x00\x00\x00\x00\x00\x04\t0\xaf\\H\x06x-\x01\x13\xa0\xf9\xe8\xdf;\xb9\x03\x00^!\xc2\xff\xac\xb8\xac\xc5\n4\xe7\xd5\xf5@L\b\xd3\x88\xc7\xb2G\f^B\xfeR/\xd7\xf9a[Y\xe0;5!r\x92?FB\xde\xa0>0\xdc\xa6\xbf\xce\xd6?\x1f%7>i\x8d\xd0Nw=,\xcc<\v\xfd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\xf5+\x1c\'\x06\x00\xd1\xc9k:\x9d\x18cP\x14\xb6\x91AT\xb5w\xe71\xf3\xf8]\xc4\xa6+\xb6\xdcZ\xf2\x82*f\x0etDt\xbf\xa4)\x8e<%\xbcijzt\xf7\x7fN\x8fR\n>\xa0\t\ae\x8d~\xa3!\"\xec&\x83\xec\xac\x01\a\xe9\x17\x0f\xce\x9f}4\xf3P\fx\xa3/]E\xd3\xdbc\xa9\x9d$T\a\x83\n$r\xcf\xf5\xaa\x19\xe2\xb2~\xa3N\x03\x90K\xf7\x9fR_y\x80t\xa2\"!5\xf1R\x90~iLeNm\x9c\\Wv\xe5\xbbK \xc2\xa7wx\xd7\xe1P\a\'<\xa2\x02\x84\xb7\x15\x99\xb4\x85\x9b\xe4\a\xc4\xbe\xe9\xd7~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\xa1\x95\x8d\xad\x13\x10G\x99 !>\x01BS\x01w\xfc\xba\x1cu\x9d\x1aB\xaam\xddc\x1a`\xaflVlj\xb8G\xeb\xbe\a\xe4\xf38\xfba\xe8\xaf\xaa\x19\xa08\x0e\x80\xe2\x17\xde\x81\xd9fi\xca\xfa5\xb9\xf01{\xf5\xd4;Tj\xe7\xef\xfc\xdfAv\xd4\x9a\x83\xa5^\xbd\xa9\xb3\x9cE\xf3\x00Kg\x8aa\xd9|\xaa\xaa2\xf0/\\J\xc7\x13\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x5)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20242, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0xff, 0x7ffe})
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x2010, r0, 0x8fa7b000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10})
ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r5, 0x5501)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000300)={0x50, 0x1000})

17.400518226s ago: executing program 3 (id=2445):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8)
listen(r0, 0x0)
r1 = dup(r0)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000005c0)={@ieee802154={0x24, @long}, {0x0}, 0x0}, 0xa0)
mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000000500050002000000050004000000000014000780080008400000106d080006400000000011000300686173683a69702c6d61726b"], 0x60}}, 0x0)

7.409338553s ago: executing program 4 (id=2451):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x1010800, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@dmask={'dmask', 0x3d, 0xa}}, {@fmask={'fmask', 0x3d, 0x4}}, {}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x5}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}]}, 0x5, 0x1516, &(0x7f0000000300)="$eJzs3AuYTlX7MPD7XmvtMSQ9TXIY1lr35kkOyyRJDknlkCRJkuSUmKRJXklIDDklDUlIDkNyGEJymJg0zufzMUmSJklCckrWd03xeXur7/2//7fv9b/+c/+ua1/Pup+177XXfu7nsPZ2+LbL0FpNat/ViIjg34K/PiQDQCwADASAawAgAIAKcRXisvtzS0z+9w7C/loPp13pGbArieufs3H9czauf87G9c/ZuP45G9c/Z+P652xcf8Zyss3TC1/LW87d+P5/Tsa///+LZJUd++Xastd3/RdSuP45G9f/f63gv7IT1z9n4/rnbFz/nI3rnxPk+tMern/OxvVnLCe70vef/2GLgSs/hxy1Xen3H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxnOGMv0wBwKX2lZ4XY4wxxhhjjDHG/jo+15WeAWOMMcYYY4wxxv7/QxAgQUEAMZALYiE35AEBAFdDPrgGInAtxMF1kB+uhwJQEApBYYiHIlAUNBiwQBBCMSgOUbgBSsCNUBJKQWkoAw7KQgLcBOXgZigPt0AFuBUqwm1QCSpDFagKt0M1uAOqw51wF9wNNaAm1ILacA/UgXuhLtwH9eB+qA8PQAN4EBrCQ9AIHobG8Ag0gUehKTwGzaA5tICW0Oq/lf8i9ICXoCf0gmToDX3gZegL/aA/DICB8AoMgldhMLwGKTAEhsLrMAzegOHwJoyAkTAK3oLR8DaMgbEwDsZDKkyAifAOTIJ3YTJMgakwDdJgOsyA92AmzILZ8D7MgQ9gLsyD+bAA0uFDWAiLIAM+gsXwMWTCElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDvsgJ2wC3bDJ7AHPoW98Bnsg8//xfzT/5DfFQEBBQpUqDAGYzAWYzEP5sG8mBfzYT6MYATjMA7zY34sgAWwEBbCeIzHolgUDRokJCyGxTCKUSyBJbAklsTSWBodOkzABCyHN2N5LI8VsAJWxIpYCStjZayKVbEaVsPqWB3vwruwBtbAWlgL78F7sDfWxbpYD+thfax/6fYUNsJG2BgbYxNsgk2xKTbDZtgCW2ArbIWtsTW2wTaYiInYDtthe2yPSZiEHbADdsSO2Ak7YWfsjF2wC3bFbtgNX8wF+BK+hL2whuiNfbAP9sWUXP1xAA7AV3AQvoqv4muYgkNwKL6Or+MbOBxP4QgciaNwFFYTb+MYHIskxmMqpuJEnIiTcBJOxik4BadhGk7HGTgDZ+IsnIXv4xz8AD/AeTgPF2A6puNCXIQZmIGL8TRm4hJcistwOa7A5bgKV+MqXIvrcC1uwA24CTfhFtyC23Ab7sAduAsVAH6Cn+KnmIL7cB/ux/14AA/gQTyIWZiFh/AQHsbDeASP4FE8isfwOJ7A43gST+IpPI1n8Ayew3N4Hp+P/7rxrlJrUkBkU0KJGBEjYkWsyCPyiLwir8gn8omIiIg4ESfyi/yigCggColCIl7Ei6KiqDDCCBJhDACIqIiKEqKEKClKitKitHDCiQSRIMqJcqK8KC8qiFtFRXGbqCQqi7auqqgqqolEV13cKe4Sd4kaoqaoJWqL2qKOqCPqirqinqgn6ov6ooF4UDQUvbE/PiyyK9NEDMGmYig2E82FvPgN1loMxzairUgUT4qROALbi9YuSTwjOogx2FH8TYzF50RnMR67iBdEV9FNdBcvih6ijespeonJ2Fv0EdOwr+gn+osBYibWFO/jnNy1xGsiRQwRQ8XrYgG+IYaLN8UIMVKMEm+J0eJtMUaMFePEeJEqJoiJ4h0xSbwrJospYqqYJtLEdDFDvCdmillitnhfzBEfiLlinpgvFoh08aFYKBaJDPGRWCw+FpliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Cl2id3iE7FHfCr2is/EPvG52C++EAfEl+Kg+Epkia/FIfGNOCy+FUfEd+Ko+F4cE8fFCfGDOCl+FKfEaXFGnBXnxE/ivPhZXBBegEQppJRKBjJG5pKxMrfMI6+SeWVw8dW9VsbJ62R+eb0sIAvKQrKwjJdFZFGppZFWkgxlMVlcRuUNsoS8UZaUpWRpWUY6WVYmyJtkOXmzLC9vkRXkrbKivE1WkpVlFVlV3i6ryTskRH49Rg1ZU9aSteU9so68V9aV98l68n5ZXz4gG8gHZUP5kGwkH5aN5SOyiXxUNpWPyWayuWwhW8pW8nHZWj4h28i2MlE+KdvJp2R7+bRMks/IDtJffIs8JzvL52UX+YLsKrvJ7vJneUF62VP2kgC9ZR/5suwr+8n+coAcKF+Rg+SrcrB8TabIIXKofF0Ok2/I4fJNOUKOlKPkW3K0fFuOkWPlODlepsoJcqJ8R06S78rJcoqcKqfJNDld9r840mwp/2n+O3+QP/iXo2+Sm+UWuVVuk9vlDrlT7pK75W65R+6Re+VeuU/uk/vlfnlAHpAH5UGZJbPkIXlIHpaH5RF5RB6VR+UxeVyelT/Ik/JHeUqelqflWXlOnpPnL74GoFAJJZVSgYpRuVSsyq3yqKtUXnW1yqeuURF1rYpT16n86npVQBVUhVRhFa+KqKJKK6OsIhWqYqq4iqob8OIbRpVWZZRTZVWCuulfyVcl1I2qpCr1m/xL80v+k/m1Uq1Ua9VatVFtVKJKVO1UO9VetVdJKkl1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VbJKVn3Uy6qv6qf6qwFqoHpFDVKD1GA1WKWoFDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVqlLVRDVRTVKT1GQ1WU1VU1WaSlMz1Aw1U81Us9VsNUfNUXPVXDVfzVfpKl0tVAtVhspQi9VilamWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qU21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVZbKUofUIXVYHVZH1BF1VB1Vx9QxdUKdUCfVSXVKnVJn1Bl1Tp1T59V5dUFdyF72BSIQgQpUEBPEBLFBbJAnyBPkDfIG+YJ8QSSIBHFBXJA/uD4oEBQMCgWFg/igSFA00IEJbCAuFj0a3BCUCG4MSgalgtJBmcAFZYOE4KagXHBzUD64JagQ3BpUDG4LKgWVgypB1eD2oFpwR1A9uDO4K7g7qBHUDGoFtYN7gjrBvUHd4L6gXnB/UD94IGgQPBg0DB4KGgUPB42DR4ImwaNB0+CxoFnQPGgRtAxa/aXje3+q4BOup+6lk3Vv3Ue/rPvqfrq/HqAH6lf0IP2qHqxf0yl6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6t39Zj9Fg9To/XqXqCnqjf0ZP0u3qynqKn6mk6TU/XM/R7eqaepWfr9/Uc/YGeq+fp+XqBTtcf6oV6kc7QH+nF+mOdqZfopXqZXq5X6JV6lV6t1+i1ep1erzfojXqT3qy36K16m96ud+idepferT/Re/Sneq/+TO/Tn+v9+gt9QH+pD+qvdJb+Wh/S3+jD+lt9RH+nj+rv9TF9XJ/QP+iT+kd9Sp/WZ/RZfU7/pM/rn/UF7bMX99k/70YZZWJMjIk1sSaPyWPymrwmn8lnIiZi4kycyW/ymwKmgClkCpl4E2+KmqImGxkyxUwxEzVRU8KUMCVNSVPalDbOOJNgEkw5U86UN+VNBVPBVDQVTSVTyVQxVczt5nZzh7nD3GnuNHebu01NU9PUNrVNHVPH1DV1TT1Tz9Q39U0D08A0NA1NI9PINDaNTRPTxDQ1TU0z08y0MC1MK9PKtDatTRvTxiSaRNPOtDPtTXuTZJJMB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySbZNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNiUsxQM9QMM8PMcDPcjDAjzajshap524wxY804M96kmlQz0Uw0k8wkM9lMNlPNVJNm0swMM8PMNDPNbDPbzDFzzFwz18w38026STcLzUKTYTLMYrPYZJpMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTJZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5qQ5aU6ZU+aMOWPOmYIXfy+9ibW5bR57lc1rr7b57DX2H+NCtrCNt0VsUattAVvwN7Gx1pa0pWxpW8Y6W9Ym2Jt+F1eylW0VW9XebqvZO2z138V17L22rr3P1rP329r2nt/E9e0DtoF91DZEBLDNbWPb0jaxj9qm9jHbzDa3LWxL284+Zdvbp22SfcZ2sM/+Ll5oF9nVdo1da9fZPfZTe8aetYftt/ac/cn2tL3sQPuKHWRftYPtazbFDvldPMq+ZUfbt+0YO9aOs+N/F0+102yanW5n2PfsTDvrd3G6/dDOsRl2rp1n59sFv8TZc8qwH9nF9mObaZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+4ndarfZ7XaH3Wl3/RJnn8de+5ndZz+3h+w39oD90h60R2yW/fqXOPv8jtjv7FH7vT1mj9sT9gd70v5oT9nTv5x/9rn/YH+2F6y3QEhAkhQFFEO5KJZyUx66ivLS1ZSPrqEIXUtxdB3lp+upABWkQlSY4qkIFSVNhiwRhVSMilOUbqBL6/TSVIYclaUEuonK0c1Unm6hCnQrVaTbqBJVpipUlW6nanQHVac76S66m2pQTapFtekeqkP3Ul26j+rR/VSfHqAG9CA1pIeoET1MjekRakKPUlN6jJpRc2pBLakVPU6t6QlqQ20pkZ6kdvQUtaenKYmeoQ70LHWkv1Eneo460/PUhV6grtSNutOL1INeop7Ui5KpN/Whl6kv9aP+NIAG0is0iF6lwfQapdAQGkqv0zB6g4bTmzSCRtIoeotG09s0hsbSOBpPqTSBJtI7NInepck0habSNEqj6TSD3qOZNItm0/s0hz6guTSP5tMCSqcPaSEtogz6iBbTx5RJS2gpLaPltIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+20g3bSLtpNn9Ae+pT20me0jz6n/fQFHaAv6SB9RVn0NR2ib+gwfUtH6Dvfi76nY3ScTtAPdJJ+pFN0ms7QWTpHP9F5+pkukCcIMRShDFUYhDFhrjA2zB3mCa8K84ZXh/nCa8JIeG0YF14X5g+vDwuEBcNCYeEwPiwSFg11aEIbUhiGxcLiYTS8ISwR3hiWDEuFpcMyoQvLhgnhTWG58OawfHhLWCG8NawY3hZWCiuHj95fNbw9rBbeEVYP7wwTw7vDGmHNsFZYO7wnrBPeG9YN7wvrhfeH5cMHwgbhg2HD8KGwUfhw2Dh8JGwSPho2DR8Lm4XNwxZhy7BV+HjYOnwibBO2DRPDJ8N24VNh+/DpMCl8JuwQPvtL/wOL/rw/Oewd9glfDl8Ovb9Pzo8uiKZHP4wujC6KZkQ/ii6OfhzNjC6JLo0uiy6ProiujK6Kro6uia6Nrouuj26IboxuinpfOxc4dMJJp1zgYlwuF+tyuzzuKpfXXe3yuWtcxF3r4tx1Lr+73hVwBV0hV9jFuyKuqNPOOOvIha6YK+6i7gZXwt3oSrpSrrQr45wr6xJcS9fKtXKt3ROujWvrEt2T7kn3lHvKPe2eds+4Du5Z19H9zXVyz7nO7nn3vHvBdXXdXHf3ouvhJuT79TOZ7Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7FJcihvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLdaluopvoJrlJbrKb7Ka6qS7NpbkZboab6Wa6arN+PcpcN9fNd/Ndukt3C132mjHDLXaLXabLdEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8Nb8O6va5/W6/O+AOuIPuK5flvnaH3DfusPvWHXHfuaPue3fMHXcn3A/upPvRnXKn3Rl31p1zP7nz7md3wXmXGpkQmRh5JzIp8m5kcmRKZGpkWiQtMj0yI/JeZGZkVmR25P3InMgHkbmReZH5kQWR9MiHkYWRRZGMyEeRxZGPI5mRJZGlkWWR5ZEVEe+LbA19MV/cR/0NvoS/0Zf0pXxpX8Y7X9Yn+Jt8OX+zL+9v8RX8rb6iv81X8pV9Ff+Yb+ab+xa+pW/lH/et/RO+jW/rE/2Tvp1/yrf3T/sk/4zv4J/1Hf3ffCf/nO/sn/dd/Au+q+/mu/sXfQ//ku/pe/lk39v38S/7vr6f7+8H+IH+FT/Iv+oH+9d8ih/ih/rX/TD/hh/u3/Qj/Eg/KuYtP/rSJTKM96l+gp/o3/GT/Lt+sp/ip/ppPs1P9zP8e36mn+Vn+/f9HP+Bn+vn+fl+gU/3H/qFfpHP8B/5xf5jn+mXXLqp7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//E7/Gf+r3+M7/Pf+73+y/8Af+lP+i/8ln+a3/If+MP+2/9Ef+dP+q/98f8cX/C/+BP+h/9KX/an/Fn/Tn/kz/vf/YX+N+sMcYYY4z9l0y43BR/1N/7D54Tf7dzHwC4elvhrL/vz15Rri/wa7ufiG8XAYBnenV5+NJWo0ZycvLFfTMlBMXnAVz6k6BsMXA5XgKJ8BQkQVso94fz7ye6naN/Mn70VoA8f5cTC5fjy+N/8SfjP/7kqIUVwzNx/4/x5wGULH45JzdcjpdAosp+bAvl/2T8gq3/yfxzf5kK0ObvcvLC5fjy/BPgCXgWkn6zJ2OMMcYYY4wx9qt+okqnS9efl/7G5x9dn8eryzm54HL8z67PGWOMMcYYY4wxduU91637048nJbXt9K83qv+3srjxP7XhPcClZxQA/JsDAvzHz2LLf+RYKRc/Ov/YtfysD+B/Rin/isYV/mJijDHGGGOM/eUuL/p/+7y6UhNijDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZyoP/Efyd2pc+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9L+TwAAAP//8SoNew==")
mkdir(&(0x7f0000001d40)='./file1\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xc50, &(0x7f0000001d80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r1, &(0x7f0000000980)='./file0\x00', 0x0)

7.29454257s ago: executing program 3 (id=2452):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1/../file0\x00', 0x0)
pipe2$9p(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="15000007e8ffb6f2e519ad08ab5bff77c16b21f375"], 0x15)
r6 = epoll_create(0x5)
r7 = epoll_create(0x800)
epoll_pwait(r7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x2, &(0x7f0000000000), 0x8)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000100)={0x10000011})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}})
write$P9_RVERSION(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="1300000065ffff000000000600395032303030bea5bda800d2338a26274efbfd8b2161cfcb8d36ac2e7a9072530089dda7764fd1842f628d1abe62ccfd053a02372cf991eceeae9e8438aedaceb712beef865c753bc5194fffbc42a539d5397d4a661c651649ea00ac70441837f4c5279a3f6bce14513eec8e2f48df0d835a"], 0x13)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000003c0)={0x2002})

5.506238523s ago: executing program 3 (id=2453):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$cgroup_subtree(r0, 0x0, 0x7)

4.130280437s ago: executing program 4 (id=2455):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}]}}]}, 0x3c}}, 0x0)

3.222010134s ago: executing program 4 (id=2456):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
readv(r0, &(0x7f0000002740)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0xf3, 0x140043})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)

2.703087993s ago: executing program 4 (id=2457):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2.286934799s ago: executing program 4 (id=2458):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/11, 0xb}}, 0x120)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
readv(r0, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/113, 0x71}], 0x1)

0s ago: executing program 4 (id=2459):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000140)=""/166, 0xa6}], 0x1, 0x0, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r5, 0x0, 0x0, 0x2200c851, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c)

kernel console output (not intermixed with test programs):

h: 249 > 3
[  763.448058][ T5090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  764.033764][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.108137][T11794] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11794 comm=syz.4.2069
[  764.294901][T11821] loop3: detected capacity change from 0 to 256
[  764.315521][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.346525][T11821] exfat: Deprecated parameter 'utf8'
[  764.392339][T11821] exfat: Deprecated parameter 'utf8'
[  764.435781][T11823] dccp_close: ABORT with 1 bytes unread
[  764.471838][T11821] exfat: Deprecated parameter 'utf8'
[  764.554034][T11821] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  764.626986][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.833987][T11831] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  764.921956][T11831] erspan0: entered promiscuous mode
[  765.059377][T11831] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  765.352784][T11828] erspan0: left promiscuous mode
[  765.674650][ T5090] Bluetooth: hci4: command tx timeout
[  765.690089][   T11] bridge_slave_1: left allmulticast mode
[  765.702206][   T11] bridge_slave_1: left promiscuous mode
[  765.708488][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.720654][   T11] bridge_slave_0: left allmulticast mode
[  765.726346][   T11] bridge_slave_0: left promiscuous mode
[  765.752539][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  766.343364][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2084'.
[  767.451822][T11862] loop3: detected capacity change from 0 to 2048
[  767.578240][T11862] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  768.006799][ T5090] Bluetooth: hci4: command tx timeout
[  770.202733][ T5090] Bluetooth: hci4: command tx timeout
[  770.700218][T11864] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11864 comm=syz.1.2089
[  771.436483][   T29] audit: type=1800 audit(1719265974.894:895): pid=11888 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2093" name="file1" dev="sda1" ino=1981 res=0 errno=0
[  771.787497][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  772.466444][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  772.487220][ T5090] Bluetooth: hci4: command tx timeout
[  772.745704][   T11] bond0 (unregistering): Released all slaves
[  772.910432][T11813] chnl_net:caif_netlink_parms(): no params data found
[  773.428892][T11813] bridge0: port 1(bridge_slave_0) entered blocking state
[  773.457411][T11813] bridge0: port 1(bridge_slave_0) entered disabled state
[  773.474668][T11813] bridge_slave_0: entered allmulticast mode
[  773.505605][T11813] bridge_slave_0: entered promiscuous mode
[  773.606192][T11813] bridge0: port 2(bridge_slave_1) entered blocking state
[  773.631366][T11813] bridge0: port 2(bridge_slave_1) entered disabled state
[  773.663263][T11813] bridge_slave_1: entered allmulticast mode
[  773.698221][T11813] bridge_slave_1: entered promiscuous mode
[  774.096538][T11813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  774.236740][T11813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  774.452210][T11924] input: syz0 as /devices/virtual/input/input12
[  774.488319][T11922] loop4: detected capacity change from 0 to 2048
[  775.223135][T11922] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  775.292362][T11813] team0: Port device team_slave_0 added
[  775.366617][T11813] team0: Port device team_slave_1 added
[  777.190868][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  777.197325][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  777.698887][   T29] audit: type=1400 audit(1719265980.681:896): avc:  denied  { read } for  pid=11937 comm="syz.0.2110" path="socket:[38391]" dev="sockfs" ino=38391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  777.908238][   T29] audit: type=1400 audit(1719265980.884:897): avc:  denied  { setopt } for  pid=11937 comm="syz.0.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  778.332986][   T11] hsr_slave_0: left promiscuous mode
[  778.493426][   T11] hsr_slave_1: left promiscuous mode
[  778.776938][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  778.825471][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  778.872734][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  778.916827][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  779.167933][   T11] veth1_macvtap: left promiscuous mode
[  779.188066][   T11] veth0_macvtap: left promiscuous mode
[  779.220496][   T11] veth1_vlan: left promiscuous mode
[  779.247056][   T11] veth0_vlan: left promiscuous mode
[  781.906916][T11975] netlink: 'syz.0.2120': attribute type 1 has an invalid length.
[  781.924805][T11975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2120'.
[  785.646058][ T5090] Bluetooth: hci1: command 0x0406 tx timeout
[  786.443763][   T11] team0 (unregistering): Port device team_slave_1 removed
[  786.573281][   T11] team0 (unregistering): Port device team_slave_0 removed
[  788.483941][T11813] batman_adv: batadv0: Adding interface: batadv_slave_0
[  788.496833][T11813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  788.547547][T11813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  788.612227][T11813] batman_adv: batadv0: Adding interface: batadv_slave_1
[  788.631089][T11813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  788.657423][T11813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  788.674382][T11970] netlink: 'syz.0.2120': attribute type 4 has an invalid length.
[  788.687075][T11964] netdevsim netdevsim4: Direct firmware load for ng failed with error -2
[  788.718766][T11964] netdevsim netdevsim4: Falling back to sysfs fallback for: ng
[  788.742559][   T29] audit: type=1400 audit(1719265990.880:898): avc:  denied  { relabelfrom } for  pid=11982 comm="syz.1.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  788.798397][   T29] audit: type=1400 audit(1719265990.908:899): avc:  denied  { relabelto } for  pid=11982 comm="syz.1.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  788.951344][T11990] netlink: 'syz.4.2124': attribute type 1 has an invalid length.
[  789.051344][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  789.085352][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  789.098381][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  789.115235][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  789.125753][ T5095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  789.133467][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  789.428057][T11995] loop4: detected capacity change from 0 to 128
[  790.510354][   T29] audit: type=1400 audit(1719265992.329:900): avc:  denied  { audit_read } for  pid=12002 comm="syz.1.2129" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  790.875664][T11813] hsr_slave_0: entered promiscuous mode
[  790.970992][T11813] hsr_slave_1: entered promiscuous mode
[  791.031084][T11813] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  791.113008][T11813] Cannot create hsr debugfs directory
[  791.414922][ T5090] Bluetooth: hci2: command tx timeout
[  791.685114][ T5090] Bluetooth: hci1: Ignoring connect complete event for invalid link type
[  792.705492][   T29] audit: type=1400 audit(1719265994.499:901): avc:  denied  { map } for  pid=12019 comm="syz.1.2136" path="/dev/usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  793.672632][ T5090] Bluetooth: hci2: command tx timeout
[  794.190184][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.379020][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.773606][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.926080][ T5090] Bluetooth: hci2: command tx timeout
[  797.604695][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  797.796385][   T29] audit: type=1400 audit(1719265999.224:902): avc:  denied  { bind } for  pid=12060 comm="syz.0.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  798.052294][T11991] chnl_net:caif_netlink_parms(): no params data found
[  798.179054][ T5090] Bluetooth: hci2: command tx timeout
[  798.243953][T12071] loop4: detected capacity change from 0 to 128
[  798.272296][T12071] vxfs: WRONG superblock magic 7b3185b5 at 1
[  798.301920][T12071] vxfs: WRONG superblock magic 7b318cb5 at 8
[  798.315653][   T11] bridge_slave_1: left allmulticast mode
[  798.319568][T12071] vxfs: can't find superblock.
[  798.348129][   T11] bridge_slave_1: left promiscuous mode
[  798.354883][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.456035][   T11] bridge_slave_0: left allmulticast mode
[  798.488093][   T11] bridge_slave_0: left promiscuous mode
[  798.506124][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.989056][T12089] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  801.011818][   T29] audit: type=1400 audit(1719266001.523:903): avc:  denied  { listen } for  pid=12086 comm="syz.1.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  801.812364][T12097] loop4: detected capacity change from 0 to 136
[  801.962142][   T29] audit: type=1400 audit(1719266003.073:904): avc:  denied  { mounton } for  pid=12096 comm="syz.4.2162" path="/root/syzkaller.id15Ro/78/file0/file0" dev="loop4" ino=1536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1
[  802.792504][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2164'.
[  805.255269][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  805.285887][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  805.360679][   T11] bond0 (unregistering): Released all slaves
[  806.338960][T12119] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2167'.
[  807.187354][T11813] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  807.269954][T11813] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  810.487150][T11813] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  810.835443][T11813] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  810.954068][T11991] bridge0: port 1(bridge_slave_0) entered blocking state
[  810.970773][T11991] bridge0: port 1(bridge_slave_0) entered disabled state
[  810.993972][T11991] bridge_slave_0: entered allmulticast mode
[  811.037120][T11991] bridge_slave_0: entered promiscuous mode
[  811.108172][   T11] hsr_slave_0: left promiscuous mode
[  811.133296][   T11] hsr_slave_1: left promiscuous mode
[  811.155041][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  811.172118][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  811.204989][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  811.234591][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  811.344792][T12142] loop4: detected capacity change from 0 to 256
[  811.425940][   T11] veth1_macvtap: left promiscuous mode
[  811.465635][   T11] veth0_macvtap: left promiscuous mode
[  811.477034][   T11] veth1_vlan: left promiscuous mode
[  811.497044][   T11] veth0_vlan: left promiscuous mode
[  812.756162][T12142] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12142 comm=syz.4.2174
[  813.988276][ T5095] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  814.036107][ T5095] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  814.061642][ T5095] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  814.118622][ T5095] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  814.130382][ T5095] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  814.151625][ T5095] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  815.239301][   T11] team0 (unregistering): Port device team_slave_1 removed
[  815.598446][   T11] team0 (unregistering): Port device team_slave_0 removed
[  816.378891][ T5090] Bluetooth: hci6: command tx timeout
[  817.538745][T12137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  817.546911][T12137] IPv6: NLM_F_CREATE should be set when creating new route
[  817.605309][T11991] bridge0: port 2(bridge_slave_1) entered blocking state
[  817.655641][T11991] bridge0: port 2(bridge_slave_1) entered disabled state
[  817.663030][T11991] bridge_slave_1: entered allmulticast mode
[  817.724392][T11991] bridge_slave_1: entered promiscuous mode
[  817.760918][T12149] openvswitch: netlink: Flow key attr not present in new flow.
[  818.231581][T11991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  818.271494][T11991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  818.509560][T11991] team0: Port device team_slave_0 added
[  818.573999][T11991] team0: Port device team_slave_1 added
[  818.630536][ T5090] Bluetooth: hci6: command tx timeout
[  819.072229][T11991] batman_adv: batadv0: Adding interface: batadv_slave_0
[  819.100912][T11991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  819.153020][T12166] ALSA: seq fatal error: cannot create timer (-22)
[  819.166252][T11991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  819.287747][T11991] batman_adv: batadv0: Adding interface: batadv_slave_1
[  819.309494][T11991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  819.389552][T11991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  819.781687][T11991] hsr_slave_0: entered promiscuous mode
[  819.799746][T11991] hsr_slave_1: entered promiscuous mode
[  819.807076][T11991] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  819.814892][T11991] Cannot create hsr debugfs directory
[  820.801474][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.884675][ T5090] Bluetooth: hci6: command tx timeout
[  821.184858][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.369081][T12146] chnl_net:caif_netlink_parms(): no params data found
[  821.527301][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.832468][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.951756][T11813] 8021q: adding VLAN 0 to HW filter on device bond0
[  822.566776][T11813] 8021q: adding VLAN 0 to HW filter on device team0
[  822.678591][T12146] bridge0: port 1(bridge_slave_0) entered blocking state
[  822.694095][T12146] bridge0: port 1(bridge_slave_0) entered disabled state
[  822.719176][T12146] bridge_slave_0: entered allmulticast mode
[  822.732019][T12187] loop4: detected capacity change from 0 to 40427
[  822.741596][T12146] bridge_slave_0: entered promiscuous mode
[  822.772855][  T932] bridge0: port 1(bridge_slave_0) entered blocking state
[  822.780211][  T932] bridge0: port 1(bridge_slave_0) entered forwarding state
[  822.790218][T12187] F2FS-fs (loop4): invalid crc value
[  822.819703][T12187] F2FS-fs (loop4): Found nat_bits in checkpoint
[  822.873666][T12146] bridge0: port 2(bridge_slave_1) entered blocking state
[  822.899450][T12146] bridge0: port 2(bridge_slave_1) entered disabled state
[  822.906986][T12146] bridge_slave_1: entered allmulticast mode
[  822.933912][T12146] bridge_slave_1: entered promiscuous mode
[  823.015769][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state
[  823.023086][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state
[  823.053653][T12187] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  823.137602][ T5090] Bluetooth: hci6: command tx timeout
[  823.248473][T12187] syz.4.2190: attempt to access beyond end of device
[  823.248473][T12187] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427
[  823.296801][T12146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  823.347971][T12205] syz.4.2190: attempt to access beyond end of device
[  823.347971][T12205] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427
[  823.500646][T12146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  823.536963][T10747] syz-executor: attempt to access beyond end of device
[  823.536963][T10747] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  823.576412][T10747] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  823.834149][T12146] team0: Port device team_slave_0 added
[  823.870108][T12146] team0: Port device team_slave_1 added
[  823.982358][   T11] bridge_slave_1: left allmulticast mode
[  823.988094][   T11] bridge_slave_1: left promiscuous mode
[  824.015260][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  824.069078][   T11] bridge_slave_0: left allmulticast mode
[  824.080931][   T11] bridge_slave_0: left promiscuous mode
[  824.086862][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.020229][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2197'.
[  825.353246][T12223] loop4: detected capacity change from 0 to 1024
[  825.414437][T12223] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  825.438462][T12223] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  825.464595][T12223] EXT4-fs (loop4): orphan cleanup on readonly fs
[  825.482493][T12223] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.2200: Freeing blocks not in datazone - block = 0, count = 4096
[  825.497818][T12223] EXT4-fs (loop4): 1 orphan inode deleted
[  825.511430][T12223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  826.171731][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  826.204218][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  826.233429][   T11] bond0 (unregistering): Released all slaves
[  826.906913][T10747] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  827.035650][T12146] batman_adv: batadv0: Adding interface: batadv_slave_0
[  827.096419][T12146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  827.211827][T12146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  827.837032][T12246] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=12246 comm=syz.4.2204
[  827.932516][T12146] batman_adv: batadv0: Adding interface: batadv_slave_1
[  827.947264][T12146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  828.006465][T12146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  828.077122][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  828.092123][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2204'.
[  828.112306][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  828.130129][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  828.142995][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  828.154545][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  828.162339][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  828.337789][   T11] hsr_slave_0: left promiscuous mode
[  828.381932][   T11] hsr_slave_1: left promiscuous mode
[  828.392957][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  828.400457][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  828.414988][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  828.422747][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  828.621380][   T11] veth1_macvtap: left promiscuous mode
[  828.641614][   T11] veth0_macvtap: left promiscuous mode
[  828.663161][   T11] veth1_vlan: left promiscuous mode
[  828.668760][   T11] veth0_vlan: left promiscuous mode
[  830.422841][ T5090] Bluetooth: hci0: command tx timeout
[  831.546541][   T11] team0 (unregistering): Port device team_slave_1 removed
[  831.721365][   T11] team0 (unregistering): Port device team_slave_0 removed
[  832.693059][ T5090] Bluetooth: hci0: command tx timeout
[  833.244024][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2204'.
[  833.714271][T11991] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  833.733082][   T29] audit: type=1326 audit(1719266032.406:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.0.2211" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b69f75d39 code=0x0
[  833.781133][T11991] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  833.892438][T11991] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  834.011900][T11991] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  834.120059][T12146] hsr_slave_0: entered promiscuous mode
[  834.150049][T12146] hsr_slave_1: entered promiscuous mode
[  834.157352][T12146] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  834.165089][T12146] Cannot create hsr debugfs directory
[  834.683374][T12277] dns_resolver: Unsupported server list version (30)
[  834.926430][ T5090] Bluetooth: hci0: command tx timeout
[  834.975633][T12277] loop4: detected capacity change from 0 to 16
[  834.997191][T12277] erofs: Unknown parameter 'ÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿ0xffffffffffffffff01777777777777777777777ÿ18446744073709551615'
[  836.521958][T12248] chnl_net:caif_netlink_parms(): no params data found
[  836.687769][    C0] dccp_v4_rcv: dropped packet with invalid checksum
[  837.178455][ T5090] Bluetooth: hci0: command tx timeout
[  837.913946][T12296] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=12296 comm=syz.0.2218
[  837.929459][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2218'.
[  838.069341][T12248] bridge0: port 1(bridge_slave_0) entered blocking state
[  838.076645][T12248] bridge0: port 1(bridge_slave_0) entered disabled state
[  838.149440][T12248] bridge_slave_0: entered allmulticast mode
[  838.153903][T12299] loop4: detected capacity change from 0 to 64
[  838.173841][T12248] bridge_slave_0: entered promiscuous mode
[  838.200041][T12299] MINIX-fs: file system does not have enough zmap blocks allocated.  Refusing to mount.
[  838.213573][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2218'.
[  838.226281][T12299] MINIX-fs: bad superblock or unable to read bitmaps
[  838.591827][T12248] bridge0: port 2(bridge_slave_1) entered blocking state
[  838.615901][T12248] bridge0: port 2(bridge_slave_1) entered disabled state
[  838.632119][T12248] bridge_slave_1: entered allmulticast mode
[  838.662465][T12248] bridge_slave_1: entered promiscuous mode
[  838.876437][T12248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  838.957987][T12299] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2219'.
[  839.060035][T12248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  839.321675][T12248] team0: Port device team_slave_0 added
[  839.358804][T12248] team0: Port device team_slave_1 added
[  840.491215][T11991] 8021q: adding VLAN 0 to HW filter on device bond0
[  841.017115][T12248] batman_adv: batadv0: Adding interface: batadv_slave_0
[  841.035346][T12248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  841.088607][T12248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  841.167322][   T11] bridge_slave_1: left allmulticast mode
[  841.195038][   T11] bridge_slave_1: left promiscuous mode
[  841.206279][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  841.247127][   T11] bridge_slave_0: left allmulticast mode
[  841.262946][   T11] bridge_slave_0: left promiscuous mode
[  841.285816][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  842.360015][ T5090] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6
[  842.847427][   T29] audit: type=1326 audit(1719266040.805:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.4.2229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fa8f75d39 code=0x0
[  843.005947][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  843.036173][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  843.051643][   T11] bond0 (unregistering): Released all slaves
[  843.189486][T12248] batman_adv: batadv0: Adding interface: batadv_slave_1
[  843.215401][T12248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  843.276199][T12248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  843.510160][   T11] hsr_slave_0: left promiscuous mode
[  843.543389][   T11] hsr_slave_1: left promiscuous mode
[  843.572770][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  843.586086][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  843.685746][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  843.700864][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  844.545917][ T5090] Bluetooth: hci1: command 0x0406 tx timeout
[  845.266765][   T11] team0 (unregistering): Port device team_slave_1 removed
[  845.366667][   T11] team0 (unregistering): Port device team_slave_0 removed
[  846.708191][T12146] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  846.852921][T12248] hsr_slave_0: entered promiscuous mode
[  846.886482][T12248] hsr_slave_1: entered promiscuous mode
[  846.905066][T12248] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  846.918080][T12248] Cannot create hsr debugfs directory
[  846.936425][T12337] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2233'.
[  847.208733][T12146] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  847.222588][ T5090] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6
[  847.304758][T11991] 8021q: adding VLAN 0 to HW filter on device team0
[  847.335014][T12146] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  847.491670][T12347] netlink: 'syz.4.2238': attribute type 2 has an invalid length.
[  847.501205][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state
[  847.501489][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  847.579748][T12146] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  847.725090][   T29] audit: type=1400 audit(1719266045.310:907): avc:  denied  { ioctl } for  pid=12349 comm="syz.4.2239" path="socket:[39728]" dev="sockfs" ino=39728 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  847.854412][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state
[  847.861758][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  847.873307][T12350] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  847.893626][T12350] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  847.908105][T12350] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  848.909336][T12146] 8021q: adding VLAN 0 to HW filter on device bond0
[  849.059070][T12146] 8021q: adding VLAN 0 to HW filter on device team0
[  849.143468][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state
[  849.150798][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  849.177478][   T29] audit: type=1400 audit(1719266046.667:908): avc:  denied  { read } for  pid=12360 comm="syz.4.2242" name="btrfs-control" dev="devtmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  849.247870][   T29] audit: type=1400 audit(1719266046.667:909): avc:  denied  { open } for  pid=12360 comm="syz.4.2242" path="/dev/btrfs-control" dev="devtmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  849.250029][  T785] bridge0: port 2(bridge_slave_1) entered blocking state
[  849.279467][  T785] bridge0: port 2(bridge_slave_1) entered forwarding state
[  849.346007][   T29] audit: type=1400 audit(1719266046.713:910): avc:  denied  { ioctl } for  pid=12360 comm="syz.4.2242" path="/dev/btrfs-control" dev="devtmpfs" ino=1119 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  849.412819][ T5090] Bluetooth: hci1: command 0x0406 tx timeout
[  849.842434][T11991] 8021q: adding VLAN 0 to HW filter on device batadv0
[  849.867268][T12248] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  849.935776][T12248] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  850.030335][T12248] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  850.098418][T12248] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  850.608239][T11991] veth0_vlan: entered promiscuous mode
[  850.780005][T11991] veth1_vlan: entered promiscuous mode
[  850.877239][T12248] 8021q: adding VLAN 0 to HW filter on device bond0
[  850.904976][T12146] 8021q: adding VLAN 0 to HW filter on device batadv0
[  851.063446][T12248] 8021q: adding VLAN 0 to HW filter on device team0
[  851.107923][T11991] veth0_macvtap: entered promiscuous mode
[  851.160773][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state
[  851.168140][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  851.235573][T11991] veth1_macvtap: entered promiscuous mode
[  851.346620][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state
[  851.354214][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  851.523568][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  851.577104][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.604027][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  851.649367][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.687386][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  851.741976][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.761333][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  851.799593][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.829928][T11991] batman_adv: batadv0: Interface activated: batadv_slave_0
[  851.943098][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  851.981456][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  852.017386][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  852.045305][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  852.080552][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  852.110265][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  852.136374][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  852.174247][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  852.237250][T11991] batman_adv: batadv0: Interface activated: batadv_slave_1
[  852.364389][T12146] veth0_vlan: entered promiscuous mode
[  852.523402][T12146] veth1_vlan: entered promiscuous mode
[  852.613899][T11991] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  852.628454][T12385] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12385 comm=syz.0.2251
[  852.653570][T11991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  852.659096][T12383] loop4: detected capacity change from 0 to 32768
[  852.669119][T11991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  852.691750][T11991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  852.827054][   T29] audit: type=1400 audit(1719266050.026:911): avc:  denied  { create } for  pid=12382 comm="syz.4.2250" name="file6" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  852.903442][   T29] audit: type=1400 audit(1719266050.091:912): avc:  denied  { rename } for  pid=12382 comm="syz.4.2250" name="file6" dev="loop4" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  853.250660][T12146] veth0_macvtap: entered promiscuous mode
[  853.317887][T12146] veth1_macvtap: entered promiscuous mode
[  853.498361][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  853.559722][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  853.603128][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  853.657248][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  853.667182][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  853.743870][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  853.754048][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  853.821801][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  853.856538][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  853.908628][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  853.941811][T12146] batman_adv: batadv0: Interface activated: batadv_slave_0
[  854.075118][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  854.111072][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  854.146483][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  854.188080][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  854.220117][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  854.254953][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  854.288912][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  854.340201][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  854.383137][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  854.417920][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  854.461880][T12146] batman_adv: batadv0: Interface activated: batadv_slave_1
[  854.754795][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  854.777016][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  854.781074][T12146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  854.809517][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  854.825777][T12146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  854.849109][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  854.862304][ T5095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  854.870104][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  854.880538][T12146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  854.909139][T12146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  854.957295][   T29] audit: type=1400 audit(1719266051.992:913): avc:  denied  { getopt } for  pid=12405 comm="syz.4.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  854.991650][   T29] audit: type=1400 audit(1719266052.029:914): avc:  denied  { ioctl } for  pid=12405 comm="syz.4.2254" path="socket:[41142]" dev="sockfs" ino=41142 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  855.011317][T12248] 8021q: adding VLAN 0 to HW filter on device batadv0
[  855.394120][ T2830] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  855.793176][ T2830] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.046113][ T2830] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.408848][ T2830] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.701957][  T748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  856.709992][  T748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  857.116024][ T5090] Bluetooth: hci2: command tx timeout
[  857.133254][    C0] dccp_v4_rcv: dropped packet with invalid checksum
[  857.235999][ T8830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  857.244126][ T8830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  857.407765][T12248] veth0_vlan: entered promiscuous mode
[  857.872502][T12248] veth1_vlan: entered promiscuous mode
[  858.058627][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'.
[  858.970474][T12426] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12426 comm=syz.0.2260
[  859.054972][T12403] chnl_net:caif_netlink_parms(): no params data found
[  859.103890][ T2830] bridge_slave_1: left allmulticast mode
[  859.136354][ T2830] bridge_slave_1: left promiscuous mode
[  859.151520][ T2830] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.196387][ T2830] bridge_slave_0: left allmulticast mode
[  859.203711][ T2830] bridge_slave_0: left promiscuous mode
[  859.226756][ T2830] bridge0: port 1(bridge_slave_0) entered disabled state
[  859.268360][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2262'.
[  859.366965][ T5090] Bluetooth: hci2: command tx timeout
[  860.982341][ T2830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  861.001662][ T2830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  861.049126][ T2830] bond0 (unregistering): Released all slaves
[  861.263625][T12248] veth0_macvtap: entered promiscuous mode
[  861.686792][ T5090] Bluetooth: hci2: command tx timeout
[  861.738518][T12248] veth1_macvtap: entered promiscuous mode
[  861.913223][T12464] loop4: detected capacity change from 0 to 16
[  862.064974][T12464] erofs: (device loop4): mounted with root inode @ nid 36.
[  863.896791][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2272'.
[  863.914042][ T5090] Bluetooth: hci2: command tx timeout
[  865.282913][ T2830] hsr_slave_0: left promiscuous mode
[  865.339273][ T2830] hsr_slave_1: left promiscuous mode
[  865.376370][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  865.397061][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_0
[  865.630581][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  865.638149][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_1
[  866.408789][ T2830] veth1_macvtap: left promiscuous mode
[  866.474644][ T2830] veth0_macvtap: left promiscuous mode
[  866.506952][ T2830] veth1_vlan: left promiscuous mode
[  866.533869][ T2830] veth0_vlan: left promiscuous mode
[  869.275251][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2284'.
[  870.092315][ T2830] team0 (unregistering): Port device team_slave_1 removed
[  870.270400][ T2830] team0 (unregistering): Port device team_slave_0 removed
[  871.943964][T12487] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2276'.
[  872.442868][T12403] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.452038][T12403] bridge0: port 1(bridge_slave_0) entered disabled state
[  872.474938][T12403] bridge_slave_0: entered allmulticast mode
[  872.515244][T12403] bridge_slave_0: entered promiscuous mode
[  872.772193][T12403] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.831759][T12403] bridge0: port 2(bridge_slave_1) entered disabled state
[  872.857493][   T29] audit: type=1326 audit(1719266068.523:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12512 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b69f75d39 code=0x7ffc0000
[  872.918588][T12403] bridge_slave_1: entered allmulticast mode
[  872.971272][T12403] bridge_slave_1: entered promiscuous mode
[  873.014763][   T29] audit: type=1326 audit(1719266068.579:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12512 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f4b69f75d39 code=0x7ffc0000
[  873.132161][   T29] audit: type=1326 audit(1719266068.579:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12512 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b69f75d39 code=0x7ffc0000
[  873.166665][   T29] audit: type=1326 audit(1719266068.579:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12512 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b69f75d39 code=0x7ffc0000
[  873.852701][T12519] ptrace attach of "./syz-executor exec"[10747] was attempted by "./syz-executor exec"[12519]
[  875.942643][T12518] input: syz1 as /devices/virtual/input/input13
[  876.569782][T12403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  876.581153][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  876.593451][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.603338][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  876.626110][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.636163][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  876.682278][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.701673][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  876.724757][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.757579][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  876.790436][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.840651][T12248] batman_adv: batadv0: Interface activated: batadv_slave_0
[  876.889218][T12403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  876.928626][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  876.962149][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.972061][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  876.996985][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.007601][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  877.036066][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.074876][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  877.085534][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.095492][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  877.106191][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.118938][T12248] batman_adv: batadv0: Interface activated: batadv_slave_1
[  877.233156][   T29] audit: type=1400 audit(1719266072.529:919): avc:  denied  { create } for  pid=12531 comm="syz.0.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  877.319899][   T29] audit: type=1400 audit(1719266072.584:920): avc:  denied  { write } for  pid=12531 comm="syz.0.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  877.327645][T12248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  877.387001][T12248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  877.407199][   T29] audit: type=1400 audit(1719266072.584:921): avc:  denied  { nlmsg_write } for  pid=12531 comm="syz.0.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  877.408056][T12248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  877.465543][T12248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  877.562622][T12403] team0: Port device team_slave_0 added
[  877.643094][T12403] team0: Port device team_slave_1 added
[  877.964929][T12403] batman_adv: batadv0: Adding interface: batadv_slave_0
[  877.982488][T12403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  878.067641][T12403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  878.114140][T12403] batman_adv: batadv0: Adding interface: batadv_slave_1
[  878.135814][T12403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  878.189806][T12548] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  878.211955][T12403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  878.557594][T12403] hsr_slave_0: entered promiscuous mode
[  878.578976][T12403] hsr_slave_1: entered promiscuous mode
[  878.608870][T12403] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  878.620324][T12403] Cannot create hsr debugfs directory
[  878.703169][   T29] audit: type=1400 audit(1719266073.830:922): avc:  denied  { execmem } for  pid=12552 comm="syz.0.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  879.147350][T12555] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2305'.
[  879.399776][ T8830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.407664][ T8830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.748882][T12566] tipc: Failed to remove unknown binding: 66,1,1/0:1023775681/1023775683
[  879.778711][T12566] tipc: Failed to remove unknown binding: 66,1,1/0:1023775681/1023775683
[  879.909881][ T2830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.928616][ T2830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  880.073876][T12570] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2311'.
[  880.275960][T12573] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  880.282632][T12573] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  880.331278][T12573] vhci_hcd vhci_hcd.0: Device attached
[  880.450626][T12572] loop4: detected capacity change from 0 to 256
[  880.524785][T12572] FAT-fs (loop4): Unrecognized mount option "00000000000000000000010•së‚°(Ÿ¸Eq
äKAÒ†tÉrØßµÒ~®êQ¦õ¨Èƒ`%ÐñËtK»mv‹Úf»hw@7xnxV’Ú
[  880.524785][T12572] áß“ªÁP^Äd»�18446744073709551615" or missing value
[  880.743310][ T5142] usb 18-1: SetAddress Request (2) to port 0
[  880.750752][ T5142] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd
[  881.253960][T12576] usbip_core: unknown command
[  881.291805][T12576] vhci_hcd: unknown pdu 0
[  881.313707][T12576] usbip_core: unknown command
[  881.345045][  T748] vhci_hcd: stop threads
[  881.376369][  T748] vhci_hcd: release socket
[  881.407064][  T748] vhci_hcd: disconnect device
[  882.220314][T12597] tipc: Failed to remove unknown binding: 66,1,1/0:3423388617/3423388619
[  882.238754][T12403] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  882.281331][T12597] tipc: Failed to remove unknown binding: 66,1,1/0:3423388617/3423388619
[  882.287160][T12403] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  882.372003][T12403] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  882.406100][T12403] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  882.736504][   T29] audit: type=1400 audit(1719266077.587:923): avc:  denied  { setattr } for  pid=12601 comm="syz.4.2322" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  882.762110][T12604] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  882.855768][T12607] bridge0: the hash_elasticity option has been deprecated and is always 16
[  883.330375][T12609] loop4: detected capacity change from 0 to 164
[  883.781845][T12613] loop2: detected capacity change from 0 to 16
[  883.822525][T12613] erofs: (device loop2): mounted with root inode @ nid 36.
[  884.869978][T12403] 8021q: adding VLAN 0 to HW filter on device bond0
[  885.009831][T12403] 8021q: adding VLAN 0 to HW filter on device team0
[  885.049470][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state
[  885.056825][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  885.103155][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state
[  885.110597][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  885.405870][T12631] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  885.543949][   T29] audit: type=1400 audit(1719266080.236:924): avc:  denied  { create } for  pid=12632 comm="syz.1.2335" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1
[  885.649769][T12635] bridge0: port 2(bridge_slave_1) entered disabled state
[  885.690633][T12635] bridge0: port 2(bridge_slave_1) entered blocking state
[  885.701264][T12635] bridge0: port 2(bridge_slave_1) entered forwarding state
[  885.774099][T12638] bridge0: the hash_elasticity option has been deprecated and is always 16
[  886.306572][T12403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  886.374187][ T5142] usb 18-1: device descriptor read/8, error -110
[  887.132723][ T5142] usb usb18-port1: attempt power cycle
[  887.236772][T12403] veth0_vlan: entered promiscuous mode
[  887.921060][T12652] loop2: detected capacity change from 0 to 40427
[  887.945921][T12403] veth1_vlan: entered promiscuous mode
[  887.956270][T12652] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  887.964201][T12652] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  888.083903][T12652] F2FS-fs (loop2): Found nat_bits in checkpoint
[  888.250482][T12667] netlink: 'syz.0.2343': attribute type 11 has an invalid length.
[  888.961481][T12403] veth0_macvtap: entered promiscuous mode
[  889.073409][T12403] veth1_macvtap: entered promiscuous mode
[  889.091315][   T29] audit: type=1400 audit(1719266083.494:925): avc:  denied  { setopt } for  pid=12670 comm="syz.1.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  889.128384][ T5142] usb usb18-port1: unable to enumerate USB device
[  889.148565][T12652] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  889.155751][T12652] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  889.329842][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  889.404161][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.429734][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  889.464529][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.488486][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  889.499811][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.519078][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  889.531131][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.552501][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  889.574838][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.616688][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  889.640051][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.675506][T12403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  889.731102][T12676] can0: slcan on ptm0.
[  889.738323][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  889.765720][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.786406][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  889.820338][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.852859][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  889.900312][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.925343][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  889.940369][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.974054][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  890.025842][   T29] audit: type=1400 audit(1719266084.362:926): avc:  denied  { map } for  pid=12651 comm="syz.2.2340" path="pipe:[39231]" dev="pipefs" ino=39231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  890.043044][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  890.079884][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  890.124860][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  890.165879][T12652] input: syz1 as /devices/virtual/input/input14
[  890.193015][T12403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  890.351161][T12403] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  890.407286][T12403] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  890.541881][T12403] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  890.589567][T12403] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  891.024775][T12672] can0 (unregistered): slcan off ptm0.
[  891.417818][ T2830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.457982][ T2830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  891.799079][ T2830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.844819][ T2830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  892.111966][T12700] netlink: 'syz.4.2357': attribute type 11 has an invalid length.
[  892.715393][T12248] syz-executor: attempt to access beyond end of device
[  892.715393][T12248] loop2: rw=2051, sector=49152, nr_sectors = 4096 limit=40427
[  892.810417][T12248] F2FS-fs (loop2): Issue discard(6144, 6144, 512) failed, ret: -5
[  893.045073][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2360'.
[  893.072331][T12707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2360'.
[  893.482937][T12715] loop4: detected capacity change from 0 to 512
[  893.586820][T12719] syz.0.2361[12719] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  893.587852][T12719] syz.0.2361[12719] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  893.764838][T12719] binder: 12708:12719 ioctl c0306201 20000300 returned -22
[  894.372361][   T29] audit: type=1400 audit(1719266088.377:927): avc:  denied  { bind } for  pid=12720 comm="syz.3.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  894.391705][    C1] vkms_vblank_simulate: vblank timer overrun
[  894.685415][   T29] audit: type=1400 audit(1719266088.663:928): avc:  denied  { mount } for  pid=12724 comm="syz.0.2367" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  894.847248][   T29] audit: type=1400 audit(1719266088.811:929): avc:  denied  { unmount } for  pid=6801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  894.939129][T12731] loop3: detected capacity change from 0 to 1024
[  895.150727][T12731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  895.328367][ T5153] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  895.431375][T12403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  895.583962][ T5153] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  895.611057][ T5153] usb 5-1: language id specifier not provided by device, defaulting to English
[  895.630816][T12752] netlink: 'syz.1.2378': attribute type 1 has an invalid length.
[  895.632157][ T5153] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40
[  895.638675][T12752] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2378'.
[  895.661515][ T5153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.669826][ T5153] usb 5-1: Product: syz
[  895.674296][T12752] netlink: 'syz.1.2378': attribute type 1 has an invalid length.
[  895.715779][ T5153] usb 5-1: Manufacturer: �ﻥ傖ᅅ㞴岼먊ߧᚨ筨鴴�렃舊陌�ٶ寥淴駖켧ἲ㯩譅㯂֫凑ᶜ鎣䟒ᣇ邛྽ⰨꢅŦꂙ섾倞ࡢᅗ힋䒺⿰挱
[  895.756588][ T5153] usb 5-1: SerialNumber: syz
[  895.791260][ T5153] usbhid 5-1:1.0: couldn't find an input interrupt endpoint
[  895.940766][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2381'.
[  895.964162][T12757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2381'.
[  896.321756][T12736] loop4: detected capacity change from 0 to 512
[  896.386529][T12736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  896.497458][T12736] ext4 filesystem being mounted at /root/syzkaller.id15Ro/152/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  896.566291][T12767] loop2: detected capacity change from 0 to 512
[  896.596221][T12767] udf: Unknown parameter ')'
[  898.283265][  T785] usb 5-1: USB disconnect, device number 10
[  898.504974][T12784] ptrace attach of "./syz-executor exec"[12146] was attempted by "./syz-executor exec"[12784]
[  899.421294][T12777] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2387'.
[  899.444277][T12782] loop2: detected capacity change from 0 to 1024
[  899.559836][T12782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  899.958056][T10747] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  899.974866][T12248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  900.439368][T12798] syz.1.2389[12798] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  900.440410][T12798] syz.1.2389[12798] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  900.826072][T12798] binder: 12791:12798 ioctl c0306201 20000300 returned -22
[  901.530210][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2394'.
[  901.575203][T12802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2394'.
[  901.916050][   T29] audit: type=1400 audit(1719266095.333:930): avc:  denied  { watch watch_reads } for  pid=12813 comm="syz.0.2400" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  902.073505][   T29] audit: type=1400 audit(1719266095.435:931): avc:  denied  { bind } for  pid=12817 comm="syz.3.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  902.104622][T12821] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2402'.
[  902.848455][T12819] loop4: detected capacity change from 0 to 164
[  904.010247][T12848] loop2: detected capacity change from 0 to 40427
[  904.031214][T12848] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  904.039121][T12848] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  904.107620][T12848] F2FS-fs (loop2): Found nat_bits in checkpoint
[  904.160329][   T29] audit: type=1400 audit(1719266097.390:932): avc:  denied  { getopt } for  pid=12854 comm="syz.1.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  904.224477][T12848] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  904.231801][T12848] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  905.562605][T12872] input: syz1 as /devices/virtual/input/input15
[  914.891888][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  914.976846][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  917.408748][T12847] syz.2.2411: attempt to access beyond end of device
[  917.408748][T12847] loop2: rw=2051, sector=49152, nr_sectors = 4096 limit=40427
[  917.477600][T12847] F2FS-fs (loop2): Issue discard(6144, 6144, 512) failed, ret: -5
[  917.853164][ T5095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  917.896665][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  917.908752][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  917.938420][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  917.948424][ T5095] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  917.956252][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  918.058884][ T5090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  918.092638][ T5090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  918.112377][ T5090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  918.147729][ T5090] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  918.158026][ T5090] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  918.166257][ T5090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  918.362758][T11978] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  918.384760][T11978] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  918.397621][T11978] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  918.435985][ T5095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  918.475893][ T5095] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  918.483833][T12887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  918.510460][T12887] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  918.530799][T12887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  918.545047][T12887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  918.586343][T11814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  918.602916][T11814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  918.613302][T12887] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  918.624251][T12887] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  918.624403][T11814] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  918.643342][T12887] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  918.645532][T11814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  918.666574][T11978] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  918.679136][T12887] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  918.834670][ T2830] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  919.324510][ T2830] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  919.493075][ T2830] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  919.643509][ T2830] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  920.225773][T12887] Bluetooth: hci1: command tx timeout
[  920.485985][T12887] Bluetooth: hci4: command tx timeout
[  920.678227][ T2830] bridge_slave_1: left allmulticast mode
[  920.689496][ T2830] bridge_slave_1: left promiscuous mode
[  920.703265][ T2830] bridge0: port 2(bridge_slave_1) entered disabled state
[  920.723161][ T2830] bridge_slave_0: left allmulticast mode
[  920.733762][ T2830] bridge_slave_0: left promiscuous mode
[  920.746680][T12887] Bluetooth: hci5: command tx timeout
[  920.756948][ T2830] bridge0: port 1(bridge_slave_0) entered disabled state
[  920.919360][T12887] Bluetooth: hci2: command tx timeout
[  920.920645][T12886] Bluetooth: hci6: command tx timeout
[  922.481146][T12886] Bluetooth: hci1: command tx timeout
[  922.741899][T12886] Bluetooth: hci4: command tx timeout
[  923.000310][T12886] Bluetooth: hci5: command tx timeout
[  923.173694][T12886] Bluetooth: hci2: command tx timeout
[  923.188248][T12886] Bluetooth: hci6: command tx timeout
[  924.330914][ T2830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  924.346499][ T2830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  924.360483][ T2830] bond0 (unregistering): Released all slaves
[  924.738157][T12886] Bluetooth: hci1: command tx timeout
[  925.005729][T12886] Bluetooth: hci4: command tx timeout
[  925.255023][T12886] Bluetooth: hci5: command tx timeout
[  925.431790][T12886] Bluetooth: hci6: command tx timeout
[  925.431806][T12887] Bluetooth: hci2: command tx timeout
[  925.492559][T12885] chnl_net:caif_netlink_parms(): no params data found
[  925.723578][T12880] chnl_net:caif_netlink_parms(): no params data found
[  925.849289][T12878] chnl_net:caif_netlink_parms(): no params data found
[  925.890074][T12884] chnl_net:caif_netlink_parms(): no params data found
[  926.003100][T12882] chnl_net:caif_netlink_parms(): no params data found
[  926.324502][ T2830] hsr_slave_0: left promiscuous mode
[  926.342380][ T2830] hsr_slave_1: left promiscuous mode
[  926.362424][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  926.369919][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_0
[  926.396591][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  926.415353][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_1
[  926.501524][ T2830] veth1_to_hsr: left promiscuous mode
[  926.507269][ T2830] veth1_vlan: left promiscuous mode
[  926.521594][ T2830] veth0_vlan: left promiscuous mode
[  926.990101][T12887] Bluetooth: hci1: command tx timeout
[  927.271423][T12887] Bluetooth: hci4: command tx timeout
[  927.529516][T12887] Bluetooth: hci5: command tx timeout
[  927.683181][T12887] Bluetooth: hci2: command tx timeout
[  927.690117][T12887] Bluetooth: hci6: command tx timeout
[  928.256456][ T2830] team0 (unregistering): Port device team_slave_1 removed
[  928.395510][ T2830] team0 (unregistering): Port device team_slave_0 removed
[  930.055392][T12885] bridge0: port 1(bridge_slave_0) entered blocking state
[  930.063168][T12885] bridge0: port 1(bridge_slave_0) entered disabled state
[  930.090035][T12885] bridge_slave_0: entered allmulticast mode
[  930.100473][T12885] bridge_slave_0: entered promiscuous mode
[  930.135739][T12885] bridge0: port 2(bridge_slave_1) entered blocking state
[  930.143006][T12885] bridge0: port 2(bridge_slave_1) entered disabled state
[  930.157523][T12885] bridge_slave_1: entered allmulticast mode
[  930.173364][T12885] bridge_slave_1: entered promiscuous mode
[  930.690104][T12885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  930.722742][T12880] bridge0: port 1(bridge_slave_0) entered blocking state
[  930.751666][T12880] bridge0: port 1(bridge_slave_0) entered disabled state
[  930.759142][T12880] bridge_slave_0: entered allmulticast mode
[  930.783830][T12880] bridge_slave_0: entered promiscuous mode
[  930.808118][T12880] bridge0: port 2(bridge_slave_1) entered blocking state
[  930.815476][T12880] bridge0: port 2(bridge_slave_1) entered disabled state
[  930.839562][T12880] bridge_slave_1: entered allmulticast mode
[  930.872145][T12880] bridge_slave_1: entered promiscuous mode
[  930.903169][T12884] bridge0: port 1(bridge_slave_0) entered blocking state
[  930.910435][T12884] bridge0: port 1(bridge_slave_0) entered disabled state
[  930.935389][T12884] bridge_slave_0: entered allmulticast mode
[  930.944068][T12884] bridge_slave_0: entered promiscuous mode
[  930.970901][T12884] bridge0: port 2(bridge_slave_1) entered blocking state
[  930.978282][T12884] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.026550][T12884] bridge_slave_1: entered allmulticast mode
[  931.072240][T12884] bridge_slave_1: entered promiscuous mode
[  931.148436][T12885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  931.361725][T12882] bridge0: port 1(bridge_slave_0) entered blocking state
[  931.377546][T12882] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.386491][T12882] bridge_slave_0: entered allmulticast mode
[  931.395273][T12882] bridge_slave_0: entered promiscuous mode
[  931.475477][T12878] bridge0: port 1(bridge_slave_0) entered blocking state
[  931.482956][T12878] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.490453][T12878] bridge_slave_0: entered allmulticast mode
[  931.498993][T12878] bridge_slave_0: entered promiscuous mode
[  931.546062][T12885] team0: Port device team_slave_0 added
[  931.607823][T12880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  931.625815][T12882] bridge0: port 2(bridge_slave_1) entered blocking state
[  931.652004][T12882] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.683444][T12882] bridge_slave_1: entered allmulticast mode
[  931.692032][T12882] bridge_slave_1: entered promiscuous mode
[  931.762948][T12878] bridge0: port 2(bridge_slave_1) entered blocking state
[  931.782651][T12878] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.790085][T12878] bridge_slave_1: entered allmulticast mode
[  931.798740][T12878] bridge_slave_1: entered promiscuous mode
[  931.819884][T12885] team0: Port device team_slave_1 added
[  931.833755][T12880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  931.904238][T12884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  932.130258][T12880] team0: Port device team_slave_0 added
[  932.207282][T12884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  932.255500][T12878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  932.324659][T12885] batman_adv: batadv0: Adding interface: batadv_slave_0
[  932.331672][T12885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  932.357872][T12885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  932.376549][T12885] batman_adv: batadv0: Adding interface: batadv_slave_1
[  932.383773][T12885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  932.463849][T12885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  932.516444][T12880] team0: Port device team_slave_1 added
[  932.665387][T12882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  932.697631][T12882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  932.770251][T12878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  933.045474][T12880] batman_adv: batadv0: Adding interface: batadv_slave_0
[  933.070631][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  933.124969][T12880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  933.345771][T12884] team0: Port device team_slave_0 added
[  933.515788][T12880] batman_adv: batadv0: Adding interface: batadv_slave_1
[  933.522827][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  933.566080][T12880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  933.615283][T12882] team0: Port device team_slave_0 added
[  933.631121][T12884] team0: Port device team_slave_1 added
[  933.679139][T12878] team0: Port device team_slave_0 added
[  933.692203][T12878] team0: Port device team_slave_1 added
[  933.840871][ T2830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  933.987242][T12882] team0: Port device team_slave_1 added
[  934.189978][ T2830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.322781][T12885] hsr_slave_0: entered promiscuous mode
[  934.331277][T12885] hsr_slave_1: entered promiscuous mode
[  934.338231][T12885] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  934.360783][T12885] Cannot create hsr debugfs directory
[  934.577736][T12884] batman_adv: batadv0: Adding interface: batadv_slave_0
[  934.584745][T12884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  934.642605][T12884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  934.668187][T12878] batman_adv: batadv0: Adding interface: batadv_slave_0
[  934.685927][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  934.728788][T12878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  934.840554][ T2830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.945389][T12880] hsr_slave_0: entered promiscuous mode
[  934.968501][T12880] hsr_slave_1: entered promiscuous mode
[  934.979129][T12880] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  934.986756][T12880] Cannot create hsr debugfs directory
[  934.995600][T12882] batman_adv: batadv0: Adding interface: batadv_slave_0
[  935.010973][T12882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  935.068360][T12882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  935.096662][T12884] batman_adv: batadv0: Adding interface: batadv_slave_1
[  935.119467][T12884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  935.145948][T12884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  935.168562][T12878] batman_adv: batadv0: Adding interface: batadv_slave_1
[  935.195361][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  935.244784][T12878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  935.350913][ T2830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.446890][T12882] batman_adv: batadv0: Adding interface: batadv_slave_1
[  935.453914][T12882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  935.481089][T12882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  935.916347][T12884] hsr_slave_0: entered promiscuous mode
[  935.929085][T12884] hsr_slave_1: entered promiscuous mode
[  935.945462][T12884] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  935.965136][T12884] Cannot create hsr debugfs directory
[  936.051200][T12878] hsr_slave_0: entered promiscuous mode
[  936.068824][T12878] hsr_slave_1: entered promiscuous mode
[  936.085523][T12878] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  936.093159][T12878] Cannot create hsr debugfs directory
[  936.196170][T12882] hsr_slave_0: entered promiscuous mode
[  936.215147][T12882] hsr_slave_1: entered promiscuous mode
[  936.225742][T12882] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  936.233398][T12882] Cannot create hsr debugfs directory
[  937.378510][ T2830] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.780470][T12880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.909019][ T2830] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.201946][T12880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.291639][ T2830] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.510652][T12880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.596779][ T2830] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.736742][T12880] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.197559][ T2830] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.371473][ T2830] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.494429][ T2830] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.648738][ T2830] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.929047][ T2830] bridge_slave_1: left allmulticast mode
[  939.943110][ T2830] bridge_slave_1: left promiscuous mode
[  939.965209][ T2830] bridge0: port 2(bridge_slave_1) entered disabled state
[  939.977671][ T2830] bridge_slave_0: left allmulticast mode
[  939.983361][ T2830] bridge_slave_0: left promiscuous mode
[  940.009441][ T2830] bridge0: port 1(bridge_slave_0) entered disabled state
[  940.026135][ T2830] bridge_slave_1: left allmulticast mode
[  940.041749][ T2830] bridge_slave_1: left promiscuous mode
[  940.047658][ T2830] bridge0: port 2(bridge_slave_1) entered disabled state
[  940.067142][ T2830] bridge_slave_0: left allmulticast mode
[  940.072869][ T2830] bridge_slave_0: left promiscuous mode
[  940.081458][ T2830] bridge0: port 1(bridge_slave_0) entered disabled state
[  940.097498][ T2830] bridge_slave_1: left allmulticast mode
[  940.103308][ T2830] bridge_slave_1: left promiscuous mode
[  940.109476][ T2830] bridge0: port 2(bridge_slave_1) entered disabled state
[  940.122068][ T2830] bridge_slave_0: left allmulticast mode
[  940.128482][ T2830] bridge_slave_0: left promiscuous mode
[  940.134372][ T2830] bridge0: port 1(bridge_slave_0) entered disabled state
[  940.151041][ T2830] bridge_slave_1: left allmulticast mode
[  940.156767][ T2830] bridge_slave_1: left promiscuous mode
[  940.183724][ T2830] bridge0: port 2(bridge_slave_1) entered disabled state
[  940.208354][ T2830] bridge_slave_0: left allmulticast mode
[  940.225146][ T2830] bridge_slave_0: left promiscuous mode
[  940.231187][ T2830] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.835974][ T2830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  943.885967][ T2830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  943.899011][ T2830] bond0 (unregistering): Released all slaves
[  944.367063][ T2830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  944.381914][ T2830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  944.400466][ T2830] bond0 (unregistering): Released all slaves
[  944.865870][ T2830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  944.891459][ T2830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  944.921280][ T2830] bond0 (unregistering): Released all slaves
[  945.423464][ T2830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  945.451006][ T2830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  945.475852][ T2830] bond0 (unregistering): Released all slaves
[  947.798467][T12878] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  947.841941][ T2830] hsr_slave_0: left promiscuous mode
[  947.864592][ T2830] hsr_slave_1: left promiscuous mode
[  947.877835][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  947.885440][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_0
[  947.894482][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  947.902088][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_1
[  947.921684][ T2830] hsr_slave_0: left promiscuous mode
[  947.928247][ T2830] hsr_slave_1: left promiscuous mode
[  947.943723][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  947.951253][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_0
[  947.961469][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  947.969340][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_1
[  947.984276][ T2830] hsr_slave_0: left promiscuous mode
[  947.991489][ T2830] hsr_slave_1: left promiscuous mode
[  947.998348][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  948.005839][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_0
[  948.015620][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  948.028403][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_1
[  948.062920][ T2830] hsr_slave_0: left promiscuous mode
[  948.084593][ T2830] hsr_slave_1: left promiscuous mode
[  948.091255][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  948.106459][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_0
[  948.128993][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  948.136504][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_1
[  948.343583][ T2830] veth1_macvtap: left promiscuous mode
[  948.349795][ T2830] veth0_macvtap: left promiscuous mode
[  948.355655][ T2830] veth1_vlan: left promiscuous mode
[  948.361118][ T2830] veth0_vlan: left promiscuous mode
[  948.368823][ T2830] veth1_macvtap: left promiscuous mode
[  948.374442][ T2830] veth0_macvtap: left promiscuous mode
[  948.385317][ T2830] veth1_vlan: left promiscuous mode
[  948.393986][ T2830] veth0_vlan: left promiscuous mode
[  948.402044][ T2830] veth1_macvtap: left promiscuous mode
[  948.412167][ T2830] veth0_macvtap: left promiscuous mode
[  948.418108][ T2830] veth1_vlan: left promiscuous mode
[  948.423627][ T2830] veth0_vlan: left promiscuous mode
[  948.431506][ T2830] veth0_macvtap: left promiscuous mode
[  948.437218][ T2830] veth1_vlan: left promiscuous mode
[  948.443211][ T2830] veth0_vlan: left promiscuous mode
[  950.939838][ T2830] team0 (unregistering): Port device team_slave_1 removed
[  951.070361][ T2830] team0 (unregistering): Port device team_slave_0 removed
[  953.869852][ T2830] team0 (unregistering): Port device team_slave_1 removed
[  954.009067][ T2830] team0 (unregistering): Port device team_slave_0 removed
[  956.854411][ T2830] team0 (unregistering): Port device team_slave_1 removed
[  956.971354][ T2830] team0 (unregistering): Port device team_slave_0 removed
[  959.847809][ T2830] team0 (unregistering): Port device team_slave_1 removed
[  960.007079][ T2830] team0 (unregistering): Port device team_slave_0 removed
[  961.524210][T12878] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  961.549350][T12878] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  961.577961][T12878] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  962.268529][T12878] 8021q: adding VLAN 0 to HW filter on device bond0
[  962.376632][T12878] 8021q: adding VLAN 0 to HW filter on device team0
[  962.506971][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state
[  962.514288][ T5069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  962.538376][T12880] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  962.579268][T12880] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  962.640968][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state
[  962.648270][ T5069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  962.688638][T12880] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  962.713560][T12880] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  963.266645][T12885] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  963.311360][T12885] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  963.348043][T12885] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  963.476209][T12885] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  963.873001][T12884] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  963.969121][T12884] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  964.016625][T12884] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  964.056921][T12884] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  964.237655][T12880] 8021q: adding VLAN 0 to HW filter on device bond0
[  964.437952][T12882] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  964.522043][T12882] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  964.545795][T12880] 8021q: adding VLAN 0 to HW filter on device team0
[  964.573045][T12882] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  964.597834][T12878] 8021q: adding VLAN 0 to HW filter on device batadv0
[  964.629112][T12882] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  964.656856][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.664223][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  964.720723][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.728058][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state
[  965.117988][T12885] 8021q: adding VLAN 0 to HW filter on device bond0
[  965.276546][T12885] 8021q: adding VLAN 0 to HW filter on device team0
[  965.327792][T12884] 8021q: adding VLAN 0 to HW filter on device bond0
[  965.424304][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state
[  965.431675][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  965.458169][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state
[  965.465498][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  965.508071][T12878] veth0_vlan: entered promiscuous mode
[  965.595272][T12884] 8021q: adding VLAN 0 to HW filter on device team0
[  965.723689][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state
[  965.731026][ T5069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  965.748239][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state
[  965.755633][ T5069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  965.800413][T12878] veth1_vlan: entered promiscuous mode
[  966.106540][T12882] 8021q: adding VLAN 0 to HW filter on device bond0
[  966.152371][T12878] veth0_macvtap: entered promiscuous mode
[  966.206006][T12878] veth1_macvtap: entered promiscuous mode
[  966.321154][T12884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  966.385006][T12882] 8021q: adding VLAN 0 to HW filter on device team0
[  966.430225][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  966.458613][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  966.468522][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  966.501564][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  966.528618][T12878] batman_adv: batadv0: Interface activated: batadv_slave_0
[  966.565639][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state
[  966.572977][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  966.616687][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  966.629689][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  966.640966][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  966.654228][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  966.667223][T12878] batman_adv: batadv0: Interface activated: batadv_slave_1
[  966.710009][T12880] 8021q: adding VLAN 0 to HW filter on device batadv0
[  966.748006][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state
[  966.755533][ T5069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  966.822858][T12878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  966.859960][T12878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  966.868737][T12878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  966.878558][T12878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  967.375079][T12884] 8021q: adding VLAN 0 to HW filter on device batadv0
[  967.388585][T12885] 8021q: adding VLAN 0 to HW filter on device batadv0
[  967.546426][T12880] veth0_vlan: entered promiscuous mode
[  967.557197][ T2830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  967.578002][T12880] veth1_vlan: entered promiscuous mode
[  967.587287][ T2830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  967.881844][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  967.890204][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  968.152012][T12880] veth0_macvtap: entered promiscuous mode
[  968.198965][T12885] veth0_vlan: entered promiscuous mode
[  968.220701][T12880] veth1_macvtap: entered promiscuous mode
[  968.235228][T12884] veth0_vlan: entered promiscuous mode
[  968.263790][T12941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2420'.
[  968.407334][T12885] veth1_vlan: entered promiscuous mode
[  968.455581][T12884] veth1_vlan: entered promiscuous mode
[  968.521268][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  968.561676][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  968.571587][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  968.586213][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  968.601732][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  968.628412][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  968.654780][T12880] batman_adv: batadv0: Interface activated: batadv_slave_0
[  968.690114][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  968.716979][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  968.734436][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  968.758789][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  968.782407][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  968.831977][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  968.867586][T12880] batman_adv: batadv0: Interface activated: batadv_slave_1
[  968.985759][T12882] 8021q: adding VLAN 0 to HW filter on device batadv0
[  969.095636][T12880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  969.139256][T12880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  969.179202][T12880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  969.225891][T12880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  969.518782][T12884] veth0_macvtap: entered promiscuous mode
[  969.551084][T12885] veth0_macvtap: entered promiscuous mode
[  969.651896][   T29] audit: type=1804 audit(1719266157.823:933): pid=12946 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2425" name="/root/syzkaller.iJQJ7y/1/bus" dev="sda1" ino=1982 res=1 errno=0
[  969.664954][T12884] veth1_macvtap: entered promiscuous mode
[  969.872643][T12885] veth1_macvtap: entered promiscuous mode
[  970.058471][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  970.079438][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  970.116804][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  970.148868][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  970.177061][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  970.197973][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  970.207858][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  970.331523][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  970.388098][T12884] batman_adv: batadv0: Interface activated: batadv_slave_0
[  970.905950][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  971.044187][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.054102][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  971.110456][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.152234][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  971.184692][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.194628][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  971.238030][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.280770][T12884] batman_adv: batadv0: Interface activated: batadv_slave_1
[  971.330651][T12884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  971.368765][T12884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  971.403701][T12884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  971.422940][T12884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  971.519839][T12885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  971.552946][T12885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.562841][T12885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  971.597278][T12885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.618002][T12885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  971.639563][T12885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.649957][T12885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  971.671616][T12885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.681892][T12885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  971.696752][T12885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.722369][T12885] batman_adv: batadv0: Interface activated: batadv_slave_0
[  971.793628][T12885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  971.832747][T12885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.854919][T12885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  971.865712][T12885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.886981][T12885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  971.909553][T12885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.920732][T12885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  971.932673][T12885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.942537][T12885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  971.955093][T12885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.970336][T12885] batman_adv: batadv0: Interface activated: batadv_slave_1
[  971.981561][ T8835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  972.004999][ T8835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  972.101785][T12885] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  972.141106][T12885] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  972.150096][T12885] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  972.158864][T12885] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  972.432607][ T8830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  972.440498][ T8830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  972.531464][T12882] veth0_vlan: entered promiscuous mode
[  972.622012][T12882] veth1_vlan: entered promiscuous mode
[  972.648941][ T8832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  972.665589][ T8832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  972.791616][ T8832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  972.817315][ T8832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  973.009170][ T8832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  973.009303][T12882] veth0_macvtap: entered promiscuous mode
[  973.039564][ T8832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  973.087002][T12882] veth1_macvtap: entered promiscuous mode
[  973.213747][ T8830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  973.239100][ T8830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  973.260118][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  973.306130][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.345021][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  973.385014][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.395025][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  973.409369][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.419396][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  973.430298][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.440301][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  973.450941][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.461533][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  973.532516][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.563569][T12882] batman_adv: batadv0: Interface activated: batadv_slave_0
[  973.648592][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  973.688486][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.721665][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  973.764366][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.774271][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  973.817474][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.855550][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  973.876698][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.898112][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  973.939564][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.987487][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  974.006609][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  974.038931][T12882] batman_adv: batadv0: Interface activated: batadv_slave_1
[  974.181467][T12882] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  974.222479][T12882] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  974.250465][T12882] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  974.276538][T12882] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  975.455547][   T29] audit: type=1326 audit(1719266163.146:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.3.2423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e8e975d39 code=0x0
[  975.945600][ T8832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  975.994073][ T8832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  976.032338][   T29] audit: type=1400 audit(1719266163.700:935): avc:  denied  { read } for  pid=12999 comm="syz.0.2437" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  976.256212][ T8832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  976.294628][ T8832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  976.548074][T13011] loop2: detected capacity change from 0 to 136
[  976.600721][T13011] iso9660: Bad value for 'map'
[  976.619034][T13015] loop4: detected capacity change from 0 to 64
[  976.672517][T13015] hfs: invalid gid -1
[  976.677923][T13015] hfs: unable to parse mount options
[  976.867882][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  976.874278][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  977.714447][T13021] loop2: detected capacity change from 0 to 512
[  978.596868][T13024] input: syz1 as /devices/virtual/input/input16
[  986.781578][T13021] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring
[  986.893805][T13021] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: journalled.
[  987.535612][T13035] loop4: detected capacity change from 0 to 40427
[  987.557214][T13035] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  987.565092][T13035] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  987.687780][T13035] F2FS-fs (loop4): Found nat_bits in checkpoint
[  987.821421][T13035] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  987.828650][T13035] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  989.326322][T12882] syz-executor: attempt to access beyond end of device
[  989.326322][T12882] loop4: rw=2051, sector=49152, nr_sectors = 4096 limit=40427
[  989.398456][T12882] F2FS-fs (loop4): Issue discard(6144, 6144, 512) failed, ret: -5
[  989.436674][T12886] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  989.515563][T12886] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  989.569549][T12886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  989.591881][T12886] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  989.624168][T12886] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  989.632231][T12886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  989.831575][T12886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  989.890757][T12886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  989.915345][T12886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  989.927723][T12886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  989.936341][T12886] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  989.957218][T12886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  990.271025][T12886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  990.296527][T12886] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  990.317676][T12886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  990.382509][T12886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  990.390958][T12886] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  990.414894][T12886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  991.040248][ T2795] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  991.072924][T13052] loop4: detected capacity change from 0 to 256
[  991.181009][T13052] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d)
[  991.513053][ T2795] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  991.527390][   T29] audit: type=1400 audit(1719266177.999:936): avc:  denied  { map } for  pid=13051 comm="syz.4.2451" path="/root/syzkaller.td5lBJ/3/file1/cpuacct.usage_percpu" dev="loop4" ino=1048824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  991.618387][   T29] audit: type=1400 audit(1719266178.072:937): avc:  denied  { reparent } for  pid=13051 comm="syz.4.2451" name="file0" dev="loop4" ino=1048825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  991.806130][ T2795] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  991.943677][T12887] Bluetooth: hci0: command tx timeout
[  992.033593][T12886] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  992.058544][ T2795] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  992.069422][T12886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  992.085303][T12886] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  992.143524][T12886] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  992.162424][T12886] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  992.170166][T12886] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  992.203746][T12887] Bluetooth: hci1: command tx timeout
[  992.640870][T12887] Bluetooth: hci2: command tx timeout
[  993.068680][T13046] chnl_net:caif_netlink_parms(): no params data found
[  993.655307][ T2795] bridge_slave_1: left allmulticast mode
[  993.692823][ T2795] bridge_slave_1: left promiscuous mode
[  993.698906][ T2795] bridge0: port 2(bridge_slave_1) entered disabled state
[  993.747479][ T2795] bridge_slave_0: left allmulticast mode
[  993.753311][ T2795] bridge_slave_0: left promiscuous mode
[  993.765503][ T2795] bridge0: port 1(bridge_slave_0) entered disabled state
[  993.915433][ T5131] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  993.938052][ T5131] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  993.945560][ T5131] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  993.977290][ T5131] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  993.992046][ T5131] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  994.009193][ T5131] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  994.028512][ T5131] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  994.046855][ T5131] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  994.065439][ T5131] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  994.076401][ T5131] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  994.098325][ T5131] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  994.159386][ T5131] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  994.176904][T10839] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  994.199767][T12887] Bluetooth: hci0: command tx timeout
[  994.400915][T10839] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  994.422035][T10839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  994.431960][T10839] usb 5-1: Product: syz
[  994.437176][T10839] usb 5-1: Manufacturer: syz
[  994.441820][T10839] usb 5-1: SerialNumber: syz
[  994.459073][T12886] Bluetooth: hci1: command tx timeout
[  994.459196][T12887] Bluetooth: hci4: command tx timeout
[  994.511636][T10839] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  994.648146][ T5131] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  994.905671][T12887] Bluetooth: hci2: command tx timeout
[  996.669628][T12887] Bluetooth: hci0: command tx timeout
[  996.734606][T12887] Bluetooth: hci1: command tx timeout
[  997.224137][T12887] Bluetooth: hci4: command tx timeout
[  997.458327][T12887] Bluetooth: hci2: command tx timeout
[  998.207128][ T5131] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  998.895009][T12887] Bluetooth: hci0: command tx timeout
[  998.978804][T12887] Bluetooth: hci1: command tx timeout
[  999.499295][T12887] Bluetooth: hci4: command tx timeout
[  999.672600][T12887] Bluetooth: hci2: command tx timeout
[ 1001.754209][T12887] Bluetooth: hci4: command tx timeout
[ 1043.488525][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[ 1043.494922][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[ 1051.281636][T12886] Bluetooth: hci5: command 0x0406 tx timeout
[ 1053.553827][T11978] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1053.580402][T11978] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1053.612586][T11978] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1053.635769][T11978] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1053.651725][T11978] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1053.659672][T11978] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1055.440514][T12886] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1055.466468][T12886] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1055.476519][T12886] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1055.485705][T12886] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1055.494179][T12886] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1055.506009][T12886] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1055.961447][T12887] Bluetooth: hci6: command tx timeout
[ 1056.769274][T12887] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1056.785181][T12887] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1056.797102][T12887] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1056.812032][T12887] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1056.820372][T12887] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1056.830161][T12887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1058.134555][T12886] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1058.149182][T12886] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1058.159390][T12886] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1058.180732][T12886] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1058.202336][T12886] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1058.209884][T11978] Bluetooth: hci6: command tx timeout
[ 1058.215585][T11978] Bluetooth: hci7: command tx timeout
[ 1058.241641][T12886] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1059.099547][T12886] Bluetooth: hci5: command tx timeout
[ 1059.938136][T12887] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1059.960031][T12887] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1059.972784][T12887] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1059.981972][T12887] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1059.994520][T12887] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 1060.009007][T12887] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1060.465560][T12887] Bluetooth: hci8: command tx timeout
[ 1060.473758][T12887] Bluetooth: hci7: command tx timeout
[ 1060.479512][T12886] Bluetooth: hci6: command tx timeout
[ 1061.330793][T12887] Bluetooth: hci5: command tx timeout
[ 1062.275931][T12887] Bluetooth: hci9: command tx timeout
[ 1062.721542][T12887] Bluetooth: hci7: command tx timeout
[ 1062.727109][T12887] Bluetooth: hci6: command tx timeout
[ 1062.734757][T11978] Bluetooth: hci8: command tx timeout
[ 1063.455439][ T2795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1063.587814][T12887] Bluetooth: hci5: command tx timeout
[ 1064.539925][T12887] Bluetooth: hci9: command tx timeout
[ 1064.973812][T12887] Bluetooth: hci8: command tx timeout
[ 1064.979306][T12887] Bluetooth: hci7: command tx timeout
[ 1065.840435][T12887] Bluetooth: hci5: command tx timeout
[ 1065.866272][ T2795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1066.794439][T12887] Bluetooth: hci9: command tx timeout
[ 1067.228128][T12887] Bluetooth: hci8: command tx timeout
[ 1069.059773][T12887] Bluetooth: hci9: command tx timeout
[ 1079.683739][ T2795] bond0 (unregistering): Released all slaves
[ 1098.252698][T13048] chnl_net:caif_netlink_parms(): no params data found
[ 1098.450992][T13046] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR
[ 1103.891139][T12886] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1103.921717][T12886] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1103.932587][T12886] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1103.941588][T12886] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1103.951232][T12886] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 1103.961394][T12886] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1105.086365][T13093] chnl_net:caif_netlink_parms(): no params data found
[ 1110.112781][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[ 1110.129773][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[ 1110.761998][T12886] Bluetooth: hci10: command tx timeout
[ 1113.016493][T12886] Bluetooth: hci10: command tx timeout
[ 1115.271238][T12886] Bluetooth: hci10: command tx timeout
[ 1117.526027][T12886] Bluetooth: hci10: command tx timeout
[ 1123.429841][T12887] Bluetooth: hci0: command 0x0406 tx timeout
[ 1123.839807][T11978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1123.854378][T11978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1123.865102][T11978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1123.874063][T11978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1123.885119][T11978] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1123.892847][T11978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1126.148884][T11814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1126.163835][T11814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1126.187706][T11814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1126.217511][T11814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1126.228238][T11814] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1126.241510][T11814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1129.407249][T12887] Bluetooth: hci1: command tx timeout
[ 1129.415617][T12887] Bluetooth: hci2: command tx timeout
[ 1130.807181][T11978] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1130.821912][T11978] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1130.832520][T11978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1130.841594][T11978] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1130.859425][T11978] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1130.871661][T11978] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1131.695070][T11978] Bluetooth: hci2: command tx timeout
[ 1131.700575][T11978] Bluetooth: hci1: command tx timeout
[ 1133.224416][T11978] Bluetooth: hci4: command tx timeout
[ 1133.636905][T12886] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1133.660355][T12886] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1133.671316][T12886] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1133.680586][T12886] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1133.691350][T12886] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[ 1133.699394][T12886] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1133.917000][T12886] Bluetooth: hci1: command tx timeout
[ 1133.922587][T12886] Bluetooth: hci2: command tx timeout
[ 1135.479068][T11978] Bluetooth: hci4: command tx timeout
[ 1135.997972][T11978] Bluetooth: hci11: command tx timeout
[ 1136.181741][T11978] Bluetooth: hci2: command tx timeout
[ 1136.187248][T11978] Bluetooth: hci1: command tx timeout
[ 1137.732055][T11978] Bluetooth: hci4: command tx timeout
[ 1138.252461][T11978] Bluetooth: hci11: command tx timeout
[ 1140.004404][T11978] Bluetooth: hci4: command tx timeout
[ 1140.507057][T11978] Bluetooth: hci11: command tx timeout
[ 1142.762164][T11978] Bluetooth: hci11: command tx timeout
[ 1169.284530][T12886] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1169.301429][T12886] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1169.312258][T12886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1169.321201][T12886] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1169.329425][T12886] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1169.337236][T12886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1171.640003][T12886] Bluetooth: hci0: command tx timeout
[ 1173.905233][T12886] Bluetooth: hci0: command tx timeout
[ 1176.149340][T12886] Bluetooth: hci0: command tx timeout
[ 1176.681912][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[ 1176.688320][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.405837][T12886] Bluetooth: hci0: command tx timeout
[ 1185.994123][T11978] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1186.011131][T11978] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1186.020979][T11978] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1186.035647][T11978] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1186.073245][T11978] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[ 1186.081236][T11978] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1188.379587][T13121] Bluetooth: hci12: command tx timeout
[ 1189.983392][ T5095] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1190.000301][ T5095] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1190.035817][ T5095] Bluetooth: hci6: command 0x0406 tx timeout
[ 1190.044207][ T5095] Bluetooth: hci7: command 0x0406 tx timeout
[ 1190.050508][T12887] Bluetooth: hci5: command 0x0406 tx timeout
[ 1190.056725][T12887] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1190.070901][T12887] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1190.109186][T12886] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[ 1190.117691][T12886] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1190.633583][T12886] Bluetooth: hci12: command tx timeout
[ 1191.576829][T13125] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1191.600414][T13125] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1191.629076][T13125] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1191.641753][T13125] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1191.650266][T13125] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[ 1191.662093][T13125] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1192.855874][T11978] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 1192.872671][T11978] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 1192.880647][T12886] Bluetooth: hci12: command tx timeout
[ 1192.890336][T12886] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 1192.912904][T12886] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 1192.932185][T12886] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[ 1192.940089][T12886] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 1194.544942][T11978] Bluetooth: hci13: command tx timeout
[ 1194.553517][T11978] Bluetooth: hci14: command tx timeout
[ 1195.146191][T11978] Bluetooth: hci12: command tx timeout
[ 1195.228206][T11978] Bluetooth: hci15: command tx timeout
[ 1195.597101][T11978] Bluetooth: hci9: command 0x0406 tx timeout
[ 1195.603224][T11978] Bluetooth: hci8: command 0x0406 tx timeout
[ 1196.789465][T13121] Bluetooth: hci14: command tx timeout
[ 1196.795185][T13121] Bluetooth: hci13: command tx timeout
[ 1197.484001][T13121] Bluetooth: hci15: command tx timeout
[ 1199.043943][T12886] Bluetooth: hci13: command tx timeout
[ 1199.049560][T12886] Bluetooth: hci14: command tx timeout
[ 1199.737780][T12886] Bluetooth: hci15: command tx timeout
[ 1201.298978][T13121] Bluetooth: hci13: command tx timeout
[ 1201.304619][T12886] Bluetooth: hci14: command tx timeout
[ 1201.996104][T12886] Bluetooth: hci15: command tx timeout
[ 1203.033076][   T30] INFO: task kworker/0:6:5134 blocked for more than 143 seconds.
[ 1203.040897][   T30]       Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0
SYZFAIL: failed to recv rpc
fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor)
[ 1203.094661][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1203.152251][   T30] task:kworker/0:6     state:D stack:26464 pid:5134  tgid:5134  ppid:2      flags:0x00004000
[ 1203.195122][   T30] Workqueue: events_power_efficient reg_check_chans_work
[ 1203.202288][   T30] Call Trace:
[ 1203.227669][   T30]  <TASK>
[ 1203.230769][   T30]  __schedule+0xf15/0x5d00
[ 1203.235254][   T30]  ? __pfx_mark_lock+0x10/0x10
[ 1203.293023][   T30]  ? do_raw_spin_unlock+0x172/0x230
[ 1203.298324][   T30]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1203.336279][   T30]  ? __pfx___schedule+0x10/0x10
[ 1203.341325][   T30]  ? schedule+0x298/0x350
[ 1203.345706][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1203.401124][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1203.406430][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1203.411705][   T30]  schedule+0xe7/0x350
[ 1203.478930][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1203.484505][   T30]  __mutex_lock+0x5b8/0x9c0
[ 1203.513782][   T30]  ? reg_check_chans_work+0x7d/0x10e0
[ 1203.519372][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1203.553734][   T30]  ? debug_object_deactivate+0x1f0/0x370
[ 1203.559580][   T30]  ? find_held_lock+0x2d/0x110
[ 1203.581323][   T30]  ? reg_check_chans_work+0x7d/0x10e0
[ 1203.598216][   T30]  reg_check_chans_work+0x7d/0x10e0
[ 1203.603537][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 1203.628790][   T30]  ? __pfx_reg_check_chans_work+0x10/0x10
[ 1203.634691][   T30]  process_one_work+0x9fb/0x1b60
[ 1203.683090][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 1203.688236][   T30]  ? __pfx_process_one_work+0x10/0x10
[ 1203.723175][   T30]  ? assign_work+0x1a0/0x250
[ 1203.737299][   T30]  worker_thread+0x6c8/0xf70
[ 1203.742081][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 1203.747270][   T30]  kthread+0x2c1/0x3a0
[ 1203.780836][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1203.786137][   T30]  ? __pfx_kthread+0x10/0x10
[ 1203.790805][   T30]  ret_from_fork+0x45/0x80
[ 1203.824095][   T30]  ? __pfx_kthread+0x10/0x10
[ 1203.828880][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1203.833720][   T30]  </TASK>
[ 1203.889210][   T30] 
[ 1203.889210][   T30] Showing all locks held in the system:
[ 1203.897004][   T30] 3 locks held by kworker/u8:0/11:
[ 1203.932528][   T30]  #0: ffff88802a32e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60
[ 1203.964944][   T30]  #1: ffffc90000107d80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60
[ 1204.008205][   T30]  #2: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30
[ 1204.017874][   T30] 1 lock held by khungtaskd/30:
[ 1204.063218][   T30]  #0: ffffffff8dbb1920 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340
[ 1204.108032][   T30] 2 locks held by kworker/u8:5/748:
[ 1204.113347][   T30] 4 locks held by kworker/u8:7/2795:
[ 1204.140297][   T30]  #0: ffff8880162d3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60
[ 1204.181722][   T30]  #1: ffffc900098d7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60
[ 1204.191804][   T30]  #2: ffffffff8f733ad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0
[ 1204.235953][   T30]  #3: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x4d/0x3a0
[ 1204.289995][   T30] 2 locks held by getty/4839:
[ 1204.294758][   T30]  #0: ffff88802b55b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1204.344452][   T30]  #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490
[ 1204.354732][   T30] 2 locks held by kworker/1:4/5131:
[ 1204.387696][   T30] 3 locks held by kworker/0:6/5134:
[ 1204.393060][   T30]  #0: ffff888015481948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60
[ 1204.463513][   T30]  #1: ffffc900036efd80 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60
[ 1204.517753][   T30]  #2: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x7d/0x10e0
[ 1204.527593][   T30] 6 locks held by kworker/1:5/5139:
[ 1204.561161][   T30] 3 locks held by kworker/1:7/10839:
[ 1204.566530][   T30] 1 lock held by syz.3.1835/11091:
[ 1204.571698][   T30] 1 lock held by syz-executor/12882:
[ 1204.604478][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250
[ 1204.613611][   T30] 1 lock held by syz-executor/13044:
[ 1204.647785][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250
[ 1204.656945][   T30] 1 lock held by syz-executor/13046:
[ 1204.713011][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250
[ 1204.722149][   T30] 1 lock held by syz-executor/13048:
[ 1204.765304][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250
[ 1204.788759][   T30] 1 lock held by syz-executor/13054:
[ 1204.794121][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250
[ 1204.875338][   T30] 1 lock held by syz-executor/13079:
[ 1204.880700][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 1204.914393][   T30] 1 lock held by syz-executor/13082:
[ 1204.951330][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 1204.961253][   T30] 1 lock held by syz-executor/13085:
[ 1204.986109][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 1205.038255][   T30] 1 lock held by syz-executor/13087:
[ 1205.043625][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 1205.124741][   T30] 1 lock held by syz-executor/13089:
[ 1205.136546][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 1205.146109][   T30] 1 lock held by syz-executor/13093:
[ 1205.200994][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 1205.210570][   T30] 1 lock held by syz-executor/13105:
[ 1205.287463][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 1205.297044][   T30] 1 lock held by syz-executor/13107:
[ 1205.341595][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 1205.351146][   T30] 1 lock held by syz-executor/13109:
[ 1205.384857][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 1205.394408][   T30] 1 lock held by syz-executor/13111:
[ 1205.438115][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 1205.484099][   T30] 1 lock held by syz-executor/13114:
[ 1205.489461][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 1205.547441][   T30] 1 lock held by syz-executor/13117:
[ 1205.552838][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 1205.590919][   T30] 1 lock held by syz-executor/13123:
[ 1205.596351][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 1205.638359][   T30] 1 lock held by syz-executor/13126:
[ 1205.643771][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 1205.677595][   T30] 1 lock held by syz-executor/13128:
[ 1205.682954][   T30]  #0: ffffffff8f748d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 1205.764313][   T30] 
[ 1205.775334][   T30] =============================================
[ 1205.775334][   T30] 
[ 1205.783809][   T30] NMI backtrace for cpu 0
[ 1205.788189][   T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0
[ 1205.798198][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1205.808296][   T30] Call Trace:
[ 1205.811611][   T30]  <TASK>
[ 1205.814572][   T30]  dump_stack_lvl+0x116/0x1f0
[ 1205.819300][   T30]  nmi_cpu_backtrace+0x27b/0x390
[ 1205.824738][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1205.830815][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1205.836865][   T30]  watchdog+0xf86/0x1240
[ 1205.841158][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1205.845880][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1205.851134][   T30]  ? __kthread_parkme+0x148/0x220
[ 1205.856216][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1205.860947][   T30]  kthread+0x2c1/0x3a0
[ 1205.865077][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1205.870334][   T30]  ? __pfx_kthread+0x10/0x10
[ 1205.874982][   T30]  ret_from_fork+0x45/0x80
[ 1205.879459][   T30]  ? __pfx_kthread+0x10/0x10
[ 1205.884109][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1205.888947][   T30]  </TASK>
[ 1205.894561][   T30] Sending NMI from CPU 0 to CPUs 1:
[ 1205.899825][    C1] NMI backtrace for cpu 1
[ 1205.899869][    C1] CPU: 1 PID: 45 Comm: kworker/1:1 Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0
[ 1205.899905][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1205.899924][    C1] Workqueue: events nsim_dev_trap_report_work
[ 1205.899960][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x29/0x60
[ 1205.899997][    C1] Code: 90 f3 0f 1e fa 65 48 8b 15 14 f5 75 7e 65 8b 05 15 f5 75 7e a9 00 01 ff 00 48 8b 34 24 74 0f f6 c4 01 74 35 8b 82 1c 16 00 00 <85> c0 74 2b 8b 82 f8 15 00 00 83 f8 02 75 20 48 8b 8a 00 16 00 00
[ 1205.900028][    C1] RSP: 0018:ffffc90000a17e68 EFLAGS: 00000002
[ 1205.900050][    C1] RAX: 0000000000000001 RBX: ffffc90000a17f38 RCX: ffffc900022d2000
[ 1205.900071][    C1] RDX: ffff888019e81e00 RSI: ffffffff813cd675 RDI: 0000000000000005
[ 1205.900091][    C1] RBP: ffffc90000b57f00 R08: 0000000000000005 R09: 0000000000000000
[ 1205.900110][    C1] R10: 0000000000000001 R11: 0000000000000005 R12: ffffc90000a17f40
[ 1205.900130][    C1] R13: ffffc90000a17f48 R14: ffffc90000b50000 R15: ffffc90000b58000
[ 1205.900152][    C1] FS:  0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[ 1205.900181][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1205.900203][    C1] CR2: 0000001b30efdff8 CR3: 000000000d97a000 CR4: 00000000003506f0
[ 1205.900223][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1205.900242][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1205.900261][    C1] Call Trace:
[ 1205.900270][    C1]  <NMI>
[ 1205.900281][    C1]  ? show_regs+0x8c/0xa0
[ 1205.900325][    C1]  ? nmi_cpu_backtrace+0x1d8/0x390
[ 1205.900370][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 1205.900413][    C1]  ? nmi_handle+0x1a9/0x5c0
[ 1205.900460][    C1]  ? __sanitizer_cov_trace_pc+0x29/0x60
[ 1205.900491][    C1]  ? default_do_nmi+0x6a/0x160
[ 1205.900519][    C1]  ? exc_nmi+0x170/0x1e0
[ 1205.900544][    C1]  ? end_repeat_nmi+0xf/0x53
[ 1205.900574][    C1]  ? stack_access_ok+0x1f5/0x270
[ 1205.900620][    C1]  ? __sanitizer_cov_trace_pc+0x29/0x60
[ 1205.900651][    C1]  ? __sanitizer_cov_trace_pc+0x29/0x60
[ 1205.900683][    C1]  ? __sanitizer_cov_trace_pc+0x29/0x60
[ 1205.900714][    C1]  </NMI>
[ 1205.900728][    C1]  <IRQ>
[ 1205.900736][    C1]  stack_access_ok+0x1f5/0x270
[ 1205.900785][    C1]  unwind_next_frame+0x1b94/0x23a0
[ 1205.900833][    C1]  ? kthread+0x2c1/0x3a0
[ 1205.900870][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1205.900916][    C1]  arch_stack_walk+0x100/0x170
[ 1205.900950][    C1]  ? ret_from_fork+0x45/0x80
[ 1205.900995][    C1]  stack_trace_save+0x95/0xd0
[ 1205.901037][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1205.901078][    C1]  ? find_held_lock+0x2d/0x110
[ 1205.901115][    C1]  kasan_save_stack+0x33/0x60
[ 1205.901160][    C1]  ? kasan_save_stack+0x33/0x60
[ 1205.901202][    C1]  ? kasan_save_track+0x14/0x30
[ 1205.901244][    C1]  ? __kasan_kmalloc+0xaa/0xb0
[ 1205.901285][    C1]  ? dummy_urb_enqueue+0x8d/0x8a0
[ 1205.901323][    C1]  ? usb_hcd_submit_urb+0x2d1/0x2090
[ 1205.901359][    C1]  ? usb_submit_urb+0x87c/0x1730
[ 1205.901398][    C1]  ? ath9k_hif_usb_reg_in_cb+0x494/0x690
[ 1205.901437][    C1]  ? __usb_hcd_giveback_urb+0x389/0x6e0
[ 1205.901471][    C1]  ? usb_hcd_giveback_urb+0x396/0x450
[ 1205.901504][    C1]  ? dummy_timer+0x17f6/0x3900
[ 1205.901540][    C1]  ? __hrtimer_run_queues+0x20c/0xcc0
[ 1205.901575][    C1]  ? hrtimer_interrupt+0x31b/0x800
[ 1205.901611][    C1]  ? __sysvec_apic_timer_interrupt+0x10f/0x450
[ 1205.901660][    C1]  ? sysvec_apic_timer_interrupt+0x43/0xb0
[ 1205.901695][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1205.901751][    C1]  ? _raw_spin_unlock_irqrestore+0x31/0x80
[ 1205.901783][    C1]  ? debug_check_no_obj_freed+0x328/0x600
[ 1205.901830][    C1]  ? kmem_cache_free+0x26f/0x3a0
[ 1205.901875][    C1]  ? kfree_skbmem+0x10e/0x200
[ 1205.901907][    C1]  ? consume_skb+0xdd/0x170
[ 1205.901948][    C1]  ? mac80211_hwsim_tx_frame+0x1f3/0x2a0
[ 1205.901991][    C1]  ? mac80211_hwsim_beacon_tx+0x592/0xa00
[ 1205.902032][    C1]  ? __iterate_interfaces+0x2d2/0x580
[ 1205.902062][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[ 1205.902112][    C1]  ? mac80211_hwsim_beacon+0x105/0x200
[ 1205.902142][    C1]  ? __hrtimer_run_queues+0x20c/0xcc0
[ 1205.902175][    C1]  ? hrtimer_run_softirq+0x17d/0x350
[ 1205.902208][    C1]  ? handle_softirqs+0x216/0x8f0
[ 1205.902241][    C1]  ? irq_exit_rcu+0xbb/0x120
[ 1205.902273][    C1]  ? sysvec_apic_timer_interrupt+0x95/0xb0
[ 1205.902307][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1205.902355][    C1]  ? kmalloc_node_track_caller_noprof+0x102/0x430
[ 1205.902386][    C1]  ? kmalloc_reserve+0xef/0x2c0
[ 1205.902431][    C1]  ? __alloc_skb+0x164/0x380
[ 1205.902459][    C1]  ? nsim_dev_trap_report_work+0x2a4/0xc80
[ 1205.902490][    C1]  ? process_one_work+0x9fb/0x1b60
[ 1205.902517][    C1]  ? worker_thread+0x6c8/0xf70
[ 1205.902544][    C1]  ? kthread+0x2c1/0x3a0
[ 1205.902585][    C1]  kasan_save_track+0x14/0x30
[ 1205.902627][    C1]  __kasan_kmalloc+0xaa/0xb0
[ 1205.902669][    C1]  dummy_urb_enqueue+0x8d/0x8a0
[ 1205.902705][    C1]  ? usb_hcd_map_urb_for_dma+0x39e/0x1190
[ 1205.902747][    C1]  usb_hcd_submit_urb+0x2d1/0x2090
[ 1205.902784][    C1]  ? __pfx_usb_hcd_submit_urb+0x10/0x10
[ 1205.902818][    C1]  ? lock_acquire+0x1b1/0x560
[ 1205.902866][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1205.902911][    C1]  ? find_held_lock+0x2d/0x110
[ 1205.902945][    C1]  ? ath9k_hif_usb_reg_in_cb+0x487/0x690
[ 1205.903005][    C1]  usb_submit_urb+0x87c/0x1730
[ 1205.903049][    C1]  ? do_raw_spin_unlock+0x172/0x230
[ 1205.903082][    C1]  ath9k_hif_usb_reg_in_cb+0x494/0x690
[ 1205.903124][    C1]  __usb_hcd_giveback_urb+0x389/0x6e0
[ 1205.903161][    C1]  usb_hcd_giveback_urb+0x396/0x450
[ 1205.903196][    C1]  dummy_timer+0x17f6/0x3900
[ 1205.903235][    C1]  ? debug_object_deactivate+0x1f0/0x370
[ 1205.903284][    C1]  ? __pfx___lock_acquire+0x10/0x10
[ 1205.903333][    C1]  ? __hrtimer_run_queues+0x5a7/0xcc0
[ 1205.903369][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1205.903415][    C1]  ? __pfx_dummy_timer+0x10/0x10
[ 1205.903452][    C1]  ? timerqueue_del+0x83/0x150
[ 1205.903494][    C1]  ? __pfx_dummy_timer+0x10/0x10
[ 1205.903530][    C1]  __hrtimer_run_queues+0x20c/0xcc0
[ 1205.903569][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1205.903606][    C1]  ? ktime_get_update_offsets_now+0x201/0x310
[ 1205.903657][    C1]  hrtimer_interrupt+0x31b/0x800
[ 1205.903698][    C1]  __sysvec_apic_timer_interrupt+0x10f/0x450
[ 1205.903754][    C1]  sysvec_apic_timer_interrupt+0x43/0xb0
[ 1205.903791][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1205.903841][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[ 1205.903877][    C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 96 e1 80 f6 48 89 df e8 7e 5e 81 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 95 a0 72 f6 65 8b 05 86 ef 18 75 85 c0 74 16 5b
[ 1205.903906][    C1] RSP: 0018:ffffc90000a18a68 EFLAGS: 00000246
[ 1205.903930][    C1] RAX: 0000000000000006 RBX: ffffffff94d4a3e8 RCX: 1ffffffff2858723
[ 1205.903950][    C1] RDX: 0000000000000000 RSI: ffffffff8b2caf60 RDI: ffffffff8b8ff980
[ 1205.903971][    C1] RBP: 0000000000000282 R08: 0000000000000001 R09: fffffbfff284cc75
[ 1205.903991][    C1] R10: ffffffff942663af R11: 0000000000000005 R12: ffff8880291abdc0
[ 1205.904011][    C1] R13: 0000000000000002 R14: 0000000000000002 R15: ffff8880291abdc0
[ 1205.904038][    C1]  debug_check_no_obj_freed+0x328/0x600
[ 1205.904090][    C1]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[ 1205.904139][    C1]  ? kfree+0x12a/0x3b0
[ 1205.904183][    C1]  kmem_cache_free+0x26f/0x3a0
[ 1205.904228][    C1]  ? skb_release_data+0x761/0x980
[ 1205.904269][    C1]  ? kfree_skbmem+0x10e/0x200
[ 1205.904306][    C1]  kfree_skbmem+0x10e/0x200
[ 1205.904347][    C1]  consume_skb+0xdd/0x170
[ 1205.904400][    C1]  mac80211_hwsim_tx_frame+0x1f3/0x2a0
[ 1205.904450][    C1]  mac80211_hwsim_beacon_tx+0x592/0xa00
[ 1205.904500][    C1]  ? find_held_lock+0x2d/0x110
[ 1205.904545][    C1]  __iterate_interfaces+0x2d2/0x580
[ 1205.904583][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 1205.904632][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 1205.904681][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1205.904726][    C1]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[ 1205.904776][    C1]  mac80211_hwsim_beacon+0x105/0x200
[ 1205.904817][    C1]  __hrtimer_run_queues+0x20c/0xcc0
[ 1205.904866][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1205.904911][    C1]  ? ktime_get_update_offsets_now+0x201/0x310
[ 1205.904972][    C1]  hrtimer_run_softirq+0x17d/0x350
[ 1205.905017][    C1]  handle_softirqs+0x216/0x8f0
[ 1205.905074][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1205.905115][    C1]  irq_exit_rcu+0xbb/0x120
[ 1205.905155][    C1]  sysvec_apic_timer_interrupt+0x95/0xb0
[ 1205.905199][    C1]  </IRQ>
[ 1205.905210][    C1]  <TASK>
[ 1205.905221][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1205.905281][    C1] RIP: 0010:kmalloc_node_track_caller_noprof+0x102/0x430
[ 1205.905317][    C1] Code: 0f 95 c0 41 08 c1 0f 85 7e 02 00 00 0f 1f 44 00 00 48 c7 44 24 10 00 00 00 00 65 48 8b 05 de 69 22 7e 49 03 04 24 48 8b 50 08 <48> 8b 38 48 8b 40 10 48 85 ff 0f 84 29 02 00 00 48 85 c0 0f 84 20
[ 1205.905346][    C1] RSP: 0018:ffffc90000b57ab0 EFLAGS: 00000282
[ 1205.905369][    C1] RAX: ffff8880b9342de0 RBX: 0000000000082820 RCX: 0000000000000000
[ 1205.905388][    C1] RDX: 00000000002e8381 RSI: 0000000000001000 RDI: ffff888019e833c4
[ 1205.905408][    C1] RBP: ffffc90000b57b00 R08: 0000000000000007 R09: 0000000000000200
[ 1205.905428][    C1] R10: 0000000000001000 R11: 0000000000000003 R12: ffff888015442140
[ 1205.905447][    C1] R13: 0000000000082820 R14: 0000000000001000 R15: 00000000ffffffff
[ 1205.905473][    C1]  ? __alloc_skb+0x164/0x380
[ 1205.905505][    C1]  kmalloc_reserve+0xef/0x2c0
[ 1205.905554][    C1]  __alloc_skb+0x164/0x380
[ 1205.905585][    C1]  ? __pfx___alloc_skb+0x10/0x10
[ 1205.905614][    C1]  ? do_raw_spin_lock+0x12d/0x2c0
[ 1205.905646][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1205.905681][    C1]  nsim_dev_trap_report_work+0x2a4/0xc80
[ 1205.905724][    C1]  process_one_work+0x9fb/0x1b60
[ 1205.905759][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1205.905804][    C1]  ? __pfx_process_one_work+0x10/0x10
[ 1205.905836][    C1]  ? assign_work+0x1a0/0x250
[ 1205.905882][    C1]  worker_thread+0x6c8/0xf70
[ 1205.905916][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1205.905944][    C1]  kthread+0x2c1/0x3a0
[ 1205.905980][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1205.906010][    C1]  ? __pfx_kthread+0x10/0x10
[ 1205.906046][    C1]  ret_from_fork+0x45/0x80
[ 1205.906089][    C1]  ? __pfx_kthread+0x10/0x10
[ 1205.906126][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1205.906175][    C1]  </TASK>
[ 1207.130100][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 1207.137201][   T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0
[ 1207.147146][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1207.157241][   T30] Call Trace:
[ 1207.160551][   T30]  <TASK>
[ 1207.163515][   T30]  dump_stack_lvl+0x3d/0x1f0
[ 1207.168247][   T30]  panic+0x6f5/0x7a0
[ 1207.172206][   T30]  ? __pfx_panic+0x10/0x10
[ 1207.176681][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 1207.182104][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1207.188145][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 1207.193654][   T30]  ? watchdog+0xd3d/0x1240
[ 1207.198118][   T30]  ? watchdog+0xd30/0x1240
[ 1207.202589][   T30]  watchdog+0xd4e/0x1240
[ 1207.206884][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1207.211609][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1207.216863][   T30]  ? __kthread_parkme+0x148/0x220
[ 1207.221946][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1207.226669][   T30]  kthread+0x2c1/0x3a0
[ 1207.230873][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1207.236152][   T30]  ? __pfx_kthread+0x10/0x10
[ 1207.240888][   T30]  ret_from_fork+0x45/0x80
[ 1207.245380][   T30]  ? __pfx_kthread+0x10/0x10
[ 1207.250042][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1207.254892][   T30]  </TASK>
[ 1207.258524][   T30] Kernel Offset: disabled
[ 1207.262903][   T30] Rebooting in 86400 seconds..