last executing test programs:

2m21.396270707s ago: executing program 1 (id=6969):
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011552f436dd2a", 0x2a}], 0x1)
rename(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00')
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

2m11.488335557s ago: executing program 1 (id=6969):
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011552f436dd2a", 0x2a}], 0x1)
rename(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00')
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

2m8.783525374s ago: executing program 2 (id=7097):
r0 = syz_io_uring_setup(0xd79, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$rds(0x15, 0x5, 0x0)
dup3(r4, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0})
io_uring_enter(r0, 0x17ac1, 0x0, 0x0, 0x0, 0x0)

2m6.827066427s ago: executing program 2 (id=7108):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040))
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_channels={0x3c}})
read$dsp(r0, &(0x7f00000004c0)=""/97, 0xfffffff3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

1m46.063339219s ago: executing program 1 (id=6969):
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011552f436dd2a", 0x2a}], 0x1)
rename(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00')
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1m44.885305179s ago: executing program 2 (id=7108):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040))
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_channels={0x3c}})
read$dsp(r0, &(0x7f00000004c0)=""/97, 0xfffffff3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

1m15.636905862s ago: executing program 1 (id=6969):
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011552f436dd2a", 0x2a}], 0x1)
rename(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00')
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1m14.933789288s ago: executing program 2 (id=7108):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040))
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_channels={0x3c}})
read$dsp(r0, &(0x7f00000004c0)=""/97, 0xfffffff3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

46.364294169s ago: executing program 1 (id=6969):
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011552f436dd2a", 0x2a}], 0x1)
rename(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00')
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

44.121303637s ago: executing program 3 (id=7508):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)

43.793725199s ago: executing program 3 (id=7511):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0xed)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x8008551c, &(0x7f0000000040)=@usbdevfs_connect)

43.62461612s ago: executing program 3 (id=7513):
sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000010c0)=[{0x0}], 0x1}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40)

43.42201689s ago: executing program 3 (id=7515):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1b)

42.770886377s ago: executing program 2 (id=7108):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040))
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_channels={0x3c}})
read$dsp(r0, &(0x7f00000004c0)=""/97, 0xfffffff3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

42.139249271s ago: executing program 3 (id=7517):
r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0)
r1 = dup(r0)
write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r1, &(0x7f0000000100), 0x6c03)
ppoll(0x0, 0x0, &(0x7f00000004c0)={0x77359400}, 0x0, 0x0)

17.894926369s ago: executing program 1 (id=6969):
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011552f436dd2a", 0x2a}], 0x1)
rename(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00')
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

16.391103775s ago: executing program 3 (id=7517):
r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0)
r1 = dup(r0)
write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r1, &(0x7f0000000100), 0x6c03)
ppoll(0x0, 0x0, &(0x7f00000004c0)={0x77359400}, 0x0, 0x0)

14.535394119s ago: executing program 2 (id=7108):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040))
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_channels={0x3c}})
read$dsp(r0, &(0x7f00000004c0)=""/97, 0xfffffff3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

8.693687452s ago: executing program 0 (id=7621):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'netdevsim0\x00', <r1=>0x0})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffe83, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x115, 0x819ad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0)

3.262374111s ago: executing program 0 (id=7625):
r0 = epoll_create(0x8002)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))
read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfefd)

2.749962567s ago: executing program 4 (id=7629):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})

2.647909766s ago: executing program 4 (id=7630):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x230, 0xf0, 0xffffffff, 0x390, 0x230, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@ipv6={@empty, @dev, [], [], 'ip6erspan0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@remote, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@private, @ipv4=@local, @icmp_id, @gre_key}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'ipvlan1\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key}}}, {{@ipv6={@remote, @remote, [], [], 'erspan0\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000003e000000080001007063690011000200303030303a30303a31302e300003000000008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000080001007063690011000200303030303a"], 0x94}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000000000000010000400100000000000000c700000005000000e00000000300000000000000000000000000000007"])

2.390424757s ago: executing program 4 (id=7631):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000240), 0x4)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)

2.332901641s ago: executing program 0 (id=7632):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCFLSH(r1, 0x40204706, 0x20000000)

2.239003529s ago: executing program 4 (id=7633):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000002"])
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x1})

1.793295802s ago: executing program 4 (id=7634):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000055098a403a0901268f08000000010902120001000000000904000000eb77e06e"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000500)={0xff9a, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "28bbe78c61c75b078b946365c06f2310756c3975872c8cbd3134f40474504fe9d101d5cc96e19bc3a48800eee4ee537b93b72105275fd82abfd941ccee24bc65db5c6b1932f66afcc1a8a9569074ca1b85f44ac95d6515669f594adc02915f8c2d9bb1979f0c27b2197e07e3a1f08305e885eb38ee5da0b8dcdc7681facfafe624038e625dc2826b493ea5ebc917206d427a885a505e3771aa426ab047d899df55fde55122ca75b77ea0555fe6840614fc72878e174448c394fa70b3dfc2caca294da9d6be886771c3"}}, 0x0, 0x0, 0x0}, 0x0)

1.541271266s ago: executing program 0 (id=7635):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080)={<r3=>r2, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8)

1.431831696s ago: executing program 0 (id=7636):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
shmget$private(0x0, 0x4000, 0x78000cc9, &(0x7f0000ffc000/0x4000)=nil)

1.301358274s ago: executing program 0 (id=7637):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

0s ago: executing program 4 (id=7638):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

romiscuous mode
[  558.458545][T21686] veth0_macvtap: entered promiscuous mode
[  558.521372][T21686] veth1_macvtap: entered promiscuous mode
[  558.613189][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.662215][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.691322][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.732631][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.767150][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.798131][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.829579][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.850465][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.877110][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.880555][T22934] Process accounting resumed
[  558.895316][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.937287][T21686] batman_adv: batadv0: Interface activated: batadv_slave_0
[  558.996918][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  559.017779][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.047173][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  559.058276][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.071219][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  559.082397][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.092841][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  559.113916][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.134246][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  559.161165][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.192878][T21686] batman_adv: batadv0: Interface activated: batadv_slave_1
[  559.229564][T22014] 8021q: adding VLAN 0 to HW filter on device batadv0
[  559.260069][T21686] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  559.285887][T21686] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  559.299588][T21686] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  559.316238][T21686] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  559.597614][T22014] veth0_vlan: entered promiscuous mode
[  559.666204][T22314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.674110][T22314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.768332][T22014] veth1_vlan: entered promiscuous mode
[  559.832332][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.858974][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.916393][T22014] veth0_macvtap: entered promiscuous mode
[  559.942889][T22014] veth1_macvtap: entered promiscuous mode
[  560.012879][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.025610][   T29] kauditd_printk_skb: 27 callbacks suppressed
[  560.025629][   T29] audit: type=1400 audit(2000001276.251:723): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=22992 comm="syz.4.7231" saddr=172.20.20.0 daddr=172.20.20.170 dest=20000 netif=wpan0
[  560.065084][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.096768][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.135810][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.158643][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.199454][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.230058][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.261649][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.295881][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.328778][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.359651][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.395434][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.419569][T22014] batman_adv: batadv0: Interface activated: batadv_slave_0
[  560.459071][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  560.520390][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.546835][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  560.575418][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.595458][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  560.615962][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.636380][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  560.656297][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.675536][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  560.686729][T23012] netlink: 'syz.0.7239': attribute type 11 has an invalid length.
[  560.694809][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.694836][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  560.694853][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.697186][T22014] batman_adv: batadv0: Interface activated: batadv_slave_1
[  560.906112][T22014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  560.925548][T22014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  560.934306][T22014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  560.986546][T22014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  561.235484][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.284897][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.517073][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.663853][T22307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.686738][T22307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.199539][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  562.213524][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  562.229933][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  562.252990][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  562.275498][   T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  562.294737][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  562.377230][T23080] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  562.604818][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.804127][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  563.090533][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  563.115848][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  563.124009][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  563.701577][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  563.718451][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  563.731909][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  563.757015][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  563.775780][   T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  563.786649][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  563.855759][   T35] bridge_slave_1: left allmulticast mode
[  563.861569][   T35] bridge_slave_1: left promiscuous mode
[  563.877327][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.896374][   T35] bridge_slave_0: left allmulticast mode
[  563.905885][ T5318] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  563.919404][   T35] bridge_slave_0: left promiscuous mode
[  563.926080][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.130017][ T5318] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  564.146746][ T5318] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  564.167616][ T5318] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  564.185535][ T5318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  564.193589][ T5318] usb 1-1: SerialNumber: syz
[  564.297720][   T58] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  564.392115][ T5216] Bluetooth: hci3: command tx timeout
[  564.438612][ T5318] usb 1-1: 0:2 : does not exist
[  564.492868][ T5318] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  564.505614][   T58] usb 4-1: Using ep0 maxpacket: 16
[  564.557933][   T58] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  564.567462][ T5318] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  564.595314][   T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.613978][   T58] usb 4-1: Product: syz
[  564.623751][   T58] usb 4-1: Manufacturer: syz
[  564.634273][ T5318] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  564.662717][ T5318] usb 1-1: USB disconnect, device number 63
[  564.666052][   T58] usb 4-1: SerialNumber: syz
[  564.707833][   T58] usb 4-1: config 0 descriptor??
[  564.733053][   T58] appledisplay 4-1:0.0: Could not find int-in endpoint
[  564.751626][   T58] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  564.910316][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  564.939603][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  564.971492][   T35] bond0 (unregistering): Released all slaves
[  565.040164][T23068] chnl_net:caif_netlink_parms(): no params data found
[  565.059502][ T5215] usb 4-1: USB disconnect, device number 60
[  565.502783][T23327] PM: Enabling pm_trace changes system date and time during resume.
[  565.502783][T23327] PM: Correct system time has to be restored manually after resume.
[  565.811053][   T35] hsr_slave_0: left promiscuous mode
[  565.825878][ T5216] Bluetooth: hci5: command tx timeout
[  565.846849][   T35] hsr_slave_1: left promiscuous mode
[  565.863432][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  565.885310][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  565.921268][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  565.945351][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  565.992102][   T35] veth1_macvtap: left promiscuous mode
[  566.019594][   T35] veth0_macvtap: left promiscuous mode
[  566.046538][   T35] veth1_vlan: left promiscuous mode
[  566.051927][   T35] veth0_vlan: left promiscuous mode
[  566.465375][ T5216] Bluetooth: hci3: command tx timeout
[  567.905448][ T5216] Bluetooth: hci5: command tx timeout
[  568.545473][ T5216] Bluetooth: hci3: command tx timeout
[  568.920625][   T35] team0 (unregistering): Port device team_slave_1 removed
[  569.323059][   T35] team0 (unregistering): Port device team_slave_0 removed
[  569.601802][T23394] input: syz1 as /devices/virtual/input/input71
[  569.985762][ T5216] Bluetooth: hci5: command tx timeout
[  570.646016][ T5216] Bluetooth: hci3: command tx timeout
[  571.172071][T23068] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.190777][T23068] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.204445][T23068] bridge_slave_0: entered allmulticast mode
[  571.218121][T23068] bridge_slave_0: entered promiscuous mode
[  571.419870][T23068] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.435466][T23068] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.442943][T23068] bridge_slave_1: entered allmulticast mode
[  571.466753][T23068] bridge_slave_1: entered promiscuous mode
[  571.652491][T23068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  571.689572][T23068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.927241][T23068] team0: Port device team_slave_0 added
[  571.934538][T18319] kernel write not supported for file /sequencer (pid: 18319 comm: kworker/1:0)
[  572.074538][ T5216] Bluetooth: hci5: command tx timeout
[  572.085949][T23068] team0: Port device team_slave_1 added
[  572.206406][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  572.218778][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  572.230083][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  572.238517][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  572.247911][   T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  572.275913][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  572.415928][T23068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  572.435290][T23068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  572.495500][T23068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  572.530850][T23068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  572.554495][T23068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  572.615346][T23068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  572.643508][T23622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  572.693895][T23192] chnl_net:caif_netlink_parms(): no params data found
[  572.825169][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.133386][T23068] hsr_slave_0: entered promiscuous mode
[  573.150246][T23068] hsr_slave_1: entered promiscuous mode
[  573.166703][T23068] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  573.184829][T23068] Cannot create hsr debugfs directory
[  573.227722][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.369282][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.624340][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.759990][T23192] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.775984][T23192] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.793881][T23192] bridge_slave_0: entered allmulticast mode
[  573.813707][T23192] bridge_slave_0: entered promiscuous mode
[  573.846810][T23192] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.851219][T23774] 9pnet: p9_errstr2errno: server reported unknown error �@��hQI���te�kKzE
[  573.862968][T23192] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.874346][T23192] bridge_slave_1: entered allmulticast mode
[  573.882215][T23192] bridge_slave_1: entered promiscuous mode
[  574.088344][T23192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  574.114869][T23192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  574.229289][T18319] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  574.305548][   T54] Bluetooth: hci6: command tx timeout
[  574.324022][T23192] team0: Port device team_slave_0 added
[  574.417350][T18319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  574.420533][T23192] team0: Port device team_slave_1 added
[  574.435382][T18319] usb 4-1: config 1 has no interface number 0
[  574.451785][T18319] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  574.473173][T18319] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  574.495478][T18319] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xED, changing to 0x8D
[  574.527143][T18319] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  574.548127][T23885] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  574.554143][T18319] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  574.576243][T18319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.605988][T18319] usb 4-1: Product: syz
[  574.610213][T18319] usb 4-1: Manufacturer: syz
[  574.626885][T18319] usb 4-1: SerialNumber: syz
[  574.647350][T23192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  574.654352][T23192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  574.698651][T23192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  574.829966][T23192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  574.850247][T23192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  574.890717][T23192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  575.164147][T23574] chnl_net:caif_netlink_parms(): no params data found
[  575.262201][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.327244][T23192] hsr_slave_0: entered promiscuous mode
[  575.337455][T23192] hsr_slave_1: entered promiscuous mode
[  575.358569][T23192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  575.371089][T23192] Cannot create hsr debugfs directory
[  575.474227][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.477112][T18319] cdc_ncm 4-1:1.1: bind() failure
[  575.717843][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.757786][T18319] usb 4-1: USB disconnect, device number 61
[  575.899838][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.243361][T23574] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.272216][T23574] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.296383][T23574] bridge_slave_0: entered allmulticast mode
[  576.314819][T23574] bridge_slave_0: entered promiscuous mode
[  576.336278][T23574] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.343445][T23574] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.365982][T23574] bridge_slave_1: entered allmulticast mode
[  576.389607][   T54] Bluetooth: hci6: command tx timeout
[  576.389698][T23574] bridge_slave_1: entered promiscuous mode
[  576.661526][   T35] bridge_slave_1: left allmulticast mode
[  576.675940][   T35] bridge_slave_1: left promiscuous mode
[  576.683260][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.714064][   T35] bridge_slave_0: left allmulticast mode
[  576.730974][   T35] bridge_slave_0: left promiscuous mode
[  576.737208][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.760183][   T35] bridge_slave_1: left allmulticast mode
[  576.775449][   T35] bridge_slave_1: left promiscuous mode
[  576.786270][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.806238][   T35] bridge_slave_0: left allmulticast mode
[  576.811953][   T35] bridge_slave_0: left promiscuous mode
[  576.832422][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.104567][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  578.129124][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  578.152004][   T35] bond0 (unregistering): Released all slaves
[  578.404149][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  578.433810][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  578.468378][   T54] Bluetooth: hci6: command tx timeout
[  578.476750][   T35] bond0 (unregistering): Released all slaves
[  578.519298][T23574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  578.692451][T23574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  578.905866][T23574] team0: Port device team_slave_0 added
[  579.037609][T23068] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  579.078762][T23068] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  579.171132][T23574] team0: Port device team_slave_1 added
[  579.264279][T23068] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  579.410643][T23574] batman_adv: batadv0: Adding interface: batadv_slave_0
[  579.425324][T23574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  579.485334][T23574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  579.523960][T23068] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  579.615653][T24294] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! 
[  579.615653][T24294] cct.usage_percpu_sys'
[  579.628762][T23574] batman_adv: batadv0: Adding interface: batadv_slave_1
[  579.645442][T23574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  579.705385][T23574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  579.877486][T24309] 9pnet: p9_errstr2errno: server reported unknown error �����słܷM6�'
[  580.013679][   T29] audit: type=1326 audit(2000001296.231:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24323 comm="syz.0.7340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe644579e79 code=0x0
[  580.064726][T23574] hsr_slave_0: entered promiscuous mode
[  580.086238][T23574] hsr_slave_1: entered promiscuous mode
[  580.110659][T23574] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  580.130930][T23574] Cannot create hsr debugfs directory
[  580.417049][   T35] hsr_slave_0: left promiscuous mode
[  580.429469][   T35] hsr_slave_1: left promiscuous mode
[  580.440869][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  580.457485][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  580.477542][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  580.495382][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  580.521687][   T35] hsr_slave_0: left promiscuous mode
[  580.532095][   T35] hsr_slave_1: left promiscuous mode
[  580.543517][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  580.552068][   T54] Bluetooth: hci6: command tx timeout
[  580.570832][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  580.597273][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  580.626096][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  580.739088][   T35] veth1_macvtap: left promiscuous mode
[  580.750236][   T35] veth0_macvtap: left promiscuous mode
[  580.762733][   T35] veth1_vlan: left promiscuous mode
[  580.773869][   T35] veth0_vlan: left promiscuous mode
[  580.791226][   T35] veth1_macvtap: left promiscuous mode
[  580.802566][   T35] veth0_macvtap: left promiscuous mode
[  580.808388][   T35] veth1_vlan: left promiscuous mode
[  580.813897][   T35] veth0_vlan: left promiscuous mode
[  582.235479][ T5215] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  582.448902][ T5215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  582.468320][ T5215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  582.495509][ T5215] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  582.534193][ T5215] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  582.554663][ T5215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.598895][ T5215] usb 1-1: config 0 descriptor??
[  582.775984][   T35] team0 (unregistering): Port device team_slave_1 removed
[  582.898102][   T35] team0 (unregistering): Port device team_slave_0 removed
[  583.040248][ T5215] plantronics 0003:047F:FFFF.0043: ignoring exceeding usage max
[  583.063416][ T5215] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving
[  583.104306][ T5215] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  583.290893][T18319] usb 1-1: USB disconnect, device number 64
[  584.975730][   T35] team0 (unregistering): Port device team_slave_1 removed
[  585.119928][   T35] team0 (unregistering): Port device team_slave_0 removed
[  586.286601][T24480] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7364'.
[  586.315612][T24480] openvswitch: netlink: Key type 29 is not supported
[  586.408573][T23192] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  586.438025][T23192] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  586.571011][T23192] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  586.724526][T23192] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  586.989071][T23068] 8021q: adding VLAN 0 to HW filter on device bond0
[  587.133955][T23068] 8021q: adding VLAN 0 to HW filter on device team0
[  587.228037][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.235281][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  587.287389][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  587.294571][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  587.711397][T24557] netlink: 'syz.0.7373': attribute type 11 has an invalid length.
[  587.757260][T23192] 8021q: adding VLAN 0 to HW filter on device bond0
[  587.922109][T23192] 8021q: adding VLAN 0 to HW filter on device team0
[  587.981574][T23574] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  588.039983][T23574] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  588.061724][T23574] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  588.100891][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.108130][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  588.146368][T23574] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  588.184457][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.191762][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state
[  588.361818][T23068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  588.585643][T18142] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  588.608359][T23068] veth0_vlan: entered promiscuous mode
[  588.636787][T23068] veth1_vlan: entered promiscuous mode
[  588.704537][T23574] 8021q: adding VLAN 0 to HW filter on device bond0
[  588.785853][T18142] usb 4-1: Using ep0 maxpacket: 8
[  588.787166][T23574] 8021q: adding VLAN 0 to HW filter on device team0
[  588.803712][T23068] veth0_macvtap: entered promiscuous mode
[  588.818029][T18142] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  588.826755][T23192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  588.858338][T18142] usb 4-1: config 179 has no interface number 0
[  588.859804][T23068] veth1_macvtap: entered promiscuous mode
[  588.864647][T18142] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  588.915681][T18142] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  588.936924][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.944085][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  588.952718][T18142] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  588.974675][T18142] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  588.979568][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.993294][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  588.999463][T18142] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  589.076406][T18142] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  589.092474][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  589.097248][T18142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.121784][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.139608][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  589.149639][T24584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  589.156917][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.179564][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  589.201988][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.214864][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  589.236388][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.258984][T23068] batman_adv: batadv0: Interface activated: batadv_slave_0
[  589.339813][T23192] veth0_vlan: entered promiscuous mode
[  589.364106][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  589.388268][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.406666][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  589.425241][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.450856][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  589.465227][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.494594][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  589.515300][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.547092][T23068] batman_adv: batadv0: Interface activated: batadv_slave_1
[  589.583078][T18142] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input72
[  589.614403][T23068] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  589.627472][T23068] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  589.641960][T23068] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  589.651760][T23068] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  589.671581][T23192] veth1_vlan: entered promiscuous mode
[  589.685919][T24603] netlink: 'syz.0.7380': attribute type 34 has an invalid length.
[  589.769213][T18142] usb 4-1: USB disconnect, device number 62
[  589.775179][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  589.775221][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  589.848717][T18142] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  589.950356][T23192] veth0_macvtap: entered promiscuous mode
[  589.997853][T23192] veth1_macvtap: entered promiscuous mode
[  590.074337][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  590.078179][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  590.114332][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  590.120712][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.167169][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  590.191175][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.201253][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  590.219451][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.245340][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  590.265333][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.277462][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  590.298840][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.317148][T23192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  590.364633][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  590.405442][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.435710][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  590.465629][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.497339][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  590.519812][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.535838][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  590.548638][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.560902][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  590.598412][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.622055][T23192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  590.638124][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies.
[  590.656652][   T29] audit: type=1400 audit(2000001306.881:725): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24638 comm="syz.3.7385" saddr=172.20.20.170 src=20002 daddr=172.20.20.170 dest=46610 netif=lo
[  590.707406][T23192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  590.731990][T23192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  590.752882][T23192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  590.771040][T23192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  590.803783][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  590.818935][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  590.827721][T23574] 8021q: adding VLAN 0 to HW filter on device batadv0
[  591.090046][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  591.116775][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  591.291500][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  591.308003][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  591.660677][T23574] veth0_vlan: entered promiscuous mode
[  591.863942][T21149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.962166][T23574] veth1_vlan: entered promiscuous mode
[  592.058335][T21149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.158512][T23574] veth0_macvtap: entered promiscuous mode
[  592.271940][T21149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.339084][T23574] veth1_macvtap: entered promiscuous mode
[  592.412700][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  592.475550][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  592.506556][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  592.545618][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  592.582138][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  592.614067][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  592.641079][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  592.675121][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  592.706250][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  592.737136][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  592.770821][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  592.804377][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  592.839841][T23574] batman_adv: batadv0: Interface activated: batadv_slave_0
[  593.017983][T21149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.082941][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.116395][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.140535][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.146408][T24713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  593.151041][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.185948][T20023] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  593.198031][T24713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  593.207838][T24713] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  593.209795][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.227707][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.228326][T24713] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  593.237837][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.248082][T24713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  593.255467][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.264414][T24713] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  593.273081][T24715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  593.281042][T24713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  593.290485][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.306707][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.324947][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.325353][T24713] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  593.336606][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.347320][T24713] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  593.354933][T23574] batman_adv: batadv0: Interface activated: batadv_slave_1
[  593.364508][T24713] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  593.373713][ T5318] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  593.409372][T23574] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  593.420669][T23574] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  593.430783][T23574] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.439646][T23574] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  593.587517][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  593.616281][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  593.626902][ T5318] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  593.638006][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.649507][ T5318] usb 4-1: config 0 descriptor??
[  594.115867][ T5318] keytouch 0003:0926:3333.0044: fixing up Keytouch IEC report descriptor
[  594.203193][ T5318] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0044/input/input73
[  594.320147][T24788] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  594.340734][T21149] bridge_slave_1: left allmulticast mode
[  594.346537][T21149] bridge_slave_1: left promiscuous mode
[  594.352375][T21149] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.387948][ T5318] keytouch 0003:0926:3333.0044: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  594.416367][T21149] bridge_slave_0: left allmulticast mode
[  594.422070][T21149] bridge_slave_0: left promiscuous mode
[  594.445586][T21149] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.665859][T18142] usb 4-1: USB disconnect, device number 63
[  595.429753][T24713] Bluetooth: hci5: command tx timeout
[  595.437743][ T5216] Bluetooth: hci3: command tx timeout
[  595.489638][T21149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  595.503675][T21149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  595.531816][T21149] bond0 (unregistering): Released all slaves
[  595.689406][T13194] syz_tun (unregistering): left promiscuous mode
[  595.745521][T18142] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  595.753082][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.753107][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.952647][T18142] usb 4-1: Using ep0 maxpacket: 32
[  595.972754][T18142] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  596.035351][T18142] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  596.072753][T18142] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  596.114749][T18142] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  596.136102][T18142] usb 4-1: config 0 interface 0 has no altsetting 0
[  596.152191][T18142] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  596.162846][T18142] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  596.180539][T18142] usb 4-1: Product: syz
[  596.184749][T18142] usb 4-1: Manufacturer: syz
[  596.212713][T18142] usb 4-1: SerialNumber: syz
[  596.232738][T18142] usb 4-1: config 0 descriptor??
[  596.251528][T18142] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  596.296814][T18142] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  596.313160][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.335344][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.504454][ T5215] usb 4-1: USB disconnect, device number 64
[  596.512905][ T5215] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  596.595333][T21149] hsr_slave_0: left promiscuous mode
[  596.646784][T21149] hsr_slave_1: left promiscuous mode
[  596.681343][T21149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  596.699232][T21149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  596.729154][T21149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  596.743051][T21149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  596.765169][T24713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  596.780331][T24713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  596.793698][T21149] veth1_macvtap: left promiscuous mode
[  596.799440][T24713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  596.807634][T21149] veth0_macvtap: left promiscuous mode
[  596.813651][T21149] veth1_vlan: left promiscuous mode
[  596.819418][T24713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  596.826875][T21149] veth0_vlan: left promiscuous mode
[  596.837552][T24713] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  596.845835][T24713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  597.506326][T24713] Bluetooth: hci3: command tx timeout
[  597.511789][T24713] Bluetooth: hci5: command tx timeout
[  598.537117][T21149] team0 (unregistering): Port device team_slave_1 removed
[  598.605726][T21149] team0 (unregistering): Port device team_slave_0 removed
[  598.949431][T24713] Bluetooth: hci0: command tx timeout
[  599.585819][T24713] Bluetooth: hci5: command tx timeout
[  599.591309][ T5216] Bluetooth: hci3: command tx timeout
[  599.946206][T24705] chnl_net:caif_netlink_parms(): no params data found
[  600.039631][T24704] chnl_net:caif_netlink_parms(): no params data found
[  600.115535][T18142] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  600.305383][T18142] usb 4-1: Using ep0 maxpacket: 32
[  600.314059][T18142] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  600.335306][T18142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  600.365653][T18142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  600.383198][T18142] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  600.415307][T18142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.436025][T18142] usb 4-1: config 0 descriptor??
[  600.443859][T25044] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  600.464604][T18142] hub 4-1:0.0: USB hub found
[  600.673832][T18142] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  600.809900][T24704] bridge0: port 1(bridge_slave_0) entered blocking state
[  600.825396][T24704] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.843018][T24704] bridge_slave_0: entered allmulticast mode
[  600.857460][T24704] bridge_slave_0: entered promiscuous mode
[  600.884268][T24705] bridge0: port 1(bridge_slave_0) entered blocking state
[  600.894006][T24705] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.907420][T18142] hid-generic 0003:046D:C314.0045: item fetching failed at offset 0/1
[  600.913759][T24705] bridge_slave_0: entered allmulticast mode
[  600.925575][T24705] bridge_slave_0: entered promiscuous mode
[  600.938666][T24704] bridge0: port 2(bridge_slave_1) entered blocking state
[  600.946227][T24704] bridge0: port 2(bridge_slave_1) entered disabled state
[  600.946500][T18142] hid-generic 0003:046D:C314.0045: probe with driver hid-generic failed with error -22
[  600.953574][T24704] bridge_slave_1: entered allmulticast mode
[  600.989405][T24704] bridge_slave_1: entered promiscuous mode
[  601.025368][T24713] Bluetooth: hci0: command tx timeout
[  601.049473][T24705] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.066137][T24705] bridge0: port 2(bridge_slave_1) entered disabled state
[  601.079697][T24705] bridge_slave_1: entered allmulticast mode
[  601.118841][T24705] bridge_slave_1: entered promiscuous mode
[  601.241444][T24705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  601.312288][T24704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  601.316093][ T5215] usb 4-1: USB disconnect, device number 65
[  601.352630][T24705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  601.419564][T24704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  601.583944][T24705] team0: Port device team_slave_0 added
[  601.666531][T24713] Bluetooth: hci5: command tx timeout
[  601.671987][ T5216] Bluetooth: hci3: command tx timeout
[  601.678512][T24704] team0: Port device team_slave_0 added
[  601.737152][T24705] team0: Port device team_slave_1 added
[  601.839574][T24704] team0: Port device team_slave_1 added
[  602.002998][T21149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  602.135161][T24705] batman_adv: batadv0: Adding interface: batadv_slave_0
[  602.149753][T24705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  602.205375][T24705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  602.433464][T21149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  602.493157][T24705] batman_adv: batadv0: Adding interface: batadv_slave_1
[  602.505359][T24705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  602.565403][T24705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  602.709934][T24704] batman_adv: batadv0: Adding interface: batadv_slave_0
[  602.739753][T24704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  602.816486][T24704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  602.838746][T24704] batman_adv: batadv0: Adding interface: batadv_slave_1
[  602.855359][T24704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  602.905286][T24704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  602.967931][T21149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.105661][T24713] Bluetooth: hci0: command tx timeout
[  603.216895][T21149] bond0: (slave netdevsim0): Releasing backup interface
[  603.238266][T21149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.501066][T24704] hsr_slave_0: entered promiscuous mode
[  603.556303][T24704] hsr_slave_1: entered promiscuous mode
[  603.576503][T24704] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  603.587841][T24704] Cannot create hsr debugfs directory
[  603.614426][T25008] chnl_net:caif_netlink_parms(): no params data found
[  603.704358][T24705] hsr_slave_0: entered promiscuous mode
[  603.720216][T24705] hsr_slave_1: entered promiscuous mode
[  603.757939][T24705] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  603.775390][T24705] Cannot create hsr debugfs directory
[  604.440711][   T58] libceph: connect (1)[c::]:6789 error -101
[  604.508821][   T58] libceph: mon0 (1)[c::]:6789 connect error
[  604.533475][   T58] libceph: connect (1)[c::]:6789 error -101
[  604.558872][   T58] libceph: mon0 (1)[c::]:6789 connect error
[  604.677174][T21149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.789282][T25008] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.818414][T25008] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.835921][T25008] bridge_slave_0: entered allmulticast mode
[  604.844869][T25008] bridge_slave_0: entered promiscuous mode
[  604.854836][ T5296] libceph: connect (1)[c::]:6789 error -101
[  604.861381][ T5296] libceph: mon0 (1)[c::]:6789 connect error
[  604.936646][T21149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.001437][T25008] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.010809][T25008] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.021148][T25008] bridge_slave_1: entered allmulticast mode
[  605.029726][T25008] bridge_slave_1: entered promiscuous mode
[  605.064493][T25674] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7434'.
[  605.150914][T21149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.185794][T24713] Bluetooth: hci0: command tx timeout
[  605.219209][T25614] ceph: No mds server is up or the cluster is laggy
[  605.262689][T25008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  605.512783][T21149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.609046][T25008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  605.796260][T25008] team0: Port device team_slave_0 added
[  605.824684][T25008] team0: Port device team_slave_1 added
[  606.023394][T25008] batman_adv: batadv0: Adding interface: batadv_slave_0
[  606.049983][T25008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  606.075978][    C1] vkms_vblank_simulate: vblank timer overrun
[  606.103696][T25008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  606.149662][T25008] batman_adv: batadv0: Adding interface: batadv_slave_1
[  606.165996][T25008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  606.191986][    C1] vkms_vblank_simulate: vblank timer overrun
[  606.203627][T25008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  606.438471][T25008] hsr_slave_0: entered promiscuous mode
[  606.456730][T25008] hsr_slave_1: entered promiscuous mode
[  606.465817][T25008] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  606.485274][T25008] Cannot create hsr debugfs directory
[  606.619697][T21149] bridge_slave_1: left allmulticast mode
[  606.647841][T21149] bridge_slave_1: left promiscuous mode
[  606.657860][T21149] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.668572][T21149] bridge_slave_0: left allmulticast mode
[  606.674927][T21149] bridge_slave_0: left promiscuous mode
[  606.681478][T21149] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.696765][T21149] bridge_slave_1: left allmulticast mode
[  606.702525][T21149] bridge_slave_1: left promiscuous mode
[  606.708887][T21149] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.719984][T21149] bridge_slave_0: left allmulticast mode
[  606.727549][T21149] bridge_slave_0: left promiscuous mode
[  606.733467][T21149] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.645535][ T5215] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  607.996421][T21149] bridge0 (unregistering): left allmulticast mode
[  608.566596][T21149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  608.602068][T21149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  608.636970][T21149] bond0 (unregistering): Released all slaves
[  608.951259][T25904] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  608.980951][T21149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  608.996892][T21149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  609.018919][T21149] bond0 (unregistering): Released all slaves
[  609.543642][T24705] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  609.565140][T24705] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  609.709698][T24705] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  609.808377][T24705] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  610.287528][T25991] block nbd3: shutting down sockets
[  610.306995][T25991] block nbd3: NBD_DISCONNECT
[  610.311688][T25991] block nbd3: Send disconnect failed -32
[  610.513425][T26003] program syz.3.7463 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  610.554239][T21149] batadv_slave_0: left promiscuous mode
[  610.607601][T21149] hsr_slave_0: left promiscuous mode
[  610.627081][T21149] hsr_slave_1: left promiscuous mode
[  610.650320][T21149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  610.674312][T21149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  610.691631][T21149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  610.703311][T21149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  610.735386][T21149] hsr_slave_0: left promiscuous mode
[  610.744897][T21149] hsr_slave_1: left promiscuous mode
[  610.764134][T21149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  610.798646][T21149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  610.809987][T21149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  610.817656][T21149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  610.909371][T21149] veth1_macvtap: left promiscuous mode
[  610.916055][T21149] veth0_macvtap: left promiscuous mode
[  610.921737][T21149] veth1_vlan: left promiscuous mode
[  610.927250][T21149] veth0_vlan: left promiscuous mode
[  610.934201][T21149] veth1_macvtap: left promiscuous mode
[  610.942827][T21149] veth0_macvtap: left promiscuous mode
[  610.956620][T21149] veth1_vlan: left promiscuous mode
[  610.967725][T21149] veth0_vlan: left promiscuous mode
[  610.985293][T18142] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  611.167123][T18142] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  611.175389][T18142] usb 5-1: config 0 has no interface number 0
[  611.182347][T18142] usb 5-1: config 0 interface 1 has no altsetting 0
[  611.195357][T18142] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  611.217214][T18142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.237536][T18142] usb 5-1: config 0 descriptor??
[  611.254150][T18142] cp210x 5-1:0.1: cp210x converter detected
[  611.668768][T18142] cp210x 5-1:0.1: failed to get vendor val 0x000e size 3: -32
[  611.920020][T18142] usb 5-1: cp210x converter now attached to ttyUSB0
[  612.145729][T18142] usb 5-1: USB disconnect, device number 56
[  612.154668][T18142] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  612.207433][T18142] cp210x 5-1:0.1: device disconnected
[  612.244195][T21149] team0 (unregistering): Port device team_slave_1 removed
[  612.325530][T21149] team0 (unregistering): Port device team_slave_0 removed
[  613.430734][T26051] loop8: detected capacity change from 0 to 7
[  613.438855][T26051] Dev loop8: unable to read RDB block 7
[  613.444474][T26051]  loop8: unable to read partition table
[  613.462275][T26051] loop8: partition table beyond EOD, truncated
[  613.469690][T26051] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  613.469690][T26051] ) failed (rc=-5)
[  613.645677][T21149] lo (unregistering): left allmulticast mode
[  614.044922][   T29] audit: type=1326 audit(2000001586.256:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26060 comm="syz.4.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa979e79 code=0x7ffc0000
[  614.106302][   T29] audit: type=1326 audit(2000001586.256:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26060 comm="syz.4.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90fa979e79 code=0x7ffc0000
[  614.154619][   T29] audit: type=1326 audit(2000001586.256:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26060 comm="syz.4.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa979e79 code=0x7ffc0000
[  614.176215][    C1] vkms_vblank_simulate: vblank timer overrun
[  614.220376][   T29] audit: type=1326 audit(2000001586.256:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26060 comm="syz.4.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa979e79 code=0x7ffc0000
[  614.241942][    C1] vkms_vblank_simulate: vblank timer overrun
[  614.254179][   T29] audit: type=1326 audit(2000001586.256:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26060 comm="syz.4.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f90fa979e79 code=0x7ffc0000
[  614.275752][    C1] vkms_vblank_simulate: vblank timer overrun
[  614.375482][   T29] audit: type=1326 audit(2000001586.256:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26060 comm="syz.4.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa979e79 code=0x7ffc0000
[  614.435437][   T29] audit: type=1326 audit(2000001586.256:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26060 comm="syz.4.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa979e79 code=0x7ffc0000
[  614.880175][T21149] team0 (unregistering): Port device team_slave_1 removed
[  614.957981][T21149] team0 (unregistering): Port device team_slave_0 removed
[  615.942691][T26013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7465'.
[  615.951777][T26013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7465'.
[  616.001579][T26013] gtp0: entered promiscuous mode
[  616.007598][T26013] gtp0: entered allmulticast mode
[  616.022659][T24705] 8021q: adding VLAN 0 to HW filter on device bond0
[  616.205745][T26074] netlink: 'syz.3.7478': attribute type 4 has an invalid length.
[  616.230618][T26074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  616.304717][T24705] 8021q: adding VLAN 0 to HW filter on device team0
[  616.353209][T24704] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  616.554278][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.561518][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  616.593013][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  616.600158][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  616.663620][T24704] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  616.763482][T24704] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  616.807702][T24704] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  617.319511][T24704] 8021q: adding VLAN 0 to HW filter on device bond0
[  617.411899][T24704] 8021q: adding VLAN 0 to HW filter on device team0
[  617.545022][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.552324][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  617.687714][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.694897][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  617.898164][T24705] 8021q: adding VLAN 0 to HW filter on device batadv0
[  617.926423][T25008] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  617.959132][T25008] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  617.987634][T25008] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  618.029416][T25008] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  618.269220][T24705] veth0_vlan: entered promiscuous mode
[  618.323237][T24705] veth1_vlan: entered promiscuous mode
[  618.487915][T25008] 8021q: adding VLAN 0 to HW filter on device bond0
[  618.534983][T24704] 8021q: adding VLAN 0 to HW filter on device batadv0
[  618.591406][T25008] 8021q: adding VLAN 0 to HW filter on device team0
[  618.613919][T24705] veth0_macvtap: entered promiscuous mode
[  618.624234][   T29] audit: type=1326 audit(2000001590.846:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26143 comm="syz.3.7489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f778fd79e79 code=0x0
[  618.643767][T24705] veth1_macvtap: entered promiscuous mode
[  618.645283][    C1] vkms_vblank_simulate: vblank timer overrun
[  618.684933][   T29] audit: type=1326 audit(2000001590.886:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26143 comm="syz.3.7489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f778fd79e79 code=0x0
[  618.713500][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.720729][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  618.755984][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.763176][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  618.882512][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  618.903443][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  618.923889][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  618.946951][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  618.965869][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  618.986671][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  619.007037][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  619.027974][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  619.060291][T24705] batman_adv: batadv0: Interface activated: batadv_slave_0
[  619.163225][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  619.186432][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  619.225360][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  619.245760][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  619.265403][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  619.285324][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  619.305482][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  619.328774][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  619.350664][T24705] batman_adv: batadv0: Interface activated: batadv_slave_1
[  619.413403][T24704] veth0_vlan: entered promiscuous mode
[  619.479139][T24705] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  619.507105][T24705] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  619.527139][T24705] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  619.548341][T24705] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  619.699806][T24704] veth1_vlan: entered promiscuous mode
[  619.771620][T26155] netlink: 'syz.4.7492': attribute type 4 has an invalid length.
[  619.966472][T21149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  619.974343][T21149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.027596][T24704] veth0_macvtap: entered promiscuous mode
[  620.104940][T24704] veth1_macvtap: entered promiscuous mode
[  620.132710][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.181925][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.192203][T25008] 8021q: adding VLAN 0 to HW filter on device batadv0
[  620.232551][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  620.264096][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  620.285004][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  620.296953][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  620.315317][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  620.338610][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  620.359002][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  620.380065][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  620.395500][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  620.406800][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  620.419732][T24704] batman_adv: batadv0: Interface activated: batadv_slave_0
[  620.493344][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  620.523409][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  620.544951][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  620.570063][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  620.580813][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  620.592288][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  620.604332][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  620.615868][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  620.639033][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  620.656916][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  620.688513][T24704] batman_adv: batadv0: Interface activated: batadv_slave_1
[  620.819424][T24704] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  620.839142][T24704] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  620.863901][T24704] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  620.883761][T24704] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  621.087861][T18319] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  621.171306][ T2972] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.295547][T18319] usb 5-1: Using ep0 maxpacket: 32
[  621.317515][T18319] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  621.343664][T18319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.362026][T18319] usb 5-1: config 0 descriptor??
[  621.368438][ T2972] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.378505][T18319] gspca_main: sunplus-2.14.0 probing 041e:400b
[  621.458399][T25008] veth0_vlan: entered promiscuous mode
[  621.523055][ T2972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.578339][T25008] veth1_vlan: entered promiscuous mode
[  621.655991][ T2972] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.795054][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.816221][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.919284][T25008] veth0_macvtap: entered promiscuous mode
[  621.947486][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.951385][T25008] veth1_macvtap: entered promiscuous mode
[  621.972705][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.976939][T26210] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  622.183226][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  622.229255][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.259623][T18319] gspca_sunplus: reg_w_riv err -71
[  622.259887][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  622.264880][T18319] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  622.317473][T18319] usb 5-1: USB disconnect, device number 57
[  622.335401][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.365675][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  622.385877][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.406373][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  622.442174][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.466558][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  622.485532][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.500535][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  622.520086][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.522610][ T5216] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  622.531959][T25008] batman_adv: batadv0: Interface activated: batadv_slave_0
[  622.557153][ T5216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  622.576874][ T2972] bridge_slave_1: left allmulticast mode
[  622.584171][ T5216] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  622.594680][ T2972] bridge_slave_1: left promiscuous mode
[  622.614412][ T5216] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  622.628468][ T5216] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  622.638038][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state
[  622.649351][ T5216] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  622.692168][ T2972] bridge_slave_0: left allmulticast mode
[  622.725317][ T2972] bridge_slave_0: left promiscuous mode
[  622.765605][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.144892][T26253] ALSA: seq fatal error: cannot create timer (-22)
[  623.300443][T26255] input: syz0 as /devices/virtual/input/input74
[  623.989496][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  624.013958][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  624.040616][ T2972] bond0 (unregistering): Released all slaves
[  624.076172][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  624.088373][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.101438][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  624.133963][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.145010][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  624.161022][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.171033][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  624.181669][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.192672][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  624.203325][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.215531][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  624.227360][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.278112][T25008] batman_adv: batadv0: Interface activated: batadv_slave_1
[  624.305007][T25008] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  624.314552][T25008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  624.324712][T25008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  624.334641][T25008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  624.565298][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  624.571653][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  624.785529][T24713] Bluetooth: hci3: command tx timeout
[  625.223390][ T2972] hsr_slave_0: left promiscuous mode
[  625.230582][ T2972] hsr_slave_1: left promiscuous mode
[  625.255592][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  625.263109][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0
[  625.303998][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  625.335588][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1
[  625.421787][ T2972] veth1_macvtap: left promiscuous mode
[  625.457929][ T2972] veth0_macvtap: left promiscuous mode
[  625.463621][ T2972] veth1_vlan: left promiscuous mode
[  625.495398][ T2972] veth0_vlan: left promiscuous mode
[  625.884880][ T5216] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  625.897186][ T5216] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  625.909582][ T5216] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  625.925820][ T5216] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  625.937252][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  625.946674][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  625.987565][T24713] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  626.006493][ T5216] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  626.015839][ T5216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  626.043387][ T5216] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  626.057608][ T5216] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  626.065075][ T5216] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  626.825328][T18319] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  626.867413][ T5216] Bluetooth: hci3: command tx timeout
[  626.974694][ T2972] team0 (unregistering): Port device team_slave_1 removed
[  627.027727][T18319] usb 5-1: Using ep0 maxpacket: 8
[  627.034884][T18319] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  627.045367][T18319] usb 5-1: config 179 has no interface number 0
[  627.071298][T18319] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  627.082690][T18319] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  627.113321][ T2972] team0 (unregistering): Port device team_slave_0 removed
[  627.120769][T18319] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  627.149848][T18319] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  627.162324][T18319] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  627.188821][T18319] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  627.226453][T18319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.259246][T26357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  627.588939][ T5267] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input75
[  627.772304][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  627.772312][T18300] usb 5-1: USB disconnect, device number 58
[  627.787680][T18300] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  628.068340][ T5216] Bluetooth: hci2: command tx timeout
[  628.145596][ T5216] Bluetooth: hci5: command tx timeout
[  628.571980][T21149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  628.589291][T21149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  628.728942][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  628.739148][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  628.956811][ T5216] Bluetooth: hci3: command tx timeout
[  629.189972][T26235] chnl_net:caif_netlink_parms(): no params data found
[  629.934572][T26344] chnl_net:caif_netlink_parms(): no params data found
[  629.975504][T26235] bridge0: port 1(bridge_slave_0) entered blocking state
[  629.982671][T26235] bridge0: port 1(bridge_slave_0) entered disabled state
[  630.025624][T26235] bridge_slave_0: entered allmulticast mode
[  630.067226][T26235] bridge_slave_0: entered promiscuous mode
[  630.083006][T26235] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.101976][T26235] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.131152][T26235] bridge_slave_1: entered allmulticast mode
[  630.134224][T26736] 9pnet: p9_errstr2errno: server reported unknown error �@��hQI���te
[  630.155570][ T5216] Bluetooth: hci2: command tx timeout
[  630.162521][T26235] bridge_slave_1: entered promiscuous mode
[  630.169494][T26738] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7531'.
[  630.226855][ T5216] Bluetooth: hci5: command tx timeout
[  630.245436][T26738] openvswitch: netlink: Key type 29 is not supported
[  630.516946][    C1] sd 0:0:1:0: [sda] tag#3840 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  630.527496][    C1] sd 0:0:1:0: [sda] tag#3840 CDB: Read(6) 08 00 00 00 85 f0
[  630.581877][T26347] chnl_net:caif_netlink_parms(): no params data found
[  630.772503][ T2972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.823942][T26235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  630.901081][T26235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  631.025872][ T5216] Bluetooth: hci3: command tx timeout
[  631.094022][ T2972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.236220][T18300] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  631.348186][T26235] team0: Port device team_slave_0 added
[  631.427828][T26859] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  631.441736][ T2972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.457474][T18300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  631.475561][T18300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  631.505702][T18300] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  631.514791][T18300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.543000][T18300] usb 5-1: config 0 descriptor??
[  631.591759][T26235] team0: Port device team_slave_1 added
[  631.791297][ T2972] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode
[  631.826242][ T2972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.932964][T26235] batman_adv: batadv0: Adding interface: batadv_slave_0
[  631.954603][T26235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  632.054141][T26235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  632.089557][T26344] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.116265][T26344] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.133835][T26344] bridge_slave_0: entered allmulticast mode
[  632.147764][T26344] bridge_slave_0: entered promiscuous mode
[  632.167213][T26344] bridge0: port 2(bridge_slave_1) entered blocking state
[  632.178611][T18300] usb 5-1: language id specifier not provided by device, defaulting to English
[  632.185404][T26344] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.205162][T26344] bridge_slave_1: entered allmulticast mode
[  632.215146][T26344] bridge_slave_1: entered promiscuous mode
[  632.226725][ T5216] Bluetooth: hci2: command tx timeout
[  632.313246][T26235] batman_adv: batadv0: Adding interface: batadv_slave_1
[  632.321114][ T5216] Bluetooth: hci5: command tx timeout
[  632.345552][T26235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  632.372049][T26235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  632.502361][T26347] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.520177][T26347] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.536392][T26347] bridge_slave_0: entered allmulticast mode
[  632.554103][T26347] bridge_slave_0: entered promiscuous mode
[  632.605561][ T5269] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  632.627299][T26344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  632.641918][T26344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  632.652162][T26347] bridge0: port 2(bridge_slave_1) entered blocking state
[  632.659567][T26347] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.677716][T26347] bridge_slave_1: entered allmulticast mode
[  632.697829][T26347] bridge_slave_1: entered promiscuous mode
[  632.791840][T18300] uclogic 0003:256C:006D.0046: failed retrieving string descriptor #100: -71
[  632.818199][T18300] uclogic 0003:256C:006D.0046: failed retrieving pen parameters: -71
[  632.826718][ T5269] usb 1-1: Using ep0 maxpacket: 16
[  632.833829][T18300] uclogic 0003:256C:006D.0046: failed probing pen v1 parameters: -71
[  632.843164][T18300] uclogic 0003:256C:006D.0046: failed probing parameters: -71
[  632.853475][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  632.876493][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  632.888460][T18300] uclogic 0003:256C:006D.0046: probe with driver uclogic failed with error -71
[  632.901802][ T5269] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  632.918924][T18300] usb 5-1: USB disconnect, device number 59
[  632.926165][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.959548][ T5269] usb 1-1: config 0 descriptor??
[  632.978006][T26347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  632.999864][T26235] hsr_slave_0: entered promiscuous mode
[  633.007501][T26235] hsr_slave_1: entered promiscuous mode
[  633.014182][T26235] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  633.023588][T26235] Cannot create hsr debugfs directory
[  633.079076][T26344] team0: Port device team_slave_0 added
[  633.098786][T26344] team0: Port device team_slave_1 added
[  633.108504][T26347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  633.378081][T26344] batman_adv: batadv0: Adding interface: batadv_slave_0
[  633.402813][T26344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  633.406022][ T5269] lenovo 0003:17EF:6009.0047: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0
[  633.445351][T26344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  633.467937][T26344] batman_adv: batadv0: Adding interface: batadv_slave_1
[  633.477167][T26344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  633.524578][T26344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  633.554302][T26347] team0: Port device team_slave_0 added
[  633.566650][T26347] team0: Port device team_slave_1 added
[  633.683763][T18319] usb 1-1: USB disconnect, device number 65
[  633.740360][ T2972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.908400][ T2972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.990453][T26347] batman_adv: batadv0: Adding interface: batadv_slave_0
[  634.000425][T26347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  634.037686][T26347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.142948][ T2972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.183830][T26347] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.192891][T26347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  634.250283][T26347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  634.306150][ T5216] Bluetooth: hci2: command tx timeout
[  634.364370][T26344] hsr_slave_0: entered promiscuous mode
[  634.385499][ T5216] Bluetooth: hci5: command tx timeout
[  634.388112][   T29] audit: type=1326 audit(2000001606.616:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27250 comm="syz.0.7550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed48d79e79 code=0x0
[  634.445811][T26344] hsr_slave_1: entered promiscuous mode
[  634.477224][T26344] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  634.495968][T26344] Cannot create hsr debugfs directory
[  634.587638][ T2972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.993344][T26347] hsr_slave_0: entered promiscuous mode
[  635.010634][T26347] hsr_slave_1: entered promiscuous mode
[  635.028347][T26347] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  635.055826][T26347] Cannot create hsr debugfs directory
[  635.805111][ T2972] bridge_slave_1: left allmulticast mode
[  635.812172][ T2972] bridge_slave_1: left promiscuous mode
[  635.830018][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.849263][ T2972] bridge_slave_0: left allmulticast mode
[  635.858454][ T2972] bridge_slave_0: left promiscuous mode
[  635.870009][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.891751][ T2972] bridge_slave_1: left allmulticast mode
[  635.904799][ T2972] bridge_slave_1: left promiscuous mode
[  635.919716][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.937743][ T2972] bridge_slave_0: left allmulticast mode
[  635.943573][ T2972] bridge_slave_0: left promiscuous mode
[  635.952888][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.733569][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  637.760167][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  637.782874][ T2972] bond0 (unregistering): Released all slaves
[  638.124692][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  638.137819][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  638.154971][ T2972] bond0 (unregistering): Released all slaves
[  638.925870][T26235] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  639.010346][T26235] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  639.034564][T26235] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  639.072168][T26235] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  639.261569][ T2972] macsec0: left promiscuous mode
[  639.281992][ T2972] hsr_slave_0: left promiscuous mode
[  639.301140][ T2972] hsr_slave_1: left promiscuous mode
[  639.316127][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  639.330552][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0
[  639.386617][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  639.394061][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1
[  639.475557][ T2972] hsr_slave_0: left promiscuous mode
[  639.487813][ T2972] hsr_slave_1: left promiscuous mode
[  639.516688][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  639.524249][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0
[  639.544356][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  639.561753][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1
[  639.671930][ T2972] veth1_macvtap: left promiscuous mode
[  639.685305][ T2972] veth0_macvtap: left promiscuous mode
[  639.691099][ T2972] veth1_vlan: left promiscuous mode
[  639.702166][ T2972] veth0_vlan: left promiscuous mode
[  639.726807][ T2972] veth1_macvtap: left promiscuous mode
[  639.734574][ T2972] veth0_macvtap: left promiscuous mode
[  639.750014][ T2972] veth1_vlan: left promiscuous mode
[  639.762485][ T2972] veth0_vlan: left promiscuous mode
[  641.159949][ T2972] team0 (unregistering): Port device team_slave_1 removed
[  641.288156][ T2972] team0 (unregistering): Port device team_slave_0 removed
[  643.061153][ T2972] team0 (unregistering): Port device team_slave_1 removed
[  643.144932][ T2972] team0 (unregistering): Port device team_slave_0 removed
[  644.209654][T27527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7560'.
[  644.219880][T27533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7563'.
[  644.229141][T27533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7563'.
[  644.272985][T27533] macvlan0: entered promiscuous mode
[  644.311909][T27533] batadv_slave_0: entered promiscuous mode
[  644.739349][T26235] 8021q: adding VLAN 0 to HW filter on device bond0
[  644.759754][T26344] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  644.799063][T26344] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  644.912414][T26344] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  644.945678][T26344] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  645.008084][T26235] 8021q: adding VLAN 0 to HW filter on device team0
[  645.035340][ T5267] usb 1-1: new full-speed USB device number 66 using dummy_hcd
[  645.140855][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  645.148085][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  645.259313][ T5267] usb 1-1: not running at top speed; connect to a high speed hub
[  645.269867][ T5267] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  645.294711][ T5267] usb 1-1: config 1 interface 0 has no altsetting 0
[  645.313979][ T5267] usb 1-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.40
[  645.325305][ T5267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.337623][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state
[  645.344812][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  645.362870][ T5267] usb 1-1: Product: 囋✼郓ᷣ쾽䤇Ó⯛葴믰ꮘ睢
[  645.386869][ T5267] usb 1-1: Manufacturer: Ь
[  645.391424][ T5267] usb 1-1: SerialNumber: 鋏슣 컓鞤昜ኚ誽젋Қ嵦曂熨璊ꃎꞧ欍㜶ꢒ䡔駌࠭놶昄㳐笑㏉濋筞䲵呻萷橴烗际鑦␵ꏯ੊퓰稏췭⦛炈霢⇢摸
[  645.672964][T27561] kernel read not supported for file /  (pid: 27561 comm: syz.0.7566)
[  645.741342][   T29] audit: type=1800 audit(2000001617.966:736): pid=27561 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.7566" name=2001 dev="mqueue" ino=90470 res=0 errno=0
[  645.817108][ T5267] usbhid 1-1:1.0: can't add hid device: -71
[  645.836953][ T5267] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  645.888423][ T5267] usb 1-1: USB disconnect, device number 66
[  645.904028][T26347] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  645.956897][T26347] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  645.980255][T26347] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  646.011322][T26344] 8021q: adding VLAN 0 to HW filter on device bond0
[  646.037269][T26347] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  646.093125][T26344] 8021q: adding VLAN 0 to HW filter on device team0
[  646.204057][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.211328][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state
[  646.274327][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.281562][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state
[  646.343435][T26235] 8021q: adding VLAN 0 to HW filter on device batadv0
[  646.548835][T26344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  646.618957][T26347] 8021q: adding VLAN 0 to HW filter on device bond0
[  646.694131][T26235] veth0_vlan: entered promiscuous mode
[  646.742941][T26347] 8021q: adding VLAN 0 to HW filter on device team0
[  646.772018][T26235] veth1_vlan: entered promiscuous mode
[  646.803227][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.810427][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  646.864639][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.871873][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  647.030583][T26235] veth0_macvtap: entered promiscuous mode
[  647.070178][T26235] veth1_macvtap: entered promiscuous mode
[  647.170360][T26344] 8021q: adding VLAN 0 to HW filter on device batadv0
[  647.202273][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  647.233336][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  647.253609][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  647.291516][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  647.315333][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  647.326335][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  647.348535][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  647.383529][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  647.415813][T26235] batman_adv: batadv0: Interface activated: batadv_slave_0
[  647.494099][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  647.515296][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  647.543670][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  647.573178][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  647.602045][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  647.612801][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  647.623904][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  647.637273][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  647.649304][T26235] batman_adv: batadv0: Interface activated: batadv_slave_1
[  647.681345][T26235] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  647.690941][T26235] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  647.714014][T26235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  647.723143][ T5215] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  647.731304][T26235] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  647.808282][T26347] 8021q: adding VLAN 0 to HW filter on device batadv0
[  647.841360][T26344] veth0_vlan: entered promiscuous mode
[  647.892657][T26344] veth1_vlan: entered promiscuous mode
[  647.930107][ T5215] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.951865][ T5215] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  647.972026][ T5215] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  647.996018][ T5215] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  648.024056][ T5215] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  648.040017][ T5215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=68
[  648.049234][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  648.059540][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  648.067582][ T5215] usb 1-1: Product: syz
[  648.071848][ T5215] usb 1-1: Manufacturer: syz
[  648.076052][T26347] veth0_vlan: entered promiscuous mode
[  648.082383][ T5215] usb 1-1: SerialNumber: syz
[  648.101518][T26344] veth0_macvtap: entered promiscuous mode
[  648.168260][T26347] veth1_vlan: entered promiscuous mode
[  648.178456][T26344] veth1_macvtap: entered promiscuous mode
[  648.218166][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  648.261628][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  648.280852][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  648.327706][T27639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  648.340580][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.365033][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  648.376731][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.398057][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  648.419236][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.441362][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  648.463252][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.486379][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  648.505645][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.527996][T26344] batman_adv: batadv0: Interface activated: batadv_slave_0
[  648.570921][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.585106][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.596449][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.608118][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.619139][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.634936][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.658170][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.675454][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.695461][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.715260][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.738607][T26344] batman_adv: batadv0: Interface activated: batadv_slave_1
[  648.781256][T26347] veth0_macvtap: entered promiscuous mode
[  648.806981][T26344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  648.825716][T26344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  648.834464][T26344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  648.855040][T26344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  648.884686][T26347] veth1_macvtap: entered promiscuous mode
[  648.950153][T27639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  649.067885][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.080994][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.102945][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.119382][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.137595][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.156493][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.169024][ T5215] cdc_ncm 1-1:1.0: bind() failure
[  649.176901][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.205502][ T5215] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[  649.213865][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.235586][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.255402][ T5215] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[  649.264395][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.287255][ T5215] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[  649.295947][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.312056][ T5215] usb 1-1: USB disconnect, device number 67
[  649.318195][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.335669][T26347] batman_adv: batadv0: Interface activated: batadv_slave_0
[  649.398219][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.426467][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.436805][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.455556][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.476105][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.496273][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.530343][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.552020][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.582431][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.615479][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.649920][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.670592][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.694441][T26347] batman_adv: batadv0: Interface activated: batadv_slave_1
[  649.812088][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.878879][T26347] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  649.889838][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  649.913130][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  649.920764][T26347] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  649.930956][T26347] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  649.941003][T26347] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  650.038793][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.214032][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.247602][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.277859][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.292602][T21149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.325258][T21149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.362103][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.511601][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.565867][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  651.025497][   T46] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  651.065937][   T35] bridge_slave_1: left allmulticast mode
[  651.071628][   T35] bridge_slave_1: left promiscuous mode
[  651.094415][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.132504][T24715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  651.144865][T24715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  651.154058][T24715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  651.163922][   T35] bridge_slave_0: left allmulticast mode
[  651.187683][   T35] bridge_slave_0: left promiscuous mode
[  651.187908][T24715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  651.203636][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.211673][T24715] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  651.225400][   T46] usb 1-1: Using ep0 maxpacket: 32
[  651.233526][T24715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  651.250187][   T46] usb 1-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d
[  651.275728][   T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.283895][   T46] usb 1-1: Product: syz
[  651.289421][   T46] usb 1-1: Manufacturer: syz
[  651.294472][   T46] usb 1-1: SerialNumber: syz
[  651.523896][   T46] aqc111 1-1:1.0: probe with driver aqc111 failed with error -22
[  651.545654][   T46] usb 1-1: USB disconnect, device number 68
[  651.999998][ T5216] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  652.014000][ T5216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  652.037302][ T5216] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  652.064211][ T5216] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  652.089466][ T5216] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  652.096959][ T5216] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  652.479409][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  652.503033][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  652.524675][   T35] bond0 (unregistering): Released all slaves
[  653.085559][   T46] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  653.115970][ T5215] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  653.270253][   T35] hsr_slave_0: left promiscuous mode
[  653.280051][   T35] hsr_slave_1: left promiscuous mode
[  653.285476][   T46] usb 1-1: Using ep0 maxpacket: 16
[  653.291589][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  653.297394][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  653.300024][ T5215] usb 5-1: Using ep0 maxpacket: 32
[  653.325285][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  653.326142][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  653.335067][   T46] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  653.354793][ T5215] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  653.364839][ T5215] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  653.375463][T24715] Bluetooth: hci2: command tx timeout
[  653.386201][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  653.395749][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  653.402937][ T5215] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  653.406597][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.416351][ T5215] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  653.444668][   T46] usb 1-1: config 0 descriptor??
[  653.490277][   T35] veth1_macvtap: left promiscuous mode
[  653.497282][ T5215] usb 5-1: config 0 interface 0 has no altsetting 0
[  653.517600][   T35] veth0_macvtap: left promiscuous mode
[  653.524211][ T5215] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  653.533940][   T35] veth1_vlan: left promiscuous mode
[  653.543861][ T5215] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  653.552617][   T35] veth0_vlan: left promiscuous mode
[  653.565258][ T5215] usb 5-1: Product: syz
[  653.579665][ T5215] usb 5-1: Manufacturer: syz
[  653.584314][ T5215] usb 5-1: SerialNumber: syz
[  653.603154][ T5215] usb 5-1: config 0 descriptor??
[  653.624576][ T5215] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  653.660025][ T5215] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  653.882261][   T46] apple 0003:05AC:0247.0048: unknown main item tag 0xd
[  653.904806][   T46] apple 0003:05AC:0247.0048: unexpected long global item
[  653.936081][   T46] apple 0003:05AC:0247.0048: parse failed
[  653.941986][   T46] apple 0003:05AC:0247.0048: probe with driver apple failed with error -22
[  653.987477][ T5215] usb 5-1: USB disconnect, device number 60
[  653.995544][ T5215] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  654.145960][T24715] Bluetooth: hci3: command tx timeout
[  654.209205][ T5216] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  654.227660][ T5216] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  654.253126][ T5216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  654.271428][ T5216] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  654.276966][T20677] usb 1-1: USB disconnect, device number 69
[  654.289555][ T5216] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  654.315985][ T5216] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  655.375650][   T35] team0 (unregistering): Port device team_slave_1 removed
[  655.425679][T24715] Bluetooth: hci2: command tx timeout
[  655.559608][   T35] team0 (unregistering): Port device team_slave_0 removed
[  656.227732][T24715] Bluetooth: hci3: command tx timeout
[  656.395368][T24715] Bluetooth: hci5: command tx timeout
[  657.505530][T24715] Bluetooth: hci2: command tx timeout
[  657.593469][   T29] audit: type=1326 audit(2000001629.816:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27973 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed48d79e79 code=0x7ffc0000
[  657.629973][   T29] audit: type=1326 audit(2000001629.826:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27973 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fed48d79e79 code=0x7ffc0000
[  657.667888][   T29] audit: type=1326 audit(2000001629.826:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27973 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed48d79e79 code=0x7ffc0000
[  657.744401][   T29] audit: type=1326 audit(2000001629.826:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27973 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed48d79e79 code=0x7ffc0000
[  658.105601][T27732] chnl_net:caif_netlink_parms(): no params data found
[  658.184426][T27754] chnl_net:caif_netlink_parms(): no params data found
[  658.307337][T24715] Bluetooth: hci3: command tx timeout
[  658.321368][T28128] nbd: couldn't find device at index 0
[  658.441450][T28159] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  658.468283][ T5216] Bluetooth: hci5: command tx timeout
[  658.872504][T28197] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  658.894072][T28197] macsec1: entered promiscuous mode
[  658.904136][T28197] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  658.967024][T27754] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.983463][T27754] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.005566][T27754] bridge_slave_0: entered allmulticast mode
[  659.013077][T27754] bridge_slave_0: entered promiscuous mode
[  659.168759][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.226873][T27732] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.234042][T27732] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.249381][T27732] bridge_slave_0: entered allmulticast mode
[  659.267125][T27732] bridge_slave_0: entered promiscuous mode
[  659.301662][T27732] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.319955][T27732] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.330293][T27732] bridge_slave_1: entered allmulticast mode
[  659.339067][T27732] bridge_slave_1: entered promiscuous mode
[  659.346141][T27754] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.354212][T27754] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.361971][T27754] bridge_slave_1: entered allmulticast mode
[  659.406970][T27754] bridge_slave_1: entered promiscuous mode
[  659.585513][ T5216] Bluetooth: hci2: command tx timeout
[  659.625157][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.159674][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.367871][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.406296][ T5216] Bluetooth: hci3: command tx timeout
[  660.545478][ T5216] Bluetooth: hci5: command tx timeout
[  660.984547][   T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.277625][   T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.577512][   T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.969547][   T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.455681][   T35] bridge_slave_1: left allmulticast mode
[  662.461382][   T35] bridge_slave_1: left promiscuous mode
[  662.475788][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.517687][   T35] bridge_slave_0: left allmulticast mode
[  662.523374][   T35] bridge_slave_0: left promiscuous mode
[  662.585652][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  662.635298][ T5216] Bluetooth: hci5: command tx timeout
[  662.657515][   T35] bridge_slave_1: left allmulticast mode
[  662.663314][   T35] bridge_slave_1: left promiscuous mode
[  662.765449][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.826296][   T35] bridge_slave_0: left allmulticast mode
[  662.831990][   T35] bridge_slave_0: left promiscuous mode
[  662.886478][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.411444][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  665.472564][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  665.518796][   T35] bond0 (unregistering): Released all slaves
[  665.835567][T18300] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  665.896607][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  665.909532][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  665.947599][   T35] bond0 (unregistering): Released all slaves
[  666.027313][T18300] usb 5-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f
[  666.037129][T18300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.086799][T18300] usb 5-1: config 0 descriptor??
[  666.087114][T27732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  666.244427][T27732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  666.274447][T27845] chnl_net:caif_netlink_parms(): no params data found
[  666.329002][T27754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  666.405799][  T941] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  666.474702][T27754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  666.537525][T18300] usb 5-1: string descriptor 0 read error: -22
[  666.556657][T18300] gspca_main: pac7311-2.14.0 probing 093a:2601
[  666.563275][T27732] team0: Port device team_slave_0 added
[  666.587265][T27732] team0: Port device team_slave_1 added
[  666.607598][  T941] usb 1-1: Using ep0 maxpacket: 8
[  666.625062][  T941] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  666.635282][  T941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.643422][  T941] usb 1-1: Product: syz
[  666.649365][  T941] usb 1-1: Manufacturer: syz
[  666.654044][  T941] usb 1-1: SerialNumber: syz
[  666.662022][  T941] usb 1-1: config 0 descriptor??
[  666.739377][T18300] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71
[  666.759073][T18300] pac7311 5-1:0.0: probe with driver pac7311 failed with error -71
[  666.783656][T18300] usb 5-1: USB disconnect, device number 61
[  666.880099][  T941] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  666.909828][T27754] team0: Port device team_slave_0 added
[  666.934714][T27754] team0: Port device team_slave_1 added
[  666.979552][T27732] batman_adv: batadv0: Adding interface: batadv_slave_0
[  667.000996][T27732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  667.042983][T27732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  667.154888][T27732] batman_adv: batadv0: Adding interface: batadv_slave_1
[  667.171568][T27732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  667.199796][T27732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.345140][T28687] ==================================================================
[  667.353255][T28687] BUG: KASAN: slab-use-after-free in uprobe_mmap+0xb9a/0x11a0
[  667.360743][T28687] Read of size 8 at addr ffff888023451030 by task syz.4.7638/28687
[  667.368655][T28687] 
[  667.370989][T28687] CPU: 1 UID: 0 PID: 28687 Comm: syz.4.7638 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0
[  667.381763][T28687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  667.391828][T28687] Call Trace:
[  667.395112][T28687]  <TASK>
[  667.398051][T28687]  dump_stack_lvl+0x241/0x360
[  667.402749][T28687]  ? __pfx_dump_stack_lvl+0x10/0x10
[  667.408050][T28687]  ? __pfx__printk+0x10/0x10
[  667.415259][T28687]  ? _printk+0xd5/0x120
[  667.419623][T28687]  ? __virt_addr_valid+0x183/0x530
[  667.424757][T28687]  ? __virt_addr_valid+0x183/0x530
[  667.429887][T28687]  print_report+0x169/0x550
[  667.434409][T28687]  ? __virt_addr_valid+0x183/0x530
[  667.439527][T28687]  ? __virt_addr_valid+0x183/0x530
[  667.444646][T28687]  ? __virt_addr_valid+0x45f/0x530
[  667.449777][T28687]  ? __phys_addr+0xba/0x170
[  667.454312][T28687]  ? uprobe_mmap+0xb9a/0x11a0
[  667.459000][T28687]  kasan_report+0x143/0x180
[  667.463516][T28687]  ? uprobe_mmap+0xb9a/0x11a0
[  667.468221][T28687]  uprobe_mmap+0xb9a/0x11a0
[  667.472780][T28687]  ? __pfx_uprobe_mmap+0x10/0x10
[  667.477746][T28687]  mmap_region+0x1891/0x2090
[  667.482346][T28687]  ? mark_lock+0x9a/0x350
[  667.486697][T28687]  ? __pfx_mmap_region+0x10/0x10
[  667.491641][T28687]  ? mm_get_unmapped_area+0xa5/0xd0
[  667.496847][T28687]  ? shmem_get_unmapped_area+0x2a7/0x8f0
[  667.502500][T28687]  ? cap_mmap_addr+0x163/0x2c0
[  667.507286][T28687]  ? __get_unmapped_area+0x2f0/0x360
[  667.512585][T28687]  do_mmap+0x8f9/0x1010
[  667.516753][T28687]  ? __pfx_do_mmap+0x10/0x10
[  667.521347][T28687]  ? __pfx_down_write_killable+0x10/0x10
[  667.527006][T28687]  ? __pfx_ima_file_mmap+0x10/0x10
[  667.532151][T28687]  ? security_mmap_file+0x178/0x1a0
[  667.537382][T28687]  vm_mmap_pgoff+0x1dd/0x3d0
[  667.542014][T28687]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  667.547138][T28687]  ? __fget_files+0x29/0x470
[  667.551759][T28687]  ? __fget_files+0x3f6/0x470
[  667.556572][T28687]  ksys_mmap_pgoff+0x4f1/0x720
[  667.561359][T28687]  ? __x64_sys_mmap+0x7f/0x140
[  667.566144][T28687]  do_syscall_64+0xf3/0x230
[  667.570662][T28687]  ? clear_bhb_loop+0x35/0x90
[  667.575356][T28687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.581256][T28687] RIP: 0033:0x7f90fa979e79
[  667.585682][T28687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  667.605311][T28687] RSP: 002b:00007f90fb725038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  667.613738][T28687] RAX: ffffffffffffffda RBX: 00007f90fab15f80 RCX: 00007f90fa979e79
[  667.621723][T28687] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020000000
[  667.629790][T28687] RBP: 00007f90fa9e7916 R08: 0000000000000005 R09: 0000000000000000
[  667.637768][T28687] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000
[  667.645838][T28687] R13: 0000000000000000 R14: 00007f90fab15f80 R15: 00007ffef903e4c8
[  667.653834][T28687]  </TASK>
[  667.656856][T28687] 
[  667.659182][T28687] Allocated by task 1065:
[  667.663519][T28687]  kasan_save_track+0x3f/0x80
[  667.668388][T28687]  __kasan_kmalloc+0x98/0xb0
[  667.672997][T28687]  __kmalloc_cache_node_noprof+0x1d3/0x300
[  667.679512][T28687]  __get_vm_area_node+0x113/0x270
[  667.684539][T28687]  __vmalloc_node_range_noprof+0x3bc/0x1460
[  667.690480][T28687]  dup_task_struct+0x444/0x8c0
[  667.695247][T28687]  copy_process+0x5d1/0x3e10
[  667.699845][T28687]  kernel_clone+0x223/0x880
[  667.704510][T28687]  user_mode_thread+0x132/0x1a0
[  667.709373][T28687]  call_usermodehelper_exec_work+0x5c/0x230
[  667.715280][T28687]  process_scheduled_works+0xa2c/0x1830
[  667.721008][T28687]  worker_thread+0x86d/0xd40
[  667.725608][T28687]  kthread+0x2f0/0x390
[  667.729682][T28687]  ret_from_fork+0x4b/0x80
[  667.734101][T28687]  ret_from_fork_asm+0x1a/0x30
[  667.738869][T28687] 
[  667.741187][T28687] Freed by task 46:
[  667.744996][T28687]  kasan_save_track+0x3f/0x80
[  667.749783][T28687]  kasan_save_free_info+0x40/0x50
[  667.754824][T28687]  poison_slab_object+0xe0/0x150
[  667.759770][T28687]  __kasan_slab_free+0x37/0x60
[  667.764535][T28687]  kfree+0x149/0x360
[  667.768439][T28687]  delayed_vfree_work+0x56/0x80
[  667.773297][T28687]  process_scheduled_works+0xa2c/0x1830
[  667.778847][T28687]  worker_thread+0x86d/0xd40
[  667.783479][T28687]  kthread+0x2f0/0x390
[  667.787552][T28687]  ret_from_fork+0x4b/0x80
[  667.791984][T28687]  ret_from_fork_asm+0x1a/0x30
[  667.796930][T28687] 
[  667.799250][T28687] The buggy address belongs to the object at ffff888023451000
[  667.799250][T28687]  which belongs to the cache kmalloc-64 of size 64
[  667.813144][T28687] The buggy address is located 48 bytes inside of
[  667.813144][T28687]  freed 64-byte region [ffff888023451000, ffff888023451040)
[  667.826779][T28687] 
[  667.829106][T28687] The buggy address belongs to the physical page:
[  667.835526][T28687] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23451
[  667.844285][T28687] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  667.851434][T28687] page_type: 0xfdffffff(slab)
[  667.856123][T28687] raw: 00fff00000000000 ffff8880154418c0 ffffea00007eaa40 dead000000000002
[  667.864708][T28687] raw: 0000000000000000 0000000000200020 00000001fdffffff 0000000000000000
[  667.873282][T28687] page dumped because: kasan: bad access detected
[  667.879699][T28687] page_owner tracks the page as allocated
[  667.885407][T28687] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6763, tgid 6762 (syz.1.648), ts 110923825566, free_ts 110900333612
[  667.906000][T28687]  post_alloc_hook+0x1f3/0x230
[  667.910778][T28687]  get_page_from_freelist+0x2e4c/0x2f10
[  667.916331][T28687]  __alloc_pages_noprof+0x256/0x6c0
[  667.921530][T28687]  alloc_slab_page+0x5f/0x120
[  667.926207][T28687]  allocate_slab+0x5a/0x2f0
[  667.930709][T28687]  ___slab_alloc+0xcd1/0x14b0
[  667.935391][T28687]  __slab_alloc+0x58/0xa0
[  667.939732][T28687]  __kmalloc_cache_noprof+0x1d5/0x2c0
[  667.945106][T28687]  sctp_add_bind_addr+0x89/0x3a0
[  667.950050][T28687]  sctp_copy_local_addr_list+0x311/0x500
[  667.955693][T28687]  sctp_bind_addr_copy+0xad/0x3b0
[  667.960721][T28687]  sctp_connect_new_asoc+0x2f3/0x6c0
[  667.966020][T28687]  __sctp_connect+0x66d/0xe30
[  667.970706][T28687]  sctp_inet_connect+0x149/0x1f0
[  667.975651][T28687]  io_connect+0xa4/0x4f0
[  667.979898][T28687]  io_issue_sqe+0x3cf/0x1570
[  667.984490][T28687] page last free pid 4668 tgid 4668 stack trace:
[  667.990813][T28687]  free_unref_page+0xd19/0xea0
[  667.995576][T28687]  __slab_free+0x31b/0x3d0
[  667.999995][T28687]  qlist_free_all+0x9e/0x140
[  668.004592][T28687]  kasan_quarantine_reduce+0x14f/0x170
[  668.010062][T28687]  __kasan_slab_alloc+0x23/0x80
[  668.014930][T28687]  __kmalloc_noprof+0x1a6/0x400
[  668.019792][T28687]  tomoyo_realpath_from_path+0xcf/0x5e0
[  668.025345][T28687]  tomoyo_path_perm+0x2b7/0x740
[  668.030199][T28687]  security_inode_getattr+0xd8/0x130
[  668.035573][T28687]  vfs_getattr+0x45/0x430
[  668.039906][T28687]  vfs_fstatat+0xe4/0x190
[  668.044238][T28687]  __x64_sys_newfstatat+0x11d/0x1a0
[  668.049445][T28687]  do_syscall_64+0xf3/0x230
[  668.053953][T28687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.059852][T28687] 
[  668.062169][T28687] Memory state around the buggy address:
[  668.067799][T28687]  ffff888023450f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.075855][T28687]  ffff888023450f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.083913][T28687] >ffff888023451000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  668.092055][T28687]                                      ^
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  668.097688][T28687]  ffff888023451080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  668.105755][T28687]  ffff888023451100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  668.113814][T28687] ==================================================================
[  668.133541][T28687] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  668.140775][T28687] CPU: 1 UID: 0 PID: 28687 Comm: syz.4.7638 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0
[  668.151553][T28687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  668.161629][T28687] Call Trace:
[  668.164917][T28687]  <TASK>
[  668.167857][T28687]  dump_stack_lvl+0x241/0x360
[  668.172545][T28687]  ? __pfx_dump_stack_lvl+0x10/0x10
[  668.177748][T28687]  ? __pfx__printk+0x10/0x10
[  668.182362][T28687]  ? preempt_schedule+0xe1/0xf0
[  668.187246][T28687]  ? vscnprintf+0x5d/0x90
[  668.191592][T28687]  panic+0x349/0x860
[  668.195557][T28687]  ? check_panic_on_warn+0x21/0xb0
[  668.200684][T28687]  ? __pfx_panic+0x10/0x10
[  668.205135][T28687]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  668.211149][T28687]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  668.217491][T28687]  ? print_report+0x502/0x550
[  668.222193][T28687]  check_panic_on_warn+0x86/0xb0
[  668.227325][T28687]  ? uprobe_mmap+0xb9a/0x11a0
[  668.232013][T28687]  end_report+0x77/0x160
[  668.236265][T28687]  kasan_report+0x154/0x180
[  668.240816][T28687]  ? uprobe_mmap+0xb9a/0x11a0
[  668.245535][T28687]  uprobe_mmap+0xb9a/0x11a0
[  668.250086][T28687]  ? __pfx_uprobe_mmap+0x10/0x10
[  668.255060][T28687]  mmap_region+0x1891/0x2090
[  668.259668][T28687]  ? mark_lock+0x9a/0x350
[  668.264025][T28687]  ? __pfx_mmap_region+0x10/0x10
[  668.268969][T28687]  ? mm_get_unmapped_area+0xa5/0xd0
[  668.274181][T28687]  ? shmem_get_unmapped_area+0x2a7/0x8f0
[  668.279826][T28687]  ? cap_mmap_addr+0x163/0x2c0
[  668.284609][T28687]  ? __get_unmapped_area+0x2f0/0x360
[  668.289911][T28687]  do_mmap+0x8f9/0x1010
[  668.294086][T28687]  ? __pfx_do_mmap+0x10/0x10
[  668.298701][T28687]  ? __pfx_down_write_killable+0x10/0x10
[  668.304387][T28687]  ? __pfx_ima_file_mmap+0x10/0x10
[  668.309548][T28687]  ? security_mmap_file+0x178/0x1a0
[  668.314773][T28687]  vm_mmap_pgoff+0x1dd/0x3d0
[  668.319387][T28687]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  668.324517][T28687]  ? __fget_files+0x29/0x470
[  668.329136][T28687]  ? __fget_files+0x3f6/0x470
[  668.333831][T28687]  ksys_mmap_pgoff+0x4f1/0x720
[  668.338618][T28687]  ? __x64_sys_mmap+0x7f/0x140
[  668.343401][T28687]  do_syscall_64+0xf3/0x230
[  668.347915][T28687]  ? clear_bhb_loop+0x35/0x90
[  668.352608][T28687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.358517][T28687] RIP: 0033:0x7f90fa979e79
[  668.362957][T28687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  668.382859][T28687] RSP: 002b:00007f90fb725038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  668.391302][T28687] RAX: ffffffffffffffda RBX: 00007f90fab15f80 RCX: 00007f90fa979e79
[  668.399288][T28687] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020000000
[  668.407262][T28687] RBP: 00007f90fa9e7916 R08: 0000000000000005 R09: 0000000000000000
[  668.415245][T28687] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000
[  668.423223][T28687] R13: 0000000000000000 R14: 00007f90fab15f80 R15: 00007ffef903e4c8
[  668.431226][T28687]  </TASK>
[  668.434486][T28687] Kernel Offset: disabled
[  668.438802][T28687] Rebooting in 86400 seconds..