last executing test programs:

2m7.45520111s ago: executing program 4 (id=5):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000500)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x0, 0x2e})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000600)={0x800000, 0x80, 0x4d, 0x8, 0x3, 0x5})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000000e00)=""/4080, 0x1044}], 0x1, 0x1, 0x1)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="200f05"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000dc0)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x14, @string={0x34, 0x3, "ba000000000000000000"}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000140)={0x40, 0x17, 0xc3, {0xc3, 0x21, "ff7ae38cd4f1dabbae9d594003edf4de6b73a4934851ce947af1964afda59742c83b2a4d4447213681dfe457f79b5c0c5a003232f9cf980ab6667cc99325d6c464772e0c9adf449573442aa83502dea53d984b67d55aaace41ead3174c39109c2860bd66cda3384a9e4042ebef252e7704d3fbde81b9c518ce721a931e52110de61309370a71f3ae672ff9a4582d5375d0787df6cc75659820e89a82e472a1eebe628360bb09f2dfc66ef7e6e41987ef5ee69b471ce469331b1fc7c5101dbf40ee"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}, &(0x7f0000000280)={0x0, 0x22, 0x1b, {[@main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x2, "8fb372c4"}, @main=@item_4={0x3, 0x0, 0x9, "5dc79ac2"}, @global=@item_012={0x2, 0x1, 0x7, "c137"}, @local=@item_4={0x3, 0x2, 0x7, "4312ae16"}, @main=@item_012={0x2, 0x0, 0x0, '@d'}, @local=@item_4={0x3, 0x2, 0xd, "764eccf4"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8c, 0x40, 0x1, {0x22, 0xed3}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x0, 0x15, 0x22, "7dffbec3c57860b1fc72414941d487d7b80ecad9fa8c764d18a7f0c4b622d96fb51b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x1, 0x48, "6650be16081dd526980d8823d997fa383dbe81118957cc8e93c1a4a241be3b605e48e149bbd67668346d4ca9931c2f2e5788fab977ea6d49f1e0bd3a7831b66401f3fabeb004a1ae"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x5}})

2m6.822130419s ago: executing program 0 (id=1):
userfaultfd(0x801)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5}, {0x0, 0x3}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000005, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8, 0x3}, {0xc, 0x2, 0x5, 0xfffc, 0x44, 0x8}, 0x78, 0xfffffffe, 0x6}}]}, @TCA_U32_SEL={0x14, 0x5, {0xf, 0x10, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f}}]}}]}, 0x84}}, 0x24040084)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01fffff0000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket(0xa, 0x5, 0x0)
dup(r1)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\x00', 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
pipe2$9p(&(0x7f0000000080), 0x80000)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r4, 0x5, 0x4)

2m6.476329246s ago: executing program 3 (id=6):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0)
r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0xb, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x83, 0x1, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000009, 0x5, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0xc, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0xf469, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0xff], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x8, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x9, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1f, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0xcab, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x2844, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x3f00000000000097)

2m6.063677795s ago: executing program 0 (id=7):
r0 = socket$inet(0x2, 0x3, 0xff)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f00000009c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) (fail_nth: 3)

2m5.857127254s ago: executing program 1 (id=2):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00')
exit(0xffff)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1001})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002400)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={0x0}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c00)={r0, 0xe0, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002640)=[0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000002980)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000029c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f0000002a00)=[{}], 0x8, 0x0, 0x0, &(0x7f0000002a80), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000002ac0)}}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002c40)=@newchain={0x870, 0x64, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xa, 0xd}, {0xfff2, 0xfff3}, {0xfff2, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x7ac, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe0}, @TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x5, 0x3, 0x1ff, {0x9, 0x2, 0x3ff, 0x9, 0x7ff, 0x724}, {0x4, 0x3, 0xa7e6, 0x8, 0x7, 0x67ce}, 0x2, 0x7, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x1, 0x1, 0x0, 0x9, 0x8, 0xfffffffc, 0x7fffffff, 0x8, 0x0, 0x401, 0x2, 0xd, 0x31e, 0x6, 0x6, 0x9, 0x0, 0x0, 0x2, 0x101, 0xe, 0x9, 0x2, 0x3, 0x401, 0x4, 0x7, 0x8d71, 0xdeac, 0x7, 0xfff, 0x2, 0x3, 0x8, 0x7, 0xfff, 0x1ff, 0x8, 0x2, 0x9, 0x1, 0xff, 0x4, 0x9376, 0xd8, 0x3, 0xa, 0x8, 0x6, 0x1, 0x859, 0x10000, 0x7ef, 0x0, 0x8, 0x8, 0x10000, 0x2546a6f9, 0x5, 0x3, 0x3, 0x185, 0x6, 0x0, 0x9, 0x800, 0x80000000, 0x8, 0x6, 0x6, 0x0, 0x2, 0x7, 0x9b7f, 0x0, 0x5, 0x9, 0x8, 0x6, 0x7, 0x8, 0x400, 0xae, 0x8, 0x7fffffff, 0x7, 0x101, 0x0, 0x2, 0xffff, 0x4, 0x46dd3a4b, 0x3ff, 0x8, 0x3, 0x5, 0x3, 0x5, 0x1, 0x310c, 0x8, 0xa, 0x7a2, 0x9, 0x9, 0x2, 0x0, 0xf, 0x8, 0x9, 0x995, 0xffffffbd, 0x1, 0xdaa, 0x6, 0x400, 0x0, 0xa81, 0xfffffd9f, 0x8, 0x8, 0x401, 0x9, 0x7fffffff, 0x10000, 0x6, 0x3, 0x7, 0x8001, 0x7, 0x6b, 0x1, 0x7, 0x6, 0x7b, 0xffffffff, 0x9, 0x4, 0xa31, 0x1, 0x5, 0xc0a2, 0xe2, 0x0, 0x2, 0x5473, 0x8, 0xa6, 0x4, 0x81, 0x8, 0x79b1, 0xffffffff, 0x1, 0x1000, 0x1c6, 0x69, 0x6, 0x1ff, 0xffd, 0x8ab, 0x7, 0x4, 0x9, 0x9, 0xe, 0x8595, 0x0, 0x6, 0x3, 0xb, 0x7, 0x2, 0x800, 0x400, 0xd1, 0x0, 0x2, 0x106d, 0x6, 0x9, 0x3, 0xfffffffb, 0x10000, 0x27, 0x4, 0x1, 0x65f, 0x7, 0x8, 0x1, 0x9, 0x100, 0xffff4b68, 0x1, 0x9, 0x401, 0x2, 0x3, 0x9, 0x3cb1, 0x5, 0x557f19b1, 0x1311, 0x828e, 0x38b93528, 0x0, 0x7, 0x2d94d00f, 0x5, 0x1, 0x1, 0x2, 0x4, 0x465, 0x8, 0xd, 0x379, 0x2, 0x86, 0x800, 0x8, 0x2, 0x7, 0x1, 0x31, 0x2f, 0x800, 0x80000001, 0x8001, 0xabc5, 0x5c, 0x40, 0xfffffffd, 0x5, 0x40, 0x6, 0x8, 0x8, 0xb, 0x0, 0xf, 0x3, 0x2e0, 0x4, 0xa, 0x6, 0x7fffffff, 0xf551, 0xc, 0x5, 0x3, 0xbc, 0x3, 0xffff]}]}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xbcc7}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_ACT={0x348, 0x6, [@m_mirred={0x144, 0x12, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xffffffff, 0xffffffffffffffff, 0x7, 0x1}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x2, 0x7, 0x30000000, 0x8}, 0x1, r4}}]}, {0xd8, 0x6, "b56826ddb1af9f953194768f32a061081ea06244ce647f1084e696a12442c097cfe255e06f47ed263592ec1df003099fbfdcee2a0efcab03e318dc58cb934d59989a309b6543b219e78a46ee4c06712a43136c3d47045c81b6507590b5fb8c4d0dc30f8c95cdb80155807e4560dafbe601b7ba9a7a4e266c21bfdd57ccf11c4c1fa4b92ac414b5d2bb015d87e31859e3e0aa7ed4e1fdda7b940bdca706f9b52ab3f9cc0b0c7932a0dd65a8829d582ab8250141409950de18d6bf251611e0ddbb5cbd0c73c1705e304834c55138f791a76b6329ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xfc, 0x2, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9a}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x84, 0x6, "a2e9cf5fc29625a3c57f4edeb3e13593127227154cbd3c5639250e791a47673e3937bc2af5cccd5b44a10e1ec494d3f9a5514af691ce8ee224c84ee5c5218ae54188c281960fc450b126806502cb6f353e56e0705a192b1e2d8b7cdd1816b1b5248a7462961575f9cb826ee9b14ae27bfeafaa6f94999b7f45513671d93ec6b2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x104, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x1a3, 0x3, 0x933, 0xf}}]}, {0xbe, 0x6, "aa3cf1729c431c7c6b6c04b4c00195ca9737a04f6549c2a8144402deba1c1fd615fa7f5b2194be1cf7299b7d8f592444035a274e8f654e4f0fb0450c4b76cfb44c6b0955700d22931b081344c212bc47e034cb89d9871798bbaaab0d9eb7cdafdb626f808761a6eea7eab368ed3f712b24baabd227d2eda5a10fb5f33d34c565afec1d1c4573d9fd9dfb0a9a8108f957e560196b34fda7202b82eefc28e6f618e78b05afc60ebcf675596f10cc68abc51418e0e01f4c1c7391f9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x7fff}, @TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}, @TCA_RATE={0x6, 0x5, {0xf, 0x1}}, @TCA_RATE={0x6, 0x5, {0xb7, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x8dab40d37e7fb7c7}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x1}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast2}]}}]}, 0x870}}, 0xc015)
r5 = timerfd_create(0x0, 0x80000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x7, &(0x7f0000002740)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x12, 0x3, 0x0, &(0x7f0000002880)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000002900)=0x8004)

2m5.638830679s ago: executing program 0 (id=9):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c"], 0xbc}}, 0x0)
prctl$PR_MCE_KILL(0x35, 0x0, 0x8)
prctl$PR_MCE_KILL(0x35, 0x0, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @multicast1}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200002, 0x1ff, 0x9})
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f00000004c0), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000500)=0x20)
mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000009, 0x11, r3, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f0000000580))
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x3)
prctl$PR_SET_NAME(0xf, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89a2, &(0x7f0000000540)={'bridge0\x00', @random="1d0000000988"})

2m4.878773918s ago: executing program 2 (id=12):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r1=>0x0})
r2 = syz_open_procfs(0x0, &(0x7f0000000840)='mounts\x00')
pread64(r2, &(0x7f0000000880)=""/253, 0xfd, 0x7fffffffffffffff)
write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000980)={0x1, 0x8}, 0x2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x4, 0x70bd2b, 0xffffffff, {{0x11}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xec0}, 0x20000804)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10000044}, 0x20000000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40a01, 0x0)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000a00)={0x2, &(0x7f00000009c0)=[{0x3, 0x1, 0xf7, 0x1}, {0x0, 0x8, 0x9, 0x7}]}, 0x10)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201})
r6 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r8, {0x2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_LVALUE={0x6, 0x2, [@TCF_META_TYPE_VAR="b294"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3]}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200450c0}, 0x4880)
r9 = socket(0x400000000010, 0x2, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000fc0)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
getsockname$packet(r2, &(0x7f0000001100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001140)=0x14)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001180)={<r13=>0x0, @broadcast, @local}, &(0x7f00000011c0)=0xc)
sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000013c0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001200)={0x174, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x40000}, 0x880)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000007c0)={'syzkaller1\x00', @link_local})
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0)
write$tun(r5, &(0x7f0000000800)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc82c00fe8000000000000000000000000000aafc"], 0xffe)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1156}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x7, 0x8, 0x7, 0x92b9, 0x8000, 0x3, 0xfffe]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9d5}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x7, 0xf95]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8051}, 0x8080)

2m4.659179811s ago: executing program 1 (id=13):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x0) (fail_nth: 3)

2m4.588782622s ago: executing program 0 (id=14):
r0 = syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000040)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

2m4.588005423s ago: executing program 1 (id=15):
userfaultfd(0x801)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5}, {0x0, 0x3}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000005, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8, 0x3}, {0xc, 0x2, 0x5, 0xfffc, 0x44, 0x8}, 0x78, 0xfffffffe, 0x6}}]}, @TCA_U32_SEL={0x14, 0x5, {0xf, 0x10, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f}}]}}]}, 0x84}}, 0x24040084)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01fffff0000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket(0xa, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r1)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r4, 0x5, 0x4)

2m4.549267069s ago: executing program 3 (id=16):
userfaultfd(0x801)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5}, {0x0, 0x3}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000005, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8, 0x3}, {0xc, 0x2, 0x5, 0xfffc, 0x44, 0x8}, 0x78, 0xfffffffe, 0x6}}]}, @TCA_U32_SEL={0x14, 0x5, {0xf, 0x10, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f}}]}}]}, 0x84}}, 0x24040084)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01fffff0000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r1)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\x00', 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
pipe2$9p(&(0x7f0000000080), 0x80000)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r4, 0x5, 0x4)

2m4.388683972s ago: executing program 1 (id=17):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r6, 0x5)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20008004)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r7, 0x84, 0x81, &(0x7f0000000180)="0000000000000002", 0x8)
sendto$inet6(r7, &(0x7f00000001c0)='Y', 0x1, 0x20004001, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r7, 0x84, 0x7a, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000900)=0xc)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000940)=@assoc_value={<r10=>0x0}, &(0x7f0000000980)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000009c0)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r10}, 0x20)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001040)=[{&(0x7f0000000280)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000500)="601e1d8a512f9d135f438cf32d7b0d45c3bda521e877a0839de7feb376e4e2fd8bbc6922e751e0830bd68a3647da2a9dc02e57a55405b164583278cfd2792367fb6c9c827ea82af37bd748694ffb461b6b1ec8492809c41c069b699d4c5ff5b2bf45294e34bc4de00e382cda6e47d4717f4174688f3d9e053f5638b5b5e3e4c3772668064e2623c2432b5e8ca1547066059f70aeca89c49ba6cf9856135c5a52c03322b2fecb75feea11ac60683a9aa9cb676426693c68ca2da45b6a88ace000c64b37d40f3fe97f1c73df8eca9688864ddc68f833b5067b3715eec0ce4621b30c344a657c7bd6a85894", 0xea}, {&(0x7f0000000600)="bdf63297b02520177223bb3dd59bad9b1dbd92658f14c2afcc5f3867b25751b69b33468e2ede8d0c81b1a1e0b3", 0x2d}, {&(0x7f0000000780)="c78daa3c710ac50c078f0cf8b389ea919654594d5870019fbb25e1b661755de4cdffbddb51807710cfb5786bfd3b6cbbb375a6027d0f21765deefaf1ecb05bb37ccb735b86767162727e4aee95a7e24f4d1d61fe08ff2a335387233808b66a30e3e6e4e0b2e37ab5eadd39ac9f5ba4ebe4428a01316b0f51f77f656db674a54f5ba515fbefb74d4d774b95b9977a5bc14ec24c6bf2f17dafe81ccd928fb7e314177869a4d85588ebe4fc8462512ad6d83dc76d94b76c479c5585132e", 0xbc}], 0x3, &(0x7f0000000a00)=[@dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @init={0x18, 0x84, 0x0, {0x5, 0x1, 0x76b, 0x200}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @sndinfo={0x20, 0x84, 0x2, {0xfffc, 0x8005, 0x1dfa, 0x4, r10}}, @init={0x18, 0x84, 0x0, {0xf, 0x0, 0xf0, 0x2}}, @init={0x18, 0x84, 0x0, {0x2, 0xd, 0x0, 0x6}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x8}}], 0xb8}, {&(0x7f0000000b00)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000b40)="683039fbea2405ecd84e47a2a8724b0ff70f", 0x12}], 0x1, &(0x7f0000000bc0)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}], 0x20, 0x8081}, {&(0x7f0000000c40)=@in6={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe0}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000c80)="d1b996a1bbb681cbcca24cef3ee450e6720dfbf8c525454da20c3b0cc44c188c59e7cbe72d942b226606f81a54647bd47741eaa9569a29c8445a4469604e719189db861669c5e522947a45e2fa3a6e650e086bd6bd8ccb7d246590775643153d087fec58c70fa6516c00ef69874edc418d487df23b53bf5ea882a71f54db2909f2b246698187c2f8f24880790fff0758c0f749f14f8771f2fbb15dfab7aaccb5e5", 0xa1}, {&(0x7f0000000d40)="853ece3f8395a7708682c54c90ef5a243e27e2aa4c4e4bea65a4c2a9f64d7b7b05d1451ca9e3b4324745274ba046be7f0a18612f93be7c01014e62020b9fb34429dc1f4d493bf0ea57cfb12ed863e379180c3311ea7392541d96970f81286550d79b1ded4400f3771361dbf96ebc168b7856f022bf63ce30548f612458a7ae935f4ffd389546e5bf4eae57f03840855fb3f5125e1d473ebdfc9a028380ac450984f061a4568262c580ac67485171845148b793d73a38a018f72aba54bc5dff03bc1d2a6e4d10c8b2737022f451c55fdae6f3", 0xd2}, {&(0x7f0000000e40)="75454472ec52b59fb6a08e9ecc706ce96ed8c176ee98b5c85224bc4ca9055ff8a1c06680b2a5dedbe5f00310e39d908c3a0139d2b8648132e2483ad0403e932ac23fb1aa9b6ecd3eec4cb23c9e66a6055e51c85967d317beb5b76ff1295704135fa27962aab960363e36182bb74ba2f9c0c25b83e66e7d7d8bb0499145f5227dcb0b6253d92ee2557eaab4f1cbda1137599f05fee3e2b23e433bcd801197071249edcbc65b03836cbacb0e9b91c72ea2b3a690201959490af5e4a3c247b6e27b02170f2441664e97b59bd218f9a2be", 0xcf}, {&(0x7f0000000f40)="6af62531c0007545d8fecf1393c8be4f6994c64d3901e8123f07ca8360798728dffc47112d61b755c528016acc7a881c8cff8bfc7cdc1cac8d6f1216aa35c88f99a8edc0caf78a60f729c895b5c62ed7380fe87f21914e688e8231cc99da3e83bba1ef18b4e647bbad8fdb60c1f51cb1577de8f56c001e3b0f497792ab931a2cc6ff86ddfb15bcde8805fcfc0f28ad7da6a48370", 0x94}], 0x4, 0x0, 0x0, 0x8880}], 0x3, 0x4001)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000380)={0x0, 0x2, 0x1, "fa"}, 0x9)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xf1, 0x64, 0x96, 0x40, 0x7c0, 0x158b, 0xd9d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x40, 0x4, 0xe0, 0x1, "", [{{0x9, 0x4, 0x2c, 0x7, 0x1, 0xa7, 0x3a, 0x30, 0x6, [], [{{0x9, 0x5, 0x83, 0x3, 0x200, 0x39, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCOUTQNSD(r11, 0x894b, &(0x7f00000000c0))

2m4.33851368s ago: executing program 2 (id=18):
bpf$MAP_CREATE(0x0, &(0x7f0000002740)=ANY=[@ANYBLOB="10000000040000000848fbb00a00000000000000", @ANYRES32, @ANYBLOB="84e10a244ef2ff013cf495e0681264f802f82cd591e6981098ae5fe610945047d3af8e2af194a92cd34df07fe679b8d1e1730a554a60b60eafa78945288703d7d72ce38f2650285093e4194a92a96b5a5f83111916586db29be76bbf49", @ANYBLOB="00c1e8a44a4bf5295d23446e5ae58816d8606800416914a097ab59ed1a5049eac3ca12477ecd42ae846f130610e7a0e4ab928601aabd3ccc3707d39c8685cde42bb819f2c643ea13c7f6829d5763abe8a7c1b935430dd84e0a71445e9668d706f7dc4d73c7d8c9e245d1c636d9ac53d3d3f7f9916836b23e9d76c86455a50b6ff8ad207d81d484fefff4e722cfb118a86b7d009d61594695d18e90675acf49e527586fe0607c0df1a8e08e66476bd29f341841ff517a1d5e32c7033fe78343ca82032a", @ANYRES32, @ANYRESHEX], 0x50)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0)
syz_open_dev$video(0x0, 0x7ff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000025c0)=ANY=[@ANYBLOB="20000040260041002dbd7000f9ffffff100000000a005ee18bf58987f7ff0000"], 0x20}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r1, 0x4, 0x40800)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
connect(r0, &(0x7f0000000100)=@in={0x2, 0x4e23, @local}, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e617400400000000a01040000000000000000010000000900010073797a30000000000900020073797a31000000001400048010000180090001006d61737100000000140000001100010000000000000000000100000a00"], 0xd0}}, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='sit0\x00', 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r3, 0x2000009)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000026c0)={'syzkaller0\x00', 0x1002})
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0xa, 0x300)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002700)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003980)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x24040014)
write(0xffffffffffffffff, &(0x7f00000039c0)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0x26)
sendfile(r1, r3, 0x0, 0x7ffff004)

2m4.252354456s ago: executing program 4 (id=19):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40840}, 0x0)

2m4.150813589s ago: executing program 2 (id=20):
socket$nl_netfilter(0x10, 0x3, 0xc)
mq_open(0x0, 0x8c2, 0x30, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000400), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}})
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0xfffffe38)
renameat2(r2, &(0x7f0000002100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000002140)='./file0\x00', 0x1)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x200088d4)
sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)='3u', 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_dev$video(&(0x7f00000001c0), 0xa96, 0x200)
ioctl$VIDIOC_G_STD(r6, 0x80085617, &(0x7f0000000380))
syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000580)={<r9=>0x0, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000600)=0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000640)={r9, @in6={{0xa, 0x4e22, 0xd9f, @empty, 0x2}}, 0x6d, 0x1ff}, 0x90)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ptrace(0x10, r5)
ptrace$poke(0x5, r5, &(0x7f0000000200), 0x0)

2m4.098385622s ago: executing program 3 (id=21):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000200000440012800b000100697036746e6c00003400028014000200fe8000000000000000000000000000aa08000100", @ANYRES32, @ANYBLOB="14000300000002"], 0x64}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0)
dup2(r0, r0)

2m4.011116312s ago: executing program 4 (id=22):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000200)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
timer_create(0x5, 0x0, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x5, 0x2)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000180)=r3)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/68, 0x0, 0x60000})
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000003c0)={0x0, r3})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000004c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000500)=0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'pimreg1\x00', 0xc201})
write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="08004305060005"], 0x1200)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x4008af04, &(0x7f0000000540))
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000240)=""/21, 0x0)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000005c0), 0x301, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, &(0x7f0000000640)={0xc0, 0xd46a7cd6ed1f9379})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
set_mempolicy(0x8006, 0x0, 0x5)
r6 = socket$kcm(0x2, 0x0, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="80e839909a7407099d7963e0eca14be5ae5ba238b7cd1fe855c1b66ec386f9541cebd38fad7e3eddef304545c9abc69ebbc2dde9794ee71e8ea662a1233a54391c95c8385853fa25d11510feb360763655af6691dd6c863889", @ANYRES16=r0, @ANYRESDEC, @ANYBLOB="e3559981fb3fe1cae9bf97cdbe31c021cb7b1f0ff6f5bc5b27ec45fc5f21b7ae87023fd4633abfd0782e202a", @ANYRES8=r1, @ANYRESOCT=r6], 0x5c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0)

2m3.990493496s ago: executing program 2 (id=23):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000140)) (async)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000140))
getdents64(r0, &(0x7f0000000180)=""/68, 0x44)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_bulk={0x3, {0xd}, 0xc4d, 0x2, &(0x7f0000000200)="59e0b6799e07c918c8714650c3a4ab1306a808a25a14c512b4b94bc53d13e8f529ecec657058dabc6cbd9d0665f518ae38b9af2603aff11ce9832004160398696fef1cf5c020798f5c121146bf813094b54a39f7f8cb141255be5d8f", 0x5c, 0x3, 0x2, 0x7, 0xfffffff9, 0x1, &(0x7f0000000280)="3745caac9ec6d74e7699109da55f6af66d243897110398486b0986f65ca218045fa7feb56ffb45087bc89b2a5f9b6abe333fdcc3999e33835a11acf706a0355e51ef87e0bf04c3ced09422a39fb095385cc6ec754c9b1f5f2870a4af84496646764528141fa534c59a89d8ba746e98c1d5056de97b8ebf823f5c"})
ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) (async)
ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x8002, 0x0)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(0xffffffffffffffff, 0xc040583f, &(0x7f0000000400)={{@_ha_fsid={[0x2, 0x92]}, {0x8001, 0xa, 0x9b, 0x784}}, {{[0x9, 0x8, 0x200, 0x9]}, 0x0, 0x1, 0x8, 0x0, &(0x7f0000000380)=[{{@_ha_fsid={[0x4, 0x8000]}, {0x8, 0x0, 0xffff, 0x8}}, 0x7, 0x0, '&{\x00'}, {{@align=0x3, {0x6, 0x7, 0x400, 0xffffffffffff72ab}}, 0x100, 0x0, '/dev/btrfs-control\x00'}]}}) (async)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(0xffffffffffffffff, 0xc040583f, &(0x7f0000000400)={{@_ha_fsid={[0x2, 0x92]}, {0x8001, 0xa, 0x9b, 0x784}}, {{[0x9, 0x8, 0x200, 0x9]}, 0x0, 0x1, 0x8, 0x0, &(0x7f0000000380)=[{{@_ha_fsid={[0x4, 0x8000]}, {0x8, 0x0, 0xffff, 0x8}}, 0x7, 0x0, '&{\x00'}, {{@align=0x3, {0x6, 0x7, 0x400, 0xffffffffffff72ab}}, 0x100, 0x0, '/dev/btrfs-control\x00'}]}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000440)={{<r2=>0x0, 0x7, 0x2, 0x8, 0x9a47, 0x5, 0x9, 0x11ce0cbb, 0x6, 0xd6, 0x3910, 0x5, 0x9, 0x1, 0x4}, 0x8, [0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000004c0)={{r2, 0x9, 0x1, 0x97, 0xffffffffffffffef, 0x0, 0x8000000000000000, 0x9, 0x7, 0x9, 0x3, 0x3, 0x7, 0x0, 0x6}})
splice(r0, &(0x7f00000014c0)=0xf, r0, &(0x7f0000001500)=0x8, 0x7, 0x6)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000001580)={0x3f39, 0x0, &(0x7f0000001540)=[r1]}, 0x1) (async)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000001580)={0x3f39, 0x0, &(0x7f0000001540)=[r1]}, 0x1)
read$FUSE(r0, &(0x7f00000015c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
statx(r0, &(0x7f0000003600)='./file0\x00', 0x100, 0x40, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
getresgid(&(0x7f0000003740), &(0x7f0000003780), &(0x7f00000037c0)) (async)
getresgid(&(0x7f0000003740)=<r9=>0x0, &(0x7f0000003780)=<r10=>0x0, &(0x7f00000037c0))
write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000003800)={0x130, 0x0, r3, {0x80200000000000, 0x8, 0x0, '\x00', {0x2, 0x9, 0x6, 0x10, r7, r9, 0x4000, '\x00', 0x3, 0x2, 0x100000000, 0x3, {0xaf, 0xb8c}, {0x100000001}, {0x80000000, 0x6}, {0x8, 0x9}, 0x5, 0x349, 0x259, 0xc}}}, 0x130)
preadv(r0, &(0x7f0000003a40)=[{&(0x7f0000003940)=""/238, 0xee}], 0x1, 0x0, 0x9)
r11 = accept$inet(r1, &(0x7f0000003a80)={0x2, 0x0, @dev}, &(0x7f0000003ac0)=0x10)
ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000003b00)={{0x2, 0x4e23, @local}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x0, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) (async)
ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000003b00)={{0x2, 0x4e23, @local}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x0, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'})
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000005e80), &(0x7f0000005ec0)=0xc) (async)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000005e80)={0x0, <r12=>0x0}, &(0x7f0000005ec0)=0xc)
stat(&(0x7f0000005f00)='./file0\x00', &(0x7f0000005f40)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
syz_fuse_handle_req(r1, &(0x7f0000003b80)="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", 0x2000, &(0x7f00000064c0)={&(0x7f0000005b80)={0x50, 0x0, 0x4, {0x7, 0x2d, 0x5, 0xffffffff88000210, 0x1, 0x7c9, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3}}, &(0x7f0000005c00)={0x18, 0x0, 0x8, {0x800080000}}, &(0x7f0000005c40)={0x18, 0xfffffffffffffffe, 0x4, {0x7}}, &(0x7f0000005c80)={0x18, 0x0, 0x6, {0xb}}, &(0x7f0000005cc0)={0x18, 0x2f, 0x3, {0xfff}}, &(0x7f0000005d00)={0x28, 0xfffffffffffffff5, 0x6, {{0x4, 0x2, 0x0, r6}}}, &(0x7f0000005d40)={0x60, 0x0, 0x9, {{0x0, 0x5, 0x8, 0xffffffffffffffff, 0x2, 0x8, 0x8000, 0x16}}}, &(0x7f0000005dc0)={0x18, 0xfffffffffffffff5, 0xe}, &(0x7f0000005e00)={0x15, 0xffffffffffffffda, 0x9572, {'\xaa\xaa\xaa\xaa\xaa'}}, &(0x7f0000005e40)={0x20, 0x0, 0x3ff}, &(0x7f0000005fc0)={0x78, 0xfffffffffffffff5, 0x8, {0xffffffffffffffff, 0x6, 0x0, {0x2, 0x2, 0x2, 0xda8, 0x10000, 0x58170f11, 0x5, 0x0, 0x9, 0x8000, 0x80000001, r12, r13, 0x7}}}, &(0x7f0000006040)={0x90, 0x0, 0x5, {0x5, 0x1, 0x2, 0x8, 0x1ff, 0xffffff7f, {0x4, 0x746d, 0x8, 0x100, 0x6, 0x8, 0x7fff, 0x4, 0x6, 0x4000, 0x10, r4, r9, 0x7c, 0xd0fe}}}, &(0x7f0000006100)={0xb8, 0xffffffffffffffda, 0x4, [{0x2, 0x4, 0x3, 0x5, '&{\x00'}, {0x3, 0x2, 0x1, 0xd, '\x00'}, {0x6, 0x3, 0x0, 0x2}, {0x1, 0x1c2a, 0x13, 0x80, '/dev/btrfs-control\x00'}, {0x6, 0x5, 0x3, 0x3ff, ',{&'}]}, &(0x7f00000061c0)={0xb0, 0x0, 0x2, [{{0x2, 0x3, 0x200, 0x33e, 0x5, 0x9, {0x4, 0x5, 0x0, 0x40, 0x7f, 0x9, 0x7, 0x401, 0x4, 0xc000, 0x1ff, r7, r8, 0xabc2, 0x1}}, {0x3, 0x5, 0x1, 0x704ac6a4, '#'}}]}, &(0x7f0000006280)={0xa0, 0x0, 0x5, {{0x2, 0x2, 0x7fffffffffffffff, 0x401, 0xffffff00, 0x8, {0x3, 0x4500, 0x10001, 0x6, 0x80000001, 0x100000000, 0x800, 0x4, 0x5deee249, 0x1000, 0x10, r7, r9, 0x10000, 0x1}}, {0x0, 0x18}}}, &(0x7f0000006340)={0x20, 0x0, 0x4, {0x1, 0x0, 0x7301, 0x911}}, &(0x7f0000006380)={0x130, 0x0, 0x40, {0x8, 0x4, 0x0, '\x00', {0x400, 0x8, 0x2, 0x3, r4, r10, 0x4000, '\x00', 0x6, 0xfffffffffffffff8, 0x6, 0xb1, {0xd77e, 0x10001}, {0x3, 0x9}, {0xfffffffffffffe01, 0x9d}, {0x3, 0x5}, 0xd, 0x0, 0x3, 0x9}}}})
r14 = msgget$private(0x0, 0x289)
msgctl$IPC_INFO(r14, 0x3, &(0x7f0000006580)=""/129) (async)
msgctl$IPC_INFO(r14, 0x3, &(0x7f0000006580)=""/129)
getsockname$unix(r0, 0xfffffffffffffffc, &(0x7f0000006640))
mount$fuse(0x0, &(0x7f0000006680)='./file0\x00', &(0x7f00000066c0), 0x1, &(0x7f0000006700)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[], [{@flag='mand'}, {@euid_lt={'euid<', r4}}, {@measure}, {@dont_hash}]}}) (async)
mount$fuse(0x0, &(0x7f0000006680)='./file0\x00', &(0x7f00000066c0), 0x1, &(0x7f0000006700)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[], [{@flag='mand'}, {@euid_lt={'euid<', r4}}, {@measure}, {@dont_hash}]}})
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004)
ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f00000067c0)={0x80})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000006880)={{0x1, 0x1, 0x18, r11, {0x2, 0x80000001}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000006880)={{0x1, 0x1, 0x18, r11, {0x2, 0x80000001}}, './file0\x00'})
ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a)

2m3.962611942s ago: executing program 0 (id=24):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r6, 0x5)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20008004)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r7, 0x84, 0x81, &(0x7f0000000180)="0000000000000002", 0x8)
sendto$inet6(r7, &(0x7f00000001c0)='Y', 0x1, 0x20004001, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r7, 0x84, 0x7a, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000900)=0xc)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000940)=@assoc_value={<r10=>0x0}, &(0x7f0000000980)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000009c0)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r10}, 0x20)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001040)=[{&(0x7f0000000280)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000500)="601e1d8a512f9d135f438cf32d7b0d45c3bda521e877a0839de7feb376e4e2fd8bbc6922e751e0830bd68a3647da2a9dc02e57a55405b164583278cfd2792367fb6c9c827ea82af37bd748694ffb461b6b1ec8492809c41c069b699d4c5ff5b2bf45294e34bc4de00e382cda6e47d4717f4174688f3d9e053f5638b5b5e3e4c3772668064e2623c2432b5e8ca1547066059f70aeca89c49ba6cf9856135c5a52c03322b2fecb75feea11ac60683a9aa9cb676426693c68ca2da45b6a88ace000c64b37d40f3fe97f1c73df8eca9688864ddc68f833b5067b3715eec0ce4621b30c344a657c7bd6a85894", 0xea}, {&(0x7f0000000600)="bdf63297b02520177223bb3dd59bad9b1dbd92658f14c2afcc5f3867b25751b69b33468e2ede8d0c81b1a1e0b3", 0x2d}, {&(0x7f0000000780)="c78daa3c710ac50c078f0cf8b389ea919654594d5870019fbb25e1b661755de4cdffbddb51807710cfb5786bfd3b6cbbb375a6027d0f21765deefaf1ecb05bb37ccb735b86767162727e4aee95a7e24f4d1d61fe08ff2a335387233808b66a30e3e6e4e0b2e37ab5eadd39ac9f5ba4ebe4428a01316b0f51f77f656db674a54f5ba515fbefb74d4d774b95b9977a5bc14ec24c6bf2f17dafe81ccd928fb7e314177869a4d85588ebe4fc8462512ad6d83dc76d94b76c479c5585132e", 0xbc}], 0x3, &(0x7f0000000a00)=[@dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @init={0x18, 0x84, 0x0, {0x5, 0x1, 0x76b, 0x200}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @sndinfo={0x20, 0x84, 0x2, {0xfffc, 0x8005, 0x1dfa, 0x4, r10}}, @init={0x18, 0x84, 0x0, {0xf, 0x0, 0xf0, 0x2}}, @init={0x18, 0x84, 0x0, {0x2, 0xd, 0x0, 0x6}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x8}}], 0xb8}, {&(0x7f0000000b00)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000b40)="683039fbea2405ecd84e47a2a8724b0ff70f", 0x12}], 0x1, &(0x7f0000000bc0)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}], 0x20, 0x8081}, {&(0x7f0000000c40)=@in6={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe0}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000c80)="d1b996a1bbb681cbcca24cef3ee450e6720dfbf8c525454da20c3b0cc44c188c59e7cbe72d942b226606f81a54647bd47741eaa9569a29c8445a4469604e719189db861669c5e522947a45e2fa3a6e650e086bd6bd8ccb7d246590775643153d087fec58c70fa6516c00ef69874edc418d487df23b53bf5ea882a71f54db2909f2b246698187c2f8f24880790fff0758c0f749f14f8771f2fbb15dfab7aaccb5e5", 0xa1}, {&(0x7f0000000d40)="853ece3f8395a7708682c54c90ef5a243e27e2aa4c4e4bea65a4c2a9f64d7b7b05d1451ca9e3b4324745274ba046be7f0a18612f93be7c01014e62020b9fb34429dc1f4d493bf0ea57cfb12ed863e379180c3311ea7392541d96970f81286550d79b1ded4400f3771361dbf96ebc168b7856f022bf63ce30548f612458a7ae935f4ffd389546e5bf4eae57f03840855fb3f5125e1d473ebdfc9a028380ac450984f061a4568262c580ac67485171845148b793d73a38a018f72aba54bc5dff03bc1d2a6e4d10c8b2737022f451c55fdae6f3", 0xd2}, {&(0x7f0000000e40)="75454472ec52b59fb6a08e9ecc706ce96ed8c176ee98b5c85224bc4ca9055ff8a1c06680b2a5dedbe5f00310e39d908c3a0139d2b8648132e2483ad0403e932ac23fb1aa9b6ecd3eec4cb23c9e66a6055e51c85967d317beb5b76ff1295704135fa27962aab960363e36182bb74ba2f9c0c25b83e66e7d7d8bb0499145f5227dcb0b6253d92ee2557eaab4f1cbda1137599f05fee3e2b23e433bcd801197071249edcbc65b03836cbacb0e9b91c72ea2b3a690201959490af5e4a3c247b6e27b02170f2441664e97b59bd218f9a2be", 0xcf}, {&(0x7f0000000f40)="6af62531c0007545d8fecf1393c8be4f6994c64d3901e8123f07ca8360798728dffc47112d61b755c528016acc7a881c8cff8bfc7cdc1cac8d6f1216aa35c88f99a8edc0caf78a60f729c895b5c62ed7380fe87f21914e688e8231cc99da3e83bba1ef18b4e647bbad8fdb60c1f51cb1577de8f56c001e3b0f497792ab931a2cc6ff86ddfb15bcde8805fcfc0f28ad7da6a48370", 0x94}], 0x4, 0x0, 0x0, 0x8880}], 0x3, 0x4001)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000380)={0x0, 0x2, 0x1, "fa"}, 0x9)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xf1, 0x64, 0x96, 0x40, 0x7c0, 0x158b, 0xd9d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x40, 0x4, 0xe0, 0x1, "", [{{0x9, 0x4, 0x2c, 0x7, 0x1, 0xa7, 0x3a, 0x30, 0x6, [], [{{0x9, 0x5, 0x83, 0x3, 0x200, 0x39, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCOUTQNSD(r11, 0x894b, &(0x7f00000000c0))

2m3.784800322s ago: executing program 3 (id=25):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
write(r0, &(0x7f0000000000)="9fb9000000358997871c33478100000004de92050180", 0x16)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)

2m3.656479378s ago: executing program 2 (id=26):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x29, 0x301, 0x670bd28, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) (fail_nth: 3)

2m3.551694101s ago: executing program 3 (id=27):
userfaultfd(0x801)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5}, {0x0, 0x3}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000005, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8, 0x3}, {0xc, 0x2, 0x5, 0xfffc, 0x44, 0x8}, 0x78, 0xfffffffe, 0x6}}]}, @TCA_U32_SEL={0x14, 0x5, {0xf, 0x10, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f}}]}}]}, 0x84}}, 0x24040084)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01fffff0000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0)
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket(0xa, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r3, 0x5, 0x4)

2m3.49582629s ago: executing program 2 (id=28):
r0 = syz_io_uring_setup(0x18f9, &(0x7f0000000500)={0x0, 0x8007ffd, 0x1, 0x0, 0xf5fffffd}, &(0x7f0000000040), &(0x7f0000001280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000340), 0x0, 0x40010062, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f00004b1000/0x2000)=nil, 0x2000, 0xf)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x20100)
fcntl$getflags(r4, 0x401)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x800, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (fail_nth: 1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$inet(0xa, 0x801, 0x84)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x921, 0x0, 0xfffffffc}, 0x18}}, 0x94)
r7 = add_key(&(0x7f00000002c0)='encrypted\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)='syz1\x00', r7)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r8 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)

2m2.890165521s ago: executing program 1 (id=29):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00')
exit(0xffff)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1001})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002400)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={0x0}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c00)={r0, 0xe0, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002640)=[0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000002980)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000029c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f0000002a00)=[{}], 0x8, 0x0, 0x0, &(0x7f0000002a80), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000002ac0)}}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002c40)=@newchain={0x870, 0x64, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xa, 0xd}, {0xfff2, 0xfff3}, {0xfff2, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x7ac, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe0}, @TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x5, 0x3, 0x1ff, {0x9, 0x2, 0x3ff, 0x9, 0x7ff, 0x724}, {0x4, 0x3, 0xa7e6, 0x8, 0x7, 0x67ce}, 0x2, 0x7, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x1, 0x1, 0x0, 0x9, 0x8, 0xfffffffc, 0x7fffffff, 0x8, 0x0, 0x401, 0x2, 0xd, 0x31e, 0x6, 0x6, 0x9, 0x0, 0x0, 0x2, 0x101, 0xe, 0x9, 0x2, 0x3, 0x401, 0x4, 0x7, 0x8d71, 0xdeac, 0x7, 0xfff, 0x2, 0x3, 0x8, 0x7, 0xfff, 0x1ff, 0x8, 0x2, 0x9, 0x1, 0xff, 0x4, 0x9376, 0xd8, 0x3, 0xa, 0x8, 0x6, 0x1, 0x859, 0x10000, 0x7ef, 0x0, 0x8, 0x8, 0x10000, 0x2546a6f9, 0x5, 0x3, 0x3, 0x185, 0x6, 0x0, 0x9, 0x800, 0x80000000, 0x8, 0x6, 0x6, 0x0, 0x2, 0x7, 0x9b7f, 0x0, 0x5, 0x9, 0x8, 0x6, 0x7, 0x8, 0x400, 0xae, 0x8, 0x7fffffff, 0x7, 0x101, 0x0, 0x2, 0xffff, 0x4, 0x46dd3a4b, 0x3ff, 0x8, 0x3, 0x5, 0x3, 0x5, 0x1, 0x310c, 0x8, 0xa, 0x7a2, 0x9, 0x9, 0x2, 0x0, 0xf, 0x8, 0x9, 0x995, 0xffffffbd, 0x1, 0xdaa, 0x6, 0x400, 0x0, 0xa81, 0xfffffd9f, 0x8, 0x8, 0x401, 0x9, 0x7fffffff, 0x10000, 0x6, 0x3, 0x7, 0x8001, 0x7, 0x6b, 0x1, 0x7, 0x6, 0x7b, 0xffffffff, 0x9, 0x4, 0xa31, 0x1, 0x5, 0xc0a2, 0xe2, 0x0, 0x2, 0x5473, 0x8, 0xa6, 0x4, 0x81, 0x8, 0x79b1, 0xffffffff, 0x1, 0x1000, 0x1c6, 0x69, 0x6, 0x1ff, 0xffd, 0x8ab, 0x7, 0x4, 0x9, 0x9, 0xe, 0x8595, 0x0, 0x6, 0x3, 0xb, 0x7, 0x2, 0x800, 0x400, 0xd1, 0x0, 0x2, 0x106d, 0x6, 0x9, 0x3, 0xfffffffb, 0x10000, 0x27, 0x4, 0x1, 0x65f, 0x7, 0x8, 0x1, 0x9, 0x100, 0xffff4b68, 0x1, 0x9, 0x401, 0x2, 0x3, 0x9, 0x3cb1, 0x5, 0x557f19b1, 0x1311, 0x828e, 0x38b93528, 0x0, 0x7, 0x2d94d00f, 0x5, 0x1, 0x1, 0x2, 0x4, 0x465, 0x8, 0xd, 0x379, 0x2, 0x86, 0x800, 0x8, 0x2, 0x7, 0x1, 0x31, 0x2f, 0x800, 0x80000001, 0x8001, 0xabc5, 0x5c, 0x40, 0xfffffffd, 0x5, 0x40, 0x6, 0x8, 0x8, 0xb, 0x0, 0xf, 0x3, 0x2e0, 0x4, 0xa, 0x6, 0x7fffffff, 0xf551, 0xc, 0x5, 0x3, 0xbc, 0x3, 0xffff]}]}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xbcc7}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_ACT={0x348, 0x6, [@m_mirred={0x144, 0x12, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xffffffff, 0xffffffffffffffff, 0x7, 0x1}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x2, 0x7, 0x30000000, 0x8}, 0x1, r4}}]}, {0xd8, 0x6, "b56826ddb1af9f953194768f32a061081ea06244ce647f1084e696a12442c097cfe255e06f47ed263592ec1df003099fbfdcee2a0efcab03e318dc58cb934d59989a309b6543b219e78a46ee4c06712a43136c3d47045c81b6507590b5fb8c4d0dc30f8c95cdb80155807e4560dafbe601b7ba9a7a4e266c21bfdd57ccf11c4c1fa4b92ac414b5d2bb015d87e31859e3e0aa7ed4e1fdda7b940bdca706f9b52ab3f9cc0b0c7932a0dd65a8829d582ab8250141409950de18d6bf251611e0ddbb5cbd0c73c1705e304834c55138f791a76b6329ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xfc, 0x2, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9a}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x84, 0x6, "a2e9cf5fc29625a3c57f4edeb3e13593127227154cbd3c5639250e791a47673e3937bc2af5cccd5b44a10e1ec494d3f9a5514af691ce8ee224c84ee5c5218ae54188c281960fc450b126806502cb6f353e56e0705a192b1e2d8b7cdd1816b1b5248a7462961575f9cb826ee9b14ae27bfeafaa6f94999b7f45513671d93ec6b2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x104, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x1a3, 0x3, 0x933, 0xf}}]}, {0xbe, 0x6, "aa3cf1729c431c7c6b6c04b4c00195ca9737a04f6549c2a8144402deba1c1fd615fa7f5b2194be1cf7299b7d8f592444035a274e8f654e4f0fb0450c4b76cfb44c6b0955700d22931b081344c212bc47e034cb89d9871798bbaaab0d9eb7cdafdb626f808761a6eea7eab368ed3f712b24baabd227d2eda5a10fb5f33d34c565afec1d1c4573d9fd9dfb0a9a8108f957e560196b34fda7202b82eefc28e6f618e78b05afc60ebcf675596f10cc68abc51418e0e01f4c1c7391f9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x7fff}, @TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}, @TCA_RATE={0x6, 0x5, {0xf, 0x1}}, @TCA_RATE={0x6, 0x5, {0xb7, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x8dab40d37e7fb7c7}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x1}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast2}]}}]}, 0x870}}, 0xc015)
r5 = timerfd_create(0x0, 0x80000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002680)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x12, 0x3, 0x0, &(0x7f0000002880)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000002900)=0x8004)

2m2.847274717s ago: executing program 4 (id=30):
syz_io_uring_setup(0x18f9, &(0x7f0000000500)={0x0, 0x2998, 0x1, 0x0, 0xf5fffffd}, &(0x7f0000000040), &(0x7f0000001280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x20000801)
recvmmsg(r0, &(0x7f0000000340), 0x0, 0x40010062, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f00004b1000/0x2000)=nil, 0x2000, 0xf)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x400c800}, 0x14008054)
r4 = syz_open_dev$loop(&(0x7f0000000340), 0x10000000005, 0x20100)
fcntl$getflags(r4, 0x401)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
close(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000140c0009800800014000000081400000000c0a010100000000000000000a000006"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000300)=0xb, 0x0)
socket$packet(0x11, 0x2, 0x300)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x47, @mcast1, 0x7}, 0x1c)
listen(r6, 0xfffffffc)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000a00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fedbdf25050000004400028008000500ffffff7f080003000300000006000b000a00000006000f000900000006000f00ff0000000800080000000080080005001cf5000008000400ff030000"], 0x58}, 0x1, 0x0, 0x0, 0x54}, 0x40844)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000640)={0x2, 0x4e22, @local}, 0x10)

2m2.695841367s ago: executing program 3 (id=31):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb2000905810dff"], 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x42, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
fcntl$lock(r4, 0x24, &(0x7f0000000080)={0x0, 0x3, 0xffffffff, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
pipe(0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0xac}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
pipe(&(0x7f0000000280)={<r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f00000002c0)=[{&(0x7f0000000300)='w', 0x1}], 0x1, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000580))
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000680))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0))

1m31.240734426s ago: executing program 32 (id=24):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r6, 0x5)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20008004)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r7, 0x84, 0x81, &(0x7f0000000180)="0000000000000002", 0x8)
sendto$inet6(r7, &(0x7f00000001c0)='Y', 0x1, 0x20004001, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r7, 0x84, 0x7a, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000900)=0xc)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000940)=@assoc_value={<r10=>0x0}, &(0x7f0000000980)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000009c0)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r10}, 0x20)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001040)=[{&(0x7f0000000280)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000500)="601e1d8a512f9d135f438cf32d7b0d45c3bda521e877a0839de7feb376e4e2fd8bbc6922e751e0830bd68a3647da2a9dc02e57a55405b164583278cfd2792367fb6c9c827ea82af37bd748694ffb461b6b1ec8492809c41c069b699d4c5ff5b2bf45294e34bc4de00e382cda6e47d4717f4174688f3d9e053f5638b5b5e3e4c3772668064e2623c2432b5e8ca1547066059f70aeca89c49ba6cf9856135c5a52c03322b2fecb75feea11ac60683a9aa9cb676426693c68ca2da45b6a88ace000c64b37d40f3fe97f1c73df8eca9688864ddc68f833b5067b3715eec0ce4621b30c344a657c7bd6a85894", 0xea}, {&(0x7f0000000600)="bdf63297b02520177223bb3dd59bad9b1dbd92658f14c2afcc5f3867b25751b69b33468e2ede8d0c81b1a1e0b3", 0x2d}, {&(0x7f0000000780)="c78daa3c710ac50c078f0cf8b389ea919654594d5870019fbb25e1b661755de4cdffbddb51807710cfb5786bfd3b6cbbb375a6027d0f21765deefaf1ecb05bb37ccb735b86767162727e4aee95a7e24f4d1d61fe08ff2a335387233808b66a30e3e6e4e0b2e37ab5eadd39ac9f5ba4ebe4428a01316b0f51f77f656db674a54f5ba515fbefb74d4d774b95b9977a5bc14ec24c6bf2f17dafe81ccd928fb7e314177869a4d85588ebe4fc8462512ad6d83dc76d94b76c479c5585132e", 0xbc}], 0x3, &(0x7f0000000a00)=[@dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @init={0x18, 0x84, 0x0, {0x5, 0x1, 0x76b, 0x200}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @sndinfo={0x20, 0x84, 0x2, {0xfffc, 0x8005, 0x1dfa, 0x4, r10}}, @init={0x18, 0x84, 0x0, {0xf, 0x0, 0xf0, 0x2}}, @init={0x18, 0x84, 0x0, {0x2, 0xd, 0x0, 0x6}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x8}}], 0xb8}, {&(0x7f0000000b00)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000b40)="683039fbea2405ecd84e47a2a8724b0ff70f", 0x12}], 0x1, &(0x7f0000000bc0)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}], 0x20, 0x8081}, {&(0x7f0000000c40)=@in6={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe0}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000c80)="d1b996a1bbb681cbcca24cef3ee450e6720dfbf8c525454da20c3b0cc44c188c59e7cbe72d942b226606f81a54647bd47741eaa9569a29c8445a4469604e719189db861669c5e522947a45e2fa3a6e650e086bd6bd8ccb7d246590775643153d087fec58c70fa6516c00ef69874edc418d487df23b53bf5ea882a71f54db2909f2b246698187c2f8f24880790fff0758c0f749f14f8771f2fbb15dfab7aaccb5e5", 0xa1}, {&(0x7f0000000d40)="853ece3f8395a7708682c54c90ef5a243e27e2aa4c4e4bea65a4c2a9f64d7b7b05d1451ca9e3b4324745274ba046be7f0a18612f93be7c01014e62020b9fb34429dc1f4d493bf0ea57cfb12ed863e379180c3311ea7392541d96970f81286550d79b1ded4400f3771361dbf96ebc168b7856f022bf63ce30548f612458a7ae935f4ffd389546e5bf4eae57f03840855fb3f5125e1d473ebdfc9a028380ac450984f061a4568262c580ac67485171845148b793d73a38a018f72aba54bc5dff03bc1d2a6e4d10c8b2737022f451c55fdae6f3", 0xd2}, {&(0x7f0000000e40)="75454472ec52b59fb6a08e9ecc706ce96ed8c176ee98b5c85224bc4ca9055ff8a1c06680b2a5dedbe5f00310e39d908c3a0139d2b8648132e2483ad0403e932ac23fb1aa9b6ecd3eec4cb23c9e66a6055e51c85967d317beb5b76ff1295704135fa27962aab960363e36182bb74ba2f9c0c25b83e66e7d7d8bb0499145f5227dcb0b6253d92ee2557eaab4f1cbda1137599f05fee3e2b23e433bcd801197071249edcbc65b03836cbacb0e9b91c72ea2b3a690201959490af5e4a3c247b6e27b02170f2441664e97b59bd218f9a2be", 0xcf}, {&(0x7f0000000f40)="6af62531c0007545d8fecf1393c8be4f6994c64d3901e8123f07ca8360798728dffc47112d61b755c528016acc7a881c8cff8bfc7cdc1cac8d6f1216aa35c88f99a8edc0caf78a60f729c895b5c62ed7380fe87f21914e688e8231cc99da3e83bba1ef18b4e647bbad8fdb60c1f51cb1577de8f56c001e3b0f497792ab931a2cc6ff86ddfb15bcde8805fcfc0f28ad7da6a48370", 0x94}], 0x4, 0x0, 0x0, 0x8880}], 0x3, 0x4001)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000380)={0x0, 0x2, 0x1, "fa"}, 0x9)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xf1, 0x64, 0x96, 0x40, 0x7c0, 0x158b, 0xd9d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x40, 0x4, 0xe0, 0x1, "", [{{0x9, 0x4, 0x2c, 0x7, 0x1, 0xa7, 0x3a, 0x30, 0x6, [], [{{0x9, 0x5, 0x83, 0x3, 0x200, 0x39, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCOUTQNSD(r11, 0x894b, &(0x7f00000000c0))

0s ago: executing program 33 (id=28):
r0 = syz_io_uring_setup(0x18f9, &(0x7f0000000500)={0x0, 0x8007ffd, 0x1, 0x0, 0xf5fffffd}, &(0x7f0000000040), &(0x7f0000001280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000340), 0x0, 0x40010062, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f00004b1000/0x2000)=nil, 0x2000, 0xf)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x20100)
fcntl$getflags(r4, 0x401)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x800, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (fail_nth: 1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$inet(0xa, 0x801, 0x84)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x921, 0x0, 0xfffffffc}, 0x18}}, 0x94)
r7 = add_key(&(0x7f00000002c0)='encrypted\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)='syz1\x00', r7)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r8 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts.
[   72.887147][ T5618] cgroup: Unknown subsys name 'net'
[   72.976710][ T5618] cgroup: Unknown subsys name 'cpuset'
[   72.985436][ T5618] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   74.580389][ T5618] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   78.114238][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.119203][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.122324][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.130723][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.131270][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.131604][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.132423][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.134716][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.134929][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.135188][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.135311][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.135752][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.141871][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.142754][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.143585][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.145158][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.146021][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.146822][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.147009][ T5641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   78.147323][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.149344][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.161941][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.162174][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.162354][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.179882][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.376464][ T5645] br_netfilter no longer supported in user namespaces
[   79.368673][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.369417][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.369546][ T5645] bridge_slave_0: entered allmulticast mode
[   79.371105][ T5645] bridge_slave_0: entered promiscuous mode
[   79.385226][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.385333][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.385755][ T5645] bridge_slave_1: entered allmulticast mode
[   79.387553][ T5645] bridge_slave_1: entered promiscuous mode
[   79.432819][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.432960][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.433056][ T5644] bridge_slave_0: entered allmulticast mode
[   79.434286][ T5644] bridge_slave_0: entered promiscuous mode
[   79.485178][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.485299][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.485686][ T5644] bridge_slave_1: entered allmulticast mode
[   79.486966][ T5644] bridge_slave_1: entered promiscuous mode
[   79.520446][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.520561][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.520681][ T5649] bridge_slave_0: entered allmulticast mode
[   79.522131][ T5649] bridge_slave_0: entered promiscuous mode
[   79.535659][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.535804][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.535926][ T5649] bridge_slave_1: entered allmulticast mode
[   79.537787][ T5649] bridge_slave_1: entered promiscuous mode
[   79.575509][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.623990][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.624240][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.624344][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.624591][ T5647] bridge_slave_0: entered allmulticast mode
[   79.625390][ T5647] bridge_slave_0: entered promiscuous mode
[   79.627325][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.627387][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.627882][ T5647] bridge_slave_1: entered allmulticast mode
[   79.628945][ T5647] bridge_slave_1: entered promiscuous mode
[   79.673043][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.678304][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.681904][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.735523][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.735635][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.735711][ T5648] bridge_slave_0: entered allmulticast mode
[   79.736754][ T5648] bridge_slave_0: entered promiscuous mode
[   79.742736][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.773310][ T5645] team0: Port device team_slave_0 added
[   79.784947][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.785039][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.785137][ T5648] bridge_slave_1: entered allmulticast mode
[   79.786663][ T5648] bridge_slave_1: entered promiscuous mode
[   79.815844][ T5645] team0: Port device team_slave_1 added
[   79.830727][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.851642][ T5649] team0: Port device team_slave_0 added
[   79.854284][ T5644] team0: Port device team_slave_0 added
[   79.869427][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.887626][ T5649] team0: Port device team_slave_1 added
[   79.889194][ T5644] team0: Port device team_slave_1 added
[   79.900795][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.900812][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.900833][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.921196][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.964336][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.964352][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.964370][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.976500][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.992914][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.992930][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.992952][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.995879][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.995892][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.995913][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.022037][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.022054][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.022076][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.024296][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.024309][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.024329][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.112114][ T5648] team0: Port device team_slave_0 added
[   80.126223][ T5647] team0: Port device team_slave_0 added
[   80.135810][ T5644] hsr_slave_0: entered promiscuous mode
[   80.136958][ T5644] hsr_slave_1: entered promiscuous mode
[   80.156584][ T5648] team0: Port device team_slave_1 added
[   80.169900][   T54] Bluetooth: hci4: command tx timeout
[   80.177866][ T5647] team0: Port device team_slave_1 added
[   80.248101][   T54] Bluetooth: hci1: command tx timeout
[   80.248108][ T5631] Bluetooth: hci2: command tx timeout
[   80.248313][   T54] Bluetooth: hci3: command tx timeout
[   80.279368][ T5645] hsr_slave_0: entered promiscuous mode
[   80.280254][ T5645] hsr_slave_1: entered promiscuous mode
[   80.280748][ T5645] debugfs: 'hsr0' already exists in 'hsr'
[   80.280759][ T5645] Cannot create hsr debugfs directory
[   80.281327][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.281336][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.281349][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.306393][ T5649] hsr_slave_0: entered promiscuous mode
[   80.307450][ T5649] hsr_slave_1: entered promiscuous mode
[   80.308172][ T5649] debugfs: 'hsr0' already exists in 'hsr'
[   80.308186][ T5649] Cannot create hsr debugfs directory
[   80.309092][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.309103][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.309124][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.313429][ T5642] Bluetooth: hci0: command tx timeout
[   80.324526][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.324542][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.324564][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.328141][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.328155][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.328176][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.579174][ T5648] hsr_slave_0: entered promiscuous mode
[   80.579857][ T5648] hsr_slave_1: entered promiscuous mode
[   80.580319][ T5648] debugfs: 'hsr0' already exists in 'hsr'
[   80.580335][ T5648] Cannot create hsr debugfs directory
[   80.604281][ T5647] hsr_slave_0: entered promiscuous mode
[   80.605377][ T5647] hsr_slave_1: entered promiscuous mode
[   80.606173][ T5647] debugfs: 'hsr0' already exists in 'hsr'
[   80.606188][ T5647] Cannot create hsr debugfs directory
[   81.016298][ T5644] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.021338][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.022327][ T5644] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   81.048650][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.049648][ T5644] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   81.052144][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.053057][ T5644] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   81.079840][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.147624][ T5649] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.164254][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.165271][ T5649] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.169112][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.170610][ T5649] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.191097][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.195412][ T5649] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.199447][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.300920][ T5645] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.313379][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.314283][ T5645] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.318382][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.346196][ T5645] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.352688][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.364282][ T5645] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.372028][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.490927][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.520373][ T5647] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.525424][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.526400][ T5647] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.540914][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.561842][ T5647] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.571877][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.572807][ T5647] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.588370][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.600708][ T5644] 8021q: adding VLAN 0 to HW filter on device team0
[   81.659589][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.659663][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.683625][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.720338][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.720395][  T310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.749888][ T5648] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.753170][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.769840][ T5648] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.772429][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.798176][ T5648] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.801002][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.816566][ T5648] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.829233][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.831455][ T5649] 8021q: adding VLAN 0 to HW filter on device team0
[   81.869882][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.869934][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.898087][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.953100][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.953228][  T310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.005914][ T5645] 8021q: adding VLAN 0 to HW filter on device team0
[   82.061356][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.061481][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.105874][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.105998][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.234150][ T5642] Bluetooth: hci4: command tx timeout
[   82.278549][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.312502][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.313759][ T5642] Bluetooth: hci3: command tx timeout
[   82.313788][ T5642] Bluetooth: hci2: command tx timeout
[   82.313808][ T5642] Bluetooth: hci1: command tx timeout
[   82.393580][   T54] Bluetooth: hci0: command tx timeout
[   82.412671][ T5647] 8021q: adding VLAN 0 to HW filter on device team0
[   82.452546][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.452599][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.481898][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.486362][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.486467][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.498551][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.597029][ T5648] 8021q: adding VLAN 0 to HW filter on device team0
[   82.599630][ T5644] veth0_vlan: entered promiscuous mode
[   82.618164][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.647020][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.647141][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.676827][ T5644] veth1_vlan: entered promiscuous mode
[   82.682086][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.682151][  T310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.731262][ T5649] veth0_vlan: entered promiscuous mode
[   82.788066][ T5649] veth1_vlan: entered promiscuous mode
[   82.828296][ T5644] veth0_macvtap: entered promiscuous mode
[   82.843559][ T5645] veth0_vlan: entered promiscuous mode
[   82.870105][ T5644] veth1_macvtap: entered promiscuous mode
[   82.889664][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.917658][ T5645] veth1_vlan: entered promiscuous mode
[   82.938753][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.960877][ T5649] veth0_macvtap: entered promiscuous mode
[   82.965830][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.970066][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.997209][ T5649] veth1_macvtap: entered promiscuous mode
[   83.034712][   T63] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.076215][  T310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.093091][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.132469][ T5645] veth0_macvtap: entered promiscuous mode
[   83.150289][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.150714][ T5645] veth1_macvtap: entered promiscuous mode
[   83.157906][   T44] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.158828][   T44] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.159044][ T5647] veth0_vlan: entered promiscuous mode
[   83.175952][ T5648] veth0_vlan: entered promiscuous mode
[   83.235042][   T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.248353][ T5648] veth1_vlan: entered promiscuous mode
[   83.266330][ T5647] veth1_vlan: entered promiscuous mode
[   83.269834][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.305301][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.351333][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.351356][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.446338][  T310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.449522][  T310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.463660][   T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.463709][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.463722][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.494112][   T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.495862][   T44] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.539438][ T5648] veth0_macvtap: entered promiscuous mode
[   83.574212][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.574234][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.597376][ T5648] veth1_macvtap: entered promiscuous mode
[   83.599264][ T5647] veth0_macvtap: entered promiscuous mode
[   83.603731][  T310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.605960][   T44] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.617880][ T5647] veth1_macvtap: entered promiscuous mode
[   83.649115][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.736831][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.738494][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.738515][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.786911][ T5644] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   83.830230][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.856880][  T280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.856902][  T280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.897107][   T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.898130][   T63] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.898170][   T63] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.898206][   T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.943138][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.977412][  T280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.977437][  T280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.135320][   T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.135393][   T63] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.135452][   T63] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.135486][   T63] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.137384][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.137413][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.264684][ T5723] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   84.313855][   T54] Bluetooth: hci4: command tx timeout
[   84.319082][   T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.319103][   T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.394339][   T54] Bluetooth: hci1: command tx timeout
[   84.394380][   T54] Bluetooth: hci2: command tx timeout
[   84.394404][   T54] Bluetooth: hci3: command tx timeout
[   84.404022][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.404044][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.443352][ T5723] usb 5-1: Using ep0 maxpacket: 16
[   84.447713][ T5723] usb 5-1: New USB device found: idVendor=28bd, idProduct=0071, bcdDevice=0.00
[   84.469659][ T5723] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[   84.469687][ T5723] usb 5-1: config 0 has no interface number 0
[   84.469734][ T5723] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.469759][ T5723] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.469800][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.474319][ T5642] Bluetooth: hci0: command tx timeout
[   84.537598][ T5723] usb 5-1: config 0 descriptor??
[   84.581267][ T5739] FAULT_INJECTION: forcing a failure.
[   84.581267][ T5739] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   84.581332][ T5739] CPU: 0 UID: 0 PID: 5739 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) 
[   84.581354][ T5739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   84.581364][ T5739] Call Trace:
[   84.581372][ T5739]  <TASK>
[   84.581380][ T5739]  dump_stack_lvl+0xe8/0x150
[   84.581417][ T5739]  should_fail_ex+0x3eb/0x540
[   84.581451][ T5739]  _copy_from_iter+0x1d3/0x1680
[   84.581473][ T5739]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   84.581509][ T5739]  ? rcu_is_watching+0x16/0xb0
[   84.581540][ T5739]  ? rcu_is_watching+0x16/0xb0
[   84.581568][ T5739]  ? policy_nodemask+0x31b/0x980
[   84.581587][ T5739]  ? __pfx__copy_from_iter+0x10/0x10
[   84.581612][ T5739]  ? alloc_pages_mpol+0x256/0x390
[   84.581641][ T5739]  copy_page_from_iter+0x219/0x2d0
[   84.581668][ T5739]  tun_get_user+0x212d/0x4470
[   84.581694][ T5739]  ? tun_get_user+0x6f9/0x4470
[   84.581735][ T5739]  ? aa_file_perm+0x4ed/0x15f0
[   84.581754][ T5739]  ? __pfx_tun_get_user+0x10/0x10
[   84.581779][ T5739]  ? __lock_acquire+0x747/0x2de0
[   84.581815][ T5739]  ? ref_tracker_alloc+0x172/0x530
[   84.581838][ T5739]  ? lock_acquire+0x115/0x350
[   84.581862][ T5739]  ? __pfx_ref_tracker_alloc+0x10/0x10
[   84.581888][ T5739]  ? lock_acquire+0x115/0x350
[   84.581909][ T5739]  ? tun_get+0x1c/0x2f0
[   84.581937][ T5739]  ? tun_get+0x1c/0x2f0
[   84.581958][ T5739]  ? tun_get+0x1c/0x2f0
[   84.581984][ T5739]  tun_chr_write_iter+0x113/0x200
[   84.582008][ T5739]  vfs_write+0x612/0xba0
[   84.582042][ T5739]  ? __pfx_vfs_write+0x10/0x10
[   84.582072][ T5739]  ? __fget_files+0x3a2/0x420
[   84.582093][ T5739]  ? __fget_files+0x2a/0x420
[   84.582121][ T5739]  ? fdget+0x1ac/0x250
[   84.582153][ T5739]  ksys_write+0x150/0x270
[   84.582181][ T5739]  ? __pfx_ksys_write+0x10/0x10
[   84.582217][ T5739]  do_syscall_64+0x166/0x520
[   84.582239][ T5739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.582259][ T5739]  ? clear_bhb_loop+0x70/0xc0
[   84.582282][ T5739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.582300][ T5739] RIP: 0033:0x7f38f536034e
[   84.582318][ T5739] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   84.582332][ T5739] RSP: 002b:00007f38f634dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   84.582354][ T5739] RAX: ffffffffffffffda RBX: 00007f38f634e6c0 RCX: 00007f38f536034e
[   84.582367][ T5739] RDX: 000000000000002a RSI: 0000200000000580 RDI: 00000000000000c8
[   84.582380][ T5739] RBP: 00007f38f634e090 R08: 0000000000000000 R09: 0000000000000000
[   84.582392][ T5739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.582403][ T5739] R13: 00007f38f5626038 R14: 00007f38f5625fa0 R15: 00007f38f574fa48
[   84.582434][ T5739]  </TASK>
[   84.618966][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.618994][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.037651][ T5749] FAULT_INJECTION: forcing a failure.
[   85.037651][ T5749] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   85.037686][ T5749] CPU: 1 UID: 0 PID: 5749 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) 
[   85.037708][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   85.037719][ T5749] Call Trace:
[   85.037727][ T5749]  <TASK>
[   85.037736][ T5749]  dump_stack_lvl+0xe8/0x150
[   85.037771][ T5749]  should_fail_ex+0x3eb/0x540
[   85.037800][ T5749]  _copy_from_user+0x2d/0xb0
[   85.037835][ T5749]  get_user_ifreq+0x6b/0x180
[   85.037862][ T5749]  sock_ioctl+0x6f8/0x7e0
[   85.037888][ T5749]  ? __pfx_sock_ioctl+0x10/0x10
[   85.037913][ T5749]  ? __fget_files+0x2a/0x420
[   85.037941][ T5749]  ? bpf_lsm_file_ioctl+0x9/0x20
[   85.037968][ T5749]  ? __pfx_sock_ioctl+0x10/0x10
[   85.037990][ T5749]  __se_sys_ioctl+0xfc/0x170
[   85.038014][ T5749]  do_syscall_64+0x166/0x520
[   85.038032][ T5749]  ? trace_irq_disable+0x3b/0x140
[   85.038053][ T5749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.038070][ T5749]  ? clear_bhb_loop+0x70/0xc0
[   85.038090][ T5749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.038105][ T5749] RIP: 0033:0x7f183a99fb19
[   85.038122][ T5749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.038136][ T5749] RSP: 002b:00007f183b92a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   85.038155][ T5749] RAX: ffffffffffffffda RBX: 00007f183ac25fa0 RCX: 00007f183a99fb19
[   85.038167][ T5749] RDX: 0000200000000000 RSI: 00000000000089f0 RDI: 0000000000000003
[   85.038177][ T5749] RBP: 00007f183b92a090 R08: 0000000000000000 R09: 0000000000000000
[   85.038188][ T5749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.038197][ T5749] R13: 00007f183ac26038 R14: 00007f183ac25fa0 R15: 00007f183ad4fa48
[   85.038225][ T5749]  </TASK>
[   85.362511][ T5723] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0001/input/input5
[   85.404920][ T5699] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.409566][ T5752] capability: warning: `syz.2.8' uses deprecated v2 capabilities in a way that may be insecure
[   85.457496][ T5753] FAULT_INJECTION: forcing a failure.
[   85.457496][ T5753] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   85.457526][ T5753] CPU: 1 UID: 0 PID: 5753 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(full) 
[   85.457547][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   85.457558][ T5753] Call Trace:
[   85.457566][ T5753]  <TASK>
[   85.457575][ T5753]  dump_stack_lvl+0xe8/0x150
[   85.457611][ T5753]  should_fail_ex+0x3eb/0x540
[   85.457640][ T5753]  _copy_to_user+0x31/0xb0
[   85.457667][ T5753]  simple_read_from_buffer+0xe1/0x170
[   85.457702][ T5753]  proc_fail_nth_read+0x1bb/0x230
[   85.457724][ T5753]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   85.457742][ T5753]  ? rw_verify_area+0x24a/0x4c0
[   85.457764][ T5753]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   85.457778][ T5753]  vfs_read+0x213/0xa80
[   85.457802][ T5753]  ? __pfx___mutex_lock+0x10/0x10
[   85.457823][ T5753]  ? __pfx_vfs_read+0x10/0x10
[   85.457850][ T5753]  ? __fget_files+0x2a/0x420
[   85.457872][ T5753]  ? __fget_files+0x3a2/0x420
[   85.457894][ T5753]  ? __fget_files+0x2a/0x420
[   85.457921][ T5753]  ? fdget+0x1ac/0x250
[   85.457950][ T5753]  ksys_read+0x150/0x270
[   85.457978][ T5753]  ? __pfx_ksys_read+0x10/0x10
[   85.458014][ T5753]  do_syscall_64+0x166/0x520
[   85.458035][ T5753]  ? trace_irq_disable+0x3b/0x140
[   85.458059][ T5753]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.458078][ T5753]  ? clear_bhb_loop+0x70/0xc0
[   85.458102][ T5753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.458119][ T5753] RIP: 0033:0x7fc76836034e
[   85.458135][ T5753] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   85.458149][ T5753] RSP: 002b:00007fc769317fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   85.458168][ T5753] RAX: ffffffffffffffda RBX: 00007fc7693186c0 RCX: 00007fc76836034e
[   85.458180][ T5753] RDX: 000000000000000f RSI: 00007fc7693180a0 RDI: 0000000000000004
[   85.458190][ T5753] RBP: 00007fc769318090 R08: 0000000000000000 R09: 0000000000000000
[   85.458201][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.458211][ T5753] R13: 00007fc768626038 R14: 00007fc768625fa0 R15: 00007fc76874fa48
[   85.458240][ T5753]  </TASK>
[   85.562288][ T5699] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41
[   85.579533][ T5699] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   85.597933][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   85.597960][ T5699] usb 4-1: Product: syz
[   85.597973][ T5699] usb 4-1: Manufacturer: syz
[   85.597986][ T5699] usb 4-1: SerialNumber: syz
[   85.740882][ T5723] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0001/input/input6
[   85.792367][ T5723] uclogic 0003:28BD:0071.0001: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1
[   85.905019][ T5699] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   85.912377][ T5759] syzkaller1: entered promiscuous mode
[   85.912399][ T5759] syzkaller1: entered allmulticast mode
[   86.055241][ T5761] Zero length message leads to an empty skb
[   86.133761][ T5723] usb 4-1: USB disconnect, device number 2
[   86.168579][ T5723] usblp0: removed
[   86.211988][ T5763] bridge0: port 3(veth1_to_bridge) entered blocking state
[   86.212150][ T5763] bridge0: port 3(veth1_to_bridge) entered disabled state
[   86.212392][ T5763] veth1_to_bridge: entered allmulticast mode
[   86.231227][ T5763] veth1_to_bridge: entered promiscuous mode
[   86.231427][ T5763] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   86.232074][ T5763] bridge0: port 3(veth1_to_bridge) entered blocking state
[   86.232234][ T5763] bridge0: port 3(veth1_to_bridge) entered forwarding state
[   86.290289][ T5766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11'.
[   86.394896][ T5642] Bluetooth: hci4: command tx timeout
[   86.459363][ T5770] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   86.459844][ T5770] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET)
[   86.475274][ T5631] Bluetooth: hci1: command tx timeout
[   86.475325][   T54] Bluetooth: hci2: command tx timeout
[   86.475359][ T5642] Bluetooth: hci3: command tx timeout
[   86.554054][ T5642] Bluetooth: hci0: command tx timeout
[   86.972558][ T5697] usb 5-1: USB disconnect, device number 2
[   87.050417][   T11] cfg80211: failed to load regulatory.db
[   87.328242][   T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   87.475991][   T11] usb 2-1: unable to get BOS descriptor or descriptor too short
[   87.476034][   T11] usb 2-1: New USB device found: idVendor=07c0, idProduct=158b, bcdDevice=d9.d2
[   87.477569][   T11] usb 2-1: config 64 has an invalid interface number: 44 but max is 0
[   87.477596][   T11] usb 2-1: config 64 has no interface number 0
[   87.477637][   T11] usb 2-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9
[   87.477659][   T11] usb 2-1: config 64 interface 44 has no altsetting 0
[   87.481388][   T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.481417][   T11] usb 2-1: Product: syz
[   87.481431][   T11] usb 2-1: Manufacturer: syz
[   87.481444][   T11] usb 2-1: SerialNumber: syz
[   87.744356][ T5721] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   87.784392][   T11] iowarrior 2-1:64.44: no interrupt-out endpoint found
[   87.807494][   T11] usb 2-1: USB disconnect, device number 2
[   87.909811][ T5721] usb 1-1: unable to get BOS descriptor or descriptor too short
[   87.909858][ T5721] usb 1-1: New USB device found: idVendor=07c0, idProduct=158b, bcdDevice=d9.d2
[   87.913808][ T5721] usb 1-1: config 64 has an invalid interface number: 44 but max is 0
[   87.913835][ T5721] usb 1-1: config 64 has no interface number 0
[   87.913873][ T5721] usb 1-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9
[   87.913897][ T5721] usb 1-1: config 64 interface 44 has no altsetting 0
[   87.966843][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.966867][ T5721] usb 1-1: Product: syz
[   87.966877][ T5721] usb 1-1: Manufacturer: syz
[   87.966887][ T5721] usb 1-1: SerialNumber: syz
[   88.028768][ T5810] FAULT_INJECTION: forcing a failure.
[   88.028768][ T5810] name failslab, interval 1, probability 0, space 0, times 0
[   88.028795][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: syz.2.28 Not tainted syzkaller #0 PREEMPT(full) 
[   88.028811][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   88.028820][ T5810] Call Trace:
[   88.028826][ T5810]  <TASK>
[   88.028833][ T5810]  dump_stack_lvl+0xe8/0x150
[   88.028862][ T5810]  should_fail_ex+0x3eb/0x540
[   88.028884][ T5810]  should_failslab+0xa8/0x100
[   88.028906][ T5810]  ? __khugepaged_enter+0x76/0x2f0
[   88.028920][ T5810]  kmem_cache_alloc_noprof+0x9c/0x600
[   88.028939][ T5810]  ? __khugepaged_enter+0x76/0x2f0
[   88.028967][ T5810]  __khugepaged_enter+0x76/0x2f0
[   88.028985][ T5810]  madvise_vma_behavior+0x1f6f/0x4cb0
[   88.029016][ T5810]  ? __pfx_madvise_vma_behavior+0x10/0x10
[   88.029038][ T5810]  ? lock_acquire+0x115/0x350
[   88.029071][ T5810]  ? process_measurement+0x7b2/0x1c10
[   88.029095][ T5810]  ? up_write+0x19d/0x4a0
[   88.029115][ T5810]  ? __lock_acquire+0x747/0x2de0
[   88.029147][ T5810]  ? __lock_acquire+0x747/0x2de0
[   88.029179][ T5810]  ? __pfx_process_measurement+0x10/0x10
[   88.029209][ T5810]  ? lock_acquire+0x115/0x350
[   88.029234][ T5810]  ? __lock_acquire+0x747/0x2de0
[   88.029274][ T5810]  ? mas_prev_slot+0xb76/0xbf0
[   88.029317][ T5810]  ? find_vma_prev+0x123/0x1b0
[   88.029341][ T5810]  ? __pfx_find_vma_prev+0x10/0x10
[   88.029381][ T5810]  madvise_walk_vmas+0x57d/0xb70
[   88.029423][ T5810]  ? __pfx_madvise_walk_vmas+0x10/0x10
[   88.029460][ T5810]  ? blk_start_plug+0x6e/0x1b0
[   88.029483][ T5810]  madvise_do_behavior+0x385/0x540
[   88.029516][ T5810]  ? __pfx_madvise_do_behavior+0x10/0x10
[   88.029565][ T5810]  do_madvise+0x327/0x3a0
[   88.029596][ T5810]  ? __pfx_do_madvise+0x10/0x10
[   88.029650][ T5810]  ? __pfx_ksys_write+0x10/0x10
[   88.029684][ T5810]  __x64_sys_madvise+0xa6/0xc0
[   88.029715][ T5810]  do_syscall_64+0x166/0x520
[   88.029738][ T5810]  ? trace_irq_disable+0x3b/0x140
[   88.029764][ T5810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.029783][ T5810]  ? clear_bhb_loop+0x70/0xc0
[   88.029807][ T5810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.029826][ T5810] RIP: 0033:0x7f183a99fb19
[   88.029845][ T5810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.029861][ T5810] RSP: 002b:00007f183b840028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   88.029883][ T5810] RAX: ffffffffffffffda RBX: 00007f183ac26090 RCX: 00007f183a99fb19
[   88.029897][ T5810] RDX: 000000000000000e RSI: 0000000000800000 RDI: 0000200000000000
[   88.029910][ T5810] RBP: 00007f183b840090 R08: 0000000000000000 R09: 0000000000000000
[   88.029922][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   88.029932][ T5810] R13: 00007f183ac26128 R14: 00007f183ac26090 R15: 00007f183ad4fa48
[   88.029974][ T5810]  </TASK>
[   88.341977][ T5721] iowarrior 1-1:64.44: no interrupt-out endpoint found
[   88.380934][ T5721] usb 1-1: USB disconnect, device number 2
[   88.634401][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   88.634811][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   88.635199][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   88.635516][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   88.635869][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   88.636506][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   88.636929][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   88.637246][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   88.637611][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   88.738114][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   89.477933][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   89.513806][    T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!!
[   89.568068][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   89.587857][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   89.608905][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   89.627944][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   89.647962][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   89.667741][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   89.688069][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   90.423663][ T5697] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   91.463322][    C0] net_ratelimit: 13692 callbacks suppressed
[   91.463347][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.463426][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   91.463602][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.463846][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.464094][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.464344][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[   91.464380][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.464594][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   91.464621][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.464882][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.997422][    C1] sched: DL replenish lagged too much
[   94.243930][ T5697] usb 4-1: Using ep0 maxpacket: 16
[   96.473375][    C1] net_ratelimit: 30030 callbacks suppressed
[   96.473400][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   96.473419][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.473622][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   96.473662][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.473901][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.474146][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.474397][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.474430][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[   96.474637][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   96.474651][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   99.307089][ T5697] usb 4-1: device descriptor read/all, error -110
[  101.483354][    C0] net_ratelimit: 31194 callbacks suppressed
[  101.483381][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.483616][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.483672][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  101.483857][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.483928][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  101.484085][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.484210][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  101.484308][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.484537][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  101.484792][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  104.494592][ T5697] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  106.493433][    C1] net_ratelimit: 29811 callbacks suppressed
[  106.493438][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  106.493457][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  106.493687][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  106.493936][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  106.494184][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  106.494270][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  106.494424][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  106.494497][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  106.494665][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  106.494721][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  107.805534][    C1] wlan0: beacon TX faster than countdown (channel/color switch) completion
[  111.503278][    C0] net_ratelimit: 30643 callbacks suppressed
[  111.503306][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.503544][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.503776][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.503838][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  111.504005][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.504065][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  111.504245][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.504297][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  111.504474][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.504715][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.513303][    C0] net_ratelimit: 32227 callbacks suppressed
[  116.513328][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.513566][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.513790][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.514010][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.514193][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  116.514271][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.514438][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  116.514496][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.514676][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  116.514725][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.523463][    C0] net_ratelimit: 32564 callbacks suppressed
[  121.523489][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.523710][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.523933][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.524108][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  121.524159][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.524379][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.524611][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.524828][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.524998][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  121.525054][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.533463][    C0] net_ratelimit: 35673 callbacks suppressed
[  126.533482][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  126.533489][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.533720][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.533940][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.534158][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.534377][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.534403][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  126.534605][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.534831][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.535056][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.543274][    C0] net_ratelimit: 32839 callbacks suppressed
[  131.543301][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.543390][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  131.543534][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.543633][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  131.543756][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.545332][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.545629][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.545845][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  131.545882][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.546087][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  136.553303][    C0] net_ratelimit: 30936 callbacks suppressed
[  136.553330][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.553532][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  136.553575][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.553841][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.554084][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.554335][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  136.554376][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.554559][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  136.554620][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.554779][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  137.187591][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  137.194055][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  141.563374][    C1] net_ratelimit: 31974 callbacks suppressed
[  141.563400][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  141.563464][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.563684][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.563898][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.563905][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  141.564127][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.564387][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.564440][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  141.564611][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.564660][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  146.573440][    C0] net_ratelimit: 31528 callbacks suppressed
[  146.573466][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.573708][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.573936][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.574172][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.574331][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  146.574401][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.574556][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  146.574630][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.574775][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  146.574865][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.583289][    C0] net_ratelimit: 30961 callbacks suppressed
[  151.583323][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.583547][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.583768][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.583991][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.584232][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.584465][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.584482][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  151.584683][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.584730][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  151.584906][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.593413][    C0] net_ratelimit: 31531 callbacks suppressed
[  156.593439][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.593679][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.593901][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.594138][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.594230][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  156.594366][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.594533][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  156.594598][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.594828][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.594829][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  161.603268][    C0] net_ratelimit: 29961 callbacks suppressed
[  161.603294][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.603442][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  161.603538][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.603784][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.604042][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.604281][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.604431][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  161.604521][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.604768][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.605049][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.613281][    C0] net_ratelimit: 29000 callbacks suppressed
[  166.613306][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.613558][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.613741][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  166.613810][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.614053][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.614293][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.614536][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.614784][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.615023][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.615159][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  171.623286][    C0] net_ratelimit: 29195 callbacks suppressed
[  171.623312][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.623337][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  171.623554][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.623580][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  171.623797][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  171.623835][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.624033][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  171.624102][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.624351][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.624590][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.633267][    C0] net_ratelimit: 29002 callbacks suppressed
[  176.633294][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.633543][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  176.633551][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.633794][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.634034][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.634273][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.634520][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.634800][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.634965][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  176.635039][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.643309][    C0] net_ratelimit: 29121 callbacks suppressed
[  181.643336][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  181.643333][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.643588][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.643848][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.643933][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  181.644089][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.644234][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  181.644334][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.644473][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  181.644583][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.653305][    C0] net_ratelimit: 30604 callbacks suppressed
[  186.653332][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.653356][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  186.653557][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.653793][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.654020][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.654248][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.654313][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  186.654485][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.654708][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.654943][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.663325][    C0] net_ratelimit: 30716 callbacks suppressed
[  191.663349][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.663606][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.663608][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  191.663879][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.664127][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.664374][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.664616][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.664866][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.664998][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  191.665105][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  195.104497][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  195.117096][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  196.673289][    C1] net_ratelimit: 29781 callbacks suppressed
[  196.673315][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  196.673427][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.673700][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.673929][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.674157][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.674398][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.674631][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.674701][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  196.674860][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.675075][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.684000][    C1] net_ratelimit: 30658 callbacks suppressed
[  201.684021][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  201.684215][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  201.684402][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  201.684592][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  201.684805][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  201.685229][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  201.685414][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  201.685599][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  201.686362][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  201.687515][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  203.482527][ T5642] Bluetooth: hci0: command 0x0406 tx timeout
[  203.482606][ T5642] Bluetooth: hci1: command 0x0406 tx timeout
[  203.553088][ T5641] Bluetooth: hci2: command 0x0406 tx timeout
[  203.553134][ T5641] Bluetooth: hci3: command 0x0406 tx timeout
[  203.612599][ T5642] Bluetooth: hci4: command 0x0406 tx timeout
[  206.693405][    C0] net_ratelimit: 31556 callbacks suppressed
[  206.693431][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.693501][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  206.693670][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.693945][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.694060][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  206.694168][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.694398][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.694630][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.694857][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.695082][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.703242][    C0] net_ratelimit: 32100 callbacks suppressed
[  211.703267][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.703297][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  211.703511][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.703559][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  211.703736][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.703812][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  211.703956][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.704292][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.704514][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.704732][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.713309][    C0] net_ratelimit: 30638 callbacks suppressed
[  216.713336][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.713388][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  216.713577][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.713609][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  216.713806][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.713831][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  216.714035][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.714060][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  216.714265][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.714282][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  221.723351][    C0] net_ratelimit: 31080 callbacks suppressed
[  221.723376][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.723601][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.723820][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.724054][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.724276][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.724350][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  221.724494][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.724600][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  221.724713][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.724844][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  226.733328][    C0] net_ratelimit: 31636 callbacks suppressed
[  226.733354][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.733594][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.733848][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.734088][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.734102][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  226.734370][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.734612][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.734645][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  226.734862][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.735103][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.743462][    C0] net_ratelimit: 31341 callbacks suppressed
[  231.743489][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.743634][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  231.743730][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.743899][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  231.743969][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.744137][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  231.744217][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.744466][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.744711][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.744955][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.753310][    C0] net_ratelimit: 30642 callbacks suppressed
[  236.753336][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.753577][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.753827][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.754065][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.754302][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.754428][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  236.754539][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.754665][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  236.754786][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  236.754906][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  241.763254][    C1] net_ratelimit: 29028 callbacks suppressed
[  241.763279][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:78:28:bd:d3:67, vlan:0)
[  241.763323][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  241.763563][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  241.763584][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  241.763870][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  241.764109][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  241.764349][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  241.764594][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  241.764621][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  241.764832][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  243.840547][   T33] INFO: task kworker/0:4:5632 blocked for more than 143 seconds.
[  243.840577][   T33]       Not tainted syzkaller #0
[  243.840588][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  243.840597][   T33] task:kworker/0:4     state:D stack:23848 pid:5632  tgid:5632  ppid:2      task_flags:0x4208060 flags:0x00080000
[  243.840658][   T33] Workqueue: events_power_efficient crda_timeout_work
[  243.840688][   T33] Call Trace:
[  243.840695][   T33]  <TASK>
[  243.840709][   T33]  __schedule+0x17dd/0x5830
[  243.840769][   T33]  ? __pfx___schedule+0x10/0x10
[  243.840804][   T33]  ? schedule+0x90/0x2b0
[  243.840831][   T33]  schedule+0x164/0x2b0
[  243.840858][   T33]  schedule_preempt_disabled+0x13/0x30
[  243.840881][   T33]  __mutex_lock+0x7c4/0x15a0
[  243.840912][   T33]  ? __mutex_lock+0x5cd/0x15a0
[  243.840943][   T33]  ? crda_timeout_work+0x1f/0x90
[  243.840967][   T33]  ? __pfx___mutex_lock+0x10/0x10
[  243.841010][   T33]  ? rcu_is_watching+0x16/0xb0
[  243.841041][   T33]  ? process_scheduled_works+0x97a/0x1630
[  243.841071][   T33]  crda_timeout_work+0x1f/0x90
[  243.841090][   T33]  process_scheduled_works+0xc3d/0x1630
[  243.841164][   T33]  ? __pfx_process_scheduled_works+0x10/0x10
[  243.841218][   T33]  ? assign_work+0x3cf/0x5d0
[  243.841254][   T33]  worker_thread+0xa47/0xfb0
[  243.841315][   T33]  kthread+0x38b/0x480
[  243.841340][   T33]  ? __pfx_worker_thread+0x10/0x10
[  243.841367][   T33]  ? __pfx_kthread+0x10/0x10
[  243.841391][   T33]  ret_from_fork+0x514/0xb70
[  243.841419][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  243.841442][   T33]  ? __switch_to+0xc78/0x1410
[  243.841475][   T33]  ? __pfx_kthread+0x10/0x10
[  243.841501][   T33]  ret_from_fork_asm+0x1a/0x30
[  243.841543][   T33]  </TASK>
[  243.841577][   T33] INFO: task kworker/0:6:5723 blocked for more than 143 seconds.
[  243.841591][   T33]       Not tainted syzkaller #0
[  243.841601][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  243.841609][   T33] task:kworker/0:6     state:D stack:20928 pid:5723  tgid:5723  ppid:2      task_flags:0x4208060 flags:0x00080000
[  243.841663][   T33] Workqueue: events reg_todo
[  243.841682][   T33] Call Trace:
[  243.841688][   T33]  <TASK>
[  243.841700][   T33]  __schedule+0x17dd/0x5830
[  243.841756][   T33]  ? __pfx___schedule+0x10/0x10
[  243.841792][   T33]  ? schedule+0x90/0x2b0
[  243.841819][   T33]  schedule+0x164/0x2b0
[  243.841844][   T33]  schedule_preempt_disabled+0x13/0x30
[  243.841868][   T33]  __mutex_lock+0x7c4/0x15a0
[  243.841898][   T33]  ? __mutex_lock+0x5cd/0x15a0
[  243.841928][   T33]  ? reg_process_self_managed_hints+0xae/0x170
[  243.841961][   T33]  ? __pfx___mutex_lock+0x10/0x10
[  243.841987][   T33]  ? __pfx_reg_process_self_managed_hint+0x10/0x10
[  243.842024][   T33]  ? preempt_schedule_common+0x7f/0xd0
[  243.842058][   T33]  reg_process_self_managed_hints+0xae/0x170
[  243.842089][   T33]  reg_todo+0xe6e/0xff0
[  243.842112][   T33]  ? lock_acquire+0x115/0x350
[  243.842149][   T33]  ? __pfx_reg_todo+0x10/0x10
[  243.842171][   T33]  ? rcu_is_watching+0x16/0xb0
[  243.842203][   T33]  ? process_scheduled_works+0x97a/0x1630
[  243.842233][   T33]  process_scheduled_works+0xc3d/0x1630
[  243.842297][   T33]  ? __pfx_process_scheduled_works+0x10/0x10
[  243.842333][   T33]  ? assign_work+0x3cf/0x5d0
[  243.842369][   T33]  worker_thread+0xa47/0xfb0
[  243.842415][   T33]  ? __kthread_parkme+0x71/0x1f0
[  243.842448][   T33]  kthread+0x38b/0x480
[  243.842472][   T33]  ? __pfx_worker_thread+0x10/0x10
[  243.842499][   T33]  ? __pfx_kthread+0x10/0x10
[  243.842524][   T33]  ret_from_fork+0x514/0xb70
[  243.842550][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  243.842573][   T33]  ? __switch_to+0xc78/0x1410
[  243.842606][   T33]  ? __pfx_kthread+0x10/0x10
[  243.842632][   T33]  ret_from_fork_asm+0x1a/0x30
[  243.842670][   T33]  </TASK>
[  243.842684][   T33] 
[  243.842684][   T33] Showing all locks held in the system:
[  243.842692][   T33] locks held by kthreadd/2: 1, last CPU#0:
[  243.842706][   T33]  #0: ffffffff902b1cd0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  243.842764][   T33] locks held by kworker/0:0/10: 2, last CPU#0:
[  243.842778][   T33]  #0: ffff88823bfb0f48 ((wq_completion)mm_percpu_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  243.842834][   T33]  #1: ffffc900000f7c40 ((work_completion)(&(({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((&vmstat_work) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((&vmstat_work))) *)(( unsigned long)((&vmstat_work)))))((unsigned long)((__typeof_unqual__(*((&vmstat_work))) *)(( unsigned long)((&vmstat_work)))) + (((__per_cpu_offset[(cpu)]))))); }))->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  243.842906][   T33] locks held by kworker/u8:0/13: 3, last CPU#0:
[  243.842920][   T33]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  243.842975][   T33]  #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  243.843031][   T33]  #2: ffff888058640800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  243.843083][   T33] locks held by kworker/u8:1/14: 3, last CPU#0:
[  243.843114][   T33]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  243.843176][   T33]  #1: ffffc90000137c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  243.850164][   T33]  #2: ffff888057a80800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  243.850221][   T33] locks held by kworker/1:1/30: 2, last CPU#1:
[  243.850234][   T33]  #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  243.850290][   T33]  #1: ffffc90000a57c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  243.850344][   T33] locks held by pr/ttyS0/32: 1, last CPU#0:
[  243.850357][   T33]  #0: ffffffff90033d58 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  243.850409][   T33] locks held by khungtaskd/33: 1, last CPU#0:
[  243.850421][   T33]  #0: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  243.850470][   T33] locks held by kworker/R-write/35: 5, last CPU#0:
[  243.850483][   T33]  #0: ffff888021af5948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  243.850536][   T33]  #1: ffffc90000ab7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  243.850590][   T33]  #2: ffff888037932100 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0
[  243.850645][   T33]  #3: ffff888037920cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0
[  243.850696][   T33]  #4: ffffffff902b1cd0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  243.850748][   T33] locks held by kworker/u8:2/44: 3, last CPU#0:
[  243.850761][   T33]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  243.850815][   T33]  #1: ffffc90000b47c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  243.850869][   T33]  #2: ffff888057990800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  245.874709][   T33] locks held by kworker/0:2/51: 2, last CPU#0:
[  245.874734][   T33]  #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.874804][   T33]  #1: ffffc90000bb7c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.874862][   T33] locks held by kworker/u8:3/52: 3, last CPU#1:
[  245.874876][   T33]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.874930][   T33]  #1: ffffc90000bd7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.874985][   T33]  #2: ffff888058140800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  245.875039][   T33] locks held by kworker/u9:0/54: 5, on CPU#0:
[  245.875052][   T33]  #0: ffff88807efe8148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.875105][   T33]  #1: ffffc90000bf7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.875158][   T33]  #2: ffff88807e66cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430
[  245.875211][   T33]  #3: ffff88807e66c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170
[  245.875259][   T33]  #4: ffffffff901608e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760
[  245.875307][   T33] locks held by kworker/R-ipv6_/62: 3, on CPU#1:
[  245.875320][   T33]  #0: ffff88801ef2b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.875375][   T33]  #1: ffffc9000203fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.875430][   T33]  #2: ffffffff91693e20 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  245.875484][   T33] locks held by kworker/u8:4/63: 3, last CPU#1:
[  245.875496][   T33]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.875549][   T33]  #1: ffffc9000204fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.875603][   T33]  #2: ffff888058520800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  245.875665][   T33] locks held by kworker/u8:5/117: 3, last CPU#1:
[  245.875679][   T33]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.875732][   T33]  #1: ffffc900025ffc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.875786][   T33]  #2: ffff888057ad0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  245.875838][   T33] locks held by kworker/u8:6/280: 3, last CPU#1:
[  245.875851][   T33]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.875902][   T33]  #1: ffffc9000315fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.875956][   T33]  #2: ffff888058050800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  245.876007][   T33] locks held by kworker/u8:7/310: 3, last CPU#1:
[  245.876020][   T33]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.876073][   T33]  #1: ffffc900031efc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.876126][   T33]  #2: ffff888058230800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  245.876179][   T33] locks held by kworker/1:2/995: 2, last CPU#1:
[  245.876192][   T33]  #0: ffff88803565ed48 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.876250][   T33]  #1: ffffc90004cb7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.876320][   T33] locks held by kworker/u8:8/1121: 3, last CPU#1:
[  245.876333][   T33]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.876387][   T33]  #1: ffffc90005027c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.876441][   T33]  #2: ffff888057830800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  245.876492][   T33] locks held by kworker/u8:9/1157: 3, last CPU#1:
[  245.876505][   T33]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.876558][   T33]  #1: ffffc90005097c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.876611][   T33]  #2: ffff888058730800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  245.876682][   T33] locks held by kworker/R-bat_e/3229: 5, last CPU#0:
[  245.876695][   T33]  #0: ffff888033127148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.876748][   T33]  #1: ffffc9000d8a7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.876803][   T33]  #2: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0
[  245.876848][   T33]  #3: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0x102/0xbf0
[  245.876900][   T33]  #4: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  245.876953][   T33] locks held by kworker/u9:1/4951: 5, on CPU#0:
[  245.876966][   T33]  #0: ffff888036af8948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.877021][   T33]  #1: ffffc900100d7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.877075][   T33]  #2: ffff888026f64ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430
[  245.877126][   T33]  #3: ffff888026f640b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170
[  245.877171][   T33]  #4: ffffffff9180fc40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370
[  245.877217][   T33] locks held by klogd/4989: 2, last CPU#1:
[  245.877230][   T33]  #0: ffffffff902b1cd0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  245.877291][   T33]  #1: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  245.877343][   T33] locks held by udevd/5000: 2, last CPU#1:
[  245.877356][   T33]  #0: ffffffff90907d58 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560
[  245.877410][   T33]  #1: ffffffff902b1cd0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  245.877461][   T33] locks held by dhcpcd/5295: 1, last CPU#1:
[  245.877474][   T33]  #0: ffffffff902b1cd0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  245.877523][   T33] locks held by dhcpcd/5296: 2, last CPU#1:
[  245.877535][   T33]  #0: ffffffff902b1cd0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  245.877583][   T33]  #1: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  245.877644][   T33] locks held by getty/5387: 2, on CPU#1:
[  245.877657][   T33]  #0: ffff888036b0a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  245.877706][   T33]  #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  245.877752][   T33] locks held by syz-executor/5618: 1, last CPU#1:
[  245.877765][   T33]  #0: ffffffff902b1cd0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  245.877818][   T33] locks held by kworker/u9:2/5628: 5, on CPU#0:
[  245.877831][   T33]  #0: ffff88807ef50148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.877885][   T33]  #1: ffffc9000400fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.877939][   T33]  #2: ffff88807e54cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430
[  245.877989][   T33]  #3: ffff88807e54c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170
[  245.878036][   T33]  #4: ffffffff9180fc40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370
[  245.878081][   T33] locks held by kworker/u9:3/5631: 6, on CPU#0:
[  245.878094][   T33]  #0: ffff888036afa948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.878146][   T33]  #1: ffffc9000403fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.878199][   T33]  #2: ffff88802679cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430
[  245.878251][   T33]  #3: ffff88802679c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170
[  245.878298][   T33]  #4: ffffffff9180fc40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370
[  245.878342][   T33]  #5: ffff88807fbc8af8 (_T->lock#5){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x630
[  245.878395][   T33] locks held by kworker/0:4/5632: 3, on CPU#0:
[  245.878408][   T33]  #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.878463][   T33]  #1: ffffc9000404fc40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.878516][   T33]  #2: ffffffff918dc4e0 (cfg80211_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x1f/0x90
[  245.878561][   T33] locks held by kworker/u9:5/5638: 5, on CPU#0:
[  245.878574][   T33]  #0: ffff88807ef50948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.878635][   T33]  #1: ffffc900040afc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  245.878689][   T33]  #2: ffff88807e458ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430
[  246.322384][   T33]  #3: ffff88807e4580b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170
[  246.322441][   T33]  #4: ffffffff9180fc40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370
[  246.322489][   T33] locks held by udevd/5639: 2, last CPU#0:
[  246.322503][   T33]  #0: ffff88802baf6d28 (kn->active#5){.+.+}-{0:0}, at: kernfs_fop_open+0x5c/0xd20
[  246.322562][   T33]  #1: ffffffff902b1cd0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  246.322616][   T33] locks held by syz-executor/5645: 1, last CPU#0:
[  246.322630][   T33]  #0: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  246.322683][   T33] locks held by syz-executor/5648: 1, last CPU#0:
[  246.322695][   T33]  #0: ffff88807ac98340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d5/0xa40
[  246.322748][   T33] locks held by kworker/0:5/5697: 9, last CPU#0:
[  246.322761][   T33]  #0: ffff888023ee9948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.322814][   T33]  #1: ffffc9000438fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.322868][   T33]  #2: ffff88802affa1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  246.322912][   T33]  #3: ffff88802affe568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30
[  246.322957][   T33]  #4: ffff88802aeaff60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30
[  246.323000][   T33]  #5: ffffffff90f1eae8 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1810
[  246.323045][   T33]  #6: ffff88802afff090 (&hub->status_mutex){+.+.}-{4:4}, at: hub_ext_port_status+0x52/0x840
[  246.323111][   T33]  #7: ffffffff902b1cd0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  246.323162][   T33]  #8: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  246.337279][   T33] locks held by kworker/1:5/5714: 3, last CPU#1:
[  246.337294][   T33]  #0: ffff888059acdd48 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.337357][   T33]  #1: ffffc9000447fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.337425][   T33]  #2: ffff88807e900330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  246.337474][   T33] locks held by kworker/1:6/5721: 3, last CPU#1:
[  246.337487][   T33]  #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.337542][   T33]  #1: ffffc900044efc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.337596][   T33]  #2: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890
[  246.337650][   T33] locks held by kworker/0:6/5723: 4, on CPU#0:
[  246.337663][   T33]  #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.337716][   T33]  #1: ffffc9000450fc40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.337768][   T33]  #2: ffffffff918dc4e0 (cfg80211_mutex){+.+.}-{4:4}, at: reg_todo+0x80/0xff0
[  246.337812][   T33]  #3: ffff888057990800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0xae/0x170
[  246.337867][   T33] locks held by kworker/1:7/5771: 3, last CPU#1:
[  246.337880][   T33]  #0: ffff8880335c1d48 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.337938][   T33]  #1: ffffc90004687c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.338005][   T33]  #2: ffff88807e905c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  246.338053][   T33] locks held by syz.3.16/5781: 3, last CPU#0:
[  246.338066][   T33]  #0: ffff888027254478 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0xac3/0x10c0
[  246.338120][   T33]  #1: ffff88807bda3440 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1be/0xca0
[  246.338169][   T33]  #2: ffff888077221738 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_order+0xb37/0xee0
[  246.338227][   T33] locks held by syz.1.29/5817: 1, last CPU#1:
[  246.338239][   T33]  #0: ffffffff91693e20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  246.338296][   T33] locks held by syz.4.30/5820: 3, last CPU#0:
[  246.338308][   T33]  #0: ffff888057ce7540 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0
[  246.338365][   T33]  #1: ffffffff916f61e8 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[  246.338415][   T33]  #2: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: nl80211_netlink_notify+0x75/0x860
[  246.338467][   T33] locks held by syz.3.31/5821: 3, last CPU#0:
[  246.338480][   T33]  #0: ffffffff91a35ac0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  246.338528][   T33]  #1: ffffffff902b1cd0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  246.338578][   T33]  #2: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  246.338630][   T33] locks held by kworker/u8:10/5824: 4, last CPU#0:
[  246.338644][   T33]  #0: ffff88807cc76948 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.338702][   T33]  #1: ffffc90004657c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.338756][   T33]  #2: ffff8880377b9480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  246.338802][   T33]  #3: ffff8880303a7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  246.338850][   T33] locks held by kworker/u8:11/5825: 3, on CPU#0:
[  246.338863][   T33]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.338917][   T33]  #1: ffffc900048dfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.338969][   T33]  #2: ffffffff91693e20 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  246.339021][   T33] locks held by kworker/u8:12/5826: 3, last CPU#1:
[  246.339034][   T33]  #0: ffff88803646f948 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.339092][   T33]  #1: ffffc9000491fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  246.339147][   T33]  #2: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0
[  246.339193][   T33] locks held by syz-executor/5827: 4, last CPU#0:
[  246.339206][   T33]  #0: ffff8880252db8e0 (&sb->s_type->i_mutex_key#12){++++}-{4:4}, at: lookup_slow+0x46/0x80
[  246.339262][   T33]  #1: ffff8880787d0100 (DCACHE_PAR_LOOKUP#4){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700
[  246.339329][   T33]  #2: ffffffff902b1cd0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  246.339380][   T33]  #3: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  246.339435][   T33] 
[  246.339440][   T33] =============================================
[  246.339440][   T33] 
[  246.339448][   T33] NMI backtrace for cpu 0
[  246.339462][   T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  246.339482][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  246.339492][   T33] Call Trace:
[  246.339500][   T33]  <TASK>
[  246.339508][   T33]  dump_stack_lvl+0xe8/0x150
[  246.339540][   T33]  nmi_cpu_backtrace+0x274/0x2d0
[  246.339560][   T33]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  246.339585][   T33]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  246.339609][   T33]  sys_info+0x135/0x170
[  246.339636][   T33]  watchdog+0x1073/0x10f0
[  246.339669][   T33]  ? watchdog+0x209/0x10f0
[  246.339702][   T33]  kthread+0x38b/0x480
[  246.339724][   T33]  ? __pfx_watchdog+0x10/0x10
[  246.339747][   T33]  ? __pfx_kthread+0x10/0x10
[  246.339770][   T33]  ret_from_fork+0x514/0xb70
[  246.339795][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  246.339817][   T33]  ? __switch_to+0xc78/0x1410
[  246.339849][   T33]  ? __pfx_kthread+0x10/0x10
[  246.339871][   T33]  ret_from_fork_asm+0x1a/0x30
[  246.339908][   T33]  </TASK>
[  246.339916][   T33] Sending NMI from CPU 0 to CPUs 1:
[  246.339945][    C1] NMI backtrace for cpu 1
[  246.339960][    C1] CPU: 1 UID: 0 PID: 5826 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) 
[  246.339978][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  246.339989][    C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker
[  246.340013][    C1] RIP: 0010:__lock_acquire+0x92a/0x2de0
[  246.340036][    C1] Code: 29 f2 89 f3 c1 c3 10 31 d3 01 c6 29 d8 89 dd c1 c5 13 31 c5 01 f3 29 ee 01 eb c1 c5 04 31 f5 48 c1 e5 20 83 3d 0a 0c 1a 10 00 <4d> 89 f5 0f 85 22 02 00 00 48 83 7c 24 38 00 0f 84 b6 01 00 00 49
[  246.340049][    C1] RSP: 0018:ffffc90000a18358 EFLAGS: 00000046
[  246.340062][    C1] RAX: 00000000be814183 RBX: 00000000bc040ab2 RCX: 00000000172a8723
[  246.340074][    C1] RDX: 00000000248fab06 RSI: 00000000b661e14d RDI: ffff888023740000
[  246.340085][    C1] RBP: e0f89e0a00000000 R08: ffffffff817879cf R09: 0000000000000000
[  246.340096][    C1] R10: ffffc90000a18638 R11: ffffffff81b3a0e0 R12: 0000000000004000
[  246.340107][    C1] R13: 0000000000000000 R14: ffff888023740c50 R15: 0000000000000004
[  246.340118][    C1] FS:  0000000000000000(0000) GS:ffff88812350a000(0000) knlGS:0000000000000000
[  246.340131][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  246.340142][    C1] CR2: 00007fc7685f4458 CR3: 000000007e0e8000 CR4: 00000000003526f0
[  246.340159][    C1] Call Trace:
[  246.340164][    C1]  <IRQ>
[  246.340178][    C1]  ? lock_acquire+0x115/0x350
[  246.340199][    C1]  lock_acquire+0x115/0x350
[  246.340217][    C1]  ? unwind_next_frame+0x8f/0x2550
[  246.340241][    C1]  ? unwind_next_frame+0x8f/0x2550
[  246.340261][    C1]  ? __alloc_skb+0x27a/0x7a0
[  246.340277][    C1]  ? unwind_next_frame+0x8f/0x2550
[  246.340298][    C1]  unwind_next_frame+0xac/0x2550
[  246.340318][    C1]  ? unwind_next_frame+0x8f/0x2550
[  246.340340][    C1]  ? kmem_cache_alloc_node_noprof+0x34f/0x600
[  246.340360][    C1]  ? unwind_next_frame+0x8f/0x2550
[  246.340381][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  246.340402][    C1]  arch_stack_walk+0x11b/0x150
[  246.340425][    C1]  ? __alloc_skb+0x27a/0x7a0
[  246.340440][    C1]  stack_trace_save+0xa9/0x100
[  246.340459][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  246.340479][    C1]  ? stack_depot_save_flags+0x33/0x810
[  246.340499][    C1]  ? arch_stack_walk+0x11b/0x150
[  246.340520][    C1]  kasan_save_track+0x3e/0x80
[  246.340541][    C1]  ? kasan_save_track+0x3e/0x80
[  246.340560][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  246.340581][    C1]  ? kmem_cache_alloc_node_noprof+0x34f/0x600
[  246.340600][    C1]  ? __alloc_skb+0x27a/0x7a0
[  246.340632][    C1]  __kasan_slab_alloc+0x6c/0x80
[  246.340654][    C1]  kmem_cache_alloc_node_noprof+0x34f/0x600
[  246.340674][    C1]  ? kmem_cache_alloc_node_noprof+0x1f4/0x600
[  246.340692][    C1]  ? __alloc_skb+0x27a/0x7a0
[  246.340706][    C1]  ? __alloc_skb+0x27a/0x7a0
[  246.340722][    C1]  __alloc_skb+0x27a/0x7a0
[  246.340738][    C1]  skb_copy+0x19d/0x880
[  246.340755][    C1]  ? ktime_get_with_offset+0x93/0x2d0
[  246.340782][    C1]  ? seqcount_lockdep_reader_access+0xea/0x100
[  246.340806][    C1]  mac80211_hwsim_tx_frame_no_nl+0x1047/0x1820
[  246.340836][    C1]  ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10
[  246.340862][    C1]  ? ieee80211_beacon_get_tim+0x218/0x2c0
[  246.340885][    C1]  mac80211_hwsim_tx_frame+0x199/0x1f0
[  246.340907][    C1]  mac80211_hwsim_beacon_tx+0x396/0x820
[  246.340927][    C1]  __iterate_interfaces+0x2af/0x5a0
[  246.340943][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  246.340961][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  246.340978][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  246.340995][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  246.341013][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  246.341036][    C1]  mac80211_hwsim_beacon+0xaf/0x240
[  246.341058][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  246.341081][    C1]  __hrtimer_run_queues+0x3bc/0xa10
[  246.341104][    C1]  hrtimer_run_softirq+0x1e3/0x2e0
[  246.341124][    C1]  handle_softirqs+0x265/0x8d0
[  246.341150][    C1]  ? wg_timers_any_authenticated_packet_traversal+0x82/0x2f0
[  246.341170][    C1]  do_softirq+0x77/0xd0
[  246.341190][    C1]  </IRQ>
[  246.341195][    C1]  <TASK>
[  246.341201][    C1]  __local_bh_enable_ip+0x100/0x140
[  246.341222][    C1]  wg_packet_handshake_send_worker+0x1b2/0x370
[  246.341243][    C1]  ? __pfx_wg_packet_handshake_send_worker+0x10/0x10
[  246.341262][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  246.341286][    C1]  ? rcu_is_watching+0x16/0xb0
[  246.341309][    C1]  ? process_scheduled_works+0x97a/0x1630
[  246.341332][    C1]  process_scheduled_works+0xc3d/0x1630
[  246.341354][    C1]  ? __lock_acquire+0x747/0x2de0
[  246.341383][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  246.341408][    C1]  ? assign_work+0x3cf/0x5d0
[  246.341431][    C1]  worker_thread+0xa47/0xfb0
[  246.341464][    C1]  kthread+0x38b/0x480
[  246.341481][    C1]  ? __pfx_worker_thread+0x10/0x10
[  246.341503][    C1]  ? __pfx_kthread+0x10/0x10
[  246.341521][    C1]  ret_from_fork+0x514/0xb70
[  246.341539][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  246.341556][    C1]  ? __switch_to+0xc78/0x1410
[  246.341580][    C1]  ? __pfx_kthread+0x10/0x10
[  246.341598][    C1]  ret_from_fork_asm+0x1a/0x30
[  246.341620][    C1]  </TASK>
[  246.341942][   T33] Kernel panic - not syncing: hung_task: blocked tasks
[  249.301009][   T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  249.310144][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  249.320226][   T33] Call Trace:
[  249.323537][   T33]  <TASK>
[  249.326488][   T33]  vpanic+0x26f/0x710
[  249.330497][   T33]  panic+0xc5/0xd0
[  249.334238][   T33]  ? __pfx_panic+0x10/0x10
[  249.338685][   T33]  ? wq_watchdog_touch+0xf9/0x160
[  249.343746][   T33]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  249.349928][   T33]  watchdog+0x10e7/0x10f0
[  249.354295][   T33]  ? watchdog+0x209/0x10f0
[  249.358747][   T33]  kthread+0x38b/0x480
[  249.362846][   T33]  ? __pfx_watchdog+0x10/0x10
[  249.367544][   T33]  ? __pfx_kthread+0x10/0x10
[  249.372159][   T33]  ret_from_fork+0x514/0xb70
[  249.376774][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  249.381912][   T33]  ? __switch_to+0xc78/0x1410
[  249.386625][   T33]  ? __pfx_kthread+0x10/0x10
[  249.391248][   T33]  ret_from_fork_asm+0x1a/0x30
[  249.396049][   T33]  </TASK>
[  249.399522][   T33] Kernel Offset: disabled
[  249.403859][   T33] Rebooting in 86400 seconds..