last executing test programs:

39.514324781s ago: executing program 2 (id=380):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001808ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000000c0)={{@my=0x1, 0x4}, @local, 0x0, 0x0, 0x5})
r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x10, 0x0)
poll(&(0x7f0000000300)=[{r1, 0x2}], 0x1, 0x2)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000001c0)={0x9, 0x6, 0x3, 0x4800})
r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r5, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="b93eee414941b23f7e236a513d8617bc6281d3b018a87b1ffb52203454a05646dffd32b668a062ef912bf5a197e32ca7db6cf716f67daf54fb5ef95d5505f6d67dc42c4eeacc54f1b90b36f6e9205469da4c37407584891e748eaaef6008b191c329ea83c6d68d85792e00000000000000", 0x71}], 0x4, 0x800000, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x4, 0x1, 0xc, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9a0100ffff00100000d2e80e44aadd6d126cfb80c92dc817d44dcdec", [0x4]})
ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000040))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x88}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c0006"], 0x34}}, 0xc000)
sendmmsg$inet6(r2, 0x0, 0x0, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40080)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x10000}, @host, 0x0, 0x0, 0x7})
socket$nl_route(0x10, 0x3, 0x0)

39.208697564s ago: executing program 2 (id=381):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x4, {0x6, 0x7, "c91cb6ffbb7b0b2b8522948b6a4e7a2524f7a5f83c8650bc5469f1830488259bc9e295bde4cadd7e30efae2ca0e588993feaefb6cd00e244a5de0d2949c164b75598719b75b19788eaa0ee2d39fd06095241e69fe269e645b4965190868f7c5cd023fe83e32c6c674d45465a31762e35f30d4c50e0ea5814929bb783619900d4c960b8110c052c5943913f93d83e1ff203fe874678ea33e6dc127000154984b1558b01d183b7f224837b33068f0e9dc8db294f04f9b85e0d49e70a1f98d84366e0e7d5c1fa137f2466ee58eab3a4c13af6966649d77fbdb129852431cc785e90b4843b215d204ca2d46f7d2493bf710e1cf68605a50a68898c5ba38592e7da20", 0x9, 0x6, 0x0, 0xd, 0x5, 0x53, 0x6, 0x1}}}, 0x128)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0)
sendfile(r5, r4, 0x0, 0x100000002)

38.932218155s ago: executing program 2 (id=382):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
socket$alg(0x26, 0x5, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x9b, 0x2, [@TCA_FLOW_ACT={0x5c, 0x9, 0x0, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xb17}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

36.420214732s ago: executing program 2 (id=384):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
recvmmsg(r6, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x3fffffff, 0x0, 0x0)
write$binfmt_elf64(r6, &(0x7f00000000c0)=ANY=[], 0xc63b9e35)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'})
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

34.81699318s ago: executing program 2 (id=385):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="170000d4155dacb5d302132184c5000000000004000000ff", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000030000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x11, &(0x7f00000000c0)=""/17, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r3 = syz_open_dev$loop(&(0x7f0000000500), 0x1fffc, 0x100)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000006c0)={r3, 0x1, {0x0, 0x0, 0x0, 0x100000001, 0x9, 0x0, 0x9, 0x12, 0xb06063d6b77028be, "37b6a5d4140bf96d38f1c96ffff69e4a255b929b254f68462a08c6d952f6787e20fe856e283e5cebc34dd9024c110327f0278aabc940360f3b50bdf8566aaca5", "e4f437cbb6a05c8c3ec2b14b73133b314030c2e6d5ba96d3cac583ceff06469a1cff9758749c4827e979016769f0f7bdce275a30b4cc140e166eab58f4381f31", "eeac247f6c7c7cf75ccd5882498c64b935bd4ee08a16533c9ce65373fbcd4541", [0x1, 0x8000000000000001]}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x111c42, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000380b00000017000000400006803c"], 0x54}}, 0x0)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000b00)={0x36c, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f27}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x166}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x591}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf94fb17}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x599f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "38170561d722952a804369c166c144980a3eeb3007310ad1255a76940f52e2"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x53b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"d8d6df5e42321e78ec606171c86d9f6d", 0x0, <r8=>0x0, {0x2bd, 0x8}, {0x5e7, 0x9}, 0x2, [0xfffffffffffffff7, 0x3, 0xffff, 0x7, 0xe9bf, 0x8, 0x7, 0xfffffffffffffffd, 0x3, 0x4, 0x9, 0x0, 0x8, 0x100, 0x70f, 0x8000000000000000]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000005c0)={"64eaf107f90a951dc6401441157348f6", 0x0, r8, {0x8, 0x7}, {0xdb8, 0x10000}, 0x8001, [0xa09, 0x7, 0xaab5, 0x7, 0x2, 0x1, 0x8000000000000000, 0x7fffffffffffffff, 0x33, 0x77ee, 0x8001, 0xffffffffffff8000, 0x4, 0x8800000000000000, 0x0, 0x7]})
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=<r11=>0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12)
sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0)
write$nci(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="4106010805"], 0x5)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'})

33.826877056s ago: executing program 2 (id=387):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000000)=0x2, 0x5, 0x0, 0x0, 0x0, 0xfffffffe)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000240)=@ringbuf={{}, {}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x9}, {}, {}, {0x15}}, @ldst={0x1, 0x0, 0x3}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

12.684411766s ago: executing program 1 (id=402):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2480)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7dbf230d000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0)

11.888020897s ago: executing program 0 (id=404):
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="01"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[])

11.537734422s ago: executing program 0 (id=405):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc1205531, &(0x7f0000000040)=""/112)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000000002900000003000000ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00759e107b3a085c8d2aaa015750ee7724f78646ed992af1ff6f00c023869eacb9c899201aa156317782ef42854d66c35db16c3c70128677d041525d134cfdb23569a5b8175706a832c698d81c0eb1e359976b203a48bbb872e6f65bb20f5d618d2e4b53325e767bfb017ab7e7a536b857a139dff3df808d1cc7e81218c421b5821add07c726aec0fde953bc24517cf94992dc1ced17d536dc67479f0cc7ce423fe1a25bdf0edc20899d0000"], 0x28}}], 0x1, 0x0)
write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000140)=0x3, 0x2)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$TIOCSTI(r4, 0x541e, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a75"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='xprtrdma_frwr_dereg\x00', r5}, 0x18)
userfaultfd(0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r6, 0x545c, 0x0)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
unshare(0x22020400)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x2fd, 0x2, 0xe0, 0x0, 0x0})
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x0, &(0x7f0000000380)='source')

10.860386284s ago: executing program 1 (id=407):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="0954000000000000009e3fcd12ae2d9c9963ffb743e2dc2590debefb8792a8a8a7a9100c141fbc325fdc59ccddb656c92b648d84372e3af700d668a0884914b47dc9b771533934535b72f4bc03f7505fc9d443698785659827a9d7af52a2b4b91ecb98478515108dd6c6e425b6e82ef1a8b3a619e4add83e6cf3e1d84b02b2877b09db81a458473c0e842e3500b5d133d83d3724bce1fee3ea4d4f1ed85f2a2ea4cdeb6f95b864d7d2a288465fccf155b11f0264e3142b72a2d0165f7daa384e2b3542b495f4bf061530b5e0f12e391f3ffcd3a791be8fc07ebe70d35a8280f60605e51da00d130e169d1c4c70a2e35b638e5e9493439accbcdb29e27d6bc42e2f42512a651ec5be3fc52bc3b09927fe8473c8fca99d2211c1c491f4ce9be4990ebfa55e48c77f150c770d3e464e86dc89f8183c069f86921b93778d506dc196e9ff7879d2e7bd49bd47d83a6fb7d42aedaccb5556b3db36d42977123d5b17234d99f45df524c4f9039cbdaf2310bf147218612d75bc4df8a2fef09ed7da1040bbe49fbf629fe4a9bdf06234d7ad373a7711ddda2c7c86e0141536d0199841d35e5132c4bcc619e6fd967ee4d8eed63ccd0ee27bc833abcf11fe8c73eb30c6f3f0b22d7266c5bf77cb6d63b908a9d7ded00ff661ad26350f5c0aea6484c8962b2bd71ac8c3856db746a94cbfb2334d494da910e0ad5e306e2f0c50c234f8aac0aae53f3a11655de2712265e5d3e6945eeca662dc052a77ceaa2ab49528dad0c2cc6277a2e7ab15cfc1ce3e4d0016220e460805338a80d5052e7280f14b3d6be4da574f077ea711c550803b70505409cc0c040c37af62c725ccbaae2d7acb34476b86a810975aaba96f13f689c06af8b1874c513740d24a54d8c1984441cbb967be82552ea33ba44869d7ed9d97e5802591eb7eeb62b4042f82311460d0e2"], 0x2a8)
socket$inet6(0xa, 0x4, 0x107)
munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r3, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
syz_clone(0x88600, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0)

9.991928288s ago: executing program 3 (id=408):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x2, 0x64, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@loopback}, {@multicast2, 0xb}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x3}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

9.839608668s ago: executing program 0 (id=409):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x800)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0xbdff, 0x2, "fdffffffffffffff"})
write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, 0x0)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x1c)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)

9.541514185s ago: executing program 3 (id=410):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000100), 0x10)
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f0dc0a5f5441cf8e"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x5, 0x193, 0x0, {0x0, 0xea60}}, 0x48}}, 0x0)

7.397061091s ago: executing program 1 (id=411):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="170000d4155dacb5d302132184c5000000000004000000ff", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000030000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x11, &(0x7f00000000c0)=""/17, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r3 = syz_open_dev$loop(&(0x7f0000000500), 0x1fffc, 0x100)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000006c0)={r3, 0x1, {0x0, 0x0, 0x0, 0x100000001, 0x9, 0x0, 0x9, 0x12, 0xb06063d6b77028be, "37b6a5d4140bf96d38f1c96ffff69e4a255b929b254f68462a08c6d952f6787e20fe856e283e5cebc34dd9024c110327f0278aabc940360f3b50bdf8566aaca5", "e4f437cbb6a05c8c3ec2b14b73133b314030c2e6d5ba96d3cac583ceff06469a1cff9758749c4827e979016769f0f7bdce275a30b4cc140e166eab58f4381f31", "eeac247f6c7c7cf75ccd5882498c64b935bd4ee08a16533c9ce65373fbcd4541", [0x1, 0x8000000000000001]}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x111c42, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000380b00000017000000400006803c"], 0x54}}, 0x0)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000b00)={0x36c, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f27}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x166}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x591}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf94fb17}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x599f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "38170561d722952a804369c166c144980a3eeb3007310ad1255a76940f52e2"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x53b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"d8d6df5e42321e78ec606171c86d9f6d", 0x0, <r8=>0x0, {0x2bd, 0x8}, {0x5e7, 0x9}, 0x2, [0xfffffffffffffff7, 0x3, 0xffff, 0x7, 0xe9bf, 0x8, 0x7, 0xfffffffffffffffd, 0x3, 0x4, 0x9, 0x0, 0x8, 0x100, 0x70f, 0x8000000000000000]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000005c0)={"64eaf107f90a951dc6401441157348f6", 0x0, r8, {0x8, 0x7}, {0xdb8, 0x10000}, 0x8001, [0xa09, 0x7, 0xaab5, 0x7, 0x2, 0x1, 0x8000000000000000, 0x7fffffffffffffff, 0x33, 0x77ee, 0x8001, 0xffffffffffff8000, 0x4, 0x8800000000000000, 0x0, 0x7]})
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=<r11=>0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12)
sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0)
write$nci(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="4106010805"], 0x5)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'})

5.658762499s ago: executing program 1 (id=412):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000005800)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x10431, 0x0)

5.516805887s ago: executing program 3 (id=413):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1d, 0x4, 0x0, 0x2, 0x74, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@loopback}, {@multicast2, 0xb}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.484196756s ago: executing program 0 (id=414):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=<r2=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}}, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRES32], 0x0)
syz_usb_connect(0x0, 0x127, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-256-generic\x00'}, 0x40)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4)
accept4$alg(r5, 0x0, 0x0, 0x0)
io_setup(0x103, &(0x7f0000000380))
r6 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r6, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
close(r7)
r8 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

5.48066547s ago: executing program 4 (id=383):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x1, 0x0, @val=@iter={0x0}}, 0x40)

5.373867013s ago: executing program 1 (id=415):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000040), 0x0, 0x44000)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000010c0)=',*[\\/&)\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x200000, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x7a00}, 0x0)
r6 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0)
fsmount(r6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
accept$inet(r7, 0x0, 0x0)

4.503628662s ago: executing program 4 (id=416):
r0 = socket$kcm(0x10, 0x3, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

4.246826009s ago: executing program 3 (id=417):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x800)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0xbdff, 0x2, "fdffffffffffffff"})
write$binfmt_aout(r2, 0x0, 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x1c)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)

4.245626896s ago: executing program 1 (id=418):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x9b, 0x2, [@TCA_FLOW_ACT={0x5c, 0x9, 0x0, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xb17}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.432998602s ago: executing program 4 (id=419):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d00)="84ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e917254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce3203000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87d5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d40458394ef15fecbccaa9168c9365d354214f94aecdc1f53a7e81369ab55fa10651ce8979274fb1b49829ef34d67a9617", 0x2c6}, {&(0x7f0000000040)="05437c98", 0x4}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)

3.278115528s ago: executing program 4 (id=420):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20022, 0x0)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000240))
close(r0)
r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)

2.347885468s ago: executing program 4 (id=421):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="170000d4155dacb5d302132184c5000000000004000000ff", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000030000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x11, &(0x7f00000000c0)=""/17, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r3 = syz_open_dev$loop(&(0x7f0000000500), 0x1fffc, 0x100)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000006c0)={r3, 0x1, {0x0, 0x0, 0x0, 0x100000001, 0x9, 0x0, 0x9, 0x12, 0xb06063d6b77028be, "37b6a5d4140bf96d38f1c96ffff69e4a255b929b254f68462a08c6d952f6787e20fe856e283e5cebc34dd9024c110327f0278aabc940360f3b50bdf8566aaca5", "e4f437cbb6a05c8c3ec2b14b73133b314030c2e6d5ba96d3cac583ceff06469a1cff9758749c4827e979016769f0f7bdce275a30b4cc140e166eab58f4381f31", "eeac247f6c7c7cf75ccd5882498c64b935bd4ee08a16533c9ce65373fbcd4541", [0x1, 0x8000000000000001]}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x111c42, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000380b00000017000000400006803c"], 0x54}}, 0x0)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000b00)={0x36c, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f27}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x166}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x591}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf94fb17}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x599f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "38170561d722952a804369c166c144980a3eeb3007310ad1255a76940f52e2"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x53b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"d8d6df5e42321e78ec606171c86d9f6d", 0x0, <r8=>0x0, {0x2bd, 0x8}, {0x5e7, 0x9}, 0x2, [0xfffffffffffffff7, 0x3, 0xffff, 0x7, 0xe9bf, 0x8, 0x7, 0xfffffffffffffffd, 0x3, 0x4, 0x9, 0x0, 0x8, 0x100, 0x70f, 0x8000000000000000]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000005c0)={"64eaf107f90a951dc6401441157348f6", 0x0, r8, {0x8, 0x7}, {0xdb8, 0x10000}, 0x8001, [0xa09, 0x7, 0xaab5, 0x7, 0x2, 0x1, 0x8000000000000000, 0x7fffffffffffffff, 0x33, 0x77ee, 0x8001, 0xffffffffffff8000, 0x4, 0x8800000000000000, 0x0, 0x7]})
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=<r11=>0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12)
sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0)
write$nci(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="4106010805"], 0x5)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'})

1.699265088s ago: executing program 4 (id=422):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000100), 0x10)
sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f0dc0a5f5441cf8e"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x5, 0x193, 0x0, {0x0, 0xea60}}, 0x48}}, 0x0)

1.606527445s ago: executing program 0 (id=423):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0)

435.249372ms ago: executing program 3 (id=424):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@my=0x1, 0x4}, @local, 0x0, 0x0, 0x5})
r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x0, 0x0)
poll(&(0x7f0000000300)=[{r2, 0x2}], 0x1, 0x2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000001c0)={0x9, 0x6, 0x3, 0x4800})
r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r5, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="b93eee414941b23f7e236a513d8617bc6281d3b018a87b1ffb52203454a05646dffd32b668a062ef912bf5a197e32ca7db6cf716f67daf54fb5ef95d5505f6d67dc42c4eeacc54f1b90b36f6e9205469da4c37407584891e748eaaef6008b191c329ea", 0x63}], 0x4, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r4, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x4, 0x1, 0xc, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9a0100ffff00100000d2e80e44aadd6d126cfb80c92dc817d44dcdec", [0x4]})
ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000040))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x50}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c0006"], 0x34}}, 0xc000)
sendmmsg$inet6(r3, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40080)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x10000}, @host, 0x0, 0x0, 0x7})
socket$nl_route(0x10, 0x3, 0x0)

249.381027ms ago: executing program 0 (id=425):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf={0x0, &(0x7f0000000240)})
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = fanotify_init(0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r7 = socket$packet(0x11, 0x3, 0x300)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$packet(r7, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
recvmmsg(r6, 0x0, 0x0, 0x10022, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
readv(r2, &(0x7f00000001c0), 0x0)
fanotify_mark(r2, 0x1, 0x40001019, r1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0)

0s ago: executing program 3 (id=426):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x1, 0x0, @val=@iter={0x0}}, 0x40)

kernel console output (not intermixed with test programs):

rmissive=1
[  167.051231][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.063977][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.070921][   T29] audit: type=1400 audit(1728660477.202:287): avc:  denied  { create } for  pid=6409 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  167.126838][   T29] audit: type=1400 audit(1728660477.202:288): avc:  denied  { connect } for  pid=6409 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  167.175154][ T6214] veth0_vlan: entered promiscuous mode
[  167.242206][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.249612][ T6214] veth1_vlan: entered promiscuous mode
[  167.263707][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.412591][ T5322] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  167.458055][ T6395] chnl_net:caif_netlink_parms(): no params data found
[  167.475133][ T6214] veth0_macvtap: entered promiscuous mode
[  167.497822][ T6214] veth1_macvtap: entered promiscuous mode
[  167.600026][ T6214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.624720][ T6214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.640888][ T6214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.680611][ T6214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.691002][ T6214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.710949][ T6214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.721698][ T6214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.735306][ T6214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.748243][ T6214] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.762765][ T5322] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  167.771162][ T5322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.782993][ T5322] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  167.792074][ T5322] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  167.800582][ T5322] usb 3-1: Manufacturer: syz
[  167.865667][ T6427] usb usb8: usbfs: process 6427 (syz.4.217) did not claim interface 0 before use
[  168.001414][ T5322] usb 3-1: config 0 descriptor??
[  168.454502][ T6214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.475578][ T6214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.485933][ T6214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.492597][ T5341] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  168.496839][ T6214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.514491][ T6214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.526316][ T6214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.536504][ T6214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.549791][ T5322] rc_core: IR keymap rc-hauppauge not found
[  168.555749][ T5322] Registered IR keymap rc-empty
[  168.561576][ T5322] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  168.571751][ T6214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.583026][ T6214] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.592370][ T5322] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36
[  168.640019][ T6214] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.651935][ T6214] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.671693][ T5341] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.680930][ T6214] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.690622][ T6214] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.699382][ T5341] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  168.699438][ T5341] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[  168.747566][ T5341] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  168.765983][ T5341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.781153][ T6425] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  168.809364][ T5341] hub 2-1:1.0: bad descriptor, ignoring hub
[  168.821418][ T5341] hub 2-1:1.0: probe with driver hub failed with error -5
[  168.829019][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.837758][ T5341] cdc_wdm 2-1:1.0: skipping garbage
[  168.841116][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.850795][ T6395] bridge_slave_0: entered allmulticast mode
[  168.860588][ T6395] bridge_slave_0: entered promiscuous mode
[  168.866828][ T5239] Bluetooth: hci0: command tx timeout
[  168.867189][ T5341] cdc_wdm 2-1:1.0: skipping garbage
[  168.875890][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.885262][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.892605][ T6395] bridge_slave_1: entered allmulticast mode
[  168.900034][ T6395] bridge_slave_1: entered promiscuous mode
[  168.905621][ T5341] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device
[  168.916744][ T5341] cdc_wdm 2-1:1.0: Unknown control protocol
[  168.988540][ T6395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.152039][ T6395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.198456][   T25] usb 3-1: USB disconnect, device number 3
[  169.272663][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.295622][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.558017][ T6395] team0: Port device team_slave_0 added
[  169.566359][ T6395] team0: Port device team_slave_1 added
[  170.349508][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.402659][   T29] audit: type=1400 audit(1728660479.812:289): avc:  denied  { connect } for  pid=6436 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  170.430577][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.444492][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.451456][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.512707][   T29] audit: type=1400 audit(1728660479.812:290): avc:  denied  { name_connect } for  pid=6436 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  170.536526][   T29] audit: type=1400 audit(1728660479.882:291): avc:  denied  { mount } for  pid=6436 comm="syz.2.220" name="/" dev="gadgetfs" ino=13247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  170.541054][ T6395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.563285][   T29] audit: type=1400 audit(1728660480.002:292): avc:  denied  { ioctl } for  pid=6434 comm="syz.4.219" path="socket:[13250]" dev="sockfs" ino=13250 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  170.656746][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.664021][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.692448][ T6395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.852867][ T6395] hsr_slave_0: entered promiscuous mode
[  170.893136][ T6395] hsr_slave_1: entered promiscuous mode
[  170.899407][ T6395] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.912614][ T6395] Cannot create hsr debugfs directory
[  170.962616][ T5239] Bluetooth: hci0: command tx timeout
[  171.651793][ T6459] input: syz0 as /devices/virtual/input/input37
[  172.226275][ T6464] 9pnet_virtio: no channels available for device 127.0.0.1
[  172.236932][ T6464] netlink: 'syz.3.223': attribute type 1 has an invalid length.
[  172.244787][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'.
[  173.072871][ T5239] Bluetooth: hci0: command tx timeout
[  173.216192][ T6395] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.018214][ T6478] fuse: Unknown parameter 'ff'
[  174.826960][ T6395] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.953455][ T6395] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.103441][ T5239] Bluetooth: hci0: command tx timeout
[  175.133797][   T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  175.214274][ T6395] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.479226][   T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  175.575732][   T25] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  175.715736][   T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  175.733090][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.817004][ T6482] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  175.828732][   T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  175.878838][ T6395] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  175.895332][ T6395] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  175.954380][ T6395] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  175.976907][ T6395] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  176.072402][ T6395] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.091499][ T6395] 8021q: adding VLAN 0 to HW filter on device team0
[  176.108332][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.115517][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.129762][  T937] usb 4-1: USB disconnect, device number 2
[  176.208737][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.215930][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.227798][ T5322] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  176.470688][ T6395] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.576661][ T6395] veth0_vlan: entered promiscuous mode
[  176.614544][ T6395] veth1_vlan: entered promiscuous mode
[  176.624826][ T5322] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  176.636787][ T5322] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  176.906956][ T5322] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  177.008080][ T5322] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  177.074487][ T6395] veth0_macvtap: entered promiscuous mode
[  177.171621][ T5322] usb 5-1: Manufacturer: syz
[  177.415138][ T6395] veth1_macvtap: entered promiscuous mode
[  177.460203][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.473477][ T5322] usb 5-1: SerialNumber: syz
[  177.502079][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.513937][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.527329][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.542528][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.579439][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.592291][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.603070][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.613387][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.624229][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.639560][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.670582][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.714973][ T6512] 9pnet_virtio: no channels available for device 127.0.0.1
[  177.726779][ T6512] netlink: 'syz.2.235': attribute type 1 has an invalid length.
[  177.734787][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'.
[  177.976012][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.228197][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.350042][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.368402][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.418734][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.446334][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.469686][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.480916][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.491741][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.503818][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.514100][ T5322] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  178.541218][ T5322] usb 5-1: USB disconnect, device number 6
[  178.570526][ T6395] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.596200][ T6395] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.612884][ T6395] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.621776][ T6395] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.858925][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  178.875498][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  178.891757][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  178.983731][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  178.995868][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  179.130042][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  179.768454][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.807362][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.965456][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.996109][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.267566][ T5322] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  181.317443][ T5238] Bluetooth: hci2: command 0x0406 tx timeout
[  181.435675][ T5233] Bluetooth: hci3: command tx timeout
[  181.615504][ T5322] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.657074][ T6518] chnl_net:caif_netlink_parms(): no params data found
[  181.676042][ T5322] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  181.719844][ T5322] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[  181.986464][ T5322] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  182.000498][ T5322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.025049][ T6528] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  182.035408][ T5322] hub 3-1:1.0: bad descriptor, ignoring hub
[  182.998354][ T5322] hub 3-1:1.0: probe with driver hub failed with error -5
[  183.006107][ T5322] cdc_wdm 3-1:1.0: skipping garbage
[  183.011354][ T5322] cdc_wdm 3-1:1.0: skipping garbage
[  184.021088][ T5238] Bluetooth: hci3: command tx timeout
[  184.197334][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.213862][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.392897][ T6518] bridge_slave_0: entered allmulticast mode
[  184.453013][ T6518] bridge_slave_0: entered promiscuous mode
[  184.711485][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.725313][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.732662][ T6518] bridge_slave_1: entered allmulticast mode
[  184.740132][ T6518] bridge_slave_1: entered promiscuous mode
[  185.587303][ T6518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.613761][ T6518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.899110][ T6518] team0: Port device team_slave_0 added
[  185.966791][ T6518] team0: Port device team_slave_1 added
[  186.022591][ T6513] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  186.057708][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.063133][ T5238] Bluetooth: hci3: command tx timeout
[  186.069344][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.098027][ T6518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.119995][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.184182][ T6513] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.194510][ T6513] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  186.203849][ T6513] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[  186.207277][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.215024][ T6513] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  186.215058][ T6513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.218799][ T6580] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  186.295518][ T6513] hub 4-1:1.0: bad descriptor, ignoring hub
[  186.303117][ T6513] hub 4-1:1.0: probe with driver hub failed with error -5
[  186.317031][ T6513] cdc_wdm 4-1:1.0: skipping garbage
[  186.329326][ T6513] cdc_wdm 4-1:1.0: skipping garbage
[  186.555076][ T6518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.693581][ T6518] hsr_slave_0: entered promiscuous mode
[  186.711029][ T6518] hsr_slave_1: entered promiscuous mode
[  186.733004][ T6518] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  186.753999][ T6518] Cannot create hsr debugfs directory
[  186.759661][ T6591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.253'.
[  186.892164][ T6595] fuse: Unknown parameter 'ff'
[  187.939493][ T6518] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.142788][ T5238] Bluetooth: hci3: command tx timeout
[  188.162259][ T6518] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.348487][ T6518] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.528561][ T6518] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.907426][ T6613] input: syz0 as /devices/virtual/input/input40
[  189.913846][ T6613] input: failed to attach handler leds to device input40, error: -6
[  190.304298][ T6518] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  190.426563][ T6518] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  190.532370][ T6518] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  190.599407][ T6518] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  190.709977][ T6518] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.756912][ T6518] 8021q: adding VLAN 0 to HW filter on device team0
[  191.521482][ T6518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  191.532283][ T6518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.547228][ T2483] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.554391][ T2483] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.568453][ T2483] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.575640][ T2483] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.049039][ T6518] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.132967][ T6518] veth0_vlan: entered promiscuous mode
[  192.162374][ T6518] veth1_vlan: entered promiscuous mode
[  192.207685][ T6518] veth0_macvtap: entered promiscuous mode
[  192.221800][ T6518] veth1_macvtap: entered promiscuous mode
[  192.268317][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.289212][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.312523][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.330531][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.341047][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.360885][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.371375][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.372555][   T29] audit: type=1400 audit(1728660502.462:293): avc:  denied  { bind } for  pid=6640 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  192.384851][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.415035][   T29] audit: type=1400 audit(1728660502.462:294): avc:  denied  { getopt } for  pid=6640 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  192.444619][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.482524][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.492935][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.504037][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.525044][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.538885][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.562619][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.573672][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.584228][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.595619][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.622918][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.687404][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.705914][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.723697][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.741824][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.764096][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.782527][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.816014][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.844522][ T6518] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.865044][ T6518] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.885198][ T6518] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.052670][ T6518] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.987493][ T2526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.062452][ T2526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.093111][ T2501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.101033][ T2501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.465653][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  194.473159][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  196.408973][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.276'.
[  198.044597][ T5233] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  198.176695][ T5233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  198.194216][ T5233] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  198.204322][ T5233] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  198.211997][ T5233] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  198.222355][ T5233] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  200.173432][ T6717] input: syz0 as /devices/virtual/input/input41
[  200.195835][ T6712] openvswitch: netlink: Actions may not be safe on all matching packets
[  200.422574][ T5233] Bluetooth: hci7: command tx timeout
[  202.652318][ T5233] Bluetooth: hci7: command tx timeout
[  202.747412][ T6696] chnl_net:caif_netlink_parms(): no params data found
[  202.793872][ T5303] IPVS: starting estimator thread 0...
[  202.917729][ T6730] IPVS: using max 16 ests per chain, 38400 per kthread
[  203.113833][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.423480][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.129205][ T5233] Bluetooth: hci7: command tx timeout
[  205.208152][ T6696] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.220455][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.235031][ T6696] bridge_slave_0: entered allmulticast mode
[  205.251696][ T6696] bridge_slave_0: entered promiscuous mode
[  205.456801][ T6696] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.467664][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.482348][ T6696] bridge_slave_1: entered allmulticast mode
[  205.504147][ T6696] bridge_slave_1: entered promiscuous mode
[  205.588932][ T6696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.615176][ T6696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.353216][   T12] IPVS: stop unused estimator thread 0...
[  206.476916][ T6696] team0: Port device team_slave_0 added
[  206.504240][ T6696] team0: Port device team_slave_1 added
[  207.140062][ T6696] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.326406][ T6696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.390252][ T5233] Bluetooth: hci7: command tx timeout
[  207.396430][ T6696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.421610][ T6696] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.437158][ T6696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.487846][ T6696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.520043][   T29] audit: type=1400 audit(1728660517.652:295): avc:  denied  { getattr } for  pid=6767 comm="syz.0.297" name="[io_uring]" dev="anon_inodefs" ino=16565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  207.699540][ T6696] hsr_slave_0: entered promiscuous mode
[  207.725576][ T6696] hsr_slave_1: entered promiscuous mode
[  207.759560][ T6696] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  207.780937][ T6696] Cannot create hsr debugfs directory
[  208.905539][   T29] audit: type=1400 audit(1728660519.042:296): avc:  denied  { bind } for  pid=6779 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  208.930194][ T6696] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.959756][   T29] audit: type=1400 audit(1728660519.092:297): avc:  denied  { write } for  pid=6779 comm="syz.2.301" path="socket:[16597]" dev="sockfs" ino=16597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  209.065524][ T6696] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.188973][ T5303] IPVS: starting estimator thread 0...
[  209.258007][ T6696] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.283071][ T6786] IPVS: using max 18 ests per chain, 43200 per kthread
[  209.451851][ T6696] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.571892][   T11] IPVS: stop unused estimator thread 0...
[  209.622616][   T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  209.701744][ T6696] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  209.711836][ T6696] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  209.736832][ T6696] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  209.757725][ T6696] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  209.804320][   T45] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  209.823434][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.843859][   T45] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  209.872632][   T45] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  209.880677][   T45] usb 5-1: Manufacturer: syz
[  209.900058][ T6696] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.906210][   T45] usb 5-1: config 0 descriptor??
[  209.957131][ T6696] 8021q: adding VLAN 0 to HW filter on device team0
[  209.983612][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.990811][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.002985][   T45] rc_core: IR keymap rc-hauppauge not found
[  210.008939][   T45] Registered IR keymap rc-empty
[  210.017106][   T45] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  210.038103][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.045351][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.064156][   T45] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input42
[  210.337992][ T6696] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.403216][ T6696] veth0_vlan: entered promiscuous mode
[  210.422172][ T6696] veth1_vlan: entered promiscuous mode
[  210.470643][ T6696] veth0_macvtap: entered promiscuous mode
[  210.500225][ T6696] veth1_macvtap: entered promiscuous mode
[  210.555534][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.567111][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.577368][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.588857][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.599488][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.611042][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.633715][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.652520][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.662405][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.685587][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.704331][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.729834][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.739879][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.750399][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.762355][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.816596][   T45] usb 5-1: USB disconnect, device number 7
[  210.849280][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.900732][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.912368][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.930340][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.944810][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.995505][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.027420][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.063188][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.125806][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.170089][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.180181][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.191894][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.202130][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.212922][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.226335][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.935053][ T6696] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.976403][ T6696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.002702][ T6696] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.011458][ T6696] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.093157][ T5238] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  212.103296][ T5238] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  212.111614][ T5238] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  212.120552][ T5238] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  212.129967][ T5238] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  212.138837][ T5238] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  212.538835][ T2526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.562736][ T2526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.578818][ T2526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.586768][ T2526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.776880][ T6802] chnl_net:caif_netlink_parms(): no params data found
[  214.673409][ T5238] Bluetooth: hci8: command tx timeout
[  214.986408][ T6802] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.003534][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.021163][ T6802] bridge_slave_0: entered allmulticast mode
[  215.036240][ T6802] bridge_slave_0: entered promiscuous mode
[  215.071682][ T6802] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.098015][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.118858][ T6802] bridge_slave_1: entered allmulticast mode
[  215.211515][ T6802] bridge_slave_1: entered promiscuous mode
[  215.305756][ T6802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.315642][ T6827] input: syz1 as /devices/virtual/input/input43
[  215.375396][ T6802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.491850][ T6802] team0: Port device team_slave_0 added
[  215.530943][ T6802] team0: Port device team_slave_1 added
[  215.598248][ T6802] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.623135][ T6802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.680280][ T6802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.742371][ T6802] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.786063][ T6802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.923976][ T6802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.125774][ T6802] hsr_slave_0: entered promiscuous mode
[  216.168124][ T6802] hsr_slave_1: entered promiscuous mode
[  216.206721][ T6802] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  216.242543][ T6802] Cannot create hsr debugfs directory
[  216.712689][ T5238] Bluetooth: hci8: command tx timeout
[  216.738719][ T6802] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.988658][ T6802] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.083480][ T5233] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  218.096782][ T5233] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  218.105422][ T5233] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  218.113094][ T5233] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  218.120405][ T5233] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  218.128422][ T5233] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  219.208024][ T5238] Bluetooth: hci8: command tx timeout
[  219.244115][ T6802] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.294305][ T6846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.315'.
[  220.394955][ T6802] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.665145][ T6802] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  220.715807][ T6802] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  220.745424][ T6802] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  220.833726][ T6802] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  221.247424][ T6802] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.263244][ T5238] Bluetooth: hci8: command tx timeout
[  221.385523][ T6802] 8021q: adding VLAN 0 to HW filter on device team0
[  221.408950][ T6833] chnl_net:caif_netlink_parms(): no params data found
[  221.416275][ T5238] Bluetooth: hci9: command tx timeout
[  221.517874][ T2526] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.525058][ T2526] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.536032][ T2526] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.543192][ T2526] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.573306][    T8] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  221.739089][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  221.749723][    T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  221.778387][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.798667][    T8] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  221.819069][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.035009][    T8] hub 5-1:1.0: bad descriptor, ignoring hub
[  222.040970][    T8] hub 5-1:1.0: probe with driver hub failed with error -5
[  222.057992][    T8] cdc_wdm 5-1:1.0: skipping garbage
[  222.074668][    T8] cdc_wdm 5-1:1.0: skipping garbage
[  222.092995][    T8] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  222.242241][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.295828][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.321638][ T6833] bridge_slave_0: entered allmulticast mode
[  222.337345][ T6833] bridge_slave_0: entered promiscuous mode
[  222.360166][ T6833] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.389490][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.422403][ T6833] bridge_slave_1: entered allmulticast mode
[  222.443149][ T6833] bridge_slave_1: entered promiscuous mode
[  222.574267][ T6802] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.624168][ T6833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.655860][ T6833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.827172][ T6833] team0: Port device team_slave_0 added
[  222.852196][ T6833] team0: Port device team_slave_1 added
[  222.938453][ T6833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.955605][ T6833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.010319][ T6833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.035270][ T6833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.076154][ T6833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.189237][ T6833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.356637][ T6802] veth0_vlan: entered promiscuous mode
[  223.368496][ T6833] hsr_slave_0: entered promiscuous mode
[  223.375427][ T6876] netlink: 96 bytes leftover after parsing attributes in process `syz.2.321'.
[  223.390398][ T6833] hsr_slave_1: entered promiscuous mode
[  223.435900][ T6833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  223.475815][ T6833] Cannot create hsr debugfs directory
[  223.503383][ T5238] Bluetooth: hci9: command tx timeout
[  223.552696][ T6802] veth1_vlan: entered promiscuous mode
[  223.653974][ T6802] veth0_macvtap: entered promiscuous mode
[  223.880701][ T6802] veth1_macvtap: entered promiscuous mode
[  224.013726][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.060946][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.081385][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.102185][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.310122][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.467857][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.695867][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.822124][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.849141][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.859828][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.885110][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.895714][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.905742][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.916435][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.926546][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.940030][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.957037][ T6802] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.014556][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.064092][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.082523][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.102554][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.139586][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.227048][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.300910][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.474281][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.582603][ T5238] Bluetooth: hci9: command tx timeout
[  225.603032][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.728016][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.825257][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.835918][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.846216][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.856820][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.868486][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.879121][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.890987][ T6802] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.957870][ T6802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.992697][ T6802] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.005733][ T6802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.042704][ T6802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.459380][ T6899] input: syz1 as /devices/virtual/input/input45
[  226.562820][ T6833] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.692537][ T5238] Bluetooth: hci9: command tx timeout
[  227.845336][ T6833] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.108704][ T6833] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.277300][ T6833] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.308908][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.332128][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.492317][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.505804][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.620477][ T6833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  228.712985][ T6833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  228.745375][ T6833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  228.845211][ T6833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  229.366399][ T6925] netlink: 'syz.2.333': attribute type 63 has an invalid length.
[  230.029615][ T6833] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.145555][ T6833] 8021q: adding VLAN 0 to HW filter on device team0
[  230.338345][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.345537][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.074307][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.081438][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.662367][ T6940] input: syz1 as /devices/virtual/input/input47
[  235.894190][ T6950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.976407][ T6950] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.049522][ T6833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  236.372778][ T5233] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  236.383467][ T5233] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  236.422783][ T5233] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  236.474655][ T5233] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  236.483308][ T5233] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  236.490637][ T5233] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  236.493338][   T29] audit: type=1326 audit(1728660546.602:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a8b7dff9 code=0x7ffc0000
[  236.526581][   T29] audit: type=1326 audit(1728660546.602:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a8b7dff9 code=0x7ffc0000
[  236.568568][   T29] audit: type=1326 audit(1728660546.602:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f38a8b7dff9 code=0x7ffc0000
[  236.626584][   T29] audit: type=1326 audit(1728660546.602:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a8b7dff9 code=0x7ffc0000
[  236.735761][ T6969] netlink: 44 bytes leftover after parsing attributes in process `syz.2.345'.
[  236.814774][ T6959] chnl_net:caif_netlink_parms(): no params data found
[  236.866573][ T6971] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6971 comm=syz.3.344
[  236.962599][   T29] audit: type=1326 audit(1728660546.602:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38a8b7dbfb code=0x7ffc0000
[  237.077805][   T29] audit: type=1326 audit(1728660546.602:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38a8b7dbfb code=0x7ffc0000
[  237.144480][   T29] audit: type=1326 audit(1728660546.602:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38a8b7dbfb code=0x7ffc0000
[  237.169227][   T29] audit: type=1326 audit(1728660546.602:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38a8b7dbfb code=0x7ffc0000
[  237.204245][   T29] audit: type=1326 audit(1728660546.602:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38a8b7dbfb code=0x7ffc0000
[  237.227854][   T29] audit: type=1326 audit(1728660546.602:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38a8b7dbfb code=0x7ffc0000
[  239.182953][ T5238] Bluetooth: hci10: command tx timeout
[  239.326399][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.334420][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.350502][ T6959] bridge_slave_0: entered allmulticast mode
[  239.359356][ T6959] bridge_slave_0: entered promiscuous mode
[  239.370736][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.379036][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.390152][ T6959] bridge_slave_1: entered allmulticast mode
[  239.402296][ T6959] bridge_slave_1: entered promiscuous mode
[  240.471693][ T6833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.629600][ T6959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  240.677649][ T6959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  240.783297][ T6959] team0: Port device team_slave_0 added
[  240.807946][ T6959] team0: Port device team_slave_1 added
[  240.979007][ T7000] input: syz1 as /devices/virtual/input/input48
[  241.272624][ T5233] Bluetooth: hci10: command tx timeout
[  241.334463][ T7001] input: syz1 as /devices/virtual/input/input49
[  241.376193][ T6833] veth0_vlan: entered promiscuous mode
[  241.411924][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.419108][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.615885][ T6959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.675181][ T6833] veth1_vlan: entered promiscuous mode
[  241.711303][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.750952][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.842988][ T6959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.055657][ T7004] netlink: 96 bytes leftover after parsing attributes in process `syz.2.352'.
[  242.081110][ T6833] veth0_macvtap: entered promiscuous mode
[  242.109555][ T6833] veth1_macvtap: entered promiscuous mode
[  242.167600][ T6959] hsr_slave_0: entered promiscuous mode
[  242.180203][ T6959] hsr_slave_1: entered promiscuous mode
[  242.200709][ T6959] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  242.228245][ T6959] Cannot create hsr debugfs directory
[  242.479869][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.572879][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.594382][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.617930][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.627998][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.638588][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.648497][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.658978][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.669721][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.681196][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.691258][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.701919][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.713173][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.735466][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.745442][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.756198][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.766933][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.778610][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.790296][ T6833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.840784][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.851422][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.861594][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.873346][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.884003][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.894542][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.904499][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.915048][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.924916][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.936370][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.946585][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.957211][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.967121][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.978481][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.989313][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.999875][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.009779][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.022074][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.034676][ T6833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.076214][ T6833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.085062][ T6833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.093904][ T6833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.104227][ T6833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.448312][ T5233] Bluetooth: hci10: command tx timeout
[  243.606655][ T6959] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.647721][ T7010] 9pnet: Could not find request transport: fd0x0000000000000004
[  244.026073][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.034156][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.048060][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.073632][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.144573][ T6959] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.257546][ T6959] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.465960][ T6959] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.159055][ T6959] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  245.187578][ T6959] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  245.216668][ T6959] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  245.253212][ T6959] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  245.358909][ T6959] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.390161][ T6959] 8021q: adding VLAN 0 to HW filter on device team0
[  245.409323][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.416450][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.468192][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.475322][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.503664][ T5233] Bluetooth: hci10: command tx timeout
[  245.773589][ T6959] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.930678][ T6959] veth0_vlan: entered promiscuous mode
[  246.991196][ T6959] veth1_vlan: entered promiscuous mode
[  247.110343][ T6959] veth0_macvtap: entered promiscuous mode
[  247.163544][ T6959] veth1_macvtap: entered promiscuous mode
[  247.240545][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.281033][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.291414][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.309186][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.319330][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.336852][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.357375][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.378487][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.391388][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.409222][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.419465][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.447054][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.472418][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.501420][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.532004][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.680496][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.690505][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.701000][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.710977][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.721520][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.830346][ T6959] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.077853][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.112743][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.226088][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.280225][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.335441][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.404478][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.442552][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.482719][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.525334][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.582559][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.592394][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.672548][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.682378][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.757537][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.797098][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.824425][ T5238] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  248.841129][ T5238] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  248.851620][ T5238] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  248.864728][ T5238] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  248.873322][ T5238] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  248.880585][ T5238] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  248.925905][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.938565][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.950291][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.962095][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.973524][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.003556][ T6959] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.048356][ T6959] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.062104][ T6959] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.080751][ T6959] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.089873][ T6959] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.555648][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.595262][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.663970][ T7046] chnl_net:caif_netlink_parms(): no params data found
[  249.806298][  T979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.814361][  T979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.867812][ T7063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.896786][ T7063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.520394][ T7046] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.712606][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.719920][ T7046] bridge_slave_0: entered allmulticast mode
[  250.727065][ T7077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.736866][ T7046] bridge_slave_0: entered promiscuous mode
[  250.995918][ T5238] Bluetooth: hci11: command tx timeout
[  251.013620][ T7046] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.021313][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.079247][ T7046] bridge_slave_1: entered allmulticast mode
[  251.105524][ T7077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.198654][ T7046] bridge_slave_1: entered promiscuous mode
[  251.600274][ T7046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.650054][ T7046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.825738][ T7046] team0: Port device team_slave_0 added
[  251.874021][ T7046] team0: Port device team_slave_1 added
[  252.030213][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_0
[  252.070079][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.163002][ T5232] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  252.187939][ T5232] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  252.196357][ T5232] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  252.205474][ T5232] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  252.215778][ T5232] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  252.223722][ T5232] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  252.295045][ T7046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.354188][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.412906][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.509690][ T7046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  252.617051][ T7091] input: syz1 as /devices/virtual/input/input50
[  252.685903][ T7046] hsr_slave_0: entered promiscuous mode
[  252.707266][ T7046] hsr_slave_1: entered promiscuous mode
[  252.715077][ T7046] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  252.725123][ T7046] Cannot create hsr debugfs directory
[  252.865481][ T5232] Bluetooth: hci5: command 0x0406 tx timeout
[  253.022577][ T5232] Bluetooth: hci11: command tx timeout
[  253.119683][ T7046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.456993][ T7046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.550906][ T7085] chnl_net:caif_netlink_parms(): no params data found
[  254.442641][ T5232] Bluetooth: hci12: command tx timeout
[  254.677201][ T7046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.821268][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.855148][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.895200][ T7085] bridge_slave_0: entered allmulticast mode
[  254.901902][ T7085] bridge_slave_0: entered promiscuous mode
[  254.991244][ T7046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.063893][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.091391][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.121350][ T7085] bridge_slave_1: entered allmulticast mode
[  255.131235][ T5232] Bluetooth: hci11: command tx timeout
[  255.300868][ T7085] bridge_slave_1: entered promiscuous mode
[  255.408283][ T7085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.434773][ T7085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.531153][ T7085] team0: Port device team_slave_0 added
[  255.556751][ T7085] team0: Port device team_slave_1 added
[  255.579896][ T7046] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  255.606686][ T7046] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  255.645722][ T7046] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  255.682999][ T7046] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  255.722334][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.750531][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.915471][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  255.923476][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  256.060681][ T7085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.115246][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.122199][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.252573][ T7085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.462900][ T5232] Bluetooth: hci12: command tx timeout
[  256.551857][ T7085] hsr_slave_0: entered promiscuous mode
[  256.593166][ T7085] hsr_slave_1: entered promiscuous mode
[  256.630641][ T7085] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  256.662543][ T7085] Cannot create hsr debugfs directory
[  256.766023][ T7046] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.860032][ T7046] 8021q: adding VLAN 0 to HW filter on device team0
[  256.945866][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.953428][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.966777][   T29] kauditd_printk_skb: 56 callbacks suppressed
[  256.966794][   T29] audit: type=1400 audit(1728660567.102:364): avc:  denied  { create } for  pid=7112 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  257.033832][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.040924][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.087698][   T29] audit: type=1400 audit(1728660567.132:365): avc:  denied  { append } for  pid=7112 comm="syz.2.378" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  257.194401][ T5232] Bluetooth: hci11: command tx timeout
[  257.354858][ T7085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.526519][ T7085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.601539][ T7046] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.680612][ T7085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.815169][ T7085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.871238][ T7046] veth0_vlan: entered promiscuous mode
[  257.934297][ T7046] veth1_vlan: entered promiscuous mode
[  258.059165][ T7046] veth0_macvtap: entered promiscuous mode
[  258.106978][ T7046] veth1_macvtap: entered promiscuous mode
[  258.149738][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.189138][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.219445][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.262672][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.292689][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.324002][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.360634][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.392621][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.420315][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.472643][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.492931][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.522544][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.545135][ T5232] Bluetooth: hci12: command tx timeout
[  258.572843][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.610623][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.640307][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.672612][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.700506][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.740617][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.772089][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.803434][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.841331][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.869807][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.900521][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.936236][ T7085] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  258.980990][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.022324][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.046260][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.073094][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.113026][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.139958][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.171114][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.202414][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.240378][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.282635][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.303274][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.351046][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.390483][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.421354][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.443508][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.476591][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.506910][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.537773][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.572798][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.602797][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.662102][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.707435][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.754092][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.804818][ T7085] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  259.844587][ T7085] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  259.888553][ T7046] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.922684][ T7046] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.993681][ T7046] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.033537][ T7046] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.092143][ T7085] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  260.231897][ T5233] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  260.245701][ T5233] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  260.256292][ T5233] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  260.266418][ T5233] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  260.284283][ T5233] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  260.291619][ T5233] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  260.497960][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.544559][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.623639][ T5233] Bluetooth: hci12: command tx timeout
[  260.682234][ T7085] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.769670][ T7032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.808650][ T7032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.819546][ T7085] 8021q: adding VLAN 0 to HW filter on device team0
[  260.883334][ T2526] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.890457][ T2526] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.978196][ T2526] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.985326][ T2526] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.173074][ T7130] netlink: 96 bytes leftover after parsing attributes in process `syz.2.382'.
[  261.383994][ T7085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  262.922617][ T6999] sched: DL replenish lagged too much
[  262.940311][ T5233] Bluetooth: hci13: command tx timeout
[  263.885921][ T7149] input: syz0 as /devices/virtual/input/input51
[  264.445294][ T7120] chnl_net:caif_netlink_parms(): no params data found
[  264.774867][ T5233] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  264.790364][ T5233] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  264.799706][ T5233] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  264.807960][ T5233] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  264.816167][ T5233] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  264.823762][ T5233] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  265.028959][ T5232] Bluetooth: hci13: command tx timeout
[  265.710442][ T7085] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.028219][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.036558][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.052967][ T7120] bridge_slave_0: entered allmulticast mode
[  266.070670][ T7120] bridge_slave_0: entered promiscuous mode
[  266.119900][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.131436][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.139129][ T7120] bridge_slave_1: entered allmulticast mode
[  266.155262][ T7120] bridge_slave_1: entered promiscuous mode
[  266.196904][ T7085] veth0_vlan: entered promiscuous mode
[  266.278228][ T7085] veth1_vlan: entered promiscuous mode
[  266.297044][ T7120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.405628][ T7157] chnl_net:caif_netlink_parms(): no params data found
[  266.423354][ T7120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.446989][ T7085] veth0_macvtap: entered promiscuous mode
[  266.540165][ T7085] veth1_macvtap: entered promiscuous mode
[  266.562255][ T7120] team0: Port device team_slave_0 added
[  266.750476][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.822589][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.842761][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.863334][ T5233] Bluetooth: hci14: command tx timeout
[  266.872959][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.902810][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.945781][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.981884][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.023011][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.045842][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.086996][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.103462][ T5233] Bluetooth: hci13: command tx timeout
[  267.122564][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.162637][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.192197][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.235664][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.282609][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.337004][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.417536][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.503687][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.561924][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.620186][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.660963][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.687162][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.741903][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.784599][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.825060][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.873426][ T7120] team0: Port device team_slave_1 added
[  268.085627][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.112883][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.120179][ T7157] bridge_slave_0: entered allmulticast mode
[  268.187391][ T7157] bridge_slave_0: entered promiscuous mode
[  268.226886][ T5232] Bluetooth: hci1: command 0x0406 tx timeout
[  268.240722][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.289694][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.297108][ T7157] bridge_slave_1: entered allmulticast mode
[  268.313489][ T7157] bridge_slave_1: entered promiscuous mode
[  268.436518][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.482643][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.531059][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.583041][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.622941][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.661208][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.704807][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.742569][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.781078][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.831969][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.881785][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.922637][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.943499][ T5232] Bluetooth: hci14: command tx timeout
[  268.962686][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.117253][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.155938][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.185164][ T5232] Bluetooth: hci13: command tx timeout
[  269.210904][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.251879][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.301140][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.339847][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.385346][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.432559][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.474898][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.517025][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.564859][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.614939][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.671501][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.678625][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.792584][ T7120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.839240][ T7085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.866896][ T7085] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.923535][ T7085] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.932269][ T7085] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.996873][ T7157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.056326][ T7157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.093773][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.102087][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.223294][ T7120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.393757][ T7157] team0: Port device team_slave_0 added
[  270.426497][ T7120] hsr_slave_0: entered promiscuous mode
[  270.460594][ T7120] hsr_slave_1: entered promiscuous mode
[  270.515746][ T7120] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  270.542895][ T7120] Cannot create hsr debugfs directory
[  270.593225][ T7157] team0: Port device team_slave_1 added
[  270.764996][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.771967][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.901247][ T7157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.023297][ T5232] Bluetooth: hci14: command tx timeout
[  271.034704][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.041654][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.162692][ T7157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.244610][ T7155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.275564][ T7155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.372744][ T7157] hsr_slave_0: entered promiscuous mode
[  271.395044][ T7157] hsr_slave_1: entered promiscuous mode
[  271.401266][ T7157] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  271.430659][ T7157] Cannot create hsr debugfs directory
[  271.488578][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.524930][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.605562][ T7120] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.768887][ T7120] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.892706][ T7195] binder: 7194:7195 ioctl 4018620d 0 returned -22
[  271.974912][ T7120] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.129061][ T7120] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.150967][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.201179][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.463587][ T7157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.523342][ T7120] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  272.547993][ T7120] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  272.634211][ T7157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.669513][ T7120] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  272.698895][ T7120] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  272.787280][ T7157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.986577][ T7157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.103042][ T5239] Bluetooth: hci14: command tx timeout
[  273.153914][ T7120] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.232276][ T7120] 8021q: adding VLAN 0 to HW filter on device team0
[  273.308418][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.315666][ T7155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.346020][ T5239] Bluetooth: hci4: command 0x0406 tx timeout
[  273.352151][ T5239] Bluetooth: hci6: command 0x0406 tx timeout
[  273.369770][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.377358][ T7155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.619953][ T7157] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  273.665455][ T7157] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  273.703576][ T7157] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  273.781447][ T7157] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  274.067193][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.134823][ T7120] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.206823][ T7157] 8021q: adding VLAN 0 to HW filter on device team0
[  274.248058][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.255199][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.364277][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.371501][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.503570][ T7120] veth0_vlan: entered promiscuous mode
[  274.538872][ T7157] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  274.592594][ T7157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  274.657901][ T7120] veth1_vlan: entered promiscuous mode
[  274.732347][ T7120] veth0_macvtap: entered promiscuous mode
[  274.817960][ T7120] veth1_macvtap: entered promiscuous mode
[  274.904651][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.972664][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.012735][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.072804][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.106508][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.152198][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.192576][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.232520][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.242336][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.312722][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.343404][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.394817][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.442530][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.482845][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.525104][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.570953][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.612590][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.642652][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.682777][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.722548][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.749723][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.782600][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.821554][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.862667][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.892709][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.922699][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.955050][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.026462][ T7157] 8021q: adding VLAN 0 to HW filter on device batadv0
[  276.054406][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.110941][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.152729][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.214823][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.257165][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.304861][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.354023][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.422726][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.460271][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.507961][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.552774][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.612571][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.712556][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.751465][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.800908][ T5232] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  276.810816][ T5232] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  276.819971][ T5232] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  276.828552][ T5232] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  276.837149][ T5232] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  276.847218][ T5232] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  276.865803][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.922699][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.952125][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.992667][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.025019][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.052642][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.091239][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.122304][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.151755][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.192691][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.222675][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.252706][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.283984][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_1
[  277.407707][ T7120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.432883][ T7120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.441589][ T7120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.501347][ T7120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.752750][ T7155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.760579][ T7155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.877254][ T7032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.893663][ T7157] veth0_vlan: entered promiscuous mode
[  277.926024][ T7032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.938852][ T7157] veth1_vlan: entered promiscuous mode
[  278.036854][ T7215] chnl_net:caif_netlink_parms(): no params data found
[  278.060078][ T7157] veth0_macvtap: entered promiscuous mode
[  278.127304][ T7157] veth1_macvtap: entered promiscuous mode
[  278.211346][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.252137][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.381589][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.460805][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.544502][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.573226][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.624665][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.664409][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.704195][ T7227] input: syz1 as /devices/virtual/input/input52
[  278.728318][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.769399][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.802592][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.853403][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.893451][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.944734][ T5232] Bluetooth: hci15: command tx timeout
[  278.952647][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.962619][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.222692][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.232850][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.252651][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.262624][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.273244][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.283178][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.293760][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.303825][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.314447][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.327266][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.337955][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.348002][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.358753][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.370030][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.379568][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.390328][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.400545][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.411043][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.421027][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.433203][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.444363][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.455076][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.464999][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.475588][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.485552][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.496123][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.506310][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.517008][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.529757][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.540324][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.550414][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.561009][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.572571][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.584966][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.594885][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.605538][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.615441][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.626034][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.637360][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.650391][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.660340][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.671319][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.682623][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.197155][ T7157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.206486][ T7157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.232669][ T7157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.262713][ T7157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.393453][ T7215] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.400686][ T7215] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.408665][ T7215] bridge_slave_0: entered allmulticast mode
[  280.415640][ T7215] bridge_slave_0: entered promiscuous mode
[  280.423775][ T7215] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.430949][ T7215] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.438330][ T7215] bridge_slave_1: entered allmulticast mode
[  280.445176][ T7215] bridge_slave_1: entered promiscuous mode
[  280.530416][ T7215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.578814][ T7215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.023699][ T5233] Bluetooth: hci15: command tx timeout
[  281.198990][ T7215] team0: Port device team_slave_0 added
[  282.018017][ T7215] team0: Port device team_slave_1 added
[  283.102714][ T5233] Bluetooth: hci15: command tx timeout
[  283.654974][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.682617][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.642586][ T7215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  284.723276][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_1
[  284.733231][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.813475][ T7215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  285.085438][ T7155] bridge_slave_1: left allmulticast mode
[  285.091136][ T7155] bridge_slave_1: left promiscuous mode
[  285.097474][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.110635][ T7155] bridge_slave_0: left allmulticast mode
[  285.132532][ T7155] bridge_slave_0: left promiscuous mode
[  285.152737][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.182939][ T5233] Bluetooth: hci15: command tx timeout
[  285.241959][ T7266] binder: 7265:7266 ioctl 4018620d 0 returned -22
[  285.639820][   T29] audit: type=1400 audit(1728660595.772:366): avc:  denied  { bind } for  pid=7267 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  286.371458][ T7272] input: syz0 as /devices/virtual/input/input53
[  286.761374][ T7267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.054030][ T7275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.081748][ T7275] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.147542][   T29] audit: type=1400 audit(1728660597.252:367): avc:  denied  { append } for  pid=7274 comm="syz.1.402" name="cec1" dev="devtmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  287.342114][ T7155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  287.393149][ T7155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  287.425066][ T7155] bond0 (unregistering): Released all slaves
[  287.543984][ T7268] netlink: 'syz.0.400': attribute type 10 has an invalid length.
[  287.686194][ T7268] team0: Port device wlan1 added
[  287.711749][ T7275] bond_slave_0: entered promiscuous mode
[  287.717965][ T7275] bond_slave_1: entered promiscuous mode
[  287.739433][ T7275] vlan2: entered promiscuous mode
[  287.749408][ T7275] bond0: entered promiscuous mode
[  287.759929][ T7275] vlan2: entered allmulticast mode
[  287.769639][ T7275] bond0: entered allmulticast mode
[  287.779755][ T7275] bond_slave_0: entered allmulticast mode
[  287.788793][ T7275] bond_slave_1: entered allmulticast mode
[  287.811006][ T7275] bond0: left allmulticast mode
[  287.824003][ T7275] bond_slave_0: left allmulticast mode
[  287.843281][ T7275] bond_slave_1: left allmulticast mode
[  287.850073][ T7275] bond0: left promiscuous mode
[  287.859524][ T7275] bond_slave_0: left promiscuous mode
[  287.865094][ T7275] bond_slave_1: left promiscuous mode
[  287.926417][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.935967][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.006224][ T7277] netlink: 'syz.3.403': attribute type 10 has an invalid length.
[  288.053201][ T7277] team0: Port device wlan1 added
[  288.097442][ T7276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.142391][ T7215] hsr_slave_0: entered promiscuous mode
[  288.163138][ T7215] hsr_slave_1: entered promiscuous mode
[  288.169682][ T7215] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  288.187104][ T7215] Cannot create hsr debugfs directory
[  288.355458][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.363959][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.418988][ T7155] hsr_slave_0: left promiscuous mode
[  288.427619][ T7155] hsr_slave_1: left promiscuous mode
[  288.440262][ T7155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  288.452582][ T7155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  288.472712][ T7155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  288.488788][ T7155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  288.561061][ T7155] veth1_macvtap: left promiscuous mode
[  288.572904][ T7155] veth0_macvtap: left promiscuous mode
[  288.585535][ T7155] veth1_vlan: left promiscuous mode
[  288.593244][ T7284] Non-string source
[  288.599847][ T7155] veth0_vlan: left promiscuous mode
[  292.179738][ T7155] team0 (unregistering): Port device team_slave_1 removed
[  292.350011][ T7155] team0 (unregistering): Port device team_slave_0 removed
[  293.825763][ T5232] Bluetooth: hci0: command 0x0406 tx timeout
[  294.232561][   T29] audit: type=1400 audit(1728660604.352:368): avc:  denied  { remount } for  pid=7314 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  294.302363][   T29] audit: type=1400 audit(1728660604.432:369): avc:  denied  { unmount } for  pid=7085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  294.863959][ T7215] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.347736][ T7330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.362314][ T7215] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.406268][ T7330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.443101][ T7328] netlink: 'syz.4.416': attribute type 10 has an invalid length.
[  295.491724][   T29] audit: type=1400 audit(1728660605.622:370): avc:  denied  { bind } for  pid=7321 comm="syz.0.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  295.525591][ T7328] team0: Port device wlan1 added
[  295.570702][   T29] audit: type=1400 audit(1728660605.682:371): avc:  denied  { setopt } for  pid=7321 comm="syz.0.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  295.614255][ T7327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  295.644809][   T29] audit: type=1400 audit(1728660605.692:372): avc:  denied  { accept } for  pid=7321 comm="syz.0.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  295.736165][ T7215] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.913198][ T7215] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.079458][ T7155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.460614][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  296.512672][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  296.521390][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  296.536941][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  296.548120][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  296.559110][ T7155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.571456][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  296.590967][   T29] audit: type=1400 audit(1728660606.722:373): avc:  denied  { read } for  pid=7342 comm="syz.4.420" name="ppp" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  296.622894][   T29] audit: type=1400 audit(1728660606.762:374): avc:  denied  { open } for  pid=7342 comm="syz.4.420" path="/dev/ppp" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  296.653151][   T29] audit: type=1400 audit(1728660606.792:375): avc:  denied  { ioctl } for  pid=7342 comm="syz.4.420" path="/dev/ppp" dev="devtmpfs" ino=693 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  296.734003][   T29] audit: type=1400 audit(1728660606.832:376): avc:  denied  { write } for  pid=7342 comm="syz.4.420" name="ppp" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  296.854064][ T7215] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  296.880408][ T7215] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  296.999830][ T7155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.060977][ T7215] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  297.101632][ T7215] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  297.326774][ T7155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.718545][ T7215] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.916538][ T7215] 8021q: adding VLAN 0 to HW filter on device team0
[  297.977921][  T979] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.985066][  T979] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.074646][  T979] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.081795][  T979] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.286308][ T7155] bridge_slave_1: left allmulticast mode
[  298.328144][ T7155] bridge_slave_1: left promiscuous mode
[  298.455692][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.690486][ T5232] Bluetooth: hci1: command tx timeout
[  298.744975][ T7155] bridge_slave_0: left allmulticast mode
[  298.846367][ T7155] bridge_slave_0: left promiscuous mode
[  298.954674][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.033664][ T7155] bridge_slave_1: left allmulticast mode
[  299.039369][ T7155] bridge_slave_1: left promiscuous mode
[  299.082290][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.183146][ T7155] bridge_slave_0: left allmulticast mode
[  299.200886][ T7155] bridge_slave_0: left promiscuous mode
[  299.221156][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.263930][ T7155] bridge_slave_1: left allmulticast mode
[  299.291362][ T7155] bridge_slave_1: left promiscuous mode
[  299.309258][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.335774][ T7155] bridge_slave_0: left allmulticast mode
[  299.354074][ T7155] bridge_slave_0: left promiscuous mode
[  299.371649][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.434124][ T7155] bridge_slave_1: left allmulticast mode
[  299.446185][ T7155] bridge_slave_1: left promiscuous mode
[  299.456232][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.478704][ T7155] bridge_slave_0: left allmulticast mode
[  299.489947][ T7155] bridge_slave_0: left promiscuous mode
[  299.499127][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.545151][ T7375] openvswitch: netlink: Actions may not be safe on all matching packets
[  300.083949][   T30] INFO: task syz.0.199:6280 blocked for more than 143 seconds.
[  300.092311][   T30]       Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  300.228851][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  300.379047][   T30] task:syz.0.199       state:D stack:25824 pid:6280  tgid:6280  ppid:5221   flags:0x00000004
[  300.591515][   T30] Call Trace:
[  300.701449][   T30]  <TASK>
[  300.706866][ T5232] Bluetooth: hci1: command tx timeout
[  300.743769][   T30]  __schedule+0xef5/0x5750
[  300.748270][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  300.753598][   T30]  ? mark_lock+0xb5/0xc60
[  300.757979][   T30]  ? __pfx___schedule+0x10/0x10
[  300.763092][   T30]  ? schedule+0x298/0x350
[  300.767461][   T30]  ? __pfx_lock_release+0x10/0x10
[  300.772653][   T30]  ? trace_lock_acquire+0x14a/0x1d0
[  300.777898][   T30]  ? lock_acquire+0x2f/0xb0
[  300.782504][   T30]  ? schedule+0x1fd/0x350
[  300.786874][   T30]  schedule+0xe7/0x350
[  300.790978][   T30]  rpm_resume+0x5a8/0x1330
[  300.795542][   T30]  ? __pfx_rpm_resume+0x10/0x10
[  300.800523][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  300.809786][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  300.818198][   T30]  ? lock_acquire+0x2f/0xb0
[  300.864300][   T30]  ? rpm_resume+0x672/0x1330
[  300.868962][   T30]  rpm_resume+0x750/0x1330
[  300.873884][   T30]  ? lock_acquire.part.0+0xa8/0x380
[  300.879138][   T30]  ? __pfx_rpm_resume+0x10/0x10
[  300.884541][   T30]  ? do_raw_spin_lock+0x12d/0x2c0
[  300.889616][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  300.895563][   T30]  ? lock_acquire+0x2f/0xb0
[  300.900101][   T30]  ? __pm_runtime_resume+0xa9/0x170
[  300.905817][   T30]  __pm_runtime_resume+0xb6/0x170
[  300.910894][   T30]  usb_autopm_get_interface+0x20/0xe0
[  300.920004][   T30]  wdm_manage_power+0x1d/0xa0
[  300.932790][   T30]  ? __pfx_wdm_manage_power+0x10/0x10
[  300.938228][   T30]  wdm_release+0x26a/0x440
[  300.951655][   T30]  ? __pfx_wdm_release+0x10/0x10
[  300.962545][   T30]  __fput+0x3f6/0xb60
[  300.966599][   T30]  task_work_run+0x14e/0x250
[  300.971217][   T30]  ? __pfx_task_work_run+0x10/0x10
[  300.992555][   T30]  syscall_exit_to_user_mode+0x27b/0x2a0
[  300.998298][   T30]  do_syscall_64+0xda/0x250
[  301.022505][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.042488][   T30] RIP: 0033:0x7f0672b7dff9
[  301.046970][   T30] RSP: 002b:00007ffeec46aac8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  301.072454][   T30] RAX: 0000000000000000 RBX: 00007f0672d37a80 RCX: 00007f0672b7dff9
[  301.080574][   T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  301.103194][   T30] RBP: 00007f0672d37a80 R08: 0000000000000006 R09: 00007ffeec46adbf
[  301.111229][   T30] R10: 00000000005d5f74 R11: 0000000000000246 R12: 0000000000026bea
[  301.136664][   T30] R13: 00007ffeec46abd0 R14: 0000000000000032 R15: ffffffffffffffff
[  301.146175][   T30]  </TASK>
[  301.149299][   T30] 
[  301.149299][   T30] Showing all locks held in the system:
[  301.157725][   T30] 3 locks held by kworker/0:1/9:
[  301.163094][   T30]  #0: ffff88801b080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  301.173998][   T30]  #1: ffffc900000e7d80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  301.184917][   T30]  #2: ffffffff8fee1528 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[  301.199953][   T30] 1 lock held by khungtaskd/30:
[  301.205182][   T30]  #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390
[  301.215539][   T30] 2 locks held by kworker/u8:3/52:
[  301.220684][   T30] 3 locks held by kworker/u8:4/69:
[  301.226350][   T30]  #0: ffff88802e885148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  301.240556][   T30]  #1: ffffc900020afd80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  301.257354][   T30]  #2: ffffffff8fee1528 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcf/0x14d0
[  301.267869][   T30] 1 lock held by dhcpcd/4890:
[  301.273015][   T30]  #0: ffffffff8fee1528 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x26e/0x1e20
[  301.282227][   T30] 2 locks held by getty/4980:
[  301.287536][   T30]  #0: ffff88814ba900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  301.297753][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480
[  301.308388][   T30] 3 locks held by kworker/1:5/5320:
[  301.313955][   T30]  #0: ffff888140ebf948 ((wq_completion)pm){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  301.324503][   T30]  #1: ffffc90004427d80 ((work_completion)(&dev->power.work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  301.339304][   T30]  #2: ffff8881447bd510 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_port_suspend+0x255/0xf10
[  301.351670][   T30] 6 locks held by kworker/1:7/5322:
[  301.372571][   T30]  #0: ffff8881446e4d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  301.392546][   T30]  #1: ffffc90004447d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  301.414114][   T30]  #2: ffff8881447d2190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10
[  301.432712][   T30]  #3: ffff88802e8a4190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0
[  301.462449][   T30]  #4: ffff888059d79160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0
[  301.471785][   T30]  #5: ffffffff8f4d0130 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x11c/0x550
[  301.493771][   T30] 1 lock held by syz.0.199/6280:
[  301.498747][   T30]  #0: ffffffff8f58aa08 (wdm_mutex){+.+.}-{3:3}, at: wdm_release+0x4b/0x440
[  301.522886][   T30] 2 locks held by syz.1.218/6424:
[  301.527956][   T30]  #0: ffffffff8f4d0130 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x23/0x220
[  301.561657][   T30]  #1: ffffffff8f58aa08 (wdm_mutex){+.+.}-{3:3}, at: wdm_open+0x5d/0x630
[  301.572449][   T30] 2 locks held by syz.1.218/6425:
[  301.577506][   T30]  #0: ffffffff8f4d0130 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x23/0x220
[  301.586625][   T30]  #1: ffffffff8f58aa08 (wdm_mutex){+.+.}-{3:3}, at: wdm_open+0x5d/0x630
[  301.595403][   T30] 6 locks held by kworker/1:8/6513:
[  301.600623][   T30]  #0: ffff8881446e4d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  301.611576][   T30]  #1: ffffc90002f9fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  301.623169][   T30]  #2: ffff888028ad2190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10
[  301.632114][   T30]  #3: ffff88805a20a190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0
[  301.652789][   T30]  #4: ffff88807e8fb160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0
[  301.662111][   T30]  #5: ffffffff8f4d0130 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x11c/0x550
[  301.689968][   T30] 1 lock held by syz.3.251/6580:
[  301.702459][   T30]  #0: ffffffff8f4d0130 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x23/0x220
[  301.711436][   T30] 1 lock held by syz.3.251/6589:
[  301.732456][   T30]  #0: ffffffff8f4d0130 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x23/0x220
[  301.760118][   T30] 1 lock held by syz.1.288/6727:
[  301.765251][   T30]  #0: ffffffff8f4d0130 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x23/0x220
[  301.774355][   T30] 1 lock held by syz.1.288/6744:
[  301.779303][   T30]  #0: ffffffff8f4d0130 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x23/0x220
[  301.788756][   T30] 1 lock held by syz.0.297/6768:
[  301.793931][   T30] 1 lock held by syz.4.320/6865:
[  301.798884][   T30]  #0: ffffffff8f4d0130 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x23/0x220
[  301.808027][   T30] 3 locks held by kworker/u8:10/7032:
[  301.814398][   T30]  #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  301.826114][   T30]  #1: ffffc90004017d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  301.836728][   T30]  #2: ffffffff8fee1528 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0
[  301.846118][   T30] 1 lock held by syz-executor/7046:
[  301.853640][   T30]  #0: ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0
[  301.863999][   T30] 1 lock held by syz.0.366/7063:
[  301.868957][   T30]  #0: ffffffff8f4d0130 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x23/0x220
[  301.892857][   T30] 5 locks held by kworker/u8:16/7155:
[  301.898614][   T30]  #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  301.922597][   T30]  #1: ffffc90003c57d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  301.942620][   T30]  #2: ffffffff8fecbb90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40
[  301.972610][   T30]  #3: ffffffff8fee1528 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x503/0xb40
[  301.981576][   T30]  #4: ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0
[  302.012534][   T30] 1 lock held by syz-executor/7215:
[  302.017778][   T30]  #0: ffffffff8fee1528 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[  302.042486][   T30] 1 lock held by syz-executor/7340:
[  302.047815][   T30]  #0: ffffffff8fee1528 (rtnl_mutex){+.+.}-{3:3}, at: __rtnl_newlink+0x65a/0x1920
[  302.079932][   T30] 1 lock held by syz.0.425/7380:
[  302.085131][   T30]  #0: ffffffff8fee1528 (rtnl_mutex){+.+.}-{3:3}, at: ipv6_route_ioctl+0x3d3/0x600
[  302.112740][   T30] 
[  302.115105][   T30] =============================================
[  302.115105][   T30] 
[  302.132514][   T30] NMI backtrace for cpu 1
[  302.136886][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
[  302.147411][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  302.157490][   T30] Call Trace:
[  302.160785][   T30]  <TASK>
[  302.163734][   T30]  dump_stack_lvl+0x116/0x1f0
[  302.168454][   T30]  nmi_cpu_backtrace+0x27b/0x390
[  302.173422][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  302.179443][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  302.185452][   T30]  watchdog+0xf0c/0x1240
[  302.189725][   T30]  ? __pfx_watchdog+0x10/0x10
[  302.194436][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  302.199666][   T30]  ? __kthread_parkme+0x148/0x220
[  302.204727][   T30]  ? __pfx_watchdog+0x10/0x10
[  302.209424][   T30]  kthread+0x2c1/0x3a0
[  302.213602][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  302.218834][   T30]  ? __pfx_kthread+0x10/0x10
[  302.223467][   T30]  ret_from_fork+0x45/0x80
[  302.227900][   T30]  ? __pfx_kthread+0x10/0x10
[  302.232508][   T30]  ret_from_fork_asm+0x1a/0x30
[  302.237309][   T30]  </TASK>
[  302.241565][   T30] Sending NMI from CPU 1 to CPUs 0:
[  302.247603][    C0] NMI backtrace for cpu 0
[  302.247618][    C0] CPU: 0 UID: 0 PID: 5341 Comm: kworker/0:8 Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
[  302.247648][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  302.247664][    C0] Workqueue: events drain_vmap_area_work
[  302.247705][    C0] RIP: 0010:do_raw_spin_lock+0x8a/0x2c0
[  302.247737][    C0] Code: 48 89 54 24 60 31 d2 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 e5 01 00 00 8b 43 04 <3d> ad 4e ad de 0f 85 81 01 00 00 4c 8d 6b 10 48 b8 00 00 00 00 00
[  302.247761][    C0] RSP: 0018:ffffc900045a77a8 EFLAGS: 00000046
[  302.247781][    C0] RAX: 00000000dead4ead RBX: ffffffff9a9a80e8 RCX: 0000000000000001
[  302.247797][    C0] RDX: 0000000000000000 RSI: ffffffff8b6cd340 RDI: ffffffff9a9a80ec
[  302.247814][    C0] RBP: 1ffff920008b4ef6 R08: 0000000000000000 R09: fffffbfff2dc4d88
[  302.247830][    C0] R10: ffffffff96e26c47 R11: 0000000000000000 R12: ffffffff9a9a80e0
[  302.247847][    C0] R13: 0000000000000120 R14: 0000000000000000 R15: ffff88804e100000
[  302.247863][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  302.247887][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  302.247905][    C0] CR2: 0000000020404030 CR3: 000000007e78a000 CR4: 00000000003526f0
[  302.247921][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  302.247936][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  302.247951][    C0] Call Trace:
[  302.247959][    C0]  <NMI>
[  302.247967][    C0]  ? nmi_cpu_backtrace+0x1d8/0x390
[  302.247996][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  302.248033][    C0]  ? nmi_handle+0x1a9/0x5c0
[  302.248059][    C0]  ? do_raw_spin_lock+0x8a/0x2c0
[  302.248087][    C0]  ? default_do_nmi+0x6a/0x160
[  302.248111][    C0]  ? exc_nmi+0x170/0x1e0
[  302.248133][    C0]  ? end_repeat_nmi+0xf/0x53
[  302.248169][    C0]  ? do_raw_spin_lock+0x8a/0x2c0
[  302.248197][    C0]  ? do_raw_spin_lock+0x8a/0x2c0
[  302.248226][    C0]  ? do_raw_spin_lock+0x8a/0x2c0
[  302.248254][    C0]  </NMI>
[  302.248261][    C0]  <TASK>
[  302.248268][    C0]  ? trace_lock_acquire+0x14a/0x1d0
[  302.248300][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  302.248335][    C0]  ? lock_acquire+0x2f/0xb0
[  302.248355][    C0]  ? debug_check_no_obj_freed+0x1d0/0x600
[  302.248388][    C0]  _raw_spin_lock_irqsave+0x42/0x60
[  302.248415][    C0]  ? debug_check_no_obj_freed+0x1d0/0x600
[  302.248445][    C0]  debug_check_no_obj_freed+0x1d0/0x600
[  302.248477][    C0]  ? page_ext_put+0x3e/0xd0
[  302.248504][    C0]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  302.248538][    C0]  ? page_ext_put+0x48/0xd0
[  302.248564][    C0]  free_unref_page+0x21a/0xdc0
[  302.248598][    C0]  ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10
[  302.248625][    C0]  kasan_depopulate_vmalloc_pte+0x63/0x80
[  302.248650][    C0]  __apply_to_page_range+0x5fd/0xd30
[  302.248678][    C0]  ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10
[  302.248707][    C0]  ? __pfx___apply_to_page_range+0x10/0x10
[  302.248735][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  302.248763][    C0]  ? lock_acquire+0x2f/0xb0
[  302.248784][    C0]  ? purge_vmap_node+0x513/0x930
[  302.248821][    C0]  kasan_release_vmalloc+0xac/0xc0
[  302.248846][    C0]  purge_vmap_node+0x3fb/0x930
[  302.248885][    C0]  ? __pfx_do_flush_tlb_all+0x10/0x10
[  302.248917][    C0]  ? __pfx_purge_vmap_node+0x10/0x10
[  302.248954][    C0]  ? on_each_cpu_cond_mask+0x5a/0x90
[  302.248980][    C0]  ? on_each_cpu_cond_mask+0x70/0x90
[  302.249008][    C0]  __purge_vmap_area_lazy+0x9c5/0xc00
[  302.249049][    C0]  drain_vmap_area_work+0x27/0x40
[  302.249086][    C0]  process_one_work+0x9c5/0x1ba0
[  302.249114][    C0]  ? __pfx_ovs_dp_masks_rebalance+0x10/0x10
[  302.249148][    C0]  ? __pfx_process_one_work+0x10/0x10
[  302.249176][    C0]  ? assign_work+0x1a0/0x250
[  302.249213][    C0]  worker_thread+0x6c8/0xf00
[  302.249240][    C0]  ? __kthread_parkme+0x148/0x220
[  302.249271][    C0]  ? __pfx_worker_thread+0x10/0x10
[  302.249295][    C0]  kthread+0x2c1/0x3a0
[  302.249322][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  302.249349][    C0]  ? __pfx_kthread+0x10/0x10
[  302.249379][    C0]  ret_from_fork+0x45/0x80
[  302.249401][    C0]  ? __pfx_kthread+0x10/0x10
[  302.249430][    C0]  ret_from_fork_asm+0x1a/0x30
[  302.249472][    C0]  </TASK>
[  302.705108][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  302.712000][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
[  302.722516][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  302.732586][   T30] Call Trace:
[  302.735873][   T30]  <TASK>
[  302.738813][   T30]  dump_stack_lvl+0x3d/0x1f0
[  302.743432][   T30]  panic+0x71d/0x800
[  302.747352][   T30]  ? __pfx_panic+0x10/0x10
[  302.751790][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  302.757182][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  302.763193][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  302.768676][   T30]  ? watchdog+0xd76/0x1240
[  302.773115][   T30]  ? watchdog+0xd69/0x1240
[  302.777558][   T30]  watchdog+0xd87/0x1240
[  302.781824][   T30]  ? __pfx_watchdog+0x10/0x10
[  302.786512][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  302.791741][   T30]  ? __kthread_parkme+0x148/0x220
[  302.796789][   T30]  ? __pfx_watchdog+0x10/0x10
[  302.801479][   T30]  kthread+0x2c1/0x3a0
[  302.805569][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  302.810786][   T30]  ? __pfx_kthread+0x10/0x10
[  302.815400][   T30]  ret_from_fork+0x45/0x80
[  302.819835][   T30]  ? __pfx_kthread+0x10/0x10
[  302.824447][   T30]  ret_from_fork_asm+0x1a/0x30
[  302.829251][   T30]  </TASK>
[  302.832512][   T30] Kernel Offset: disabled
[  302.836871][   T30] Rebooting in 86400 seconds..