last executing test programs:

9m6.039101672s ago: executing program 4 (id=1467):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

9m4.587361864s ago: executing program 4 (id=1469):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vxcan1\x00'})
chdir(0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff83], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf25, 0x0, 0x7], [0x1, 0x0, 0xe6c7, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xa000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c)
ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0)
readv(r5, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1)

9m3.157246027s ago: executing program 4 (id=1472):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x1, 0x1}, 0x20)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
socket$kcm(0x2b, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2={0xff, 0x6}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100001f00011f00fd8db125bb284401"], 0x114}], 0x1}, 0x0)

9m0.960731902s ago: executing program 4 (id=1475):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

8m58.803585852s ago: executing program 4 (id=1478):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='GPL\x00'}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40)
r2 = socket(0x1d, 0x2, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\b'], 0x3}}, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x5, 0x20000000, 0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001d005fd60000000000000000010200000c0006"], 0x20}}, 0x0)

8m55.959933128s ago: executing program 4 (id=1482):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100, 0x3, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = socket(0x0, 0x0, 0x0)
unshare(0x8000000)
unshare(0x8040080)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x200, 0x80)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}, 0x292, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1000000})
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@get={0x1, &(0x7f0000000340)=""/103})
socket$inet_icmp(0x2, 0x2, 0x1)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
userfaultfd(0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil)
r6 = socket$inet6(0xa, 0x3, 0x3d)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xfdef}], 0x1, 0x0, 0x0, 0x2c}, 0x0)

4m57.335498528s ago: executing program 1 (id=1680):
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x7, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRESDEC, @ANYRES64, @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x1, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000))
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0x4112, 0x0)
ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000340))
ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000080))
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
syz_usb_connect_ath9k(0x3, 0x9b, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3d3, [{{0x9, 0x2, 0xfffffffffffffdd3}}]}}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

4m53.219614497s ago: executing program 1 (id=1682):
syz_emit_ethernet(0xb4, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x0)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0xfffffffffffffff9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f00000001c0)=0x2)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x528, '\x00', 0x0, 0x0}, 0x48)
socket$packet(0x11, 0x0, 0x300)
readv(0xffffffffffffffff, 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./bus\x00', 0xc00, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8}, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x40, 0x800001}}}, 0x10)
bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x5}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10)
bind$tipc(r1, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
chdir(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
socket$rds(0x15, 0x5, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r3], 0x101c}}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

4m49.985024687s ago: executing program 1 (id=1686):
syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x101b01)
r0 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x238042, 0x0)
io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0)

4m49.650492958s ago: executing program 1 (id=1687):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close_range(r0, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socket(0x840000000002, 0x3, 0x100)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x300)

4m48.815056004s ago: executing program 1 (id=1688):
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x7, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRESDEC, @ANYRES64, @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x1, 0x1)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$BLKTRACESTART(r4, 0x40101287, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0x4112, 0x0)
ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000340))
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000080))
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d21f076000000000000109022400010000000009040000af03000000092100000001220580090581030008000000"], 0x0)
syz_usb_connect_ath9k(0x3, 0x9b, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3d3, [{{0x9, 0x2, 0xfffffffffffffdd3}}]}}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)

4m45.074657456s ago: executing program 1 (id=1691):
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
r1 = getpid()
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1}, 0x48)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000340)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, r5, 0xe0e0e0e0})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000004c0), 0x0, 0x0, 0xfffffffffffffffa})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000000c0)={{@my=0x1, 0x4}, @local, 0x0, 0x0, 0x5})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x10000}, @host, 0x0, 0x0, 0x7})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a31000000000800410072786500140033006970766c616e31000000000000000000b95de198"], 0x38}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59500000a000000", @ANYRES32=0x0, @ANYBLOB="08000b000000000014000200fe8000"/28], 0x34}}, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4a00, 0x0)

2m57.414118563s ago: executing program 0 (id=1777):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

2m57.163741918s ago: executing program 0 (id=1778):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x1f0e8000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, 0x0}])
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000078000100000080000000d80007"], 0x18}, 0x1, 0x5502000000000000}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000000}, 0x48)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r8 = dup(r7)
sendmsg$netlink(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)

2m52.757135989s ago: executing program 0 (id=1784):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2163, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280050001000000"], 0x3c}}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8, 0xfff7fffc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x18, 0x3a, 0x9, 0x0, 0x0, {0x1}, [@nested={0x4}]}, 0x18}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}})

2m51.509238973s ago: executing program 0 (id=1785):
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x7, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRESDEC, @ANYRES64, @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x1, 0x1)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$BLKTRACESTART(r3, 0x40101287, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0x4112, 0x0)
ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000340))
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000080))
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d21f076000000000000109022400010000000009040000af03000000092100000001220580090581030008000000"], 0x0)
syz_usb_connect_ath9k(0x3, 0x9b, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3d3, [{{0x9, 0x2, 0xfffffffffffffdd3}}]}}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)

2m47.081543437s ago: executing program 0 (id=1791):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet(0x2, 0x0, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4)
readv(r8, 0x0, 0x0)
close(r7)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003b40)=ANY=[@ANYBLOB="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"], 0x19d8}}, 0x0)

2m44.676747802s ago: executing program 0 (id=1793):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_S_STD(r2, 0xc008561b, &(0x7f0000000100))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getpid()
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0)
mkdir(&(0x7f00000003c0)='./file1\x00', 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
lchown(&(0x7f0000000340)='./bus\x00', 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r0, 0x0, 0x200040c4)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r6=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x40018000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x34008004)

22.482124532s ago: executing program 2 (id=1864):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r7=>0x0})
ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x72, 0x2003)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r7, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r6, 0x0, <r8=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32315d})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000380)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0xfffffffd, 0xa6928, 0x146ead})
close_range(r3, 0xffffffffffffffff, 0x0)

18.976367494s ago: executing program 2 (id=1868):
r0 = socket(0x22, 0x800, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r3=>0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="03031400ff05430000000800ad0001140000002f"], 0xdd12}], 0x1}, 0x0)
syz_usb_connect(0x5, 0x6a, 0x0, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
socket$inet(0x2, 0x0, 0x0)
r6 = getpid()
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x40}}, 0x24024094)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}})
sendto(r9, &(0x7f0000000180)="a305536477a134913e7e02dfa7079fd8e51d2cf172cf463c73f3f1e1d9f7f93729637316b9aecc01b20ed1ae9e2846d7ddd6c04edff279c52b1187627e3953434b1299c97275b60a2cbd520cae4c64268952d7e48ad31307258fc00b4952771b1e4e5fb6bf2dbd207854736f8e61c919845a2ce2296033c913ede2c9c41420c1fd656ccbaa880816d474f1181bbee9ab0c65150018e5ca010d42a5394565bdfbe61ca4f12afffbc033868cea7f03c7cd270b29bc2a0efd6d138080621f6b520c3280705ceda3", 0xc6, 0xc4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x2, 0x4, 0x9, 0x4}}, 0x80)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

15.708354215s ago: executing program 2 (id=1870):
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0x6f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa016ac20000000800450000610000000000119078000000000000000000004e20004d9078b73609f0daaa2d3d8593145ea609b8200783dab75a47a3c943f4c2cd151d47b8b706a2677e7b7d25e4c233f33c471dc7eff32835b16f04c0d55d3c9ab720067984df052347"], 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x202000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a"], 0x44}}, 0x0)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
socket$netlink(0x10, 0x3, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r4, 0x0, r6, 0x0, 0x4ffe2, 0x0)

15.479783074s ago: executing program 3 (id=1871):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x38}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xf19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, "fee8a3ab78fc179fd1fca0e91ddaaca7bd64c6a4b4e00d9683d9a1affda79de2b7fb0ae200f9ffffffcb000003000000009f000000000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000000f0ffffff00"}})
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x118}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef304ed0ffedd061941d9d022b25a4b9632856295fee3a314f6c196d953bcaf1aff06d181d51662fdaa52e46d7905c0b4c632602c", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000003c0)="03d54d843173f8be883a57d9e39cc6c79c415ac50f3e1e9c9373002a5b1918", 0x1f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c48864c", 0x24}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae4808a37a7649b3", 0x3d}, {&(0x7f00000001c0)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c76b595b36a515b6d30e34705733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723423cf07e4ffdbd568d3e263fb3b4086af3f2db1933785e59538bfd61f138ffac9eef7c8b34e4ce506220f43af449d3a72f48d9febe830b04cb3c99425de34cac503014ce74562667d8d6888edcc42fbbb6f7", 0xa5}, {&(0x7f00000002c0)="07030357fa3f85cd282cb9ab7e0a6d90d11f30e1bc20889d43e59a72354107b7849bc3c72e1485cca17aa5f4264f117b820688c6e25503bb54b2f6557d8b906aa997860941de528c25ca5ec78456babac034dc8cd2c4a4f078a8224b7ea2897a7f", 0x61}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf10f3485e399c8b59df5b02c5f2702522", 0x3c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000840)="a1c3704ecc4399d294157fa2b9b8", 0xe}, {&(0x7f0000000880)="b45a498ea447ee604887121819ab170a", 0x10}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e", 0x3e}], 0x5}}], 0x4, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)

14.279953366s ago: executing program 2 (id=1872):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2b, 0x801, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
ftruncate(0xffffffffffffffff, 0xffff)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x4, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x0, 0xffff}, {0x8, 0x5}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfe, 0x3, 0xc6, 0xcd1c, 0x0, 0xd, 0x0, 0x1}}, {0x6, 0x2, [0xff7]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ca37b10720c1300beba01020301090212000100000000090400000056b0d368585e656c8ba7c40368b79d490644f5495c2bf5ebd7595ac9b762eaafc07ca7a1e6cb953201e847d4597780d13efb7f33e46d7df75c5330927fda0afe86d297c898c48d286671e0ad8714e22d3a13a8715e562cf4fcb54b81138da45dd75ba9c5"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

12.310286692s ago: executing program 3 (id=1873):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020400050e000000000000000000000005000600000000000a00000000000000fe80000000000000000000000000000000000000000000000200010000000000000000000000000005005a", @ANYRES8=r4, @ANYRES8, @ANYRESHEX], 0x70}, 0x1, 0x7}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="714bb498ea3437756cc367c39fd66c2896735216e2216e6bbd3b19361c3b1d9e0326e5224e6f24d98f7d72e61e2a7e8c9be09e70cd14f0ae9fbf6fafebeb997513db2b9b", 0x44)
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)

11.127708257s ago: executing program 3 (id=1874):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0xf)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c)
connect$inet6(r5, 0x0, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xffffffffffffffff)
r7 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = fcntl$dupfd(r7, 0x0, r8)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0))
semop(0x0, &(0x7f00000002c0)=[{0x3, 0xfffd, 0x2800}, {0x0, 0x1f}, {0x4, 0x3, 0xc00}, {0x0, 0xfffe, 0x1000}], 0x4)
semop(0x0, 0x0, 0x0)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000003c0)=""/160)
semctl$IPC_RMID(0x0, 0x0, 0x0)
semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x3}, {0x0, 0x9}, {0x4, 0x0, 0x1c00}, {0x5}, {0x3, 0x5, 0x1000}, {0x3, 0x4, 0x800}], 0x6, &(0x7f0000000300)={0x77359400})
ioctl$KDSIGACCEPT(r7, 0x400455c8, 0x2000100034)

9.999131377s ago: executing program 3 (id=1875):
r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xfffffffffffffffb)
mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0xa0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
creat(&(0x7f0000000100)='./file0/file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r3)
syz_io_uring_setup(0x1f87, &(0x7f0000000000)={0x0, 0x0, 0x13580}, 0x0, 0x0)
r5 = dup(r3)
rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)

7.108963967s ago: executing program 2 (id=1876):
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x7, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRESDEC, @ANYRES64, @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0xff)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x1, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000))
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0x4112, 0x0)
ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000340))
ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000080))
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
syz_usb_connect_ath9k(0x3, 0x9b, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3d3, [{{0x9, 0x2, 0xfffffffffffffdd3}}]}}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

6.950345738s ago: executing program 3 (id=1877):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x0, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907f7c71d7007200", r3})
epoll_create1(0x0)
dup3(0xffffffffffffffff, r2, 0x0)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x0, 0x0)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000000c0)=0x101, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140), 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f0000000980), 0xe)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f0000000040))

5.665391428s ago: executing program 3 (id=1878):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r1)
openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x1})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100001678a9f3db54d9d7d75c09633443d18876294071a95161837eecef36e729283ba30324285910078780518864e33bd070171e1604ec0c4d2d24721b283af372a46dc50a24464e197eea17e2507ca069b638a45b1f01ef0349f16be157f23be01237aa438f78ea", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
unshare(0x64000600)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

0s ago: executing program 2 (id=1879):
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0x6f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa016ac20000000800450000610000000000119078000000000000000000004e20004d9078b73609f0daaa2d3d8593145ea609b8200783dab75a47a3c943f4c2cd151d47b8b706a2677e7b7d25e4c233f33c471dc7eff32835b16f04c0d55d3c9ab720067984df052347"], 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x202000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a"], 0x44}}, 0x0)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
socket$netlink(0x10, 0x3, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r4, 0x0, r6, 0x0, 0x4ffe2, 0x0)

kernel console output (not intermixed with test programs):

003:047F:FFFF.0002: No inputs registered, leaving
[ 2044.601466][T16893] veth0_vlan: entered promiscuous mode
[ 2044.617272][T16093] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 2044.692298][T16893] veth1_vlan: entered promiscuous mode
[ 2044.956755][   T29] audit: type=1400 audit(1723544208.091:501): avc:  denied  { nlmsg_write } for  pid=17152 comm="syz.3.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 2045.004532][ T5272] usb 4-1: USB disconnect, device number 57
[ 2045.280922][T16893] veth0_macvtap: entered promiscuous mode
[ 2045.539730][T16893] veth1_macvtap: entered promiscuous mode
[ 2045.569002][T17040] chnl_net:caif_netlink_parms(): no params data found
[ 2045.640074][T16987] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2045.703692][T16987] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2045.873098][T16987] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2045.930542][T16987] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2046.157410][ T5238] Bluetooth: hci7: command tx timeout
[ 2046.235511][T10988] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2046.320873][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2046.357736][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2046.374075][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2046.385946][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2046.396590][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2046.408637][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2046.420074][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2046.431738][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2046.444956][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2046.457955][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2046.485833][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2046.500152][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2046.516866][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2046.536110][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2046.546538][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2046.558687][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2046.590321][T16893] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2046.948728][T10988] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2047.198553][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2047.232635][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2047.243911][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2047.272946][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2047.286005][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2047.323006][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2047.334018][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2047.345606][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2047.357469][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2047.376670][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2047.387693][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2047.421609][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2047.433664][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2047.453900][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2047.464638][T16893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2047.476074][T16893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2047.490985][T16893] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2047.547802][T10988] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2047.653817][T16893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2047.665895][T16893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2047.705786][T16893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2047.735919][T16893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2047.824244][T10988] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2047.867426][T17040] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2047.876897][T17040] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2047.894474][T17040] bridge_slave_0: entered allmulticast mode
[ 2047.903756][T17040] bridge_slave_0: entered promiscuous mode
[ 2047.940746][T17150] chnl_net:caif_netlink_parms(): no params data found
[ 2047.977591][T17040] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2047.985329][T17040] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2048.004435][T17040] bridge_slave_1: entered allmulticast mode
[ 2048.017416][T17040] bridge_slave_1: entered promiscuous mode
[ 2048.236223][ T5238] Bluetooth: hci7: command tx timeout
[ 2048.460670][T17040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2049.145248][T17040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2049.526882][T17150] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2049.534119][T17150] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2049.565274][T17150] bridge_slave_0: entered allmulticast mode
[ 2049.570066][T17194] netlink: 'syz.3.1711': attribute type 1 has an invalid length.
[ 2049.579862][T17194] netlink: 'syz.3.1711': attribute type 2 has an invalid length.
[ 2049.590525][T17194] netlink: 'syz.3.1711': attribute type 1 has an invalid length.
[ 2049.613730][T17150] bridge_slave_0: entered promiscuous mode
[ 2049.633657][T17150] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2049.658055][T17150] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2049.665523][T17150] bridge_slave_1: entered allmulticast mode
[ 2049.674267][T17150] bridge_slave_1: entered promiscuous mode
[ 2049.706348][T17040] team0: Port device team_slave_0 added
[ 2049.738158][T17040] team0: Port device team_slave_1 added
[ 2049.861036][ T5566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2049.877457][ T5566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2050.190780][T10988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2050.233593][T17150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2050.282120][T17150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2050.315913][ T5238] Bluetooth: hci7: command tx timeout
[ 2050.628616][T10988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2050.748489][T17040] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2050.755565][T17040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2050.793272][T17040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2050.866710][T17150] team0: Port device team_slave_0 added
[ 2050.893587][T17150] team0: Port device team_slave_1 added
[ 2050.986299][T10988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2051.057303][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2051.071833][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2051.359309][T10988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2051.381267][T17040] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2051.398800][T17040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2051.426795][T17040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2052.523184][T17150] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2052.535834][T17150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2052.625989][T17150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2052.659392][T17150] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2052.676404][T17150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2052.709604][T17150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2052.771331][T16987] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2052.910387][T17040] hsr_slave_0: entered promiscuous mode
[ 2053.020093][T17040] hsr_slave_1: entered promiscuous mode
[ 2053.059764][T17040] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2053.805809][T17040] Cannot create hsr debugfs directory
[ 2055.378815][T16987] 8021q: adding VLAN 0 to HW filter on device team0
[ 2055.681156][T17150] hsr_slave_0: entered promiscuous mode
[ 2056.542612][T17150] hsr_slave_1: entered promiscuous mode
[ 2056.552670][T17150] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2056.560628][T17150] Cannot create hsr debugfs directory
[ 2056.733811][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2056.741093][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2056.772770][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2056.780718][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2056.849030][T17221] netlink: 'syz.3.1715': attribute type 21 has an invalid length.
[ 2056.863424][T17221] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1715'.
[ 2057.067622][T10988] bridge_slave_1: left allmulticast mode
[ 2057.073405][T10988] bridge_slave_1: left promiscuous mode
[ 2057.090557][T10988] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2057.139141][T10988] bridge_slave_0: left allmulticast mode
[ 2057.165132][T10988] bridge_slave_0: left promiscuous mode
[ 2057.176327][T10988] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2057.314222][T10988] bridge_slave_1: left allmulticast mode
[ 2057.338563][T10988] bridge_slave_1: left promiscuous mode
[ 2057.373122][T10988] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2057.468221][T10988] bridge_slave_0: left allmulticast mode
[ 2057.479566][T10988] bridge_slave_0: left promiscuous mode
[ 2057.491365][T10988] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2059.225989][T13340] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 2059.991644][T13340] usb 1-1: too many configurations: 211, using maximum allowed: 8
[ 2060.025361][T13340] usb 1-1: config index 0 descriptor too short (expected 64979, got 137)
[ 2060.047147][T13340] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2060.069742][T13340] usb 1-1: config index 1 descriptor too short (expected 64979, got 137)
[ 2060.088895][T13340] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2060.107118][T13340] usb 1-1: config index 2 descriptor too short (expected 64979, got 137)
[ 2060.125774][T13340] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2060.150096][T13340] usb 1-1: config index 3 descriptor too short (expected 64979, got 137)
[ 2060.178816][T13340] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2060.201458][T13340] usb 1-1: config index 4 descriptor too short (expected 64979, got 137)
[ 2060.232189][T13340] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2060.247511][T13340] usb 1-1: config index 5 descriptor too short (expected 64979, got 137)
[ 2060.275276][T13340] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2060.307864][T13340] usb 1-1: config index 6 descriptor too short (expected 64979, got 137)
[ 2060.346149][T13340] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2060.361085][T13340] usb 1-1: config index 7 descriptor too short (expected 64979, got 137)
[ 2060.370834][T13340] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2060.423183][T13340] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2060.435754][T13340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2060.444214][T13340] usb 1-1: Product: syz
[ 2060.453350][T13340] usb 1-1: Manufacturer: syz
[ 2060.458295][T13340] usb 1-1: SerialNumber: syz
[ 2060.471755][T13340] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2060.495498][T16302] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2061.686805][T16302] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 2061.703841][T16302] ath9k_htc: Failed to initialize the device
[ 2061.821575][T16302] usb 1-1: ath9k_htc: USB layer deinitialized
[ 2061.995348][T10988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2062.030738][T10988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2062.071878][T10988] bond0 (unregistering): Released all slaves
[ 2062.391429][T10988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2062.413606][T10988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2062.432032][T10988] bond0 (unregistering): Released all slaves
[ 2062.597394][T17241] netlink: 'syz.3.1721': attribute type 21 has an invalid length.
[ 2062.638246][T17241] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1721'.
[ 2062.846244][T16091] usb 1-1: USB disconnect, device number 48
[ 2063.887948][T17248] warning: `syz.0.1723' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 2068.355319][T17286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2068.540465][   T29] audit: type=1400 audit(1723544231.441:502): avc:  denied  { ioctl } for  pid=17281 comm="syz.3.1728" path="socket:[90978]" dev="sockfs" ino=90978 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 2069.017025][   T29] audit: type=1400 audit(1723544231.641:503): avc:  denied  { read } for  pid=17281 comm="syz.3.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2072.941027][T16987] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2073.039244][T16093] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 2073.259070][T16093] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2073.296002][T16093] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2074.023983][T10988] hsr_slave_0: left promiscuous mode
[ 2074.285899][T16093] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[ 2074.342503][T16093] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2074.389906][T16093] usb 1-1: config 0 descriptor??
[ 2074.416045][T16093] usb 1-1: can't set config #0, error -71
[ 2074.432732][T10988] hsr_slave_1: left promiscuous mode
[ 2074.442053][T16093] usb 1-1: USB disconnect, device number 49
[ 2074.484106][T10988] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2074.506104][T10988] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2074.809016][T10988] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2074.829367][T10988] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2075.019261][T17325] support for the xor transformation has been removed.
[ 2076.192871][T10988] hsr_slave_0: left promiscuous mode
[ 2076.232277][T10988] hsr_slave_1: left promiscuous mode
[ 2076.255043][T17331] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2076.265445][T10988] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2076.290816][T10988] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2076.318082][T10988] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2076.336292][T10988] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2076.519762][T10988] veth1_macvtap: left promiscuous mode
[ 2076.526221][T10988] veth0_macvtap: left promiscuous mode
[ 2076.532246][T10988] veth1_vlan: left promiscuous mode
[ 2076.541396][T10988] veth0_vlan: left promiscuous mode
[ 2076.574413][T10988] veth1_macvtap: left promiscuous mode
[ 2076.588371][T10988] veth0_macvtap: left promiscuous mode
[ 2076.596503][T10988] veth1_vlan: left promiscuous mode
[ 2076.602811][T10988] veth0_vlan: left promiscuous mode
[ 2078.471123][T14035] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 2078.494931][T14035] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 2078.505022][T14035] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 2078.528687][T14035] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 2078.548518][T14035] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 2078.557715][T14035] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 2079.016804][T10988] team0 (unregistering): Port device team_slave_1 removed
[ 2079.109517][T10988] team0 (unregistering): Port device team_slave_0 removed
[ 2080.168080][ T5403] smc: removing ib device syz1
[ 2080.636079][T14035] Bluetooth: hci9: command tx timeout
[ 2081.916168][T10988] team0 (unregistering): Port device team_slave_1 removed
[ 2082.095222][T10988] team0 (unregistering): Port device team_slave_0 removed
[ 2082.735858][T14035] Bluetooth: hci9: command tx timeout
[ 2084.011801][T17321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17321 comm=syz.0.1734
[ 2084.315079][T17040] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2084.394617][T17040] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2084.732176][T17040] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2084.800499][T14035] Bluetooth: hci9: command tx timeout
[ 2084.985840][T17040] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2087.317834][T14035] Bluetooth: hci9: command tx timeout
[ 2088.281452][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2088.293067][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2088.304100][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2088.340894][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2088.368310][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2088.378085][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2088.846235][T17343] chnl_net:caif_netlink_parms(): no params data found
[ 2089.957496][T17150] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2090.105815][T17150] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2090.138228][T17150] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2090.215211][T17150] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2090.377629][T17405] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2090.476038][ T5238] Bluetooth: hci4: command tx timeout
[ 2090.571390][T17343] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2090.582050][T17343] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2090.589600][T17343] bridge_slave_0: entered allmulticast mode
[ 2090.600850][T17343] bridge_slave_0: entered promiscuous mode
[ 2090.816017][T17343] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2090.841926][T17343] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2091.674165][T17343] bridge_slave_1: entered allmulticast mode
[ 2091.704747][T17343] bridge_slave_1: entered promiscuous mode
[ 2091.921292][T17427] fuse: Invalid rootmode
[ 2092.441369][T17435] fuse: Invalid rootmode
[ 2092.772457][ T5238] Bluetooth: hci4: command tx timeout
[ 2093.099447][T17343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2093.132948][T17426] [U] 
[ 2093.319785][T17343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2094.996122][ T5238] Bluetooth: hci4: command tx timeout
[ 2096.431460][T17343] team0: Port device team_slave_0 added
[ 2096.496728][T17343] team0: Port device team_slave_1 added
[ 2096.652257][T17467] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2097.035818][ T5238] Bluetooth: hci4: command tx timeout
[ 2097.088737][T17343] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2097.131794][T17343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2097.227732][   T29] audit: type=1400 audit(1723544260.351:504): avc:  denied  { accept } for  pid=17473 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 2097.245987][T17343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2097.507516][T17343] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2097.514505][T17343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2097.594689][T17343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2097.621556][T17394] chnl_net:caif_netlink_parms(): no params data found
[ 2098.012567][   T29] audit: type=1400 audit(1723544261.141:505): avc:  denied  { setopt } for  pid=17483 comm="syz.3.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2099.578109][T17343] hsr_slave_0: entered promiscuous mode
[ 2099.638960][T17343] hsr_slave_1: entered promiscuous mode
[ 2104.417969][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 2104.424593][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 2104.856064][T17526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17526 comm=syz.3.1762
[ 2104.903894][T17534] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2105.495907][T14035] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2105.507863][T14035] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2105.526770][T17394] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2105.526964][T14035] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2105.534054][T17394] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2105.565975][T14035] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2105.588784][T14035] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 2105.607124][T14035] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2105.704978][T17394] bridge_slave_0: entered allmulticast mode
[ 2105.723915][T17394] bridge_slave_0: entered promiscuous mode
[ 2106.050921][T17394] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2106.066870][T17394] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2106.103727][T17394] bridge_slave_1: entered allmulticast mode
[ 2106.139507][T17394] bridge_slave_1: entered promiscuous mode
[ 2107.812336][T14035] Bluetooth: hci7: command tx timeout
[ 2111.681056][ T5238] Bluetooth: hci7: command tx timeout
[ 2113.128534][T17394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2113.256126][T10988] bridge_slave_1: left allmulticast mode
[ 2113.261946][T10988] bridge_slave_1: left promiscuous mode
[ 2113.296219][T10988] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2113.354709][T10988] bridge_slave_0: left allmulticast mode
[ 2113.366663][T10988] bridge_slave_0: left promiscuous mode
[ 2113.405566][T10988] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2113.461226][T10988] bridge_slave_1: left allmulticast mode
[ 2113.475831][T10988] bridge_slave_1: left promiscuous mode
[ 2113.485088][T10988] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2113.526380][   T29] audit: type=1400 audit(1723544276.661:506): avc:  denied  { getopt } for  pid=17553 comm="syz.0.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 2113.578485][T10988] bridge_slave_0: left allmulticast mode
[ 2113.591638][T10988] bridge_slave_0: left promiscuous mode
[ 2113.615002][T10988] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2113.758744][ T5238] Bluetooth: hci7: command tx timeout
[ 2114.117873][   T29] audit: type=1400 audit(1723544277.251:507): avc:  denied  { connect } for  pid=17568 comm="syz.0.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 2115.810241][T10988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2115.839570][ T5238] Bluetooth: hci7: command tx timeout
[ 2115.871827][T10988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2115.884790][T10988] bond0 (unregistering): Released all slaves
[ 2115.973396][T17585] ucma_write: process 874 (syz.3.1771) changed security contexts after opening file descriptor, this is not allowed.
[ 2116.146458][T10988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2116.161697][T10988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2116.173915][T10988] bond0 (unregistering): Released all slaves
[ 2116.218605][T17394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2116.263293][T17576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1770'.
[ 2118.828430][T17600] FAULT_INJECTION: forcing a failure.
[ 2118.828430][T17600] name failslab, interval 1, probability 0, space 0, times 0
[ 2118.845431][T17600] CPU: 0 UID: 0 PID: 17600 Comm: syz.0.1775 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0
[ 2118.856365][T17600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2118.866547][T17600] Call Trace:
[ 2118.869852][T17600]  <TASK>
[ 2118.872805][T17600]  dump_stack_lvl+0x16c/0x1f0
[ 2118.877550][T17600]  should_fail_ex+0x497/0x5b0
[ 2118.882286][T17600]  ? fs_reclaim_acquire+0xae/0x160
[ 2118.887438][T17600]  should_failslab+0xc2/0x120
[ 2118.892235][T17600]  kmem_cache_alloc_noprof+0x6e/0x2f0
[ 2118.897649][T17600]  ? security_inode_alloc+0x3e/0x240
[ 2118.902980][T17600]  security_inode_alloc+0x3e/0x240
[ 2118.908224][T17600]  inode_init_always+0xc56/0xf80
[ 2118.913214][T17600]  alloc_inode+0x7d/0x230
[ 2118.917594][T17600]  iget_locked+0x18b/0x6c0
[ 2118.922063][T17600]  __ext4_iget+0x3c8/0x43a0
[ 2118.926696][T17600]  ? __pfx_mark_lock+0x10/0x10
[ 2118.931689][T17600]  ? do_handle_open+0x356/0x8f0
[ 2118.936586][T17600]  ? __pfx___ext4_iget+0x10/0x10
[ 2118.941574][T17600]  ? __pfx_stack_trace_save+0x10/0x10
[ 2118.946991][T17600]  ? stack_depot_save_flags+0x28/0x8f0
[ 2118.952513][T17600]  ? hlock_class+0x4e/0x130
[ 2118.957072][T17600]  ? __pfx_ext4_nfs_get_inode+0x10/0x10
[ 2118.962755][T17600]  ext4_nfs_get_inode+0x33/0xe0
[ 2118.967741][T17600]  generic_fh_to_dentry+0xda/0x100
[ 2118.973212][T17600]  exportfs_decode_fh_raw+0x149/0x870
[ 2118.978633][T17600]  ? __pfx_vfs_dentry_acceptable+0x10/0x10
[ 2118.984573][T17600]  ? __pfx_ext4_fh_to_dentry+0x10/0x10
[ 2118.990083][T17600]  ? __pfx_exportfs_decode_fh_raw+0x10/0x10
[ 2118.996075][T17600]  ? __might_fault+0xe3/0x190
[ 2119.000793][T17600]  do_handle_open+0x4ae/0x8f0
[ 2119.005512][T17600]  ? __pfx_do_handle_open+0x10/0x10
[ 2119.010833][T17600]  ? ksys_write+0x1ab/0x260
[ 2119.015405][T17600]  ? do_syscall_64+0xcd/0x250
[ 2119.020137][T17600]  do_syscall_64+0xcd/0x250
[ 2119.024780][T17600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2119.030725][T17600] RIP: 0033:0x7f487eb799f9
[ 2119.035207][T17600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2119.055049][T17600] RSP: 002b:00007f487fa15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[ 2119.063676][T17600] RAX: ffffffffffffffda RBX: 00007f487ed15f80 RCX: 00007f487eb799f9
[ 2119.071869][T17600] RDX: 0000000000009e0a RSI: 00000000200007c0 RDI: 0000000000000005
[ 2119.080333][T17600] RBP: 00007f487fa15090 R08: 0000000000000000 R09: 0000000000000000
[ 2119.089222][T17600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2119.097225][T17600] R13: 0000000000000000 R14: 00007f487ed15f80 R15: 00007ffe0ff4ce78
[ 2119.105368][T17600]  </TASK>
[ 2119.521950][T10988] hsr_slave_0: left promiscuous mode
[ 2119.616248][T17598] support for the xor transformation has been removed.
[ 2119.625617][T10988] hsr_slave_1: left promiscuous mode
[ 2119.658552][T10988] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2119.677155][T10988] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2119.709633][T10988] hsr_slave_0: left promiscuous mode
[ 2119.733587][T10988] hsr_slave_1: left promiscuous mode
[ 2119.758671][T10988] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2119.801838][T10988] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2121.072725][T10988] team0 (unregistering): Port device team_slave_1 removed
[ 2121.310929][T10988] team0 (unregistering): Port device team_slave_0 removed
[ 2121.875916][T14035] Bluetooth: hci1: command 0x0406 tx timeout
[ 2123.654811][T10988] team0 (unregistering): Port device team_slave_1 removed
[ 2123.996182][T10988] team0 (unregistering): Port device team_slave_0 removed
[ 2125.268172][T17394] team0: Port device team_slave_0 added
[ 2125.294094][T17394] team0: Port device team_slave_1 added
[ 2127.018162][T17394] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2127.046925][T17394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2127.225894][T13340] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 2127.288545][T17394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2127.434144][T13340] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 175, using maximum allowed: 30
[ 2127.476258][T17394] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2127.492004][T17394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2127.532405][T13340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2127.624326][T17661] support for the xor transformation has been removed.
[ 2127.668984][T17394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2127.752766][T17536] chnl_net:caif_netlink_parms(): no params data found
[ 2128.320843][T13340] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 175
[ 2128.357955][T13340] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 2128.367644][T13340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2128.379744][T13340] usb 1-1: config 0 descriptor??
[ 2128.400487][T13340] usbhid 1-1:0.0: can't add hid device: -22
[ 2128.438730][T13340] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[ 2128.489974][T17394] hsr_slave_0: entered promiscuous mode
[ 2128.531920][T17394] hsr_slave_1: entered promiscuous mode
[ 2128.554252][T17394] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2128.563061][T17394] Cannot create hsr debugfs directory
[ 2128.602153][T17651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2128.619626][T17651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2129.906236][T17536] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2129.936853][T17536] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2129.944410][T17536] bridge_slave_0: entered allmulticast mode
[ 2129.971258][T17536] bridge_slave_0: entered promiscuous mode
[ 2130.012244][T17343] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2130.102182][T17684] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1789'.
[ 2130.111918][T17684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1789'.
[ 2130.296573][ T8199] usb 1-1: USB disconnect, device number 50
[ 2131.164539][T17343] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2131.295142][   T29] audit: type=1400 audit(1723544294.421:508): avc:  denied  { ioctl } for  pid=17690 comm="syz.0.1791" path="socket:[92438]" dev="sockfs" ino=92438 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 2131.495396][T17536] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2131.524095][T17536] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2132.550966][T17698] netlink: 720 bytes leftover after parsing attributes in process `syz.0.1791'.
[ 2132.986477][T17536] bridge_slave_1: entered allmulticast mode
[ 2133.045863][T17536] bridge_slave_1: entered promiscuous mode
[ 2133.267005][T17343] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2134.503698][T17536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2134.609539][T17343] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2134.776230][T17536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2143.077648][T17536] team0: Port device team_slave_0 added
[ 2143.318525][T17536] team0: Port device team_slave_1 added
[ 2143.940183][T17536] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2143.966235][T17536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2144.076040][T17536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2144.226035][T17536] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2144.256253][T17536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2144.375744][T17536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2145.119167][T14035] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 2145.134034][T14035] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 2145.143654][T14035] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 2145.192295][T14035] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 2145.202063][T14035] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 2145.212221][T14035] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 2145.669089][T14035] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 2145.796843][T14035] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 2145.812239][T14035] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 2145.823584][T14035] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 2145.833994][T14035] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 2145.844345][T14035] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 2147.250171][T17536] hsr_slave_0: entered promiscuous mode
[ 2147.281282][T17536] hsr_slave_1: entered promiscuous mode
[ 2147.288898][T14035] Bluetooth: hci9: command tx timeout
[ 2147.313774][T17536] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2147.339979][T17536] Cannot create hsr debugfs directory
[ 2147.655847][ T8199] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 2147.886842][ T8199] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 175, using maximum allowed: 30
[ 2147.926316][ T8199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2147.957428][ T8199] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 175
[ 2147.996633][T14035] Bluetooth: hci10: command tx timeout
[ 2148.015606][ T8199] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 2148.024950][ T8199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2148.147260][ T8199] usb 4-1: config 0 descriptor??
[ 2148.210144][ T8199] usbhid 4-1:0.0: can't add hid device: -22
[ 2148.248008][ T8199] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[ 2148.375063][T17740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2148.394415][T17740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2148.467289][ T5238] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 2148.481584][ T5238] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 2148.491142][ T5238] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 2148.502199][ T5238] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 2148.510787][ T5238] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[ 2148.526764][ T5238] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 2149.355814][ T5238] Bluetooth: hci9: command tx timeout
[ 2150.084210][T10988] bridge_slave_1: left allmulticast mode
[ 2150.090050][ T5238] Bluetooth: hci10: command tx timeout
[ 2150.207824][T10988] bridge_slave_1: left promiscuous mode
[ 2150.314785][T10988] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2150.326244][T13340] usb 4-1: USB disconnect, device number 58
[ 2150.360086][T10988] bridge_slave_0: left allmulticast mode
[ 2150.392228][T10988] bridge_slave_0: left promiscuous mode
[ 2150.404132][T10988] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2150.648884][ T5238] Bluetooth: hci11: command tx timeout
[ 2151.436009][ T5238] Bluetooth: hci9: command tx timeout
[ 2152.156624][ T5238] Bluetooth: hci10: command tx timeout
[ 2152.257740][T10988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2152.325072][T17752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=17752 comm=syz.3.1800
[ 2152.355822][T10988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2152.381844][T10988] bond0 (unregistering): Released all slaves
[ 2152.639371][T17752] netlink: 'syz.3.1800': attribute type 29 has an invalid length.
[ 2152.695873][ T8199] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 2152.717149][ T5238] Bluetooth: hci11: command tx timeout
[ 2152.913758][ T8199] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=69.f5
[ 2152.945524][ T8199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2152.956987][T17754] netlink: 'syz.3.1800': attribute type 29 has an invalid length.
[ 2153.011649][ T8199] usb 4-1: config 0 descriptor??
[ 2153.050313][ T8199] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state.
[ 2153.092387][ T8199] dvb-usb: bulk message failed: -22 (2/0)
[ 2153.104378][ T8199] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver error while loading driver (-22)
[ 2153.115415][T10988] hsr_slave_0: left promiscuous mode
[ 2153.122856][ T8199] cinergyT2 4-1:0.0: probe with driver cinergyT2 failed with error -22
[ 2153.177787][T10988] hsr_slave_1: left promiscuous mode
[ 2153.228286][T10988] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2153.266903][T10988] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2153.416163][T17752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2153.496459][T17752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2153.515857][ T5238] Bluetooth: hci9: command tx timeout
[ 2153.621202][T17752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2153.666664][T17752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2153.731811][T16093] usb 4-1: USB disconnect, device number 59
[ 2154.134357][T10988] team0 (unregistering): Port device team_slave_1 removed
[ 2154.229110][T10988] team0 (unregistering): Port device team_slave_0 removed
[ 2154.238988][ T5238] Bluetooth: hci10: command tx timeout
[ 2154.805600][ T5238] Bluetooth: hci11: command tx timeout
[ 2156.429535][T17728] chnl_net:caif_netlink_parms(): no params data found
[ 2156.877034][ T5238] Bluetooth: hci11: command tx timeout
[ 2157.295467][T17728] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2157.303961][T17728] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2157.312535][T17728] bridge_slave_0: entered allmulticast mode
[ 2157.321876][T17728] bridge_slave_0: entered promiscuous mode
[ 2157.347695][T17732] chnl_net:caif_netlink_parms(): no params data found
[ 2157.402323][T17728] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2157.412188][T17728] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2157.423777][T17728] bridge_slave_1: entered allmulticast mode
[ 2157.432851][T17728] bridge_slave_1: entered promiscuous mode
[ 2157.623113][T17728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2157.698160][T17728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2158.965144][T17741] chnl_net:caif_netlink_parms(): no params data found
[ 2159.066752][T17728] team0: Port device team_slave_0 added
[ 2159.074035][T17536] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2160.074179][T10988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2160.112872][T17728] team0: Port device team_slave_1 added
[ 2160.128824][T17536] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2160.180973][T17536] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2160.215527][T17732] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2160.225281][T17732] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2160.233543][T17732] bridge_slave_0: entered allmulticast mode
[ 2160.262615][T17732] bridge_slave_0: entered promiscuous mode
[ 2160.291883][T17732] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2160.316442][T17732] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2160.323812][T17732] bridge_slave_1: entered allmulticast mode
[ 2160.333022][T17732] bridge_slave_1: entered promiscuous mode
[ 2161.040708][T10988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2161.276823][T17536] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2161.552684][T10988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2161.614831][T17732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2161.692981][T17728] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2161.705786][T17728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2161.741472][T17728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2161.784956][T17728] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2161.793261][T17728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2161.835482][T17728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2161.997450][T10988] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2162.043211][T17732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2162.263667][T17741] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2162.274593][T17741] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2162.304509][T17741] bridge_slave_0: entered allmulticast mode
[ 2162.336000][T17741] bridge_slave_0: entered promiscuous mode
[ 2162.531044][T17732] team0: Port device team_slave_0 added
[ 2162.552807][T17732] team0: Port device team_slave_1 added
[ 2162.567138][T17741] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2162.574406][T17741] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2162.606507][T17741] bridge_slave_1: entered allmulticast mode
[ 2162.622990][T17741] bridge_slave_1: entered promiscuous mode
[ 2162.764838][T17741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2162.824384][T17728] hsr_slave_0: entered promiscuous mode
[ 2162.831636][T17728] hsr_slave_1: entered promiscuous mode
[ 2162.839231][T17728] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2162.849350][T17728] Cannot create hsr debugfs directory
[ 2163.451239][T17741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2163.644966][T17741] team0: Port device team_slave_0 added
[ 2163.731716][T17732] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2163.767414][T17732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2163.797329][T17732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2163.857055][T17732] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2163.864072][T17732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2163.891687][T17732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2163.981603][T17741] team0: Port device team_slave_1 added
[ 2164.292713][T17741] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2164.314381][T17741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2164.352980][T17741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2164.389970][T17741] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2164.405736][T17741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2164.465726][T17741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2165.123977][T17732] hsr_slave_0: entered promiscuous mode
[ 2165.160095][T17732] hsr_slave_1: entered promiscuous mode
[ 2165.180037][T17732] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2165.199469][T17732] Cannot create hsr debugfs directory
[ 2165.378156][T14035] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2165.391595][T14035] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2165.416387][T14035] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2165.430228][T14035] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2165.441657][T14035] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2165.452010][T14035] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2165.851531][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 2165.854692][T17741] hsr_slave_0: entered promiscuous mode
[ 2165.858002][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 2165.900268][T17741] hsr_slave_1: entered promiscuous mode
[ 2165.936388][T17741] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2165.944394][T17741] Cannot create hsr debugfs directory
[ 2167.177233][T16302] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 2167.389788][T16302] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 175, using maximum allowed: 30
[ 2167.424656][T16302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2167.465845][T16302] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 175
[ 2167.503242][T16302] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 2167.522984][T14035] Bluetooth: hci1: command tx timeout
[ 2167.551246][T16302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2167.558516][T10988] bridge_slave_1: left allmulticast mode
[ 2167.565212][T10988] bridge_slave_1: left promiscuous mode
[ 2167.571698][T10988] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2167.587170][T16302] usb 4-1: config 0 descriptor??
[ 2167.603120][T10988] bridge_slave_0: left allmulticast mode
[ 2167.625847][T10988] bridge_slave_0: left promiscuous mode
[ 2167.632079][T10988] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2167.641601][T16302] usbhid 4-1:0.0: can't add hid device: -22
[ 2167.648151][T16302] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[ 2167.671001][T10988] bridge_slave_1: left allmulticast mode
[ 2167.687638][T10988] bridge_slave_1: left promiscuous mode
[ 2167.693597][T10988] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2167.717086][T10988] bridge_slave_0: left allmulticast mode
[ 2167.722892][T10988] bridge_slave_0: left promiscuous mode
[ 2167.729895][T10988] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2167.744521][T10988] bridge_slave_1: left allmulticast mode
[ 2167.750960][T10988] bridge_slave_1: left promiscuous mode
[ 2167.758853][T10988] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2167.774142][T10988] bridge_slave_0: left allmulticast mode
[ 2167.780403][T10988] bridge_slave_0: left promiscuous mode
[ 2167.787196][T10988] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2167.810930][T17822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2167.825346][T17822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2168.993097][T10988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2169.007845][T10988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2169.021934][T10988] bond0 (unregistering): Released all slaves
[ 2169.070116][T10988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2169.103298][T10988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2169.117630][T10988] bond0 (unregistering): Released all slaves
[ 2169.141632][T10988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2169.162932][T10988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2169.175533][T10988] bond0 (unregistering): Released all slaves
[ 2169.474011][T17817] chnl_net:caif_netlink_parms(): no params data found
[ 2169.606712][T14035] Bluetooth: hci1: command tx timeout
[ 2170.148169][T10988] hsr_slave_0: left promiscuous mode
[ 2170.155071][T10988] hsr_slave_1: left promiscuous mode
[ 2170.163629][T10988] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2170.175034][T10988] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2170.196520][T10988] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2170.204108][T10988] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2170.221385][T10988] hsr_slave_0: left promiscuous mode
[ 2170.228119][T10988] hsr_slave_1: left promiscuous mode
[ 2170.234621][T10988] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2170.248880][T10988] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2170.277809][T10988] hsr_slave_0: left promiscuous mode
[ 2170.284563][T10988] hsr_slave_1: left promiscuous mode
[ 2170.292677][T10988] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2170.313558][T10988] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2170.364263][T10988] veth1_macvtap: left promiscuous mode
[ 2170.370121][T10988] veth0_macvtap: left promiscuous mode
[ 2170.386726][T10988] veth1_vlan: left promiscuous mode
[ 2170.392243][T10988] veth0_vlan: left promiscuous mode
[ 2170.508941][ T8405] usb 4-1: USB disconnect, device number 60
[ 2170.744067][T17834] fuse: Invalid rootmode
[ 2171.446566][T17830] [U] 
[ 2171.685036][T14035] Bluetooth: hci1: command tx timeout
[ 2173.765937][T14035] Bluetooth: hci1: command tx timeout
[ 2178.067789][T10988] team0 (unregistering): Port device team_slave_1 removed
[ 2178.209658][T10988] team0 (unregistering): Port device team_slave_0 removed
[ 2180.325830][ T8199] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 2180.539964][ T8199] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 175, using maximum allowed: 30
[ 2180.561829][ T8199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2180.588102][ T8199] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 175
[ 2180.601380][ T8199] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 2180.613093][ T8199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2180.631524][ T8199] usb 4-1: config 0 descriptor??
[ 2180.649551][ T8199] usbhid 4-1:0.0: can't add hid device: -22
[ 2180.660381][ T8199] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[ 2180.877775][T17857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2180.888781][T17857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2180.911844][T10988] team0 (unregistering): Port device team_slave_1 removed
[ 2180.963527][T10988] team0 (unregistering): Port device team_slave_0 removed
[ 2181.667579][T10988] team0 (unregistering): Port device team_slave_1 removed
[ 2181.728012][T10988] team0 (unregistering): Port device team_slave_0 removed
[ 2182.196358][T17817] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2182.203712][T17817] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2182.241185][T17817] bridge_slave_0: entered allmulticast mode
[ 2182.250850][T17817] bridge_slave_0: entered promiscuous mode
[ 2182.292138][T17817] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2182.320206][T17817] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2182.327822][T17817] bridge_slave_1: entered allmulticast mode
[ 2182.336598][T17817] bridge_slave_1: entered promiscuous mode
[ 2182.426462][T17817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2182.474715][T17817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2182.650787][T17817] team0: Port device team_slave_0 added
[ 2182.744675][T17817] team0: Port device team_slave_1 added
[ 2182.978387][T17817] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2182.988113][T17817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2183.014376][T17817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2183.030419][T17817] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2183.041203][T17817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2183.067552][T17817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2183.428087][T17817] hsr_slave_0: entered promiscuous mode
[ 2183.456694][T17817] hsr_slave_1: entered promiscuous mode
[ 2183.540529][T16093] usb 4-1: USB disconnect, device number 61
[ 2183.749804][T17732] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2183.769466][T17732] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2183.798992][T17732] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2183.977517][T17732] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2184.453208][T17741] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2184.541221][T17741] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2184.574254][T17741] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2184.726706][T17875] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2184.771875][T17741] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2185.297418][T17728] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2185.342090][T17728] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2185.604083][T17728] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2185.706960][T17728] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2186.299331][T17732] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2186.661731][T10988] bridge_slave_1: left allmulticast mode
[ 2186.695459][T10988] bridge_slave_1: left promiscuous mode
[ 2186.716349][T10988] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2186.824458][T17889] support for the xor transformation has been removed.
[ 2187.018584][T10988] bridge_slave_0: left allmulticast mode
[ 2187.190189][T10988] bridge_slave_0: left promiscuous mode
[ 2187.208486][T10988] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2195.956996][T10988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2196.093162][T10988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2196.160017][T10988] bond0 (unregistering): Released all slaves
[ 2196.301716][T17732] 8021q: adding VLAN 0 to HW filter on device team0
[ 2196.418730][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2196.426197][ T5403] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2196.458379][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2196.465781][ T5403] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2197.170509][T17728] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2197.436158][T10988] hsr_slave_0: left promiscuous mode
[ 2197.465929][T10988] hsr_slave_1: left promiscuous mode
[ 2197.481739][T10988] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2197.509001][T10988] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2199.358351][T10988] team0 (unregistering): Port device team_slave_1 removed
[ 2199.471031][T10988] team0 (unregistering): Port device team_slave_0 removed
[ 2200.077173][T13340] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 2200.298814][T13340] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 175, using maximum allowed: 30
[ 2200.319173][T13340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2200.338502][T13340] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 175
[ 2200.352829][T13340] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 2200.364347][T13340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2200.429397][T13340] usb 4-1: config 0 descriptor??
[ 2200.453125][T13340] usbhid 4-1:0.0: can't add hid device: -22
[ 2200.496994][T13340] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[ 2200.593796][T17817] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2200.629761][T17817] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2200.664835][T17932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2200.678648][T17932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2200.690621][T17741] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2200.719414][T17817] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2200.765124][T17817] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2200.847789][T17728] 8021q: adding VLAN 0 to HW filter on device team0
[ 2200.940739][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2200.948065][ T5403] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2201.073260][T17514] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2201.080746][T17514] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2201.118891][T17741] 8021q: adding VLAN 0 to HW filter on device team0
[ 2201.250072][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2201.257419][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2201.342186][T17846] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2201.349662][T17846] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2201.975456][T17732] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2202.248410][T17817] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2202.484694][T17817] 8021q: adding VLAN 0 to HW filter on device team0
[ 2202.709827][T17732] veth0_vlan: entered promiscuous mode
[ 2202.750444][ T5272] usb 4-1: USB disconnect, device number 62
[ 2202.770872][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2202.778194][ T5403] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2202.909971][T17732] veth1_vlan: entered promiscuous mode
[ 2202.972016][T17514] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2202.979439][T17514] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2203.126148][T17728] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2203.302760][T17741] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2203.521826][T17732] veth0_macvtap: entered promiscuous mode
[ 2203.581424][T17732] veth1_macvtap: entered promiscuous mode
[ 2203.937221][T17732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2203.954697][T17732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2203.996843][T17732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2204.015997][T17732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2204.036559][T17732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2204.055798][T17732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2204.073814][T17732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2204.089258][T17732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2204.099612][T17732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2204.110580][T17732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2204.121264][T17732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2204.132279][T17732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2204.149644][T17732] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2204.204623][T17732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2204.235840][T17732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2204.265737][T17732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2204.285721][T17732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2204.306115][T17732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2204.335731][T17732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2204.357518][T17732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2204.385689][T17732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2204.395577][T17732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2204.444865][T17732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2204.455371][T17732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2204.485709][T17732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2204.508777][T17732] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2204.531730][T17741] veth0_vlan: entered promiscuous mode
[ 2205.076909][T17741] veth1_vlan: entered promiscuous mode
[ 2205.373094][T17997] support for the xor transformation has been removed.
[ 2205.884221][T18000] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2205.899928][T18000] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2205.926076][T18000] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2205.938946][T18000] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2205.953674][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2205.962868][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2206.030110][T17817] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2206.047891][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2206.064333][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2206.089361][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2206.119605][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2206.129208][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 2206.140211][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2206.433900][T17741] veth0_macvtap: entered promiscuous mode
[ 2206.490840][T17741] veth1_macvtap: entered promiscuous mode
[ 2208.077274][T18000] Bluetooth: hci4: command tx timeout
[ 2208.266396][T18000] Bluetooth: hci7: command tx timeout
[ 2210.246580][T18000] Bluetooth: hci4: command tx timeout
[ 2210.326107][T18000] Bluetooth: hci7: command tx timeout
[ 2212.214929][   T63] bridge_slave_1: left allmulticast mode
[ 2212.228715][   T63] bridge_slave_1: left promiscuous mode
[ 2212.250902][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2212.326001][T18000] Bluetooth: hci4: command tx timeout
[ 2212.366282][   T63] bridge_slave_0: left allmulticast mode
[ 2212.372009][   T63] bridge_slave_0: left promiscuous mode
[ 2212.378117][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2212.398270][T18000] Bluetooth: hci7: command tx timeout
[ 2213.007735][ T5238] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 2213.020150][ T5238] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 2213.037251][ T5238] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 2213.323773][ T5238] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 2213.380859][ T5238] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 2213.394214][ T5238] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 2214.396133][T18000] Bluetooth: hci4: command tx timeout
[ 2214.480243][T18000] Bluetooth: hci7: command tx timeout
[ 2215.259170][T18037] ptrace attach of "./syz-executor exec"[14341] was attempted by "./syz-executor exec"[18037]
[ 2215.299842][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2215.314228][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2215.362276][   T63] bond0 (unregistering): Released all slaves
[ 2215.367436][   T29] audit: type=1400 audit(1723544378.491:509): avc:  denied  { write } for  pid=18036 comm="syz.3.1831" name="task" dev="proc" ino=95626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 2215.392805][T17817] veth0_vlan: entered promiscuous mode
[ 2215.393259][   T29] audit: type=1400 audit(1723544378.491:510): avc:  denied  { add_name } for  pid=18036 comm="syz.3.1831" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 2215.419575][   T29] audit: type=1400 audit(1723544378.501:511): avc:  denied  { create } for  pid=18036 comm="syz.3.1831" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1
[ 2215.445447][   T29] audit: type=1400 audit(1723544378.501:512): avc:  denied  { associate } for  pid=18036 comm="syz.3.1831" name="cpu.stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 2215.530086][T18000] Bluetooth: hci9: command tx timeout
[ 2215.773867][   T63] hsr_slave_0: left promiscuous mode
[ 2215.783194][   T63] hsr_slave_1: left promiscuous mode
[ 2215.790161][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2215.800387][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2215.976026][T10495] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 2216.190682][T10495] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 175, using maximum allowed: 30
[ 2216.202031][T10495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2216.216217][T10495] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 175
[ 2216.229790][T10495] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 2216.239445][T10495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2216.259421][T10495] usb 4-1: config 0 descriptor??
[ 2216.271122][T10495] usbhid 4-1:0.0: can't add hid device: -22
[ 2216.294168][T10495] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[ 2216.439896][   T63] team0 (unregistering): Port device team_slave_1 removed
[ 2216.481917][T18043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2216.504897][T18043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2216.554296][   T63] team0 (unregistering): Port device team_slave_0 removed
[ 2217.595859][T18000] Bluetooth: hci9: command tx timeout
[ 2217.613138][T17817] veth1_vlan: entered promiscuous mode
[ 2217.913767][T17999] chnl_net:caif_netlink_parms(): no params data found
[ 2218.158111][T18002] chnl_net:caif_netlink_parms(): no params data found
[ 2218.338293][T17817] veth0_macvtap: entered promiscuous mode
[ 2218.478281][T17817] veth1_macvtap: entered promiscuous mode
[ 2218.623703][T17999] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2218.644875][T17999] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2218.661623][T17999] bridge_slave_0: entered allmulticast mode
[ 2218.680781][T17999] bridge_slave_0: entered promiscuous mode
[ 2218.698915][T10356] usb 4-1: USB disconnect, device number 63
[ 2218.744686][T17999] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2218.785119][T17999] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2218.798125][T17999] bridge_slave_1: entered allmulticast mode
[ 2218.827291][T17999] bridge_slave_1: entered promiscuous mode
[ 2219.287602][T18002] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2219.295360][T18002] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2219.310852][T18002] bridge_slave_0: entered allmulticast mode
[ 2219.320015][T18002] bridge_slave_0: entered promiscuous mode
[ 2219.341399][T18002] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2219.348876][T18002] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2219.359722][T18002] bridge_slave_1: entered allmulticast mode
[ 2219.370888][T18002] bridge_slave_1: entered promiscuous mode
[ 2219.400248][T17817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2219.413530][T17817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2219.433591][T17817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2219.460318][T17817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2219.486566][T17817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2219.517344][T17817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2219.537684][T17817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2219.551190][T17817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2219.562415][T17817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2219.583513][T17817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2219.631816][T17817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2219.652751][T17817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2219.674521][T17817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2219.685386][T18000] Bluetooth: hci9: command tx timeout
[ 2219.691917][T17817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2219.714172][T17817] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2220.020035][T18002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2220.252484][T17999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2220.284613][T18002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2220.707443][T18083] support for the xor transformation has been removed.
[ 2221.125163][T17817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2221.152383][T17817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2221.173211][T17817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2221.204724][T17817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2221.221793][T17817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2221.243017][T17817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2221.285683][T17817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2221.311634][T17817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2221.322195][T17817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2221.333170][T17817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2221.345244][T17817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2221.357293][T17817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2221.373937][T17817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2221.384727][T17817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2221.398096][T17817] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2221.470751][T17999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2221.793258][T18000] Bluetooth: hci9: command tx timeout
[ 2227.288966][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 2227.295487][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 2228.017306][T17999] team0: Port device team_slave_0 added
[ 2228.043316][T17999] team0: Port device team_slave_1 added
[ 2228.061994][T18002] team0: Port device team_slave_0 added
[ 2228.207684][T18002] team0: Port device team_slave_1 added
[ 2228.215437][T17999] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2228.224243][T17999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2228.295788][T17999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2228.447542][T17999] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2228.465992][T17999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2228.526750][T17999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2228.915297][T18019] chnl_net:caif_netlink_parms(): no params data found
[ 2229.838028][T18002] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2229.845055][T18002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2229.906624][T18002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2229.949976][T18002] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2229.983124][T18002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2229.983425][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2230.033023][T18002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2230.043992][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2230.054582][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2230.068605][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2230.082947][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2230.096081][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2230.142735][T18108] fuse: Invalid rootmode
[ 2230.608594][T17999] hsr_slave_0: entered promiscuous mode
[ 2230.630927][T17999] hsr_slave_1: entered promiscuous mode
[ 2230.640642][T17999] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2230.654815][T17999] Cannot create hsr debugfs directory
[ 2230.786425][T18102] [U] 
[ 2232.434008][ T5238] Bluetooth: hci1: command tx timeout
[ 2232.656395][T18002] hsr_slave_0: entered promiscuous mode
[ 2232.688218][T18002] hsr_slave_1: entered promiscuous mode
[ 2232.717588][T18002] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2232.746816][T18002] Cannot create hsr debugfs directory
[ 2233.017614][T18019] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2233.025007][T18019] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2233.040325][T18019] bridge_slave_0: entered allmulticast mode
[ 2233.057018][T18019] bridge_slave_0: entered promiscuous mode
[ 2233.272175][T18019] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2233.280641][T18019] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2233.289216][T18019] bridge_slave_1: entered allmulticast mode
[ 2233.299759][T18019] bridge_slave_1: entered promiscuous mode
[ 2233.694607][T18019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2233.793940][T18019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2233.859866][T18019] team0: Port device team_slave_0 added
[ 2233.880277][T18019] team0: Port device team_slave_1 added
[ 2234.014612][T18019] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2234.023329][T18019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2234.049861][T18019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2234.191569][T18019] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2234.216478][T18019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2234.246100][T18019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2234.497081][T18000] Bluetooth: hci1: command tx timeout
[ 2235.225919][T10442] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 2235.280640][T18019] hsr_slave_0: entered promiscuous mode
[ 2235.320967][T18019] hsr_slave_1: entered promiscuous mode
[ 2235.333433][T18019] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2235.355902][T18019] Cannot create hsr debugfs directory
[ 2235.430657][T10442] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 175, using maximum allowed: 30
[ 2235.446103][T10442] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2235.475916][T10442] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 175
[ 2235.494957][T10442] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 2235.508381][T10442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2235.525146][T10442] usb 4-1: config 0 descriptor??
[ 2235.538510][T10442] usbhid 4-1:0.0: can't add hid device: -22
[ 2235.565907][T10442] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[ 2235.703313][   T63] bridge_slave_1: left allmulticast mode
[ 2235.717137][   T63] bridge_slave_1: left promiscuous mode
[ 2235.723201][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2235.744232][   T63] bridge_slave_0: left allmulticast mode
[ 2235.752101][T18140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2235.763870][T18140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2235.773311][   T63] bridge_slave_0: left promiscuous mode
[ 2235.787018][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2235.803910][   T63] bridge_slave_1: left allmulticast mode
[ 2235.813688][   T63] bridge_slave_1: left promiscuous mode
[ 2235.820461][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2235.833287][   T63] bridge_slave_0: left allmulticast mode
[ 2235.840585][   T63] bridge_slave_0: left promiscuous mode
[ 2235.846636][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2236.556580][T18000] Bluetooth: hci1: command tx timeout
[ 2237.033664][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2237.055800][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2237.071111][   T63] bond0 (unregistering): Released all slaves
[ 2237.313502][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2237.328163][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2237.342077][   T63] bond0 (unregistering): Released all slaves
[ 2237.766959][   T63] hsr_slave_0: left promiscuous mode
[ 2237.773657][   T63] hsr_slave_1: left promiscuous mode
[ 2237.781635][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2237.790405][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2237.817121][   T63] hsr_slave_0: left promiscuous mode
[ 2237.830251][   T63] hsr_slave_1: left promiscuous mode
[ 2237.847397][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2237.855080][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2237.871387][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2237.879564][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2237.943935][   T63] veth1_macvtap: left promiscuous mode
[ 2237.949735][   T63] veth0_macvtap: left promiscuous mode
[ 2237.955829][   T63] veth1_vlan: left promiscuous mode
[ 2237.965052][   T63] veth0_vlan: left promiscuous mode
[ 2237.972880][   T63] veth1_macvtap: left promiscuous mode
[ 2237.978701][   T63] veth0_macvtap: left promiscuous mode
[ 2237.984701][   T63] veth1_vlan: left promiscuous mode
[ 2237.990741][   T63] veth0_vlan: left promiscuous mode
[ 2238.638134][T18000] Bluetooth: hci1: command tx timeout
[ 2238.708437][T10356] usb 4-1: USB disconnect, device number 64
[ 2239.588660][   T63] team0 (unregistering): Port device team_slave_1 removed
[ 2239.732786][   T63] team0 (unregistering): Port device team_slave_0 removed
[ 2240.743648][T18157] support for the xor transformation has been removed.
[ 2243.163979][   T63] team0 (unregistering): Port device team_slave_1 removed
[ 2243.243936][   T63] team0 (unregistering): Port device team_slave_0 removed
[ 2244.097845][T18103] chnl_net:caif_netlink_parms(): no params data found
[ 2244.899348][T18103] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2244.916024][T18103] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2244.937774][T18103] bridge_slave_0: entered allmulticast mode
[ 2244.966298][T18103] bridge_slave_0: entered promiscuous mode
[ 2244.989885][T18103] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2245.016364][T18103] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2245.034078][T18103] bridge_slave_1: entered allmulticast mode
[ 2245.054163][T18103] bridge_slave_1: entered promiscuous mode
[ 2245.869938][T18002] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2245.931656][T18103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2245.990752][T18103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2246.123694][T18002] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2246.343135][T18103] team0: Port device team_slave_0 added
[ 2246.372753][T18002] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2246.393191][T18002] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2246.450532][T18103] team0: Port device team_slave_1 added
[ 2246.806718][T18103] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2246.813724][T18103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2246.864447][T18103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2247.121210][T18103] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2247.143704][T18103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2247.183925][T18103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2247.538277][T18103] hsr_slave_0: entered promiscuous mode
[ 2247.547364][T18103] hsr_slave_1: entered promiscuous mode
[ 2247.557130][T18103] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2247.564764][T18103] Cannot create hsr debugfs directory
[ 2248.854866][T17999] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2248.884395][T17999] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2249.125567][T17999] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2249.286206][T17999] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2250.230135][T18002] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2250.433118][   T63] bridge_slave_1: left allmulticast mode
[ 2250.465908][   T63] bridge_slave_1: left promiscuous mode
[ 2250.471874][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2250.475976][   T29] audit: type=1400 audit(1723544413.551:513): avc:  denied  { ioctl } for  pid=18210 comm="syz.3.1847" path="socket:[96798]" dev="sockfs" ino=96798 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 2250.537619][   T63] bridge_slave_0: left allmulticast mode
[ 2250.557570][   T63] bridge_slave_0: left promiscuous mode
[ 2250.567437][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2250.802983][T18210] delete_channel: no stack
[ 2251.635194][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2251.661613][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2251.696827][   T63] bond0 (unregistering): Released all slaves
[ 2251.769555][T18002] 8021q: adding VLAN 0 to HW filter on device team0
[ 2252.418119][T18220] support for the xor transformation has been removed.
[ 2252.542146][ T5566] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2252.549498][ T5566] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2252.688006][ T5566] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2252.695329][ T5566] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2253.004060][   T63] hsr_slave_0: left promiscuous mode
[ 2253.053616][   T63] hsr_slave_1: left promiscuous mode
[ 2253.060768][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2253.453133][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2253.537964][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2253.611475][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2253.943994][   T63] veth1_macvtap: left promiscuous mode
[ 2253.965917][   T63] veth0_macvtap: left promiscuous mode
[ 2253.971777][   T63] veth1_vlan: left promiscuous mode
[ 2254.006372][   T63] veth0_vlan: left promiscuous mode
[ 2255.115306][T18233] support for the xor transformation has been removed.
[ 2256.178446][   T63] team0 (unregistering): Port device team_slave_1 removed
[ 2256.334106][   T63] team0 (unregistering): Port device team_slave_0 removed
[ 2257.689462][T18241] netlink: 'syz.3.1852': attribute type 21 has an invalid length.
[ 2257.697983][T18241] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1852'.
[ 2258.093147][T17999] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2258.404245][T17999] 8021q: adding VLAN 0 to HW filter on device team0
[ 2258.557884][T18103] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2258.618833][ T5566] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2258.626190][ T5566] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2258.717289][T18103] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2258.788560][T17845] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2258.795882][T17845] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2258.826428][T18103] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2258.851718][T18103] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2259.236510][T18103] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2260.223460][T18103] 8021q: adding VLAN 0 to HW filter on device team0
[ 2260.247643][T18002] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2260.265495][T18019] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2260.378378][T18019] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2260.438957][T17714] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2260.446319][T17714] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2260.508770][T17714] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2260.516111][T17714] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2260.582769][T18019] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2260.609970][T18019] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2261.709159][T18002] veth0_vlan: entered promiscuous mode
[ 2261.777253][T18019] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2261.882595][T18002] veth1_vlan: entered promiscuous mode
[ 2261.971193][T18019] 8021q: adding VLAN 0 to HW filter on device team0
[ 2262.169678][T17714] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2262.177043][T17714] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2262.302579][T17714] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2262.309953][T17714] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2262.375177][T17999] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2262.572504][T18291] support for the xor transformation has been removed.
[ 2262.923509][T18103] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2263.114805][T18002] veth0_macvtap: entered promiscuous mode
[ 2263.244662][T18002] veth1_macvtap: entered promiscuous mode
[ 2264.014695][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2264.110357][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2264.223762][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2264.310522][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2264.345746][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2264.375805][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2264.426795][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2264.449756][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2264.459752][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2264.470321][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2264.484797][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2264.495337][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2264.508230][T18002] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2264.529041][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2264.543404][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2264.566457][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2264.593469][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2264.621667][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2264.659052][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2264.695765][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2264.722187][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2264.733017][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2264.757046][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2264.784762][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2264.803799][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2264.821703][T18002] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2265.065882][T18103] veth0_vlan: entered promiscuous mode
[ 2265.160767][T18103] veth1_vlan: entered promiscuous mode
[ 2265.453760][T18103] veth0_macvtap: entered promiscuous mode
[ 2265.527210][T18103] veth1_macvtap: entered promiscuous mode
[ 2265.682651][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2265.758771][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2265.815888][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2265.875804][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2265.918339][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2265.956280][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2266.019434][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2266.075657][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2266.085540][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2266.149284][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2266.202234][ T5238] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 2266.236821][ T5238] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 2266.245788][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2266.256930][ T5238] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 2266.269660][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2266.286315][ T5238] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 2266.321203][ T5238] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 2266.328551][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2266.328583][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2266.331523][T18103] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2266.358192][ T5238] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 2266.388129][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2266.536214][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2266.575689][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2266.608749][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2266.649726][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2266.713750][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2266.751160][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2266.785647][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2266.815936][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2266.865652][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2266.895927][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2266.926030][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2266.966209][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2266.996022][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2267.034805][T18103] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2267.034897][T14035] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 2267.065253][T14035] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 2267.080736][T14035] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 2267.118830][T14035] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 2267.132563][T14035] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[ 2267.173409][T14035] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 2267.179635][T18103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2267.191510][T18103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2267.203144][T18103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2267.213987][T18103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2268.505081][T18334] netlink: 'syz.3.1858': attribute type 21 has an invalid length.
[ 2268.542067][T18334] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1858'.
[ 2268.850536][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2268.868786][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2268.897726][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2268.921022][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2268.930496][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2268.938939][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2269.276447][ T5238] Bluetooth: hci10: command tx timeout
[ 2269.286368][ T5238] Bluetooth: hci11: command tx timeout
[ 2269.468603][T17846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2269.510381][T17846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2270.404462][ T6465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2270.427084][ T6465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2270.714536][T18316] chnl_net:caif_netlink_parms(): no params data found
[ 2270.861375][T18371] fuse: Bad value for 'fd'
[ 2270.926350][   T29] audit: type=1326 audit(1723544434.051:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18369 comm="syz.2.1547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93317799f9 code=0x0
[ 2271.040692][ T5238] Bluetooth: hci4: command tx timeout
[ 2271.168081][ T5566] bridge_slave_1: left allmulticast mode
[ 2271.185078][ T5566] bridge_slave_1: left promiscuous mode
[ 2271.205710][ T5566] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2271.249750][ T5566] bridge_slave_0: left allmulticast mode
[ 2271.255557][ T5566] bridge_slave_0: left promiscuous mode
[ 2271.261780][ T5566] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2271.356261][ T5238] Bluetooth: hci11: command tx timeout
[ 2271.356762][T14035] Bluetooth: hci10: command tx timeout
[ 2273.124594][T14035] Bluetooth: hci4: command tx timeout
[ 2273.436119][T14035] Bluetooth: hci11: command tx timeout
[ 2273.441690][T14035] Bluetooth: hci10: command tx timeout
[ 2274.050088][T18395] support for the xor transformation has been removed.
[ 2274.940406][ T5566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2275.008768][ T5566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2275.034618][ T5566] bond0 (unregistering): Released all slaves
[ 2275.196152][T14035] Bluetooth: hci4: command tx timeout
[ 2275.440621][T18387] netlink: 'syz.2.1861': attribute type 21 has an invalid length.
[ 2275.465095][T18387] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1861'.
[ 2275.525526][ T5238] Bluetooth: hci11: command tx timeout
[ 2275.531213][T14035] Bluetooth: hci10: command tx timeout
[ 2275.774157][ T5566] hsr_slave_0: left promiscuous mode
[ 2275.795170][ T5566] hsr_slave_1: left promiscuous mode
[ 2275.815330][ T5566] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2275.825859][ T5566] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2275.834768][ T5566] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2275.869724][ T5566] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2275.965856][ T5566] veth1_macvtap: left promiscuous mode
[ 2275.971749][ T5566] veth0_macvtap: left promiscuous mode
[ 2275.985669][ T5566] veth1_vlan: left promiscuous mode
[ 2275.991221][ T5566] veth0_vlan: left promiscuous mode
[ 2277.060258][T18416] fuse: Invalid rootmode
[ 2277.379983][T14035] Bluetooth: hci4: command tx timeout
[ 2277.779314][T18412] [U] 
[ 2279.237142][T18425] fuse: Bad value for 'fd'
[ 2279.265283][   T29] audit: type=1326 audit(1723544442.391:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.3.1867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f6c9799f9 code=0x0
[ 2279.381378][ T5566] team0 (unregistering): Port device team_slave_1 removed
[ 2279.527473][ T5566] team0 (unregistering): Port device team_slave_0 removed
[ 2281.375002][T18434] netlink: 'syz.2.1868': attribute type 21 has an invalid length.
[ 2281.402493][T18434] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1868'.
[ 2281.424433][T18323] chnl_net:caif_netlink_parms(): no params data found
[ 2281.459450][T18316] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2281.473607][T18316] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2281.500463][T18316] bridge_slave_0: entered allmulticast mode
[ 2281.510055][T18316] bridge_slave_0: entered promiscuous mode
[ 2281.611949][T18316] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2281.636151][T18316] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2281.650267][T18316] bridge_slave_1: entered allmulticast mode
[ 2281.674525][T18316] bridge_slave_1: entered promiscuous mode
[ 2281.934857][T18316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2282.126296][T18316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2282.560255][T18316] team0: Port device team_slave_0 added
[ 2283.010596][T18323] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2283.191438][T18323] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2283.206886][T18323] bridge_slave_0: entered allmulticast mode
[ 2283.326656][T18323] bridge_slave_0: entered promiscuous mode
[ 2283.559700][T18316] team0: Port device team_slave_1 added
[ 2284.101878][T18471] support for the xor transformation has been removed.
[ 2284.300493][T18323] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2284.324263][T18323] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2284.371043][T18323] bridge_slave_1: entered allmulticast mode
[ 2284.408078][T18323] bridge_slave_1: entered promiscuous mode
[ 2284.586452][T18344] chnl_net:caif_netlink_parms(): no params data found
[ 2284.805436][T18316] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2284.835717][T18316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2284.865699][T16091] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 2284.928103][T18316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2285.069156][T16091] usb 3-1: Using ep0 maxpacket: 16
[ 2285.093872][T18323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2285.093910][T16091] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[ 2285.127068][T18316] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2285.134074][T18316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2285.147729][T16091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2285.207350][T18316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2285.226370][T16091] usb 3-1: Product: syz
[ 2285.230613][T16091] usb 3-1: Manufacturer: syz
[ 2285.235295][T16091] usb 3-1: SerialNumber: syz
[ 2285.279202][T16091] usb 3-1: config 0 descriptor??
[ 2285.437713][T18323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2285.707176][T18323] team0: Port device team_slave_0 added
[ 2285.969042][T18323] team0: Port device team_slave_1 added
[ 2286.927622][T18344] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2286.951130][T18344] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2286.977846][T18344] bridge_slave_0: entered allmulticast mode
[ 2287.017352][T18344] bridge_slave_0: entered promiscuous mode
[ 2287.927977][T18316] hsr_slave_0: entered promiscuous mode
[ 2287.981224][T18316] hsr_slave_1: entered promiscuous mode
[ 2288.154608][T18344] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2288.216406][T18344] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2288.223843][T18344] bridge_slave_1: entered allmulticast mode
[ 2288.385853][T18344] bridge_slave_1: entered promiscuous mode
[ 2288.752539][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 2288.881914][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 2291.205827][T16091] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[ 2291.239183][T16091] peak_usb 3-1:0.0: unable to read PCAN-Chip USB firmware info (err -71)
[ 2291.376863][T18323] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2291.399940][T18323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2291.455280][T18323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2291.494210][T18323] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2291.506422][T18323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2291.594675][T18323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2291.836833][T16091] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71
[ 2291.871394][T16091] usb 3-1: USB disconnect, device number 25
[ 2292.048927][T18344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2292.069278][T18344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2292.259300][T16091] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 2292.457129][T16091] usb 3-1: too many configurations: 211, using maximum allowed: 8
[ 2292.478526][T16091] usb 3-1: config index 0 descriptor too short (expected 64979, got 137)
[ 2292.506766][T16091] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2292.543685][T16091] usb 3-1: config index 1 descriptor too short (expected 64979, got 137)
[ 2292.572750][T16091] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2292.600748][T16091] usb 3-1: config index 2 descriptor too short (expected 64979, got 137)
[ 2292.627701][T16091] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2292.648269][T18344] team0: Port device team_slave_0 added
[ 2292.669334][T16091] usb 3-1: config index 3 descriptor too short (expected 64979, got 137)
[ 2292.688791][T18323] hsr_slave_0: entered promiscuous mode
[ 2292.690475][T16091] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2292.708092][T16091] usb 3-1: config index 4 descriptor too short (expected 64979, got 137)
[ 2292.719319][T16091] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2292.730556][T18323] hsr_slave_1: entered promiscuous mode
[ 2292.738433][T16091] usb 3-1: config index 5 descriptor too short (expected 64979, got 137)
[ 2292.752655][T16091] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2292.755417][T18323] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2292.776220][T16091] usb 3-1: config index 6 descriptor too short (expected 64979, got 137)
[ 2292.784953][T16091] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2292.792699][T18323] Cannot create hsr debugfs directory
[ 2292.801232][T16091] usb 3-1: config index 7 descriptor too short (expected 64979, got 137)
[ 2292.801276][T16091] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2292.806801][T16091] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2292.830936][T16091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2293.096297][T18344] team0: Port device team_slave_1 added
[ 2293.103124][T16091] usb 3-1: Product: syz
[ 2293.108253][T16091] usb 3-1: Manufacturer: syz
[ 2293.113463][T16091] usb 3-1: SerialNumber: syz
[ 2295.744268][T16091] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2295.840785][T10262] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2296.720778][    C0] hrtimer: interrupt took 15208208 ns
[ 2297.191118][T10262] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2297.342545][T18344] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2297.375785][T18344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2297.505899][T18344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2298.407248][T18344] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2298.414265][T18344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2298.556056][T18344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2303.899775][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2303.919624][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2303.938421][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2303.949051][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2303.959552][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 2303.972013][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2306.078339][T14035] Bluetooth: hci7: command tx timeout
[ 2308.156199][T14035] Bluetooth: hci7: command tx timeout
[ 2309.797519][ T5238] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 2309.809778][ T5238] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 2309.832439][ T5238] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 2309.852477][ T5238] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 2309.866192][ T5238] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 2309.874633][ T5238] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 2310.124530][T18344] hsr_slave_0: entered promiscuous mode
[ 2310.236639][ T5238] Bluetooth: hci7: command tx timeout
[ 2311.916744][ T5238] Bluetooth: hci9: command tx timeout
[ 2312.318467][ T5238] Bluetooth: hci7: command tx timeout
[ 2313.996268][ T5238] Bluetooth: hci9: command tx timeout
[ 2315.204998][T18344] hsr_slave_1: entered promiscuous mode
[ 2316.076655][ T5238] Bluetooth: hci9: command tx timeout
[ 2318.166738][ T5238] Bluetooth: hci9: command tx timeout
[ 2322.197184][T18344] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2322.204914][T18344] Cannot create hsr debugfs directory
[ 2325.827302][T14035] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 2325.866394][T14035] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 2325.883884][T14035] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 2325.898739][T14035] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 2325.907762][T14035] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[ 2325.915991][T14035] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 2327.996193][T14035] Bluetooth: hci12: command tx timeout
[ 2328.040765][ T5238] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 2328.052875][ T5238] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 2328.064380][ T5238] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 2328.081146][ T5238] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 2328.091838][ T5238] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[ 2328.101004][ T5238] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 2329.741861][ T5238] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 2329.754441][ T5238] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 2329.787509][ T5238] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 2329.800673][ T5238] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 2329.810141][ T5238] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[ 2329.826692][ T5238] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 2330.076231][ T5238] Bluetooth: hci12: command tx timeout
[ 2330.250844][ T5238] Bluetooth: hci13: command tx timeout
[ 2331.916215][ T5238] Bluetooth: hci14: command tx timeout
[ 2332.156307][ T5238] Bluetooth: hci12: command tx timeout
[ 2332.316500][ T5238] Bluetooth: hci13: command tx timeout
[ 2333.996274][ T5238] Bluetooth: hci14: command tx timeout
[ 2334.245782][ T5238] Bluetooth: hci12: command tx timeout
[ 2334.396306][ T5238] Bluetooth: hci13: command tx timeout
[ 2336.146111][ T5238] Bluetooth: hci14: command tx timeout
[ 2336.476751][ T5238] Bluetooth: hci13: command tx timeout
[ 2338.156048][ T5238] Bluetooth: hci14: command tx timeout
[ 2352.446714][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 2352.454682][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 2354.556549][ T5238] Bluetooth: hci1: command 0x0406 tx timeout
[ 2364.831289][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2364.850508][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2364.859500][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2364.869466][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2364.878698][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2364.887453][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2366.956198][ T5238] Bluetooth: hci4: command tx timeout
[ 2369.035972][ T5238] Bluetooth: hci4: command tx timeout
[ 2370.497387][T14035] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 2370.509073][T14035] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 2370.517765][T14035] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 2370.528924][T14035] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 2370.538505][T14035] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 2370.546534][T14035] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 2371.115832][T14035] Bluetooth: hci4: command tx timeout
[ 2372.636630][T14035] Bluetooth: hci8: command tx timeout
[ 2373.196882][T14035] Bluetooth: hci4: command tx timeout
[ 2374.715978][ T5238] Bluetooth: hci8: command tx timeout
[ 2376.799382][ T5238] Bluetooth: hci8: command tx timeout
[ 2378.876455][ T5238] Bluetooth: hci8: command tx timeout
[ 2386.917277][T14035] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 2386.929507][T14035] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 2386.938467][T14035] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 2386.948909][T14035] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 2386.961344][T14035] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[ 2386.976057][T14035] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 2389.036219][T14035] Bluetooth: hci11: command tx timeout
[ 2390.267535][ T5238] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 2390.303441][ T5238] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 2390.318620][ T5238] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 2390.334586][ T5238] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 2390.347465][ T5238] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[ 2390.355205][ T5238] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 2391.134007][ T5238] Bluetooth: hci11: command tx timeout
[ 2391.227618][T14035] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[ 2391.240123][T14035] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[ 2391.248967][T14035] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[ 2391.264553][T14035] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[ 2391.274579][T14035] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[ 2391.282962][T14035] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[ 2392.396458][ T5238] Bluetooth: hci15: command tx timeout
[ 2393.203434][ T5238] Bluetooth: hci11: command tx timeout
[ 2393.356245][ T5238] Bluetooth: hci16: command tx timeout
[ 2394.476076][ T5238] Bluetooth: hci15: command tx timeout
[ 2395.065598][ T5238] Bluetooth: hci10: command 0x0406 tx timeout
[ 2395.276145][ T5238] Bluetooth: hci11: command tx timeout
[ 2395.436078][ T5238] Bluetooth: hci16: command tx timeout
[ 2396.565422][ T5238] Bluetooth: hci15: command tx timeout
[ 2397.515826][ T5238] Bluetooth: hci16: command tx timeout
[ 2398.636791][ T5238] Bluetooth: hci15: command tx timeout
[ 2399.598646][T14035] Bluetooth: hci16: command tx timeout
[ 2413.285994][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 2413.292384][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 2426.290860][ T5238] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[ 2426.302526][ T5238] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[ 2426.311627][ T5238] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[ 2426.322339][ T5238] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[ 2426.331211][ T5238] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[ 2426.340916][ T5238] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[ 2428.396523][T14035] Bluetooth: hci17: command tx timeout
[ 2429.036102][T14035] Bluetooth: hci7: command 0x0406 tx timeout
[ 2430.484015][ T5238] Bluetooth: hci17: command tx timeout
[ 2430.798525][T14035] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[ 2430.811813][T14035] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[ 2430.821523][T14035] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[ 2430.831901][T14035] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[ 2430.840721][T14035] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[ 2430.849185][T14035] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[ 2432.556646][ T5238] Bluetooth: hci17: command tx timeout
[ 2432.959609][ T5238] Bluetooth: hci18: command tx timeout
[ 2434.156143][ T5238] Bluetooth: hci9: command 0x0406 tx timeout
[ 2434.637486][ T5238] Bluetooth: hci17: command tx timeout
[ 2435.050746][ T5238] Bluetooth: hci18: command tx timeout
[ 2437.115895][T14035] Bluetooth: hci18: command tx timeout
[ 2439.196266][T14035] Bluetooth: hci18: command tx timeout
[ 2447.839005][T18000] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[ 2447.870041][T18000] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[ 2447.884726][T18000] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[ 2447.894628][T18000] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[ 2447.905960][T18000] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3
[ 2447.915099][T18000] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[ 2449.542837][T18000] Bluetooth: hci12: command 0x0406 tx timeout
[ 2449.996497][T18000] Bluetooth: hci19: command tx timeout
[ 2451.747761][T18000] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[ 2451.763840][T18000] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[ 2451.780114][T18000] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[ 2451.790010][T18000] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[ 2451.798554][T18000] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3
[ 2451.809385][T18000] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[ 2452.081463][T18000] Bluetooth: hci19: command tx timeout
[ 2452.787327][T18645] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1
[ 2452.807512][T18645] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9
[ 2452.825896][T18645] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9
[ 2452.837010][T18645] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4
[ 2452.845904][T18645] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3
[ 2452.853553][T18645] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2
[ 2453.916122][T18645] Bluetooth: hci20: command tx timeout
[ 2454.157150][T18645] Bluetooth: hci19: command tx timeout
[ 2454.646366][T18645] Bluetooth: hci13: command 0x0406 tx timeout
[ 2454.652799][T18645] Bluetooth: hci14: command 0x0406 tx timeout
[ 2454.956151][T18645] Bluetooth: hci21: command tx timeout
[ 2455.996141][T18645] Bluetooth: hci20: command tx timeout
[ 2456.239353][T18645] Bluetooth: hci19: command tx timeout
[ 2457.036078][ T5238] Bluetooth: hci21: command tx timeout
[ 2458.075900][T18000] Bluetooth: hci20: command tx timeout
[ 2459.115697][T18000] Bluetooth: hci21: command tx timeout
[ 2460.155930][T18000] Bluetooth: hci20: command tx timeout
[ 2460.238676][   T30] INFO: task kworker/u8:10:5566 blocked for more than 143 seconds.
[ 2460.257337][   T30]       Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0
[ 2460.265036][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2460.295678][   T30] task:kworker/u8:10   state:D stack:23856 pid:5566  tgid:5566  ppid:2      flags:0x00004000
[ 2460.316321][   T30] Workqueue: netns cleanup_net
[ 2460.321170][   T30] Call Trace:
[ 2460.324501][   T30]  <TASK>
[ 2460.347522][   T30]  __schedule+0xe37/0x5490
[ 2460.352026][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 2460.405908][   T30]  ? __pfx___schedule+0x10/0x10
[ 2460.410855][   T30]  ? schedule+0x298/0x350
[ 2460.415237][   T30]  ? __pfx_lock_release+0x10/0x10
[ 2460.445610][   T30]  ? __mutex_lock+0x5b3/0x9c0
[ 2460.450413][   T30]  ? __mutex_trylock_common+0x78/0x250
[ 2460.478996][   T30]  schedule+0xe7/0x350
[ 2460.483167][   T30]  schedule_preempt_disabled+0x13/0x30
[ 2460.505671][   T30]  __mutex_lock+0x5b8/0x9c0
[ 2460.510273][   T30]  ? find_held_lock+0x2d/0x110
[ 2460.515104][   T30]  ? devlink_pernet_pre_exit+0x12d/0x2b0
[ 2460.535894][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 2460.541199][   T30]  ? __pfx_lock_release+0x10/0x10
[ 2460.556479][   T30]  ? devlink_try_get+0x153/0x1e0
[ 2460.561519][   T30]  ? devlink_pernet_pre_exit+0x12d/0x2b0
[ 2460.614004][   T30]  devlink_pernet_pre_exit+0x12d/0x2b0
[ 2460.626029][   T30]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[ 2460.632098][   T30]  ? cleanup_net+0x422/0xbf0
[ 2460.655902][   T30]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[ 2460.661988][   T30]  cleanup_net+0x488/0xbf0
[ 2460.683356][   T30]  ? __pfx_cleanup_net+0x10/0x10
[ 2460.695661][   T30]  process_one_work+0x9c5/0x1b40
[ 2460.715786][   T30]  ? __pfx_cleanup_net+0x10/0x10
[ 2460.720923][   T30]  ? __pfx_process_one_work+0x10/0x10
[ 2460.739308][   T30]  ? assign_work+0x1a0/0x250
[ 2460.743999][   T30]  worker_thread+0x6c8/0xf20
[ 2460.775638][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 2460.805721][   T30]  kthread+0x2c1/0x3a0
[ 2460.809880][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2460.815135][   T30]  ? __pfx_kthread+0x10/0x10
[ 2460.839033][   T30]  ret_from_fork+0x45/0x80
[ 2460.843564][   T30]  ? __pfx_kthread+0x10/0x10
[ 2460.865778][   T30]  ret_from_fork_asm+0x1a/0x30
[ 2460.870696][   T30]  </TASK>
[ 2460.873812][   T30] 
[ 2460.873812][   T30] Showing all locks held in the system:
[ 2460.898863][   T30] 1 lock held by khungtaskd/30:
[ 2460.903775][   T30]  #0: ffffffff8ddb5ce0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340
[ 2460.933124][   T30] 2 locks held by dhcpcd/4882:
[ 2460.960916][   T30]  #0: ffff88805a659678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x154/0x9b0
[ 2460.991909][   T30]  #1: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x18f/0x1f0
[ 2461.030156][   T30] 2 locks held by getty/4975:
[ 2461.034903][   T30]  #0: ffff88802adcf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 2461.074254][   T30]  #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490
[ 2461.085222][   T30] 4 locks held by kworker/u8:10/5566:
[ 2461.105612][   T30]  #0: ffff8880166e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40
[ 2461.151862][   T30]  #1: ffffc9000355fd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40
[ 2461.185706][   T30]  #2: ffffffff8fa0c6d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0
[ 2461.201072][T18000] Bluetooth: hci21: command tx timeout
[ 2461.223274][   T30]  #3: ffff888062cdf0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x12d/0x2b0
[ 2461.236376][   T30] 2 locks held by kworker/0:7/10262:
[ 2461.241720][   T30] 3 locks held by kworker/u8:16/10988:
[ 2461.255674][   T30]  #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40
[ 2461.297824][   T30]  #1: ffffc900037bfd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40
[ 2461.329836][   T30]  #2: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0
[ 2461.365759][   T30] 3 locks held by kworker/0:6/13297:
[ 2461.371120][   T30] 2 locks held by kworker/0:1/16091:
[ 2461.388055][   T30] 4 locks held by kworker/0:8/16093:
[ 2461.393945][   T30] 3 locks held by kworker/u8:19/17714:
[ 2461.425716][   T30] 3 locks held by kworker/u8:20/17845:
[ 2461.431256][   T30]  #0: ffff88802a759948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40
[ 2461.458126][   T30]  #1: ffffc900036ffd80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40
[ 2461.485718][   T30]  #2: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30
[ 2461.495359][   T30] 7 locks held by syz-executor/18316:
[ 2461.561945][   T30]  #0: ffff88802f9ce420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260
[ 2461.585560][   T30]  #1: ffff888053828888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x281/0x500
[ 2461.615871][   T30]  #2: ffff888022eec1e8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a4/0x500
[ 2461.635695][   T30]  #3: ffffffff8efba228 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0
[ 2461.655670][   T30]  #4: ffff888062cdf0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610
[ 2461.696148][   T30]  #5: ffff888062cda250 (&devlink->lock_key#103){+.+.}-{3:3}, at: nsim_drv_remove+0x4a/0x1d0
[ 2461.745836][   T30]  #6: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x6f/0x6a0
[ 2461.754863][   T30] 1 lock held by syz-executor/18323:
[ 2461.775882][   T30]  #0: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250
[ 2461.784985][   T30] 2 locks held by syz-executor/18344:
[ 2461.809866][   T30]  #0: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250
[ 2461.826152][   T30]  #1: ffffffff8dc59a90 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x53b/0x1e40
[ 2461.877430][   T30] 1 lock held by syz.3.1878/18530:
[ 2461.882618][   T30]  #0: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250
[ 2461.912515][   T30] 6 locks held by syz.2.1879/18542:
[ 2461.929970][   T30] 1 lock held by syz-executor/18552:
[ 2461.935325][   T30]  #0: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x4fc/0x4770
[ 2461.965324][   T30] 2 locks held by syz-executor/18558:
[ 2461.971527][   T30]  #0: ffffffff8fa0c6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670
[ 2462.006317][   T30]  #1: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1b/0x230
[ 2462.045775][   T30] 2 locks held by syz-executor/18565:
[ 2462.051222][   T30]  #0: ffffffff8fa0c6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670
[ 2462.085165][   T30]  #1: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x218/0x780
[ 2462.107665][   T30] 2 locks held by syz-executor/18569:
[ 2462.135731][   T30]  #0: ffffffff8fa0c6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670
[ 2462.145320][   T30]  #1: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x218/0x780
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2462.208106][   T30] 2 locks held by syz-executor/18572:
[ 2462.213552][   T30]  #0: ffffffff8fa0c6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670
[ 2462.276043][   T30]  #1: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x218/0x780
[ 2462.306138][   T30] 1 lock held by syz-executor/18599:
[ 2462.315849][   T30]  #0: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 2462.445734][   T30] 1 lock held by syz-executor/18605:
[ 2462.451191][   T30]  #0: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 2462.567383][   T30] 1 lock held by syz-executor/18610:
[ 2462.572902][   T30]  #0: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 2462.607379][   T30] 1 lock held by syz-executor/18617:
[ 2462.612735][   T30]  #0: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 2462.655705][   T30] 1 lock held by syz-executor/18621:
[ 2462.661054][   T30]  #0: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 2462.697712][   T30] 1 lock held by syz-executor/18625:
[ 2462.703248][   T30]  #0: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 2462.755441][   T30] 1 lock held by syz-executor/18630:
[ 2462.763159][   T30]  #0: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 2462.785733][   T30] 1 lock held by syz-executor/18634:
[ 2462.791084][   T30]  #0: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 2462.875708][   T30] 1 lock held by syz-executor/18641:
[ 2462.881062][   T30]  #0: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 2462.905735][   T30] 1 lock held by syz-executor/18643:
[ 2462.911090][   T30]  #0: ffffffff8fa21e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 2462.937697][   T30] 
[ 2462.940090][   T30] =============================================
[ 2462.940090][   T30] 
[ 2462.965911][   T30] NMI backtrace for cpu 1
[ 2462.970298][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0
[ 2462.981282][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2462.991381][   T30] Call Trace:
[ 2462.994691][   T30]  <TASK>
[ 2462.997653][   T30]  dump_stack_lvl+0x116/0x1f0
[ 2463.002396][   T30]  nmi_cpu_backtrace+0x27b/0x390
[ 2463.007391][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2463.013429][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 2463.019467][   T30]  watchdog+0xf4e/0x1280
[ 2463.023762][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2463.028491][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2463.033734][   T30]  ? __kthread_parkme+0x148/0x220
[ 2463.038818][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2463.043546][   T30]  kthread+0x2c1/0x3a0
[ 2463.047653][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2463.052896][   T30]  ? __pfx_kthread+0x10/0x10
[ 2463.057526][   T30]  ret_from_fork+0x45/0x80
[ 2463.062006][   T30]  ? __pfx_kthread+0x10/0x10
[ 2463.066634][   T30]  ret_from_fork_asm+0x1a/0x30
[ 2463.071456][   T30]  </TASK>
[ 2463.077192][   T30] Sending NMI from CPU 1 to CPUs 0:
[ 2463.082470][    C0] NMI backtrace for cpu 0
[ 2463.082486][    C0] CPU: 0 UID: 0 PID: 18542 Comm: syz.2.1879 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0
[ 2463.082518][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2463.082533][    C0] RIP: 0010:unwind_next_frame+0x1b7/0x23a0
[ 2463.082570][    C0] Code: 48 c1 ea 03 80 3c 02 00 0f 85 5f 1c 00 00 31 ff 44 89 ee 4c 8b 63 48 e8 77 9d 4d 00 45 84 ed 0f 84 c9 02 00 00 e8 89 9b 4d 00 <31> ff 4c 89 e6 e8 ef 9d 4d 00 4d 85 e4 0f 84 ee 0a 00 00 e8 71 9b
[ 2463.082596][    C0] RSP: 0018:ffffc90000006e20 EFLAGS: 00000006
[ 2463.082617][    C0] RAX: 0000000000010104 RBX: ffffc90000006ea0 RCX: ffffffff813ce0a9
[ 2463.082636][    C0] RDX: ffff88804c2f5a00 RSI: ffffffff813ce0b7 RDI: 0000000000000001
[ 2463.082654][    C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000
[ 2463.082670][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8a8ce130
[ 2463.082686][    C0] R13: 0000000000000000 R14: ffffc90000006f60 R15: ffffc90000006ed5
[ 2463.082704][    C0] FS:  0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[ 2463.082730][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2463.082749][    C0] CR2: 00007f161272f28d CR3: 000000000db7c000 CR4: 00000000003506f0
[ 2463.082766][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2463.082782][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2463.082798][    C0] Call Trace:
[ 2463.082806][    C0]  <NMI>
[ 2463.082815][    C0]  ? show_regs+0x8c/0xa0
[ 2463.082855][    C0]  ? nmi_cpu_backtrace+0x1d8/0x390
[ 2463.082889][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 2463.082927][    C0]  ? nmi_handle+0x1a9/0x5c0
[ 2463.082950][    C0]  ? unwind_next_frame+0x1b7/0x23a0
[ 2463.082976][    C0]  ? default_do_nmi+0x6a/0x160
[ 2463.083017][    C0]  ? exc_nmi+0x170/0x1e0
[ 2463.083038][    C0]  ? end_repeat_nmi+0xf/0x53
[ 2463.083062][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x70/0x1b0
[ 2463.083105][    C0]  ? unwind_next_frame+0x1a9/0x23a0
[ 2463.083130][    C0]  ? unwind_next_frame+0x1b7/0x23a0
[ 2463.083155][    C0]  ? unwind_next_frame+0x1b7/0x23a0
[ 2463.083180][    C0]  ? unwind_next_frame+0x1b7/0x23a0
[ 2463.083206][    C0]  ? unwind_next_frame+0x1b7/0x23a0
[ 2463.083231][    C0]  </NMI>
[ 2463.083240][    C0]  <IRQ>
[ 2463.083248][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[ 2463.083289][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[ 2463.083331][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 2463.083359][    C0]  arch_stack_walk+0x100/0x170
[ 2463.083389][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[ 2463.083430][    C0]  ? dummy_timer+0x1750/0x38d0
[ 2463.083456][    C0]  stack_trace_save+0x95/0xd0
[ 2463.083481][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 2463.083507][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 2463.083540][    C0]  kasan_save_stack+0x33/0x60
[ 2463.083574][    C0]  ? kasan_save_stack+0x33/0x60
[ 2463.083602][    C0]  ? kasan_save_track+0x14/0x30
[ 2463.083629][    C0]  ? kasan_save_free_info+0x3b/0x60
[ 2463.083669][    C0]  ? poison_slab_object+0xf7/0x160
[ 2463.083696][    C0]  ? __kasan_slab_free+0x32/0x50
[ 2463.083725][    C0]  ? kfree+0x12a/0x3b0
[ 2463.083749][    C0]  ? dummy_timer+0x1750/0x38d0
[ 2463.083773][    C0]  ? __hrtimer_run_queues+0x20c/0xcc0
[ 2463.083811][    C0]  ? hrtimer_interrupt+0x31b/0x800
[ 2463.083849][    C0]  ? __sysvec_apic_timer_interrupt+0x10f/0x450
[ 2463.083875][    C0]  ? sysvec_apic_timer_interrupt+0x43/0xb0
[ 2463.083904][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2463.083946][    C0]  ? __sanitizer_cov_trace_pc+0x13/0x70
[ 2463.083980][    C0]  ? __orc_find+0x7a/0x130
[ 2463.084001][    C0]  ? unwind_next_frame+0x335/0x23a0
[ 2463.084026][    C0]  ? arch_stack_walk+0x100/0x170
[ 2463.084052][    C0]  ? stack_trace_save+0x95/0xd0
[ 2463.084077][    C0]  ? kasan_save_stack+0x33/0x60
[ 2463.084104][    C0]  ? kasan_save_track+0x14/0x30
[ 2463.084131][    C0]  ? kasan_save_free_info+0x3b/0x60
[ 2463.084170][    C0]  ? poison_slab_object+0xf7/0x160
[ 2463.084197][    C0]  ? __kasan_slab_free+0x32/0x50
[ 2463.084226][    C0]  ? kmem_cache_free+0x12f/0x3a0
[ 2463.084254][    C0]  ? kfree_skbmem+0x10e/0x200
[ 2463.084290][    C0]  ? consume_skb+0xdd/0x170
[ 2463.084316][    C0]  ? mac80211_hwsim_tx_frame+0x1f3/0x2a0
[ 2463.084344][    C0]  ? mac80211_hwsim_beacon_tx+0x592/0xa00
[ 2463.084371][    C0]  ? __iterate_interfaces+0x2d0/0x5d0
[ 2463.084404][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[ 2463.084452][    C0]  kasan_save_track+0x14/0x30
[ 2463.084481][    C0]  kasan_save_free_info+0x3b/0x60
[ 2463.084521][    C0]  poison_slab_object+0xf7/0x160
[ 2463.084555][    C0]  __kasan_slab_free+0x32/0x50
[ 2463.084586][    C0]  kfree+0x12a/0x3b0
[ 2463.084609][    C0]  ? dummy_timer+0x1750/0x38d0
[ 2463.084635][    C0]  dummy_timer+0x1750/0x38d0
[ 2463.084661][    C0]  ? debug_object_deactivate+0x1f0/0x370
[ 2463.084696][    C0]  ? __pfx___lock_acquire+0x10/0x10
[ 2463.084731][    C0]  ? __hrtimer_run_queues+0x5a7/0xcc0
[ 2463.084769][    C0]  ? __pfx_lock_release+0x10/0x10
[ 2463.084800][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 2463.084825][    C0]  ? timerqueue_del+0x83/0x150
[ 2463.084856][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 2463.084880][    C0]  __hrtimer_run_queues+0x20c/0xcc0
[ 2463.084921][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 2463.084960][    C0]  ? ktime_get_update_offsets_now+0x201/0x310
[ 2463.084994][    C0]  hrtimer_interrupt+0x31b/0x800
[ 2463.085037][    C0]  __sysvec_apic_timer_interrupt+0x10f/0x450
[ 2463.085065][    C0]  sysvec_apic_timer_interrupt+0x43/0xb0
[ 2463.085096][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2463.085137][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x13/0x70
[ 2463.085174][    C0] Code: 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 b4 5e 79 7e 65 8b 05 b5 5e 79 7e <a9> 00 01 ff 00 48 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75
[ 2463.085199][    C0] RSP: 0018:ffffc90000007748 EFLAGS: 00000202
[ 2463.085218][    C0] RAX: 0000000000000102 RBX: ffffffff9098d364 RCX: ffffffff813cd395
[ 2463.085236][    C0] RDX: ffff88804c2f5a00 RSI: ffffffff813cd3a2 RDI: 0000000000000005
[ 2463.085254][    C0] RBP: ffffffff9098d39c R08: 0000000000000005 R09: 0000000000000000
[ 2463.085271][    C0] R10: 000000000000000f R11: 0000000000000000 R12: ffffffff8b11fb44
[ 2463.085288][    C0] R13: ffffffff91544138 R14: dffffc0000000000 R15: ffffc90000007855
[ 2463.085310][    C0]  ? sysvec_apic_timer_interrupt+0x94/0xb0
[ 2463.085342][    C0]  ? __orc_find+0x35/0x130
[ 2463.085364][    C0]  ? __orc_find+0x42/0x130
[ 2463.085388][    C0]  ? unwind_next_frame+0x51/0x23a0
[ 2463.085412][    C0]  __orc_find+0x7a/0x130
[ 2463.085436][    C0]  ? sysvec_apic_timer_interrupt+0x94/0xb0
[ 2463.085466][    C0]  unwind_next_frame+0x335/0x23a0
[ 2463.085492][    C0]  ? sysvec_apic_timer_interrupt+0x95/0xb0
[ 2463.085527][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 2463.085564][    C0]  arch_stack_walk+0x100/0x170
[ 2463.085598][    C0]  ? sysvec_apic_timer_interrupt+0x95/0xb0
[ 2463.085634][    C0]  ? kfree_skbmem+0x10e/0x200
[ 2463.085675][    C0]  stack_trace_save+0x95/0xd0
[ 2463.085705][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 2463.085734][    C0]  ? kasan_save_track+0x14/0x30
[ 2463.085769][    C0]  ? __pfx_mark_lock+0x10/0x10
[ 2463.085800][    C0]  ? skb_release_data+0x75c/0x980
[ 2463.085832][    C0]  kasan_save_stack+0x33/0x60
[ 2463.085867][    C0]  ? kasan_save_stack+0x33/0x60
[ 2463.085900][    C0]  ? kasan_save_track+0x14/0x30
[ 2463.085934][    C0]  ? kasan_save_free_info+0x3b/0x60
[ 2463.085981][    C0]  ? poison_slab_object+0xf7/0x160
[ 2463.086016][    C0]  ? __kasan_slab_free+0x32/0x50
[ 2463.086051][    C0]  ? kmem_cache_free+0x12f/0x3a0
[ 2463.086084][    C0]  ? kfree_skbmem+0x10e/0x200
[ 2463.086125][    C0]  ? consume_skb+0xdd/0x170
[ 2463.086156][    C0]  ? mac80211_hwsim_tx_frame+0x1f3/0x2a0
[ 2463.086189][    C0]  ? mac80211_hwsim_beacon_tx+0x592/0xa00
[ 2463.086222][    C0]  ? __iterate_interfaces+0x2d0/0x5d0
[ 2463.086282][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[ 2463.086331][    C0]  ? mac80211_hwsim_beacon+0x105/0x200
[ 2463.086376][    C0]  ? __hrtimer_run_queues+0x20c/0xcc0
[ 2463.086423][    C0]  ? hrtimer_run_softirq+0x17d/0x350
[ 2463.086470][    C0]  ? handle_softirqs+0x216/0x8f0
[ 2463.086517][    C0]  ? irq_exit_rcu+0xbb/0x120
[ 2463.086569][    C0]  ? sysvec_apic_timer_interrupt+0x95/0xb0
[ 2463.086619][    C0]  kasan_save_track+0x14/0x30
[ 2463.086655][    C0]  kasan_save_free_info+0x3b/0x60
[ 2463.086706][    C0]  poison_slab_object+0xf7/0x160
[ 2463.086743][    C0]  __kasan_slab_free+0x32/0x50
[ 2463.086781][    C0]  kmem_cache_free+0x12f/0x3a0
[ 2463.086816][    C0]  ? skb_release_data+0x761/0x980
[ 2463.086846][    C0]  ? kfree_skbmem+0x10e/0x200
[ 2463.086891][    C0]  kfree_skbmem+0x10e/0x200
[ 2463.086936][    C0]  consume_skb+0xdd/0x170
[ 2463.086969][    C0]  mac80211_hwsim_tx_frame+0x1f3/0x2a0
[ 2463.087002][    C0]  mac80211_hwsim_beacon_tx+0x592/0xa00
[ 2463.087032][    C0]  ? find_held_lock+0x2d/0x110
[ 2463.087074][    C0]  __iterate_interfaces+0x2d0/0x5d0
[ 2463.087111][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 2463.087141][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 2463.087170][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2463.087208][    C0]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[ 2463.087252][    C0]  mac80211_hwsim_beacon+0x105/0x200
[ 2463.087291][    C0]  __hrtimer_run_queues+0x20c/0xcc0
[ 2463.087334][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 2463.087374][    C0]  ? ktime_get_update_offsets_now+0x201/0x310
[ 2463.087420][    C0]  hrtimer_run_softirq+0x17d/0x350
[ 2463.087459][    C0]  handle_softirqs+0x216/0x8f0
[ 2463.087498][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 2463.087537][    C0]  irq_exit_rcu+0xbb/0x120
[ 2463.087581][    C0]  sysvec_apic_timer_interrupt+0x95/0xb0
[ 2463.087611][    C0]  </IRQ>
[ 2463.087620][    C0]  <TASK>
[ 2463.087629][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2463.087670][    C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x20
[ 2463.087709][    C0] Code: 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 0c 24 48 89 f2 48 89 fe bf 07 00 00 00 e9 f8 fd
[ 2463.087734][    C0] RSP: 0018:ffffc900038ef3d8 EFLAGS: 00000246
[ 2463.087754][    C0] RAX: 0000000000000000 RBX: ffffc900038ef460 RCX: ffffffff813ce0a9
[ 2463.087772][    C0] RDX: ffff88804c2f5a00 RSI: ffffffff81feb13f RDI: 0000000000000000
[ 2463.087789][    C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[ 2463.087805][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff81feb13f
[ 2463.087822][    C0] R13: 0000000000000000 R14: ffffc900038ef520 R15: ffffc900038ef495
[ 2463.087840][    C0]  ? shrink_dentry_list+0x13f/0x5d0
[ 2463.087877][    C0]  ? unwind_next_frame+0x1a9/0x23a0
[ 2463.087902][    C0]  ? shrink_dentry_list+0x13f/0x5d0
[ 2463.087940][    C0]  unwind_next_frame+0x1c1/0x23a0
[ 2463.087965][    C0]  ? shrink_dentry_list+0x140/0x5d0
[ 2463.088001][    C0]  ? shrink_dentry_list+0x140/0x5d0
[ 2463.088036][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 2463.088063][    C0]  arch_stack_walk+0x100/0x170
[ 2463.088092][    C0]  ? shrink_dentry_list+0x11a/0x5d0
[ 2463.088126][    C0]  ? shrink_dentry_list+0x140/0x5d0
[ 2463.088181][    C0]  stack_trace_save+0x95/0xd0
[ 2463.088207][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 2463.088236][    C0]  kasan_save_stack+0x33/0x60
[ 2463.088265][    C0]  ? kasan_save_stack+0x33/0x60
[ 2463.088294][    C0]  ? __kasan_record_aux_stack+0xba/0xd0
[ 2463.088334][    C0]  ? __call_rcu_common.constprop.0+0x9a/0x790
[ 2463.088365][    C0]  ? destroy_inode+0x12c/0x1b0
[ 2463.088393][    C0]  ? iput.part.0+0x5a8/0x7f0
[ 2463.088421][    C0]  ? iput+0x5c/0x80
[ 2463.088447][    C0]  ? dentry_unlink_inode+0x29c/0x480
[ 2463.088477][    C0]  ? __dentry_kill+0x1d0/0x600
[ 2463.088508][    C0]  ? shrink_dentry_list+0x140/0x5d0
[ 2463.088561][    C0]  __kasan_record_aux_stack+0xba/0xd0
[ 2463.088601][    C0]  ? __pfx_i_callback+0x10/0x10
[ 2463.088640][    C0]  __call_rcu_common.constprop.0+0x9a/0x790
[ 2463.088671][    C0]  ? __destroy_inode+0x2db/0x750
[ 2463.088700][    C0]  destroy_inode+0x12c/0x1b0
[ 2463.088729][    C0]  iput.part.0+0x5a8/0x7f0
[ 2463.088759][    C0]  iput+0x5c/0x80
[ 2463.088786][    C0]  dentry_unlink_inode+0x29c/0x480
[ 2463.088818][    C0]  __dentry_kill+0x1d0/0x600
[ 2463.088850][    C0]  ? shrink_dentry_list+0x11a/0x5d0
[ 2463.088887][    C0]  shrink_dentry_list+0x140/0x5d0
[ 2463.088924][    C0]  ? shrink_dcache_parent+0x75/0x530
[ 2463.088961][    C0]  shrink_dcache_parent+0xe2/0x530
[ 2463.088999][    C0]  ? __pfx_shrink_dcache_parent+0x10/0x10
[ 2463.089038][    C0]  ? preempt_schedule_thunk+0x1a/0x30
[ 2463.089066][    C0]  shrink_dcache_for_umount+0xa1/0x3e0
[ 2463.089105][    C0]  ? d_walk+0x460/0xa30
[ 2463.089138][    C0]  generic_shutdown_super+0x76/0x3d0
[ 2463.089176][    C0]  kill_litter_super+0x70/0xa0
[ 2463.089215][    C0]  binderfs_kill_super+0x3b/0xa0
[ 2463.089242][    C0]  deactivate_locked_super+0xbe/0x1a0
[ 2463.089305][    C0]  deactivate_super+0xde/0x100
[ 2463.089345][    C0]  cleanup_mnt+0x222/0x450
[ 2463.089381][    C0]  task_work_run+0x14e/0x250
[ 2463.089415][    C0]  ? __pfx_task_work_run+0x10/0x10
[ 2463.089448][    C0]  ? switch_task_namespaces+0xe0/0x110
[ 2463.089490][    C0]  do_exit+0xaa3/0x2bb0
[ 2463.089520][    C0]  ? get_signal+0x8f2/0x2770
[ 2463.089563][    C0]  ? __pfx_do_exit+0x10/0x10
[ 2463.089590][    C0]  ? do_raw_spin_lock+0x12d/0x2c0
[ 2463.089628][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2463.089668][    C0]  do_group_exit+0xd3/0x2a0
[ 2463.089698][    C0]  get_signal+0x25fd/0x2770
[ 2463.089741][    C0]  ? __pfx_get_signal+0x10/0x10
[ 2463.089780][    C0]  ? __pfx_do_futex+0x10/0x10
[ 2463.089809][    C0]  arch_do_signal_or_restart+0x90/0x7e0
[ 2463.089845][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 2463.089885][    C0]  syscall_exit_to_user_mode+0x150/0x2a0
[ 2463.089920][    C0]  do_syscall_64+0xda/0x250
[ 2463.089956][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2463.089997][    C0] RIP: 0033:0x7f93317799f9
[ 2463.090017][    C0] Code: Unable to access opcode bytes at 0x7f93317799cf.
[ 2463.090029][    C0] RSP: 002b:00007ffc8e91fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 2463.090053][    C0] RAX: 0000000000000000 RBX: 00000000002318e2 RCX: 00007f93317799f9
[ 2463.090071][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9331915f8c
[ 2463.090088][    C0] RBP: 00007f9331915f8c R08: 00007f9331915f80 R09: 00007ffc8e91fe6f
[ 2463.090105][    C0] R10: 00007ffc8e91fc80 R11: 0000000000000246 R12: 0000000000000032
[ 2463.090123][    C0] R13: 00007ffc8e91fc80 R14: 00007ffc8e91fca0 R15: 00000000002318b0
[ 2463.090144][    C0]  </TASK>
[ 2464.630806][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 2464.637724][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0
[ 2464.648266][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2464.658357][   T30] Call Trace:
[ 2464.661667][   T30]  <TASK>
[ 2464.664635][   T30]  dump_stack_lvl+0x3d/0x1f0
[ 2464.669290][   T30]  panic+0x6f5/0x7a0
[ 2464.673233][   T30]  ? __pfx_panic+0x10/0x10
[ 2464.677698][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 2464.683203][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2464.689613][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 2464.695029][   T30]  ? watchdog+0xd8a/0x1280
[ 2464.699501][   T30]  ? watchdog+0xd7d/0x1280
[ 2464.703975][   T30]  watchdog+0xd9b/0x1280
[ 2464.708273][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2464.713007][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2464.718255][   T30]  ? __kthread_parkme+0x148/0x220
[ 2464.723342][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2464.728077][   T30]  kthread+0x2c1/0x3a0
[ 2464.732191][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2464.737446][   T30]  ? __pfx_kthread+0x10/0x10
[ 2464.742169][   T30]  ret_from_fork+0x45/0x80
[ 2464.746791][   T30]  ? __pfx_kthread+0x10/0x10
[ 2464.751438][   T30]  ret_from_fork_asm+0x1a/0x30
[ 2464.756277][   T30]  </TASK>
[ 2464.765179][   T30] Kernel Offset: disabled
[ 2464.769549][   T30] Rebooting in 86400 seconds..